AWS WAF works closely with Amazon CloudFront and Application Load Balancers (ALBs) and its primary function is to prevent your web applications from being subjected to intrusion by common attack patterns. By working in conjunction with CloudFront distributions and ALBs, AWS WAF can dictate how these services respond to web requests based on preconfigured conditions. This allows all HTTP and HTTPS requests to be filtered and identified as genuine or damaging inbound requests which are then either allowed or blocked as required.
There are three main component of the AWS WAF service in how it configured to help protect your web applications, these components are comprised of the following:
- Conditions
- Rules
- Web access control lists (ACLs)
Each of these is configured in order, you must first start with configuring conditions, which are then added to your...
