appsync-associated-with-waf - AWS Config
AWS CloudFormation template
This documentation is a draft for private preview for regions in the AWS European Sovereign Cloud. Documentation content will continue to evolve. Published: January 13, 2026.

appsync-associated-with-waf

Checks if AWS AppSync APIs are associated with AWS WAFv2 web access control lists (ACLs). The rule is NON_COMPLIANT for an AWS AppSync API if it is not associated with a web ACL.

Identifier: APPSYNC_ASSOCIATED_WITH_WAF

Resource Types: AWS::AppSync::GraphQLApi

Trigger type: Periodic

AWS Region: All supported AWS regions except Asia Pacific (Thailand), Asia Pacific (Jakarta), Africa (Cape Town), Middle East (UAE), Asia Pacific (Hyderabad), Asia Pacific (Malaysia), Asia Pacific (Melbourne), AWS GovCloud (US-East), AWS GovCloud (US-West), Mexico (Central), Israel (Tel Aviv), Asia Pacific (Taipei), Canada West (Calgary), Europe (Spain), Europe (Zurich) Region

Parameters:

wafWebAclARNs (Optional)
Type: CSV

Comma-separated list of Amazon Resource Names (ARNs) for authorized web ACLs.

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.