How do i create a location label based condition in AWS WAF?

Question

Since november the second [its possible to restrict access to a resource based on a specific location such as a state](https://aws.amazon.com/about-aws/whats-new/2022/11/aws-waf-supports-granular-geographic-match/). You can create a label based rule with [the rule builder](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-label-match.html).

I want to restrict access to a cloudfront distribution for certain US states but i can't locate this rule builder anywhere in the WAF console. Where to find this builder and how do i create a label based condition to restrict a US state?

Thanks

Accepted Answer

The geographic match rule adds geographic region and country labels to every request that it evaluates, enabling customers to write label match statements according to the regions they wish to block or allow.

You can find it under: Rule builder on the console – Under the rule's Action settings, under Label.

Also refer to https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-label-add.html and https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-label-match.html

How do i create a location label based condition in AWS WAF?

관련 콘텐츠