community WAFv2 service controller

WAFv2 service controller

Open yuyuvn opened this issue 2 years ago • 12 comments

New ACK Service Controller

Support for WAFv2

List of API resources

List the API resources in order of importance to you:

WAF ACL
WAF ip set
WAF rules group

May 23 '22 06:05 yuyuvn

/lifecycle frozen

May 23 '22 20:05 RedbackThomson

Jan 23 '23 19:01 jescarri

PCI DSS v4 has a requirement for WAFs for all public apps, coming into effect in Q1 2025, and we'd love to use this in our environments. https://www.schellman.com/blog/new-requirements-in-pci-dss-v4

Jan 23 '23 19:01 camclay

+1.

Jan 23 '23 20:01 gopinaath

This would be quite useful for our use case of EKS cluster(s) in an AWS account where the stance is to limit creation of resources outside Kubernetes, and the primary mode of interaction is via clusters. Consuming teams can then provision WAF for their applications via kubectl or relevant Kubernetes commands and tooling. WAF is particularly problematic because of the inability to have cross account resources, so while some resources could be created in a separate AWS account via any method, WAF must be in the same account, and limiting creation to only use Kubernetes methods, this becomes problematic.