IAM / security / wafv2

AWS WAF V2 (IAM)

JSON →

AWSwafv2security

AWS WAF is a web application firewall that helps protect your web applications from common web exploits.

iamaws

docs ↗

Permissions

Actions in this service

wafv2:ListWebACLs

wafv2:GetWebACL

wafv2:ListRuleGroups

wafv2:GetRuleGroup

wafv2:ListIPSets

wafv2:GetIPSet

wafv2:GetSampledRequests

wafv2:GetLoggingConfiguration

Policy

Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "wafv2:ListWebACLs", "wafv2:GetWebACL", "wafv2:ListRuleGroups", "wafv2:GetRuleGroup", "wafv2:ListIPSets", "wafv2:GetIPSet", "wafv2:GetSampledRequests", "wafv2:GetLoggingConfiguration" ], "Resource": "*" } ] }

SDK mapping

Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns

Known gotchas

Avoid wafv2:* — grants full control including web ACL and rule group deletion

Avoid wafv2:DeleteWebACL and wafv2:DeleteRuleGroup — can remove critical web application protections

Resources

docshttps://servicereference.us-east-1.amazonaws.com/v1/wafv2/wafv2.json ↗