AWS WAF is a web application firewall that monitors web requests that are forwarded to Amazon CloudFront distributions or an Application Load Balancer.
Also, AWS WAF is used to block or allow requests based on conditions such as the IP addresses that requests originate from or values in the requests.
External reference
Setup
To set up the AWS integration and discover the AWS service, go to AWS Integration Discovery Profile and select WAF.
Event support
CloudTrail event support
- Supported
- Configurable in OpsRamp AWS Integration Discovery Profile.
CloudWatch alarm support
- Supported
- Configurable in OpsRamp AWS Integration Discovery Profile.
Supported metrics
| OpsRamp Metric | AWS Metric | Metric Display Name | Unit | Aggregation Type | Description |
|---|---|---|---|---|---|
| aws_wafv2_AllowedRequests | AllowedRequests | Allowed Requests | Count | Sum | Number of allowed web requests |
| aws_wafv2_BlockedRequests | BlockedRequests | Blocked Requests | Count | Sum | Number of blocked web requests |
| aws_wafv2_CountedRequests | CountedRequests | Counted Requests | Count | Sum | Number of counted web requests that matched at least one rule |
| aws_wafv2_PassedRequests | PassedRequests | Passed Requests | Count | Sum | Number of passed requests that went through rule group evaluation without matching any rules |
| aws_wafv2_CaptchaRequests | CaptchaRequests | Captcha Requests | Count | Sum | Number of web requests with CAPTCHA controls applied as terminating action |
| aws_wafv2_RequestsWithValidCaptchaToken | RequestsWithValidCaptchaToken | Requests With Valid Captcha Token | Count | Sum | Number of web requests with CAPTCHA controls applied that had a valid CAPTCHA token |
| aws_wafv2_CaptchasAttempted | CaptchasAttempted | Captchas Attempted | Count | Sum | Number of CAPTCHA puzzle solutions submitted by end users |
| aws_wafv2_CaptchasSolved | CaptchasSolved | Captchas Solved | Count | Sum | Number of CAPTCHA puzzle solutions that successfully solved the puzzle |
| aws_wafv2_ChallengeRequests | ChallengeRequests | Challenge Requests | Count | Sum | Number of web requests with challenge controls applied as terminating action |
| aws_wafv2_RequestsWithValidChallengeToken | RequestsWithValidChallengeToken | Requests With Valid Challenge Token | Count | Sum | Number of web requests with challenge controls applied that had a valid challenge token |
| aws_wafv2_ChallengesAttempted | ChallengesAttempted | Challenges Attempted | Count | Sum | Number of silent challenge attempts submitted by end users |
| aws_wafv2_ChallengesSolved | ChallengesSolved | Challenges Solved | Count | Sum | Number of silent challenge solutions that successfully passed |