Websites or apps are compliant when protected by Web Application Firewall (WAF).
Scenarios
Enterprises use WAF to protect websites and apps from web-layer threats such as SQL injection and cross-site scripting (XSS), ensuring data security and business continuity.
Risk level
Default risk level: high.
Adjust the risk level as needed.
Detection logic
Websites or apps protected by WAF are considered compliant.
Rule details
|
Parameter |
Description |
|
Rule name |
Use Web Application Firewall to protect websites or apps |
|
Rule identifier |
|
|
Automatic remediation |
Not supported |
|
Rule trigger |
Periodic: Every 24 hours |
|
Supported resource types |
ACS::::Account |
|
Input parameters |
None |
Remediation guidance
For more information, see Website protection best practices.