API Gateways should be associated with a WAF Web ACL
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。
Description
This check verifies if an AWS WAF web ACL is linked to an API Gateway stage. Failure occurs if a web ACL is not attached to a REST API Gateway stage.
AWS WAF serves as a web application firewall designed to safeguard web applications and APIs against attacks. It allows you to set up an ACL with rules that allow, block, or monitor web requests based on specified security rules and conditions. Ensure that your API Gateway stage is connected to an AWS WAF web ACL for added protection against malicious attacks.
To learn how to link an AWS WAF Regional web ACL with an existing API Gateway API stage using the API Gateway console, refer to the Using AWS WAF to protect your APIs section in the API Gateway Developer Guide.
