Skip to content

WAFV2:GetWebACLForResource Rate Limiting in aws_elbv2_load_balancers #11419

@bbernays

Description

@bbernays

Should the AWS plugin continue to make the WAFV2:GetWebACLForResource call as part of resolving aws_elbv2_load_balancers? It is an issue because users have no ability to not make that call currently because there is no way of skipping resolving a column.

This API has a low limit of 1 req/sec so if you have a lot of ALBs in a specific region you can easily be throttled.

A few options:

  1. Drop the column, and have users use the aws_wafv2_web_acls.resources_for_web_acl column to connect an ALB to to a webACL
  2. Make the column a separate table so users can skip it if they want.
  3. Leave it as is

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions