Why WAF disassociate resource when Cloudformation change resource Cloudfront?


Hi Community. When I change Cloudformation template with resource Cloudfront, I will see Distribution Cloudfront removed on WAF. This makes me feel very uncomfortable. I must reassociate Distribution again on WAF. Why WAF disassociate Distribution? Please help me. Thank you

asked 2 years ago256 views
1 Answer
Accepted Answer

What changes are you making to your CloudFront Distribution resource in your template? Are you attaching WAF separately to CloudFormation? If you modify a property affecting WAF, CloudFormation may overwrite it; if you modify a property which requires replacement, CloudFormation will replace your Distribution with a new one.

I'd recommend you use CloudFormation to associate AWS WAF with your Distribution. You can provide it using the WebACLId property of the DistributionConfig property in your template. If you don't want to manage the whole WAF through CloudFormation, I'd recommend making a Parameter in your template to allow you to specify the WAF ACL Id, and then use that parameter when setting the value in the Distribution resource.

profile pictureAWS
answered 2 years ago
  • Hi James_S, WAF I don't use Cloudformation. It was created on consoles. Only Cloudfront was created by Cloudformation.
    Maybe I will write Cloudformation for WAF. Thank for the advice. Best regard.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions