Skip to content

Security: mason5052/aws-waf-security-framework

Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in this project, please report it responsibly.

Do not open a public GitHub issue for security vulnerabilities.

Instead, please email: ehehwnwjs5052@gmail.com

Include:

  • Description of the vulnerability
  • Steps to reproduce
  • Potential impact
  • Suggested fix (if any)

You will receive a response within 48 hours acknowledging the report.

Scope

This policy applies to the Terraform module code and CI configuration in this repository. It does not cover vulnerabilities in AWS WAF itself or third-party dependencies (Terraform providers, GitHub Actions).

Supported Versions

Version Supported
1.0.x Yes

There aren’t any published security advisories