WAF Stack¶

API Reference¶

class hello_world.hello_world_waf_stack.HelloWorldWafStack(*args, **kwargs)[source]¶

Bases: Stack

WAF WebACL stack, always deployed in us-east-1.

CloudFront requires its associated WAF WebACL to exist in us-east-1 regardless of where CloudFront itself or other stacks are deployed. Isolating WAF into its own stack allows the backend and frontend stacks to be deployed to any region while the WAF constraint is always satisfied.

The WebACL ARN is exposed as web_acl_arn for the frontend stack to consume. When the frontend stack is in a different region, CDK bridges the reference automatically via SSM Parameter Store (cross_region_references=True).

Parameters:: args (Any)
Return type:: M