From the course: AWS Administration: Security Operations

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

AWS Web Application Firewall (WAF)

AWS Web Application Firewall (WAF) - Amazon Web Services (AWS) Tutorial

From the course: AWS Administration: Security Operations

Start my 1-month free trial

AWS Web Application Firewall (WAF)

“

- [Instructor] If you have public-facing applications hosted in AWS, you may want to use the Web Application Firewall. The WAF allows you to control the access for HTTP and HTTP requests to your public-facing resources at AWS. So we're in a sense adding in our own custom traffic filtering. And we can define that traffic is allowed, except for specific requests. Or the traffic is denied, except for specific requests. You're defining what's allowed and what is blocked. Potentially, you might want to count the incoming requests, and then make a decision. Is this a DDoS attack? Is it not a DDoS attack? After you've monitored your applications for a period of time, you'll know what a valid number of requests looks like. And way too many requests over a period of time, probably, DDoS attack. For traffic filtering, we could allow all requests, except specific ones that we specify are not getting in. And this way we would block…

Contents