AWS WAF

Connect AWS WAF to PostHog to sync your data into the PostHog data warehouse for analysis and modeling.

Sync AWS WAF configurations into the PostHog Data warehouse.

Grant wafv2:ListWebACLs and wafv2:GetWebACL to sync web ACLs. Grant wafv2:ListRuleGroups and wafv2:GetRuleGroup to sync rule groups. Grant wafv2:ListIPSets and wafv2:GetIPSet to sync IP sets. Grant wafv2:ListRegexPatternSets and wafv2:GetRegexPatternSet to sync regex pattern sets.

Select a region for regional resources. CloudFront resources use us-east-1. All tables use full refresh. This source imports configuration data only, without request samples or traffic logs.

Configuration

Option	Description
AWS access key ID Type: text Required: True
AWS secret access key Type: password Required: True
AWS session token Type: password Required: False	Temporary credentials expire. Scheduled syncs fail after the session token expires.
AWS region Type: text Required: True
Resource scope Type: select Required: True	CloudFront resources always use us-east-1.

Linking AWS WAF to PostHog

1. Go to the Data pipeline page in PostHog
2. Click New source and select AWS WAF
3. Fill in the required configuration fields
4. Click Next, select the tables you want to sync, and then press Import

Supported tables

Table	Description	Sync method	Incremental field	Primary key
web_acls	Web access control lists, with their rules, default actions, and visibility settings.	Full refresh	—	—
rule_groups	Rule groups that you manage, with their rules and capacity settings.	Full refresh	—	—
ip_sets	IP sets with their IP version and address ranges in CIDR notation.	Full refresh	—	—
regex_pattern_sets	Sets of regular expressions that rules use to inspect web requests.	Full refresh	—	—