---
name: "aws-waf-managed-rule-groups"
description: "Deploy AWS WAF to protect CloudFront distributions and Application Load Balancers."
metadata:
  author: "AWS"
  version: "1.0.0"
  runtime_compatibility:
    - "codex"
    - "claude-code"
    - "cursor"
    - "windsurf"
triggers:
  - "configure aws waf web acl"
  - "enable aws managed rule sets"
  - "create rate-based rule aws waf"
permissions:
  fs_read: true
  fs_write: "workspace"
  shell_exec: false
  net_access: false
---

# AWS WAF Managed Rule Groups & Web ACL Rules

Configures AWS WAF v2 Web ACLs: AWSManagedRulesCommonRuleSet, AWSManagedRulesSQLiRuleSet, rate-based rules, IP sets, custom response headers, and CloudWatch alarm metrics.

## When to Invoke
Invoke this skill whenever you need to:
- configure aws waf web acl
- enable aws managed rule sets
- create rate-based rule aws waf

## Execution SOP & Rules
1. Associate Web ACLs with CloudFront distributions or Application Load Balancers.
2. Enable core managed rule groups: CommonRuleSet, SQLiRuleSet, and LinuxRuleSet.
3. Set rule actions to Count mode initially to evaluate impact before switching to Block.
4. Enable CloudWatch metrics on Web ACL rules to trigger automated SNS alert notifications.

## Verification Checklist
- Run local linting, syntax validation, and type-checks before reporting completion.
- Ensure all created or modified files adhere to workspace boundaries and avoid uncommitted secrets.
- Verify tests or build commands exit cleanly with return code 0.