How do I turn on AWS WAF on a CloudFront distribution?

Resolution

To turn on AWS WAF protection for your CloudFront distribution, use either the AWS WAF console or the CloudFront console.

Use the AWS WAF console

Complete the following steps:

1. Open the AWS WAF console.
2. In the navigation pane, under AWS WAF, choose Web ACLs.
3. For Region, choose Global (CloudFront).
4. Select the web ACL.
5. For Associated AWS resources, choose Add AWS resources.
6. Select your CloudFront distribution from the list.
7. Choose Add.

Use the CloudFront console

Complete the following steps:

1. Open the AWS CloudFront console.
2. In the navigation pane, choose Distributions.
3. Select your CloudFront distribution.
4. For Security, choose Security - Web Application Firewall (WAF), and then choose Edit.
5. Choose Enable security protections.
6. Choose Use existing WAF configuration.
7. Under Choose a web ACL, select the web ACL.
8. Choose Save changes.

Related information

Creating a web ACL

Turning on AWS WAF for distributions

Using AWS WAF protections