Error saving any rules in WAF

Question

Anytime we save our WAF Web ACL's rules we're getting this error: "ValidationException
1 validation error detected: Value '{}' at 'associationConfig.challengeJavascriptSdkInjection' failed to satisfy constraint: Member must have length greater than or equal to 1"

We've only used the web console to edit rules, we haven't used custom JSON. We weren't getting this error earlier, but started getting it periodically yesterday, and now we're getting it every time we make a save (even if we're not modifying anything, or doing something simple like changing a rule from CAPTCHA to COUNT or something.)

Here's the relevant part of our Web ACL's JSON:

`"AssociationConfig": {
    "RequestBody": {
      "CLOUDFRONT": {
        "DefaultSizeInspectionLimit": "KB_64"
      }
    },
    "ChallengeJavascriptSdkInjection": {}
  },`

Tendai · Accepted Answer

Hello there, have you tried adding a new rule or editing an existing rule today? I brought this up with the AWS WAF team internally yesterday and today I am able to successfully add/edit different types of rules in my CloudFront web ACL. Please test and let me know if you are still experiencing the same issue.

For future reference, using this link below will allow you to open a case with AWS Support Team.

https://support.console.aws.amazon.com/support/home#/

1. Select the option to Create a new case, 
2. Describe the issue in detail
3. Select the case type, it should be technical for technical assistance. (refer to link below for other case types)
4. Choose whether you want to communicate with the support team using chat, phone or web
5. Submit the case.

Refer to this documentation for additional details about case management -  https://docs.aws.amazon.com/awssupport/latest/user/case-management.html

Tendai · Answer

Hello there, I have replicated this error. It seems to be a WAF Console error that is affecting web ACLs for CloudFront.
Tests:
1. Create a web ACL for ALB, add a CAPTCHA rule --> Creates webACL and rule successfully
2. Create a web ACL for CloudFront, add any rule, CAPTCHA or block rule. ---> Get the error "ValidationException
1 validation error detected: Value '{}' at 'associationConfig.challengeJavascriptSdkInjection' failed to satisfy constraint: Member must have length greater than or equal to 1"

Next steps:
Open a case with the WAF team. This is not just isolated to your environment. It can be replicated on my CloudFont web ACL.

Error saving any rules in WAF

Add your answer

Relevant content