- Newest
- Most votes
- Most comments
Hello! I had the same issue and I just found the way to solve it
Try:
Go to you app settings > hosting > firewall
Then go to the "Add firewall" button at the bottom right
And once there you can click on the actions button drop down menu and now u can edit the Amplify-recommended Firewall to turn it off and click on save or you can directly remove the WAF there :)
answered 9 months ago
I apologize for the inconvenience you're experiencing with turning off the Amplify-recommended firewall protection. Based on the information provided, it seems you're encountering a persistent issue where the protection keeps turning back on despite your attempts to disable it.
While the Amplify console typically allows you to configure firewall rules, including the ability to activate or deactivate different categories of protection such as the Amplify-recommended firewall protection, it's unusual for the setting to revert automatically.
Given that you're unable to turn off the protection through the console interface, here are a few suggestions you could try:
-
Clear your browser cache and cookies, then try disabling the protection again.
-
Attempt to disable the protection using a different web browser or device.
-
Check if there are any ongoing AWS service issues that might be affecting the Amplify console functionality.
-
Contact AWS Support for direct assistance. They can investigate why the setting isn't persisting and help you resolve the issue.
-
If you're using infrastructure as code (IaC) to manage your Amplify app, ensure there isn't a configuration file that's automatically re-enabling the protection.
Regarding your concern about extra costs, it's worth noting that while AWS WAF integration with Amplify does involve additional charges, the Amplify-recommended protection is part of the basic security features. However, if you're certain you want to disable it and are unable to do so, reaching out to AWS Support would be the most direct way to address both the technical issue and any billing concerns.
Remember, keeping some level of protection is generally recommended for security purposes, but you should be able to control these settings as needed for your specific use case and budget constraints.
Sources
Firewall support for AWS Amplify hosted sites | AWS News Blog
AWS AMPLIFY WAF | AWS re:Post
answered a year ago
I tried what you told me without any success.
- Tried to turn it off without cache & cookies and with a different browser. Didn't work.
- I don't have any IaC with Amplify.
- I tried to contact support but since I don't have a support plan, I can't. They redirected me to post it here.
Relevant content
asked 2 years ago
asked 4 years ago

Struggled with the same. Not sure if this UI is really telling you your current settings or letting you pick some settings for a new firewall you would create after clicking on "Add firewall"? Could be clearer...