What are the limitations on WAF rate-based rule settings in GovCloud?

Question

When configuring WAF rules via API calls, I have encountered several limitations in GovCloud that do not exist in the public AWS cloud. For example, it is not possible to set EvaluationWindowSec in a RateBasedStatement.

The [official documentation]( https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/govcloud-waf.html
) outlining the differences between government and public AWS partitions does not mention these specific limitations:.

I did find a paragraph [here](https://aws.amazon.com/about-aws/whats-new/2024/03/aws-waf-rate-based-rules-configurable-time-windows/) that explains the restriction regarding EvaluationWindowSec, but I suspect there may be other differences I am not aware of.

Is there a comprehensive resource where I can find all the technical differences between AWS WAF in the public cloud and GovCloud? Or more generally, between GovCloud and the public AWS partitions?

Kidd Ip · Answer

Worth taking a look at this as well:

https://docs.aws.amazon.com/waf/latest/developerguide/limits.html

Bhawesh Kumar · Answer

These two links from Gov Cloud

https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/govcloud-waf.html (How AWS WAF Differs for AWS GovCloud (US))

https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/govcloud-fms.html (How AWS Firewall Manager differs for AWS GovCloud (US))

What are the limitations on WAF rate-based rule settings in GovCloud?

Add your answer

Relevant content