Skip to main content

🧠 AWS CloudFront Web Distribution is not integrated with AWS WAF - prod.logic.yaml🟠🟢

Uses​

Test Results 🟢​

Generated at: 2026-01-31T12:01:39.535637094Z Open

ResultIdCondition IndexCondition TextRuntime Error
🟢test1✔️ 299✔️ isEmptyLookup('CA10__wafV2WebAcl__r') && isEmptyLookup('CA10__webAcl__r')✔️ null
🟢test2✔️ 300✔️ otherwise✔️ null
🟢test3✔️ 300✔️ otherwise✔️ null

Generation Bundle​

FileMD5
Open/ce/ca/aws/cloudfront/distribution-waf-integration/policy.yaml418D3E82D96947BBEDAC65DFEEB83D9A
Open/ce/ca/aws/cloudfront/distribution-waf-integration/prod.logic.yaml4846B20CD944E114DFC84829B5B77FEA
Open/ce/ca/aws/cloudfront/distribution-waf-integration/test-data.jsonC3C63DB635EAE7B45C0D7F0974613A0B

Available Commands​

repo-manager policies generate FULL /ce/ca/aws/cloudfront/distribution-waf-integration/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/cloudfront/distribution-waf-integration/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/cloudfront/distribution-waf-integration/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/cloudfront/distribution-waf-integration/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/cloudfront/distribution-waf-integration/prod.logic.yaml

Content​

Open File

---
inputType: "CA10__CaAwsDistribution__c"
testData:
  - file: "test-data.json"  
recordTypes:
  - "caWebDistribution"
conditions:
  - status: "INCOMPLIANT"
    currentStateMessage: "AWS CloudFront web distribution isn't integrated with either AWS WAF Classic or AWS WAF web ACLs."
    remediationMessage: "Consider associating a WAF web ACL with the CloudFront Distribution."
    check:
      AND:
        args:
          - IS_EMPTY_LOOKUP: "CA10__wafV2WebAcl__r"
          - IS_EMPTY_LOOKUP: "CA10__webAcl__r"
otherwise:
  status: "COMPLIANT"
  currentStateMessage: "The CloudFront Distribution is integrated with AWS WAF."