n8n-nodes-aws-waf

This is an n8n community node for AWS WAF (Web Application Firewall). It allows you to manage IP Sets in AWS WAF, specifically for adding and removing IP addresses from blacklists.

Features

• Add IP to Blacklist: Add one or more IP addresses to a WAF IP Set
• Remove IP from Blacklist: Remove one or more IP addresses from a WAF IP Set
• List IP Sets: List all IP Sets in your WAF configuration
• Get IP Set: Get details of a specific IP Set including all addresses

Installation

In n8n

1. Go to Settings > Community Nodes
2. Select Install
3. Enter n8n-nodes-aws-waf
4. Click Install

Manual Installation

cd ~/.n8n/nodes
npm install n8n-nodes-aws-waf

Credentials

You need to configure AWS credentials with the following permissions:

• wafv2:GetIPSet
• wafv2:UpdateIPSet
• wafv2:ListIPSets

Required credential fields:

| Field | Description | |-------|-------------| | Region | AWS region (e.g., us-east-1) or "Global" for CloudFront | | Access Key ID | Your AWS Access Key ID | | Secret Access Key | Your AWS Secret Access Key |

Usage

Add IP to Blacklist

1. Select Add IP to Blacklist operation
2. Choose the Scope (Regional for ALB/API Gateway, or CloudFront for global)
3. Enter the IP Set Name and IP Set ID
4. Enter IP addresses in CIDR notation (e.g., 192.168.1.1/32)
   • For single IPs, use /32 suffix
   • Separate multiple IPs with commas

Remove IP from Blacklist

1. Select Remove IP from Blacklist operation
2. Enter the same details as above
3. The specified IPs will be removed from the IP Set

Finding IP Set ID

You can find your IP Set ID by:

1. Using the List IP Sets operation
2. Or from the AWS Console: WAF & Shield > IP sets

Example Workflow

Webhook → AWS WAF (Add IP) → Slack Notification

This workflow can automatically block IPs detected by your security system.

Development

# Install dependencies
npm install

# Build
npm run build

# Development mode
npm run dev

License

MIT