Devolutions.CIEM

0.3.28

Checks/Aws/Test-Wafv2WebaclRuleLoggingEnabled.ps1

                                function Test-Wafv2WebaclRuleLoggingEnabled {

    <#

    .SYNOPSIS

        AWS WAFv2 Web ACL has Amazon CloudWatch metrics enabled for all rules and rule groups

    .DESCRIPTION

        **AWS WAFv2 Web ACLs** are assessed to confirm that every associated **rule** and **rule group** has **CloudWatch metrics** enabled for visibility into rule evaluations and traffic

    .PARAMETER Check

        CIEMCheck object containing check metadata.

    #>

    [CmdletBinding()]

    [OutputType([PSCustomObject[]])]

    param(

        [Parameter(Mandatory)]

        [CIEMCheck]$Check

    )

    $ErrorActionPreference = 'Stop'

    # TODO: Implement check logic based on Prowler check: wafv2_webacl_rule_logging_enabled

    [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check wafv2_webacl_rule_logging_enabled for reference.', 'N/A', 'wafv2 Resources')

}