How does AWS WAF determine its rule groups?

Question

Is there any more information on how AWS WAF determines its rule groups. Specifically for example how are the CategorySearchEngine and CategorySeo rules determined. Is AWS WAF using headers (which scrapers are known to spoof) or is it using IP ranges from Google, etc?

Chethan SE · Answer

Hello leveler,

Well though I didn't see any document from AWS specifically, but I assume it might use both combinations using headers and IP range.

Regards,
CK

Rajesh S · Answer

Hope this documentation clarifies. 
Few links below, but worth looking at the WAF documentation broadly to better understand -
https://aws.amazon.com/waf/features/
https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-processing.html
https://docs.aws.amazon.com/waf/latest/developerguide/web-request-body-inspection.html
https://docs.aws.amazon.com/waf/latest/developerguide/waf-referenced-set-managing.html

How does AWS WAF determine its rule groups?

Relevant content