Free plan Signups are open now. The full audytx engine — Terraform and CloudFormation — is live. The Free plan is 100 scans a month and stays free — paid tiers arrive Nov 01, 2026 from $20/month for unlimited repositories. Try it on your own code.

WAFv2 web ACL rule should have CloudWatch metrics enabled

AWS_WAF_005 LOW Observability

What it checks

WAFv2 web ACL: at least one rule has CloudWatch metrics disabled.

Where it applies

Terraform: aws_wafv2_web_acl, aws_wafv2_rule_group

CloudFormation: AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup

How to fix it

  1. Set cloudwatch_metrics_enabled = true and sampled_requests_enabled = true in the visibility_config of every rule

Frameworks

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules