AWS WAF
#109 · Level 3 · Modern architecture · SecurityConcept
Section titled “Concept”AWS WAF is a web application firewall that looks at the information inside web requests and decides whether to block or allow them. Its main part is the web ACL, which contains rules. With rules, you can catch attacks such as SQL injection by looking at the IP address, country, headers or the text of the request. You can use managed rule groups made by AWS and other sellers, and you can also limit requests when too many come from the same source. WAF works by sitting in front of services such as CloudFront, Application Load Balancer and API Gateway.
Simple example
Section titled “Simple example”The security scanner at a shopping mall gate — it stops suspicious bags or people before they get in.
Why it’s needed
Section titled “Why it’s needed”Hackers send special kinds of requests to websites to try to steal data or break the site.
Where it’s used
Section titled “Where it’s used”Blocking attacks such as SQL injection, stopping bots, and blocking requests from certain countries or IPs.
Azure equivalent
Section titled “Azure equivalent”Azure Web Application Firewall
Learn more
Section titled “Learn more”For details and the latest information, see the official documentation: