Description
Yesterday AWS introduced a change in WAFv2 rules : it is now possible to choose an evaluation window for rate limit rules.
The 5 minute window is now the default for a EvaluationWindowSec parameter that can have 60, 120, 300 or 600 seconds value.
Terraform resources must be updated in order to support this new parameter.
Affected Resource(s) and/or Data Source(s)
aws_wafv2_web_acl
aws_wafv2_rule_group
Potential Terraform Configuration
# Rate limit
rule {
name = "RuleName"
priority = 10
statement {
rate_based_statement {
limit = 300
aggregate_key_type = "IP"
evaluation_window_sec = 60
}
}
}
References
No response
Would you like to implement a fix?
None
Description
Yesterday AWS introduced a change in WAFv2 rules : it is now possible to choose an evaluation window for rate limit rules.
The 5 minute window is now the default for a
EvaluationWindowSecparameter that can have 60, 120, 300 or 600 seconds value.Terraform resources must be updated in order to support this new parameter.
Affected Resource(s) and/or Data Source(s)
aws_wafv2_web_aclaws_wafv2_rule_groupPotential Terraform Configuration
References
No response
Would you like to implement a fix?
None