Editing a Web ACL - Amazon WAF, Amazon Firewall Manager, and Amazon Shield Advanced
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Editing a Web ACL

Note

This is Amazon WAF Classic documentation. You should only use this version if you created Amazon WAF resources, like rules and web ACLs, in Amazon WAF prior to November 2019, and you have not migrated them over to the latest version yet. To migrate your resources, see Migrating your Amazon WAF Classic resources to Amazon WAF.

For the latest version of Amazon WAF, see Amazon WAF.

To add or remove rules from a web ACL or change the default action, perform the following procedure.

To edit a web ACL

  1. Sign in to the Amazon Web Services Management Console and open the Amazon WAF console at https://console.amazonaws.cn/wafv2/.

    If you see Switch to Amazon WAF Classic in the navigation pane, select it.

  2. In the navigation pane, choose Web ACLs.

  3. Choose the name of the web ACL that you want to edit. This opens a page with the web ACL's details in the right pane.

  4. On the Rules tab in the right pane, choose Edit web ACL.

  5. To add rules to the web ACL, perform the following steps:

    1. In the Rules list, choose the rule that you want to add.

    2. Choose Add rule to web ACL.

    3. Repeat steps a and b until you've added all the rules that you want.

  6. If you want to change the order of the rules in the web ACL, use the arrows in the Order column. Amazon WAF Classic inspects web requests based on the order in which rules appear in the web ACL.

  7. To remove a rule from the web ACL, choose the x at the right of the row for that rule. This doesn't delete the rule from Amazon WAF Classic, it just removes the rule from this web ACL.

  8. To change the action for a rule or the default action for the web ACL, choose the preferred option.

    Note

    When setting the action for a rule group or an Amazon Web Services Marketplace rule group (as opposed to a single rule), the action you set for the rule group (either No override or Override to count) is called the override action. For more information, see Rule group override

  9. Choose Save changes.