aws / aws/aws-cdk

wafv2: Ability to add rules to an existing WebACL

Open
#25,156 10 comments 4 reactions 0 assignees View on GitHub
@aws-cdk/aws-wafv2 effort/large feature-request p2
Dominant language
TypeScript
Stars
12.9k
Forks
4.6k
Avg merge
2d 3h
Merged PRs (30d)
83

Description

### Describe the feature

Add additional rules to the existing WebAcl in our accounts. I am able to do this via the console, but unable to find a way to do it via CDK. This feature is something I would to request to be added.

### Use Case

In our enterprise, we have a cloud admin team provided BASE WebAcl.. they have mandated certain rules via this WebACL. Cloud teams are supposed to use this Web ACL and add additional rules to the existing WebAcl in their account. I am able to do this via the console, but unable to find a way to do it via CDK. This feature is something I would to request to be added.

### Proposed Solution

_No response_

### Other Information

_No response_

### Acknowledgements

- [ ] I may be able to implement this feature request
- [ ] This feature might incur a breaking change

### CDK version used

2.74.0

### Environment details (OS name and version, etc.)

AWS CDK V2, CloudFront, APIGW, ALB, Java

Contributor guide

Open the contributing guide

Research direction

Start by locating the AWS CDK WAFv2 WebACL construct and its rule configuration entry points. Confirm how an existing WebACL is represented and determine the intended behavior for adding rules without replacing mandated rules; done means the feature supports this use case and has coverage for the resulting configuration.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, typescript
Domain
cloud, infrastructure
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.