aws-solutions/aws-waf-security-automations issues and pull requests

#273 - Release v4.0.5

Pull Request - State: closed - Opened by tbelmega 20 days ago

#272 - Make BadBotParser also support being an ALB target

Pull Request - State: open - Opened by peteroruba about 1 month ago - 1 comment

#271 - Release v4.0.4

Pull Request - State: closed - Opened by tbelmega about 2 months ago

#270 - Create SECURITY.md

Pull Request - State: closed - Opened by tbelmega 2 months ago

#269 - Regional bucket requirement does not allow for multiple regions

Issue - State: closed - Opened by LewS 3 months ago - 2 comments
Labels: bug, triaged

#268 - Unable to upgrade from v3.2.5 to v4.x

Issue - State: closed - Opened by tbgbeansbot 5 months ago - 7 comments
Labels: bug

#267 - S3 Access Denied for eu-central-1

Issue - State: open - Opened by CI-omnys 6 months ago - 1 comment
Labels: bug

#266 - Based on the template https://docs.aws.amazon.com/solutions/latest/security-automations-for-aws-waf/aws-cloudformation-templates.html the KeyPrefix: 'security-automations-for-aws-waf/v4.0.3' was associated with Python 3.10. Do you have a release for python 3.11?

Issue - State: open - Opened by chankz26 7 months ago - 1 comment
Labels: enhancement

#265 - Add a option to use a existing WebACL

Issue - State: closed - Opened by oscaraparicio77 7 months ago - 1 comment
Labels: enhancement

#264 - How to disable managed ruleset options

Issue - State: open - Opened by sbe-arg 7 months ago - 1 comment
Labels: enhancement

#263 - Support for COUNT mode for WAF

Issue - State: open - Opened by Kevinwochan 7 months ago - 2 comments
Labels: enhancement

#262 - Can we align the resources to CIS standards from security hub.

Issue - State: closed - Opened by sbe-arg 7 months ago - 1 comment
Labels: bug

#261 - Invalid CRON expression `cron(* ? * * * *)`

Issue - State: open - Opened by zsidez 10 months ago - 6 comments
Labels: bug, triaged

#260 - allow cloudwatch logs destination for traffic logs, currently only supported target is s3

Issue - State: open - Opened by sbe-arg 11 months ago - 8 comments
Labels: enhancement

#259 - Glue Table for WAF Access Logs is missing some of the log fields (e.g. labels)

Issue - State: open - Opened by m-davison 11 months ago - 4 comments
Labels: enhancement, triaged

#258 - feat: support China region deployment

Pull Request - State: open - Opened by owenCCY 12 months ago - 3 comments

#258 - feat: support China region deployment

Pull Request - State: open - Opened by owenCCY 12 months ago - 3 comments

#257 - WAFWebACL Drift for Security Automations for AWS WAF Solution

Issue - State: open - Opened by chrisfleming-chq about 1 year ago - 1 comment
Labels: bug, triaged

#257 - WAFWebACL Drift for Security Automations for AWS WAF Solution

Issue - State: open - Opened by chrisfleming-chq about 1 year ago - 1 comment
Labels: bug, triaged

#256 - Failing to create security-automations-for-aws-waf in il-central-1

Issue - State: open - Opened by arshikam about 1 year ago - 3 comments
Labels: enhancement, triaged

#256 - Failing to create security-automations-for-aws-waf in il-central-1

Issue - State: open - Opened by arshikam about 1 year ago - 3 comments
Labels: enhancement, triaged

#255 - Support for Cloudfront realtime logs

Issue - State: open - Opened by bgardner-noggin about 1 year ago - 2 comments
Labels: enhancement, triaged

#255 - Support for Cloudfront realtime logs

Issue - State: open - Opened by bgardner-noggin about 1 year ago - 2 comments
Labels: enhancement, triaged

#254 - Make the AppRegistry conditional

Pull Request - State: closed - Opened by taniwallach about 1 year ago - 1 comment

#254 - Make the AppRegistry conditional

Pull Request - State: closed - Opened by taniwallach about 1 year ago - 1 comment

#253 - Failing to create security-automations-for-aws-waf in il-central-1

Issue - State: closed - Opened by arshikam about 1 year ago - 3 comments
Labels: enhancement

#253 - Failing to create security-automations-for-aws-waf in il-central-1

Issue - State: closed - Opened by arshikam about 1 year ago - 3 comments
Labels: enhancement

#252 - Updated to version v4.0.3

Pull Request - State: closed - Opened by WillAWS about 1 year ago

#252 - Updated to version v4.0.3

Pull Request - State: closed - Opened by WillAWS about 1 year ago

#251 - 4.0.2 helper.zip not available in cn-north-1

Issue - State: closed - Opened by mengchen-tam about 1 year ago - 1 comment
Labels: bug

#251 - 4.0.2 helper.zip not available in cn-north-1

Issue - State: closed - Opened by mengchen-tam about 1 year ago - 1 comment
Labels: bug

#250 - Honeypot doesn't detect correct IP address with CloudFront and recommended cache configuration.

