Table: aws_wafregional_web_acl

A web access control list (web ACL) gives you fine-grained control over all of the HTTP(S) web requests that your protected resource responds to. You can protect Amazon CloudFront, Amazon API Gateway, Application Load Balancer, and AWS AppSync resources.

Examples

Basic info

select
  name,
  web_acl_id,
  arn,
  region,
  default_action,
  tags
from
  aws_wafregional_web_acl;

Get rule details for each web ACL

select
  name,
  web_acl_id,
  r ->> 'RuleId' as rule_id,
  r ->> 'Type' as rule_type,
  r ->> 'ExcludedRules' as excluded_rules,
  r ->> 'OverrideAction' as override_action,
  r -> 'Action' ->> 'Type' as action_type
from
  aws_wafregional_web_acl,
  jsonb_array_elements(rules) as r;

Get web ACLs with no rules defined

select
  name,
  web_acl_id,
  arn,
  region,
  default_action,
  tags
from
  aws_wafregional_web_acl
where
  rules is null;

Get web ACLs with default action as 'ALLOW'

select
  name,
  web_acl_id,
  arn,
  region,
  default_action
from
  aws_wafregional_web_acl
where
  default_action = 'ALLOW';

List web ACLs with logging disabled

select
  name,
  web_acl_id,
  arn,
  region
from
  aws_wafregional_web_acl
where
  logging_configuration is null;

.inspect aws_wafregional_web_acl

AWS WAF Regional Web ACL

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
arn	text	The Amazon Resource Name (ARN) of the entity.
default_action	text	The action to perform if none of the Rules contained in the WebACL match.
logging_configuration	jsonb	The logging configuration for the web ACL.
metric_name	text	A friendly name or description for the metrics for this WebACL.
name	text	The name of the Web ACL. You cannot change the name of a Web ACL after you create it.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
region	text	The AWS Region in which the resource is located.
resources	jsonb	An array of ARNs (Amazon Resource Names) of the resources associated with the web ACL.
rules	jsonb	The Rule statements used to identify the web requests that you want to allow, block, or count.
tags	jsonb	A map of tags for the resource.
tags_src	jsonb	A list of tags associated with the resource.
title	text	Title of the resource.
web_acl_id	text	The unique identifier for the Web ACL.

turbot/aws