This is done by using anomaly detection, traffic signatures, and threat database comparison all without impacting the uptime of your application. AWS Shield works on the transport layer and stops threats as they are detected in real-time. This is useful for detecting and stopping brute force login attacks as well as packet flood attacks.Īll AWS WAF implementation comes with AWS Shield Standard as an added layer of protection. Another common feature for WAF systems is rate-limiting, here you can create a rule that automatically blocks an IP address when a specified amount of requests are generated within a certain amount of time. As you can imagine the more granular your rulesets, the better operational security you can implement. AWS WAF allows you to create custom rules to protect yourself from specific attacks, as well as use pre-configured rulesets designed by the AWS security team.įor example, you can configure a ruleset that only allows specific traffic originating from a whitelisted set of IP addresses over customized port access to a part of your application. While regular firewall products protect entire networks, a WAF is built to solely monitor your web applications and services. In short, AWS WAF is a Web Application Firewall that is designed to protect your services from exploits, and give you detailed control over how traffic interacts with your applications.

Aws waf cost