diff --git a/en/aws/wafv2/wafv2-web-acl-logging-enabled.md b/en/aws/wafv2/wafv2-web-acl-logging-enabled.md new file mode 100644 index 000000000..ce5036d65 --- /dev/null +++ b/en/aws/wafv2/wafv2-web-acl-logging-enabled.md @@ -0,0 +1,25 @@ +[![CloudSploit](https://cloudsploit.com/img/logo-new-big-text-100.png "CloudSploit")](https://cloudsploit.com) + +# AWS / WAF / Web ACL Logging Enabled + +## Quick Info + +| | | +|-|-| +| **Plugin Title** | Web ACL Logging Enabled | +| **Cloud** | AWS | +| **Category** | WAF | +| **Description** | Ensure that AWS WAFV2 Web Access Control Lists (ACLs) have logging enabled. | +| **More Info** | Enabling logging for Web ACL allows detailed logging of web requests that match defined rules within the WAF Web ACL. This enables comprehensive monitoring, analysis, and troubleshooting of security threats and traffic patterns within your web application. | +| **AWS Link** | https://docs.aws.amazon.com/waf/latest/developerguide/logging-management.html | +| **Recommended Action** | Modify WAFV2 Web ACL and enable logging. | + +## Detailed Remediation Steps +1. Log into the AWS Management Console. +2. Select the "Services" option and search for "WAF & Shield".
+3. On "WAF & Shield Dashboard" page, Click on "Web ACLs" from left navigation panel.
+4. On WAF Web ACLs list page, Click on the Web ACLs name on which you want to enable logging.
+5. On Web ACLs details page scroll down and choose "Logging and metrics" option.
+6. Scroll down, and under the "Logging" section click on "Enable" button.
+7. On "Enable Logging" page select the Logging Destination for Logs.
+8. Scroll to bottom of Page and click "Save" button.
diff --git a/resources/aws/wafv2/wafv2-web-acl-logging-enabled/README.md b/resources/aws/wafv2/wafv2-web-acl-logging-enabled/README.md new file mode 100644 index 000000000..e69de29bb diff --git a/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step2.png b/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step2.png new file mode 100644 index 000000000..d7dbd8893 Binary files /dev/null and b/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step2.png differ diff --git a/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step3.png b/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step3.png new file mode 100644 index 000000000..fb5780103 Binary files /dev/null and b/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step3.png differ diff --git a/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step4.png b/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step4.png new file mode 100644 index 000000000..c352ae26f Binary files /dev/null and b/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step4.png differ diff --git a/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step5.png b/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step5.png new file mode 100644 index 000000000..9ff7be360 Binary files /dev/null and b/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step5.png differ diff --git a/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step6.png b/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step6.png new file mode 100644 index 000000000..0f193808d Binary files /dev/null and b/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step6.png differ diff --git a/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step7.png b/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step7.png new file mode 100644 index 000000000..ad395db1b Binary files /dev/null and b/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step7.png differ diff --git a/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step8.png b/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step8.png new file mode 100644 index 000000000..8e417a1f4 Binary files /dev/null and b/resources/aws/wafv2/wafv2-web-acl-logging-enabled/step8.png differ