Skip to main content

WAF logging

· One min read

Overview​

  • Add @logStream = "waf" to your CloudWatch Logs Insights query to view log events where the WAF blocked a request.
  • Logs are counted and rolled up by IP address.
  • Provider information is also included in the log for enhanced debugging.