How to allow requests from a certain domain.

Question

So i want to block all request to my WAF except for request that come from this domain.com

Accepted Answer

To clarify, the request to reach your WAF will have the information of the domain it is called (ex., domain.com). By default, there will be nothing called "request comes from a specific domain" from my understanding.
Hence, you could restrict the request to a specific domain using WAF.
In case your question is whitelisting the caller, there will be some options:
- Restrict specific IP Addresses can send requests to your application
- Add some specific header to identify the caller that sends a request to your application.

Answer

Hi, you can use an allow list to match the domain and keep the default action as "BLOCK"
https://docs.aws.amazon.com/waf/latest/developerguide/web-acl.html

Create a new WebACL and have just one custom WAF rule that you create for the domain you want to allow.

Answer

You can’t block requests coming from a specific domain. This doesn’t exist in the world.

How to allow requests from a certain domain.

Relevant content