Retrieving the list of managed rule groups - Amazon WAF, Amazon Firewall Manager, and Amazon Shield Advanced
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Retrieving the list of managed rule groups

You can retrieve the list of managed rule groups that are available for you to use in your web ACLs. The list includes the following:

  • All Amazon Managed Rules rule groups.

  • The Amazon Web Services Marketplace rule groups that you have subscribed to.

    Note

    For information about subscribing to Amazon Web Services Marketplace rule groups, see Amazon Web Services Marketplace managed rule groups.

When you retrieve the list of managed rule groups, the list you get back depends on the interface that you're using:

  • Console – Through the console, you can see all managed rule groups, including the Amazon Web Services Marketplace rule groups that you haven't subscribed to yet. For the ones that you haven't subscribed to yet, the interface provides links that you can follow to subscribe.

  • APIs and CLI – Outside of the console, your request returns only the rule groups that are available for you to use.

To retrieve the list of managed rule groups

  • Console – During the process of creating a web ACL, on the Add rules and rule groups page, choose Add managed rule groups. At the top level, the provider names are listed. Expand each provider listing to see the list of managed rule groups. For versioned rule groups, the information shown at this level is for the default version. When you add a managed rule group to your web ACL, the console lists it based on the naming scheme <Vendor Name>-<Managed Rule Group Name>.

  • API –

    • ListAvailableManagedRuleGroups

  • CLI –

    • aws wafv2 list-available-managed-rule-groups --scope=<CLOUDFRONT|REGIONAL>