By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

How does AWS WAF determine its rule groups?

0

Is there any more information on how AWS WAF determines its rule groups. Specifically for example how are the CategorySearchEngine and CategorySeo rules determined. Is AWS WAF using headers (which scrapers are known to spoof) or is it using IP ranges from Google, etc?

Topics
Security, Identity, & ComplianceNetworking & Content DeliveryAWS Well-Architected Framework
Tags
AWS WAFNetworking & Content DeliverySecurity
Language
English
leveler
asked 2 years ago406 views
2 Answers
0

Hope this documentation clarifies. Few links below, but worth looking at the WAF documentation broadly to better understand - https://aws.amazon.com/waf/features/ https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-processing.html https://docs.aws.amazon.com/waf/latest/developerguide/web-request-body-inspection.html https://docs.aws.amazon.com/waf/latest/developerguide/waf-referenced-set-managing.html

profile pictureAWS
Rajesh S
answered 2 years ago
0

Hello leveler,

Well though I didn't see any document from AWS specifically, but I assume it might use both combinations using headers and IP range.

Regards, CK

profile pictureAWS
Chethan SE
answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content