Hey there, are there any plans to support AWS WAF? I'd like to put it in front of our Apollo API

Is that supported by CDK?

Yes – https://docs.aws.amazon.com/cdk/api/latest/docs/aws-waf-readme.html

Then you can use it, you don’t need sst.

@Adrián Mouly is right, you can use the CDK construct directly, so something like:

import * as waf from "@aws-cdk/aws-waf";

new waf.CfnWebACL(this, "WebACL", {...});