ALB with WAF and ACM Stack

ALB + WAF + ACM via CloudFormation

A CloudFormation stack that provisions an Application Load Balancer with a WAF WebACL attached, an ACM certificate auto-validated via DNS, HTTP-to-HTTPS redirect on port 80, and S3 access logging — all wired together and ready to point at your target group.

What's Included

• Application Load Balancer with HTTPS listener (TLS 1.2 minimum)
• ACM certificate with DNS validation records output for your registrar
• HTTP listener with redirect rule to HTTPS (301)
• WAF WebACL with AWS Managed Rules: Core rule set, Known bad inputs, IP reputation list
• S3 bucket for ALB access logs with lifecycle policy (90-day retention)
• Security group allowing 80/443 from 0.0.0.0/0 and ::/0

What You Get

• alb-waf-acm.yaml — CloudFormation template
• parameters/ — parameter files for public and internal-facing ALB variants
• README.md — DNS validation steps, target group wiring, WAF rule tuning guide

Requirements

• AWS account with CloudFormation, ElasticLoadBalancingV2, WAFv2, and ACM permissions
• Existing VPC with public subnets for the ALB
• Domain name you control (for ACM DNS validation)