But in a later Phase it is recommended to analyze whether your use case fits AWS WAF capabilities or if you require a third-party solution.įor more information on 3rd party solutions.This rule only inspects the first 8 KB of the request cookies or the first 200 cookies, whichever limit is reached first. There are multiple solutions available from our partners to protect your cloud applications, such as ImpervaĪWS WAF is a QuickWin because it can be implemented in minutes, its pay-per-use model makes it a low cost service for most use cases, and it has low operating burden.

In later phases, depending on the particular requirements of the applications to protect, you will be able to evaluate additional options to secure your applications with multiple technologies from our partners, however, the Quick win to gain application protection quickly, is the use of AWS WAF. When they are used by AWS WAF, the ease of deployment and management is mantained (it being a service that scales elastically). You can choose which managed rule packages to activate, depending on the load you want to protect, and select whether you only want to count, or block requests.Īdditionally, you can use rules from our business partners such as F5, Fortinet, Cyber Security Cloud, among others to supplement AWS WAF rules by purchasing monthly subscriptions from AWS Marketplace. In few minutes by enabling AWS-managed rules you can gain protection against the most frequent and critical attacks (OWASP Top 10), as well as block disreputable IPs (such as Botnet IPs and attacker IPs). Is integrated with Application Load Balancers, API Gateways, and AWS CloudFront distributions, making it easy to deploy.

Aws waf rulesets