Skip to content

How do I turn on AWS WAF on a CloudFront distribution?

2 minute read
0

I want to protect my Amazon CloudFront distribution with an existing AWS WAF web access control list (web ACL).

Resolution

To turn on AWS WAF protection for your CloudFront distribution, use either the AWS WAF console or the CloudFront console.

Use the AWS WAF console

Complete the following steps:

  1. Open the AWS WAF console.
  2. In the navigation pane, choose AWS WAF.
  3. Choose Resources & protection packs.
  4. Select your Protection pack.
  5. In your selected protection pack, select Edit next to Resources to open the Manage resources panel.
  6. In Manage resources section of the rule group, choose Add global resources.
  7. Choose CloudFront resources.
  8. Choose Add.

Use the CloudFront console

Complete the following steps:

  1. Open the AWS CloudFront console.
  2. In the navigation pane, choose Distributions.
  3. Select your CloudFront distribution.
  4. For Security, choose Security - Web Application Firewall (WAF), and then choose Edit.
  5. Choose Enable security protections.
  6. Choose Use existing WAF configuration.
  7. Under Choose a web ACL, select the web ACL.
  8. Choose Save changes.

Related information

Creating a protection pack or web ACL in AWS WAF

Enable AWS WAF for distributions

Use AWS WAF protections