One Observability Workshop v3.0.0

One Observability Workshop / constructs/waf

constructs/waf¶

AWS WAFv2 constructs for the One Observability Workshop.

Provides both global (CloudFront) and regional (ALB) Web Application Firewalls:

• GlobalWaf attaches to CloudFront distributions for edge protection
• RegionalWaf attaches to Application Load Balancers for regional protection
• WAF logging to CloudWatch Logs for request inspection and analysis
• AWS Managed Rules for common threat protection (Core Rule Set, Known Bad Inputs)

WAF metrics and logs integrate with CloudWatch for monitoring blocked requests, rate limiting, and identifying attack patterns.

Demo consideration: WAF is optional (controlled by CUSTOM_ENABLE_WAF flag) to reduce workshop costs. When enabled, it demonstrates security observability.

Classes¶

• RegionalWaf
• GlobalWaf

Interfaces¶

• WorkshopWebAclProperties