Help us improve the AWS re:Post Knowledge Center by sharing your feedback in a brief survey. Your input can influence how we create and update our content to better support your AWS journey.
Should I attach WAF to ALB or to API Gateway
0
I'm looking to implement the architecture described here : https://aws.amazon.com/blogs/networking-and-content-delivery/accessing-an-aws-api-gateway-via-static-ip-addresses-provided-by-aws-global-accelerator/.
I'm wondering where the best place to attach a WAF - to the ALB or to the the API Gateway?
1 Answer
- Newest
- Most votes
- Most comments
2
Hi,
The AWS WAF should be your first line of defense to protect web applications and APIs from attacks that could affect their availability and performance, compromise security, or consume excessive resources.
Therefore, I will attach it to the ALB.
Relevant content
- asked 3 years ago
- asked 2 years ago
