DO-1705: WAF - make logging enabled by default

aligent · Sep 10, 2024 · e514d12 · e514d12
1 parent 288d968
commit e514d12
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/packages/waf/lib/waf.ts b/packages/waf/lib/waf.ts
@@ -79,7 +79,7 @@ export interface WebApplicationFirewallProps {
   postProcessCustomRules?: aws_wafv2.CfnWebACL.RuleProperty[];
 
   /**
-   * Enable CloudWatch logging. Default: false
+   * Enable CloudWatch logging. Default: true
    */
   enableLogging?: boolean;
 
@@ -408,7 +408,8 @@ export class WebApplicationFirewall extends Construct {
       });
     }
 
-    if (props.enableLogging) {
+    const enableLogging = props.enableLogging ?? true;
+    if (enableLogging) {
       const wafLogGroup = new LogGroup(this, `WAF-Logs-${this.web_acl.name}`, {
         retention: props.logRetentionDays
           ? props.logRetentionDays