Post

You might be paying for unused WAF ACLs that you can't see. Here's what I found in my latest bill. 👇

3 Jan 2025

AWS WAF Classic (or v1) was recently deprecated, and classic Web ACLs no longer appear in the new WAF console. So it's easy to miss any classic web ACLs you have that are no longer in use, especially if you don't spend much time in the AWS console because you do everything through IaC!

Yan Cui

@theburningmonk.com

I saw some WAF charges on my bill and it took me a while to work out where they came from because I couldn't see any web ACLs in the WAF console! To see if you have any classic web ACLs, go to the WAF Classic console: https://buff.ly/4gElXQa and either delete or migrate them before Sep 30, 2025.

3/1/25, 11:40 am0 reposts1 like

Yan Cui

@theburningmonk.com

3 Jan 2025

And if you need to migrate them to AWS WAF v2, then here's a handy migration guide: https://buff.ly/4gKjuDZ Ok, hope this helps you save a few $$!

buff.lyMigrating a web ACL from AWS WAF Classic to AWS WAF - AWS WAF, AWS Firewall Manager, and AWS Shield AdvancedTo migrate a web ACL and switch over to it, perform the automated migration, then complete a series of manual steps.