Control: AWS > WAF > Web ACL [Deprecated] > CMDB

Record and synchronize details for the AWS WAF web acl into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

Note: This resource type has been deprecated and will be removed in the next major version. Please refer Migrate workloads from AWS WAF Classic for more information.

Resource Types

This control targets the following resource types:

AWS > WAF > Web ACL [Deprecated]

Policies

The following policies can be used to configure this control:

AWS > WAF > Web ACL [Deprecated] > CMDB

Quick Actions

Delete from AWS

Permissions

Cloud permissions used by this control and its actions:

waf:GetLoggingConfiguration
waf:GetWebACL
waf:ListTagsForResource

In Your Workspace

Developers

Control Type URI

tmod:@turbot/aws-waf#/control/types/webaclCmdb

Category URI

tmod:@turbot/turbot#/control/categories/cmdb

GraphQL

query controlType(id: "tmod:@turbot/aws-waf#/control/types/webaclCmdb") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-waf#/control/types/webaclCmdb'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-waf#/control/types/webaclCmdb"