AWS re:Post Knowledge Center Spotlight: AWS WAF

The AWS re:Post Knowledge Center is your one-stop-shop for authoritative, up-to-date guidance on using AWS services. This month, we're highlighting AWS WAF, a service that helps you protect your web applications from common exploits.

AWS WAF helps you protect against common web exploits and bots that can affect availability, compromise security, or consume excessive resources. Whether you're new to AWS WAF or an experienced user, the following Knowledge Center articles equip you with the skills and troubleshooting tips to get the most out of this powerful service.

Configuring rules to respond to incoming traffic

AWS WAF rules define how the service inspects and takes action on incoming web requests. Learn how to configure custom rules in AWS WAF to allow or restrict traffic:

How do I configure a custom rule to allow a specific host name in AWS WAF?

How do I configure a CAPTCHA rule for a specific URL in AWS WAF?

How do I use AWS WAF to apply rate-based rules on an API Gateway REST API?

How do I use an aggregation key to configure a rate limit rule in AWS WAF?

How do I use AWS WAF to create IP set rules to restrict IPv4 and IPv6 access?

How do I create a rate-based rule with a rate limit of fewer than 100 requests in AWS WAF?

Analyzing your traffic patterns

AWS WAF logging provides detailed information about traffic that is analyzed by your web access control list (web ACL). Learn how to configure logging destinations, and analyze how your web ACL rules interact with incoming traffic:

Why aren't my AWS WAF logs publishing to the destination that I configured?

How do I send AWS WAF logs to an Amazon S3 bucket in a centralized logging account?

How do I analyze AWS WAF logs in CloudWatch?

How do I analyze AWS WAF logs in Athena?

How do I sanitize AWS WAF logging?

How do I analyze my CloudWatch metrics and logs for AWS WAF rules in Count mode?

How can I detect false positives caused by AWS Managed Rules?

Restricting or allowing traffic based on different parameters

You can configure AWS WAF to block unwanted requests and allow legitimate traffic. Find out how you can use URI paths, IP addresses, headers, and other parameters to configure what requests AWS WAF allows:

How do I use AWS WAF to allow or block access to specific URI paths?

How do I use AWS WAF to block HTTP requests that don't contain a user agent header?

How do I unblock my IP address that an Amazon IP reputation list rule group or Anonymous list rule group blocked in AWS WAF?

How do I restrict direct traffic to an Application Load Balancer and allow traffic through only CloudFront?

How do I allow requests from a bot that's blocked by an AWS WAF Bot Control rule group?

How do I use AWS WAF to restrict direct traffic to an Application Load Balancer and allow traffic through API Gateway?

Customizing your AWS WAF configuration

Create the AWS WAF setup that’s best for your use case. Customize your associated resources, responses, rule priority, and more:

How do I turn on AWS WAF on a CloudFront distribution?

How do I configure a custom response in AWS WAF for web requests blocked by a specific rule?

How do I change the priority of the rules in my AWS WAF web ACL?

How do I optimize a regex pattern set?

Protecting against common attacks

With AWS WAF, you can create security rules that control bot traffic, block common attack patterns such as SQL injection or cross-site scripting (XSS), and mitigate against distributed denial-of-service (DDoS) attacks. Find out best practices to help protect your resources:

How do I configure AWS WAF to protect my resources from common attacks?

How do I use AWS WAF to mitigate DDoS attacks?

How do I identify traffic patterns invoked by SQLi and XSS rules in AWS WAF?

Troubleshooting errors

Blocked requests and unexpected errors can occur in AWS WAF for a variety of reasons. The following articles help you troubleshoot blocked requests and uploads, and the inability to add new rules:

Why does AWS WAF block my request or respond with a 403 Forbidden error?

Why do I get a limit exceeded error when I add rules to AWS WAF?

Why does AWS WAF block my legitimate upload request?

Have more questions about AWS WAF? Check out the re:Post AWS WAF knowledge base or ask your own question to get guidance from the AWS community.