Skip to main content

WAF Instance Logging Enabled

ID: rule:aliyun:waf-instance-logging-enabled
Severity: medium
IaC Types: ROS, Terraform

Description​

Ensures that logging is enabled for the WAF instance for auditing and security analysis.

Reason for Violation​

WAF logs provide critical information about web attacks and traffic patterns.

Recommendation​

Enable logging for the WAF instance by setting log_status to '1'.

Resource Types​

  • ROS: ALIYUN::WAF3::Instance
  • ROS: ALIYUN::WAF::Instance
  • Terraform: alicloud_waf_instance