Options for WAF with a Classic Load Balancer

Hi saqibali2

You cannot attach a WAF web ACL directly to a Classic Load Balancer as this is not supported. I would recommend migrating to the Application Load Balancer and attaching WAF to the Application Load Balancer. Alternatively you could create a CloudFront distribution that uses the Classic Load Balancer as the origin and then attach WAF to CloudFront.

The links below may be helpful in implementing the above solutions should you choose to do so:
https://docs.aws.amazon.com/elasticloadbalancing/latest/userguide/migrate-to-application-load-balancer.html
https://aws.amazon.com/blogs/aws/aws-web-application-firewall-waf-for-application-load-balancers/

Regards,

Matthias