Skip to content

Commit 0f50f8f

Browse files
docs(aws-waf.mdx): add regional permissions for WAF (#851)
Co-authored-by: Laurence Jones <[email protected]>
1 parent 3f03e10 commit 0f50f8f

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

crowdsec-docs/unversioned/bouncers/aws-waf.mdx

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -346,6 +346,9 @@ Here is the set of required permissions:
346346
"arn:aws:wafv2:*:*:global/webacl/*/*",
347347
"arn:aws:wafv2:*:*:global/rulegroup/*/*",
348348
"arn:aws:wafv2:*:*:global/managedruleset/*/*",
349+
"arn:aws:wafv2:*:*:regional/webacl/*/*",
350+
"arn:aws:wafv2:*:*:regional/rulegroup/*/*",
351+
"arn:aws:wafv2:*:*:regional/managedruleset/*/*",
349352
"arn:aws:wafv2:*:*:*/ipset/*/*"
350353
],
351354
"Sid": "WAF1"
@@ -367,4 +370,4 @@ Here is the set of required permissions:
367370

368371
AWS requires the resource for `wafv2:List*` to be `*`.
369372

370-
For the other permissions, we recommend to restrict the resources to only the WebACL the component is configured to interact with and the rule groups/ipsets the component will create.
373+
For the other permissions, we recommend to restrict the resources to only the WebACL the component is configured to interact with and the rule groups/ipsets the component will create.

0 commit comments

Comments
 (0)