waf-domain-enabled-specified-protection-module
Checks whether one or more protection features are enabled for each domain name protected by Web Application Firewall (WAF).
Use cases
Enable at least one protection feature for every WAF-protected domain name. Without active protection features, traffic passes through WAF without inspection or filtering, leaving the domain exposed to web attacks.
Risk level
Default risk level: high.
You can change the risk level when you apply this rule.
Compliance evaluation logic
If one or more protection features are enabled for a WAF-protected domain name, the evaluation result is compliant.
If no protection feature is enabled for a WAF-protected domain name, the evaluation result is non-compliant. To remediate this configuration, see Non-compliance remediation.
Rule details
|
Item |
Description |
|
Rule name |
waf-domain-enabled-specified-protection-module |
|
Rule ID |
waf-domain-enabled-specified-protection-module |
|
Tag |
WAF and Domain |
|
Automatic remediation |
Not supported |
|
Trigger type |
Periodic execution |
|
Evaluation frequency |
All day |
|
Supported resource type |
Domain name |
|
Input parameter |
|
Non-compliance remediation
Enable one or more protection features for each WAF-protected domain name. For more information, see Overview.