Securing WAF services
Each cloud provider has its own implementation of a WAF service – that is, an application-layer firewall with capabilities to detect and mitigate common HTTP/HTTPS-based attacks against your publicly exposed web applications.
Securing AWS WAF
AWS WAF is the AWS managed web application firewall service.
AWS WAF offers protection against the following types of attacks:
- Layer 7 DDoS attacks (when combined with AWS Shield)
- Common web application attacks
- Bots (non-human generated traffic)
AWS WAF also allows you to protect the following Amazon services:
- Amazon CloudFront: The Amazon managed CDN service
- Amazon API Gateway: The Amazon managed API gateway service
- Amazon ALB: The Amazon managed Application Load Balancer service (Layer 7 load balancer)
Best practices for securing AWS WAF
The following are some of the best practices to follow:
- To protect an external web resource, create web ACLs, with...