This topic describes the types of Web Application Firewall (WAF) events that CloudMonitor or Cloud Config monitors and can be published to EventBridge.
Event types
The following table describes the types of WAF events that can be published to EventBridge.
Event type | Value of the type parameter |
Access control attack | waf:CloudMonitor:WafEventAclattack |
HTTP flood attack | waf:CloudMonitor:WafEventCcattack |
Web attack | waf:CloudMonitor:WafEventWebattack |
Web scan attack | waf:CloudMonitor:WafEventWebscan |
Delivery of resource change logs | waf:Config:ConfigurationItemChangeNotification |
Notification that a resource is evaluated as non-compliant | waf:Config:NonCompliantNotification |
For more information about the parameters defined in the CloudEvents specification, see Overview.