AWS WAF Web ACL (with Marketplace Rule Groups) via CloudFormation

Question

Hi,  
  
We recently subscribed to two WAF marketplace rule groups.  
  
I've been tasked with applying one of these rule groups to a CloudFront distribution, and the other to an API Gateway API.  
  
These rule groups need applying via CloudFormation template (technically, via Serverless Framework—https://serverless.com/).  
  
I've looked through the AWS documentation and the marketplace vendor's setup guides and can't find any information on how to create Web ACLs configured with WAF marketplace rule groups **programmatically**.  
  
Obviously we can create the Web ACLs manually, but the task I've been given is to create them via CloudFormation/Serverless templates.  
  
**Does anyone have any examples on how to create Web ACLs configured with marketplace rule groups via CloudFormation/Serverless templates?**  
  
Appreciate whatever help I can get!  
  
Kind regards,  
  
James  
  
Edited by: jamesfgrumpysailor on Oct 29, 2019 6:49 AM

Answer

Hi,  
  
For anyone who stumbles across this post, according to AWS Support as of November 2019:  
> Unfortunately, at the moment of writing, the API call to subscribe managed WAF rule group is not yet supported in CloudFormation and is only available with AWS CLI/SDK and console.  
  
**TL;DR:** It's not possible to create Web ACLs configured with marketplace rule groups via CloudFormation/Serverless templates.  
  
Forlornly,  
  
James

AWS WAF Web ACL (with Marketplace Rule Groups) via CloudFormation

Relevant content