thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Intermediate

AWS WAF

AWS web application firewall that filters HTTP(S) requests to CloudFront, ALB, API Gateway and other services using rules.

Definition

AWS WAF uses web ACLs containing rules that match conditions such as IP sets, geographic origin, headers, SQL injection and cross-site scripting patterns, and rate limits. AWS Managed Rules and Marketplace rule groups provide ready protections, and Bot Control and fraud control add specialized defenses.

Example

A rate-based rule blocks any IP sending more than 2,000 requests in five minutes to a login page.

Exam tip

WAF is layer 7 and cannot attach directly to an NLB or EC2 instance; use it on CloudFront, ALB or API Gateway.

Related terms