Query: A WAFV2 web ACL should have at least one rule or rule group

Description

This control checks whether a WAFV2 web access control list (web ACL) contains at least one WAF rule or WAF rule group. The control fails if a web ACL does not contain any WAF rules or rule groups.

Query

Tables used in this query:

• aws_wafv2_web_acl

Controls using this query:

• 10 AWS WAF web ACLs should have at least one rule or rule group
• A WAFV2 web ACL should have at least one rule or rule group

SQL