AWS Managed Rules rule groups

Question

I am assisting a company with their WAF ACLs. They have AWS managed rules rule groups applied. How do I find out what IPs/Ports are incorporated in those specified rules. I understand that providing that information in an open forum will not happen. Is this something that I need to have the customer do? If so, will AWS support provide that information via a secure email/message to the current customer? Please advise.

Answer

I suggest starting with the [documentation](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups.html) which explains how each rule behaves and what it does.

If you are having trouble with a particular rule, follow the advice in the 'Guidelines for implementing AWS WAF' whitepaper, [here](https://docs.aws.amazon.com/whitepapers/latest/guidelines-for-implementing-aws-waf/testing-and-tuning.html).

If you are still encountering issues, please have the customer raise a case with AWS Support.

Answer

Which exactly AWS Managed Rules are you referring to?

AWS Managed Rules rule groups

Contenido relevante