WAF - Web Application Firewall

AWS WAF - Web Application Firewall

  • Protects web applications from common web exploits (Layer 7)
  • WAF can be deployed on Application Load Balancer, API Gateway and CloudFront
  • To use WAF we need to define a Web Access Control List (ACL):
    • Rules can include: IP addresses, HTTP headers, HTTP body or URI strings
    • Protects from common attacks such as SQL injection and Cross-Site Scripting (XSS)
    • Size constraint
    • Geo-match, block certain countries
    • Rate-based rules, for DDoS protection

AWS Firewall Manager

  • Manage rules in all accounts of an AWS Organization
  • We define a common set of security rules in Firewall Manager. These rules can contain WAF rules
  • Firewall manager can also manage AWS Shield Advanced
  • It can also manage Security Groups for EC2 and ENI resources in VPC