saint-graves/sica-fondt
1
0
Fork 0
mirror of https://github.com/SHOGGOTH-SECTOR/sica-fondt.git synced 2026-08-01 16:40:24 +00:00
Code Issues Packages Projects Releases Wiki Activity
sica-fondt/knowledge/cyber-skills/skills/implementing-cloud-waf-rules/references/api-reference.md
Claude 24f816b6a3
Consolidate 22 sibling repos into layered organism structure 
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):

- brain/        LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
                dispatch, A51 channels, and the OSINT cluster
- knowledge/    LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
                MITRE ATT&CK data
- reference/    defensive threat-reference (C3, shhbruh doc) + AdaYaml parser

License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.

Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.

https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
2026-06-10 06:53:01 +00:00

2.3 KiB
Raw Blame History

API Reference: Implementing Cloud WAF Rules

Libraries

boto3 -- AWS WAFv2

Key Methods

Method Description
create_web_acl() Create a new Web ACL
update_web_acl() Add/modify rules in a Web ACL
get_web_acl() Retrieve Web ACL details and rules
list_web_acls() List all Web ACLs in scope
associate_web_acl() Attach ACL to ALB, API Gateway, CloudFront
get_sampled_requests() View sampled WAF request data
list_available_managed_rule_groups() List AWS managed rule sets
create_ip_set() Create IP allowlist/blocklist
create_regex_pattern_set() Custom regex matching patterns

AWS Managed Rule Groups

Name Protection
AWSManagedRulesCommonRuleSet OWASP core (XSS, LFI, RFI)
AWSManagedRulesSQLiRuleSet SQL injection
AWSManagedRulesKnownBadInputsRuleSet Known exploit patterns
AWSManagedRulesLinuxRuleSet Linux LFI patterns
AWSManagedRulesBotControlRuleSet Bot detection/management
AWSManagedRulesATPRuleSet Account takeover prevention
AWSManagedRulesAnonymousIpList VPN/proxy/Tor blocking

Rule Statement Types

  • ManagedRuleGroupStatement -- AWS or marketplace managed rules
  • RateBasedStatement -- Rate limiting by IP (100-2B req/5min)
  • GeoMatchStatement -- Country-based blocking
  • ByteMatchStatement -- Custom string/header matching
  • SqliMatchStatement -- SQL injection detection
  • XssMatchStatement -- Cross-site scripting detection
  • RegexPatternSetReferenceStatement -- Custom regex rules
  • IPSetReferenceStatement -- IP allowlist/blocklist

Rule Actions

  • Allow -- Permit the request
  • Block -- Reject with 403
  • Count -- Log only (for testing rules)
  • CAPTCHA -- Challenge with CAPTCHA
  • Challenge -- Silent browser challenge

External References