> For the complete documentation index, see [llms.txt](https://docs.panther.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.panther.com/ko/cloud-scanning/cloud-resource-attributes/aws/waf-web-acl.md).

# WAF 웹 ACL

## 리소스 유형

`AWS.WAF.WebACL`, `AWS.WAF.Regional.WebACL`

## 리소스 ID 형식

WAF Web ACL의 리소스 ID는 ARN입니다.

`arn:aws:waf::123456789012:webacl/1`

`arn:aws:waf-regional:us-west-2:123456789012:webacl/1`

## 배경

웹 액세스 제어 목록(web ACL)은 Amazon API Gateway API, Amazon CloudFront 배포 또는 Application Load Balancer가 응답하는 웹 요청을 세밀하게 제어할 수 있게 해줍니다. 글로벌 Web ACL은 CloudFront와 API Gateway에 적용됩니다. 리전 Web ACL은 로드 밸런서에 적용됩니다.

WAF 리전 및 글로벌 ACL은 동일한 방식으로 표시되며, 올바른 범위에 대한 룰을 작성하는 데 구분이 사용됩니다.

## 필드

[WebACL 참조](https://docs.aws.amazon.com/waf/latest/APIReference/API_waf_WebACL.html)

| 필드              | 유형    | 설명                                           |
| --------------- | ----- | -------------------------------------------- |
| `룰`             | `리스트` | WebACL이 적용하는 각 룰, 우선순위(순서), 수행된 작업 등을 나열합니다. |
| `DefaultAction` | `맵`   | AWS WAF가 웹 요청을 허용할지 차단할지에 대한 기본 동작입니다.       |
| `MetricName`    | `문자열` | 이 WebACL의 메트릭에 대한 친숙한 이름 또는 설명입니다.           |

## 예시

```javascript
{
    "AccountId": "123456789012",
    "Arn": "arn:aws:waf-regional:us-west-2:123456789012:webacl/1",
    "DefaultAction": {
        "Type": "ALLOW"
    },
    "Id": "1",
    "MetricName": "metric-1",
    "Name": "example-web-acl",
    "Region": "us-west-2",
    "ResourceId": "arn:aws:waf-regional:us-west-2:123456789012:webacl/1",
    "ResourceType": "AWS.WAF.Regional.WebACL",
    "Rules": [
        {
            "Action": {
                "Type": "BLOCK"
            },
            "ExcludedRules": null,
            "MetricName": "metric-1",
            "Name": "룰-1",
            "OverrideAction": null,
            "Predicates": [
                {
                    "DataId": "1",
                    "Negated": false,
                    "Type": "XssMatch"
                }
            ],
            "Priority": 2,
            "RuleId": "1",
            "Type": "REGULAR"
        },
        {
            "Action": {
                "Type": "COUNT"
            },
            "ExcludedRules": null,
            "MetricName": "metric-2",
            "Name": "룰-2",
            "OverrideAction": null,
            "Predicates": [
                {
                    "DataId": "2",
                    "Negated": false,
                    "Type": "XssMatch"
                }
            ],
            "Priority": 1,
            "RuleId": "2",
            "Type": "REGULAR"
        }
    ],
    "Tags": null,
    "TimeCreated": null
}
```


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.panther.com/ko/cloud-scanning/cloud-resource-attributes/aws/waf-web-acl.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.