Create CLOUDFRONT scoped AWS::WAFv2::WebACL with CloudFormation

0

Hi!

I'm having difficulties creating a AWS::WAFv2::WebACL resource with CloudFormation:

The documentation (https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html#cfn-wafv2-webacl-scope) states For CLOUDFRONT, you must create your WAFv2 resources in the US East (N. Virginia) Region, us-east-1.

The only WebACL resource I am trying to spawn basically looks like this:

  ExampleWebACL:
    Type: AWS::WAFv2::WebACL
    Properties:
      Name: example-name
      Description: example-description
      Scope: CLOUDFRONT
      DefaultAction:
        Allow: {}
      VisibilityConfig:
        SampledRequestsEnabled: true
        CloudWatchMetricsEnabled: true
        MetricName: example-metric

Creation fails for Scope: CLOUDFRONT with 400 / Error reason: The scope is not valid.

Where do I set the region to us-east-1?

Thanks Christoph

chris
preguntada hace 2 años1747 visualizaciones
1 Respuesta
0

Thank you aabragan for hinting at what the solution is: --region us-east-1 does the trick.

I guess

  • the first statement is, that CloudFormation stacks are region bound
  • and the answer to the question how do I create resources in multiple regions may be StackSets.
chris
respondido hace 2 años

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas