Skip to content

Instantly share code, notes, and snippets.

@jrstarke
Created April 25, 2017 17:40
Show Gist options
  • Save jrstarke/ab60f3713675c69d9377fbd1b5017459 to your computer and use it in GitHub Desktop.
Save jrstarke/ab60f3713675c69d9377fbd1b5017459 to your computer and use it in GitHub Desktop.
AWSTemplateFormatVersion: "2010-09-09"
Description: "Main Stack"
Resources:
SubStack:
Type: "AWS::CloudFormation::Stack"
Properties:
TemplateURL: template2.yaml
AWSTemplateFormatVersion: "2010-09-09"
Description: "Substack that has an AWS WAF Preconfigured Protections Distribution"
Resources:
LogsBucket:
Type: "AWS::S3::Bucket"
Properties:
AccessControl: Private
PreconfiguredProtections:
Type: "AWS::CloudFormation::Stack"
Properties:
TemplateURL: https://s3.amazonaws.com/solutions-reference/aws-waf-security-automations/latest/aws-waf-security-automations.template
Parameters:
CloudFrontAccessLogBucket: !Ref AppDistributionLogsBucket
SqlInjectionProtectionParam: "yes"
CrossSiteScriptingProtectionParam: "yes"
ActivateHttpFloodProtectionParam: "yes"
ActivateScansProbesProtectionParam: "yes"
ActivateReputationListsProtectionParam: "yes"
ActivateBadBotProtectionParam: "no"
SendAnonymousUsageData: "yes"
RequestThreshold: 400
ErrorThreshold: 50
WAFBlockPeriod: 30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment