amazon web services - Daily assign all Application Load Balancers to WAF

Question

In my development environment, we constantly create and destroy applications for testing. I would like all Application Load Balancers (ALB) to be placed behind our single AWS Web Application Firewall (WAF) daily through a Lambda script. I want a trigger to run a script that finds all ALBs and then assigns them to the WAF. I can't seem to figure out which boto3 client I should be using to execute this in Python 3.8. Any guidance? Thanks

question from:https://stackoverflow.com/questions/65921345/daily-assign-all-application-load-balancers-to-waf

Answer 1

I suggest use cloudtrail event, using lambda look for elb creation event and connect them to waf.

And I assume you are using SAM or serverless for lambda deployment.

Some usefull link https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-cloudtrail-logs.html

https://docs.aws.amazon.com/lambda/latest/dg/with-cloudtrail-example.html