Query: AWS WAF rules should have CloudWatch metrics enabled

Description

This control checks whether an AWS WAF rule or rule group has Amazon CloudWatch metrics enabled. The control fails if the rule or rule group doesn't have CloudWatch metrics enabled.

Query

Tables used in this query:

• aws_wafv2_rule_group

Controls using this query:

• 12 AWS WAF rules should have CloudWatch metrics enabled
• AWS WAF rules should have CloudWatch metrics enabled

SQL