CDK得到WAF的webACLId

Question

如何获得WAF的webACLId

我正在尝试用WAF创建Cloudfront发行版。

我试图创建自定义资源来获取它，但是没有运气。

new cr.AwsCustomResource(this, 'GetParameter', {
            onUpdate: { // will also be called for a CREATE event
            service: 'WAF',
            action: 'ListWebACLs',
            // parameters: {
            //     Limit: 10,
            //     NextMarker: 'cloudfrontwebacl'
            // },
            physicalResourceId: cr.PhysicalResourceId.of('Date.now().toString()'), 
            },
            policy: cr.AwsCustomResourcePolicy.fromSdkCalls({
            resources: cr.AwsCustomResourcePolicy.ANY_RESOURCE,
            }),
        });

Answer 1

哦哦。应该使用Ref提取webACLId

示例：

//  Create WAF Rule
const rule = new CfnRule(this,'rule',{
  metricName:'rule',
  name:'rule',
  predicates:[
    ...
  ]
})
...
//  Create WAF WebACL
const CloudfrontWebACL = new CfnWebACL(this, "cloudfrontwebacl", {
    name: "cloudfrontwebacl",
    defaultAction: { type: 'ALLOW' },
    metricName: 'cloudfrontwebacl',
    rules:[
      {
        priority: 0,
        ruleId: rule.ref,
        action:{
          type: 'BLOCK',
        }
      }
    ]
})
...
//  Create Cloudfront distribution for web
...
webAclId: CloudfrontWebACL.ref,
...

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-waf-webacl.html#aws-resource-waf-webacl-return-values

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ref.html