Table: aws_wafv2_web_acl

select
  name,
  id,
  scope,
  description,
  capacity,
  managed_by_firewall_manager
from
  aws_wafv2_web_acl;

select
  name,
  id,
  visibility_config ->> 'CloudWatchMetricsEnabled' as cloud_watch_metrics_enabled,
  visibility_config ->> 'MetricName' as metric_name
from
  aws_wafv2_web_acl;

select
  name,
  id,
  visibility_config ->> 'SampledRequestsEnabled' as sampled_requests_enabled
from
  aws_wafv2_web_acl
where
  visibility_config ->> 'SampledRequestsEnabled' = 'false';

select
  name,
  id,
  r ->> 'Name' as name,
  r -> 'Statement' ->> 'AndStatement' as and_statement,
  r -> 'Statement' ->> 'ByteMatchStatement' as byte_match_statement,
  r -> 'Statement' ->> 'GeoMatchStatement' as geo_match_statement,
  r -> 'Statement' ->> 'IPSetReferenceStatement' as ip_set_reference_statement,
  r -> 'Statement' ->> 'NotStatement' as not_statement,
  r -> 'Statement' ->> 'OrStatement' as or_statement,
  r -> 'Statement' ->> 'RateBasedStatement' as rate_based_statement,
  r -> 'Statement' ->> 'RegexPatternSetReferenceStatement' as regex_pattern_set_reference_statement,
  r -> 'Statement' ->> 'RuleGroupReferenceStatement' as rule_group_reference_statement,
  r -> 'Statement' ->> 'SizeConstraintStatement' as size_constraint_statement,
  r -> 'Statement' ->> 'SqliMatchStatement' as sql_match_statement,
  r -> 'Statement' ->> 'XssMatchStatement' as xss_match_statement
from
  aws_wafv2_web_acl,
  jsonb_array_elements(rules) as r;

select
  name,
  id,
  scope,
  region
from
  aws_wafv2_web_acl
where
  scope = 'REGIONAL';

select
  name,
  id,
  scope,
  region
from
  aws_wafv2_web_acl
where
  logging_configuration is null;

select
  lb.name as application_load_balancer_name,
  w.name as web_acl_name,
  w.id as web_acl_id,
  w.scope as web_acl_scope,
  lb.type as application_load_balancer_type
from
  aws_ec2_application_load_balancer as lb,
  aws_wafv2_web_acl as w,
  jsonb_array_elements_text(associated_resources) as arns
where
  lb.arn = arns;