Issue - State: open - Opened by suzukyz about 1 year ago - 4 comments
Labels: bug, triaged

#249 - Updated to version v4.0.2

Pull Request - State: closed - Opened by WillAWS about 1 year ago

#249 - Updated to version v4.0.2

Pull Request - State: closed - Opened by WillAWS about 1 year ago

#248 - Most if not all of Lambda functions created by version 4.0.0 contain vulnerability in requests package of Python

Issue - State: closed - Opened by sboonyakiatACR over 1 year ago - 1 comment
Labels: enhancement

#248 - Most if not all of Lambda functions created by version 4.0.0 contain vulnerability in requests package of Python

Issue - State: closed - Opened by sboonyakiatACR over 1 year ago - 1 comment
Labels: enhancement

#247 - Need help writing Custom ACL

Issue - State: closed - Opened by sam-germany over 1 year ago - 3 comments
Labels: enhancement, triaged

#247 - Need help writing Custom ACL

Issue - State: closed - Opened by sam-germany over 1 year ago - 3 comments
Labels: enhancement, triaged

#246 - Updated to version v4.0.1

Pull Request - State: closed - Opened by WillAWS over 1 year ago

#246 - Updated to version v4.0.1

Pull Request - State: closed - Opened by WillAWS over 1 year ago

#245 - Runtime.ImportModuleError: Unable to import module 'helper': No module named 'lib.s3_util'

Issue - State: closed - Opened by patrickmagyarskaylink over 1 year ago - 2 comments
Labels: bug

#245 - Runtime.ImportModuleError: Unable to import module 'helper': No module named 'lib.s3_util'

Issue - State: closed - Opened by patrickmagyarskaylink over 1 year ago - 2 comments
Labels: bug

#244 - missing file

Issue - State: closed - Opened by jegjeyam over 1 year ago - 1 comment
Labels: bug

#244 - missing file

Issue - State: closed - Opened by jegjeyam over 1 year ago - 1 comment
Labels: bug

#243 - while build i get No module named 'lib.cw_metrics_util'

Issue - State: closed - Opened by jegjeyam over 1 year ago - 4 comments
Labels: bug

#243 - while build i get No module named 'lib.cw_metrics_util'

Issue - State: closed - Opened by jegjeyam over 1 year ago - 4 comments
Labels: bug

#242 - WAF denying a request based on some custom condition

Issue - State: closed - Opened by sam-germany over 1 year ago - 1 comment
Labels: enhancement

#242 - WAF denying a request based on some custom condition

Issue - State: closed - Opened by sam-germany over 1 year ago - 1 comment
Labels: enhancement

#241 - Updated to version v4.0.0

Pull Request - State: closed - Opened by aijunpeng over 1 year ago

#241 - Updated to version v4.0.0

Pull Request - State: closed - Opened by aijunpeng over 1 year ago

#240 - Block hidden files and folders like .env and .git

Issue - State: closed - Opened by jonkerw85 over 1 year ago - 1 comment
Labels: enhancement

#240 - Block hidden files and folders like .env and .git

Issue - State: closed - Opened by jonkerw85 over 1 year ago - 1 comment
Labels: enhancement

#239 - Incompatible request with urllib3>2

Issue - State: closed - Opened by NicoForce over 1 year ago - 2 comments
Labels: bug

#239 - Incompatible request with urllib3>2

Issue - State: closed - Opened by NicoForce over 1 year ago - 2 comments
Labels: bug

#238 - Include least-privileged-access IAM role for deploying the stack

Issue - State: open - Opened by robbycuenot over 1 year ago - 1 comment
Labels: enhancement, triaged

#238 - Include least-privileged-access IAM role for deploying the stack

Issue - State: open - Opened by robbycuenot over 1 year ago - 1 comment
Labels: enhancement, triaged

#237 - Set S3 ObjectOwnership to ObjectWriter for AccessLoggingBucket

Pull Request - State: closed - Opened by taylorsilva over 1 year ago - 3 comments

#237 - Set S3 ObjectOwnership to ObjectWriter for AccessLoggingBucket

Pull Request - State: closed - Opened by taylorsilva over 1 year ago - 3 comments

#236 - Fails to create AccessLoggingBucket in us-east-2

Issue - State: closed - Opened by taylorsilva over 1 year ago - 3 comments
Labels: bug

#236 - Fails to create AccessLoggingBucket in us-east-2

Issue - State: closed - Opened by taylorsilva over 1 year ago - 3 comments
Labels: bug

#235 - Updated to version v3.2.5

Pull Request - State: closed - Opened by WillAWS over 1 year ago

#235 - Updated to version v3.2.5

Pull Request - State: closed - Opened by WillAWS over 1 year ago

#234 - Can we add the rule to detect JSON-Based SQL to prevent AWS WAF bypass

Issue - State: closed - Opened by sboonyakiatACR over 1 year ago - 1 comment
Labels: enhancement

