Should I attach WAF to ALB or to API Gateway
0
I'm looking to implement the architecture described here : https://aws.amazon.com/blogs/networking-and-content-delivery/accessing-an-aws-api-gateway-via-static-ip-addresses-provided-by-aws-global-accelerator/.
I'm wondering where the best place to attach a WAF - to the ALB or to the the API Gateway?
1 Answer
- Newest
- Most votes
- Most comments
2
Hi,
The AWS WAF should be your first line of defense to protect web applications and APIs from attacks that could affect their availability and performance, compromise security, or consume excessive resources.
Therefore, I will attach it to the ALB.
Relevant content
asked 3 years ago
asked 2 years ago
