Implementing Application Security

A huge amount of effort goes into developing your web applications and services on AWS and they are often the target of intrusion attacks looking for weaknesses and vulnerabilities. To minimize and mitigate these threats, you must be able to implement solutions using different AWS services to help protect your application from being compromised. This is exactly what we will be doing in this chapter.  

In this chapter, we will look at how to create a web access control list (ACL) using the AWS Web Application Firewall (WAF) service, in addition to how you can set up, configure, and create firewall access policies using Firewall Manager.

This chapter will focus on the following:  

• Exploring AWS WAF
• Managing the security configuration of your elastic load balancers (ELBs)
• Securing APIs with AWS API Gateway