#234 - Can we add the rule to detect JSON-Based SQL to prevent AWS WAF bypass

Issue - State: closed - Opened by sboonyakiatACR over 1 year ago - 1 comment
Labels: enhancement

#231 - fix: Fixed CW Dashboard metrics properties

Pull Request - State: closed - Opened by kyoicito almost 2 years ago - 2 comments

#231 - fix: Fixed CW Dashboard metrics properties

Pull Request - State: closed - Opened by kyoicito almost 2 years ago - 2 comments

#226 - resource types are not supported for resource import - drift detection operations (us-west-2)

Issue - State: closed - Opened by nevetS about 2 years ago - 2 comments
Labels: bug

#226 - resource types are not supported for resource import - drift detection operations (us-west-2)

Issue - State: closed - Opened by nevetS about 2 years ago - 2 comments
Labels: bug

#223 - fixed Athena workgroup naming for multiple WAF Automation solution stacks deployed in the same AWS Account

Pull Request - State: closed - Opened by slawa-c about 2 years ago - 2 comments

#223 - fixed Athena workgroup naming for multiple WAF Automation solution stacks deployed in the same AWS Account

Pull Request - State: closed - Opened by slawa-c about 2 years ago - 2 comments

#217 - update URLSuffix and CloudWatch URL to support China regions

Pull Request - State: closed - Opened by Paul-AWS over 2 years ago - 3 comments

#217 - update URLSuffix and CloudWatch URL to support China regions

Pull Request - State: closed - Opened by Paul-AWS over 2 years ago - 3 comments

#216 - Add a cloudformation export so the WebACL can be referenced in other stacks

Issue - State: closed - Opened by matthewhembree over 2 years ago - 2 comments
Labels: enhancement

#216 - Add a cloudformation export so the WebACL can be referenced in other stacks

Issue - State: closed - Opened by matthewhembree over 2 years ago - 2 comments
Labels: enhancement

#214 - Custom Response to override default 403 response.

Issue - State: closed - Opened by crashGoBoom over 2 years ago - 1 comment
Labels: enhancement

#214 - Custom Response to override default 403 response.

Issue - State: closed - Opened by crashGoBoom over 2 years ago - 1 comment
Labels: enhancement

#213 - Template changes account-wide settings of API Gateway Logging

Issue - State: closed - Opened by rrehbein over 2 years ago - 2 comments
Labels: bug

#213 - Template changes account-wide settings of API Gateway Logging

Issue - State: closed - Opened by rrehbein over 2 years ago - 2 comments
Labels: bug

#212 - URI cannot be configured in Http Flood Protection

Issue - State: closed - Opened by hakkurt over 2 years ago - 5 comments
Labels: enhancement

#212 - URI cannot be configured in Http Flood Protection

Issue - State: closed - Opened by hakkurt over 2 years ago - 5 comments
Labels: enhancement

#209 - Activate Known bad inputs managed rule group

Issue - State: closed - Opened by lcoelho88 almost 3 years ago - 2 comments
Labels: enhancement

#209 - Activate Known bad inputs managed rule group

Issue - State: closed - Opened by lcoelho88 almost 3 years ago - 2 comments
Labels: enhancement

#195 - Add CloudFront function for injecting True-Client-Ip header to propely record client IP

Pull Request - State: closed - Opened by dcopestake over 3 years ago - 5 comments

#186 - add_athena_partitions.py should fire more often, or at the top of every hour exactly.

Issue - State: closed - Opened by ChrisPetr0 over 3 years ago - 6 comments
Labels: bug

#185 - Added option to enable logs auto-expiry

Pull Request - State: closed - Opened by Patrick-56Bit over 3 years ago - 1 comment

#185 - Added option to enable logs auto-expiry

Pull Request - State: closed - Opened by Patrick-56Bit over 3 years ago - 1 comment

#180 - Support for AWS GovCloud (US-West) region

Issue - State: closed - Opened by maykays about 4 years ago
Labels: enhancement

#180 - Support for AWS GovCloud (US-West) region

Issue - State: closed - Opened by maykays about 4 years ago
Labels: enhancement

#175 - Add A RuleGroup to the Global Policy. Useful for FMS cases.

Pull Request - State: closed - Opened by pkennedyvt about 4 years ago - 3 comments

#174 - Constant ID on Bucket Notification Configuration Prevents Parallel Deployments

Issue - State: closed - Opened by jamiepedwards about 4 years ago - 6 comments
Labels: bug

#174 - Constant ID on Bucket Notification Configuration Prevents Parallel Deployments

Issue - State: closed - Opened by jamiepedwards about 4 years ago - 6 comments
Labels: bug

#171 - Switch S3 references to vhost style

Pull Request - State: closed - Opened by mrwacky42 about 4 years ago - 1 comment