Free AWS Security Whitepaper
    Toc Consulting Logo
    Glossary

    Web Application Firewall (WAF)

    Network Security

    AWS WAF is a web application firewall that monitors and filters HTTP/HTTPS requests to your web applications hosted behind CloudFront, ALB, API Gateway, AppSync, Amazon Cognito user pools, AWS App Runner, AWS Verified Access, or AWS Amplify. It protects against common web exploits at Layer 7 (application layer).

    What WAF Protects Against

    • SQL injection
    • Cross-site scripting (XSS)
    • Bot traffic and scrapers
    • Rate limiting (DDoS mitigation at L7)
    • Geo-blocking (restrict by country)
    • IP reputation lists

    Related AWS Services

    WAFCLOUDFRONTELBAPIGATEWAY

    Related Content

    WAF Security CardWAF vs Network Firewall vs SGs vs NACLsDDoS Attack Playbook

    Related Terms

    DDoS Attack

    A Distributed Denial of Service attack that overwhelms a target with traffic from multiple sources, making it unavailable to legitimate users.

    Defense in Depth

    A security strategy using multiple layers of controls (network, identity, data, application) so that if one layer fails, others still protect the environment.

    Network SegmentationDDoS Attack

    Toc Consulting: AWS Security & Cloud Architecture

    Securing your AWS estate?

    Our team helps engineering teams secure and architect AWS the right way: assessment in week one, a prioritized action plan in week two.

    Book a discovery callhello@tocconsulting.fr