Skip to content

Inconsistency in VisibilityConfig values for Web ACL, Rule, and Rule Group #87

@Zaulao

Description

@Zaulao

Hello, team! I have a quick question about this Bouncer:

When creating the Web ACL, the user-chosen values for the VisibilityConfig are inserted in the AWS API request, as per waf.go#L811-L815

However, later in the execution, when the RuleGroup is added to the Web ACL (waf.go#L319-L323) or updated with an action rule (waf.go#L181-L185), the VisibilityConfig values are hardcoded as false.

Should these values consider the user's configuration as well? Or does the Web ACL configuration override the internal values (for rule groups and rules)? Thanks in advance!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions