Questions tagged with AWS WAF

AWS WAF can get disassociated without any warning. Could we please get at least an email? Something like: [Attention Required] WAF disassociated you are now exposed to all the internet. We are using...

Hello, I have a Lambda function which is exposed using a function URL That works great. I can access the https://long-id.lambda-url.eu-west-2.on.aws/ I wanted to use a custom domain for it and since...

I'm currently developing an application hosted on AWS App Runner, where the front-end is a bot interfacing through WhatsApp. I'm considering implementing AWS WAF (Web Application Firewall) to...

Why I am being charged for amazon aws WAF service even though I haven't even created the any WAF acl or aws WAF acl rule in any region below screenshot is a proof for it. ![Enter image description...

Hi all, To receive updates on AWS Managed WAF rules, I need to set up a SNS subscription, which sounds simpler as it is. **Situation:** * I need to subscribe to the AWS managed SNS topic...

I am using AWS WAF WEB ACL for protecting my API. I have configured rate based WAF rules for http flooding but this rate based rule will only block if hit from an IP crossed 100 times within 5...

I am being charged for AWS WAF. I want to delete the WAF service and stop the charges. In the Billing Console, I see that the charges are incurring from WAF in "Any" region. However, I do not see any...

Hello Experts, Does anyone have experience with protecting on-premises web applications using WAF and Shield Advance? The DNS has already been moved to Route 53. What would be the best practices to...

Hello! I currently have a Kubernets cluster and AWS ingress controller with ALB installed. Additionally, I created WAF and associated it to my application load balancer Now, I'm trying to configure...

The body of my request is quite simple, it has some parameters and a nested array: ```json { "id": "[0-9]{10}", "name": "[a-Z]{3-20}", "array": [ { "countryCode": "[A-Z]{2}" // more...

Hi All, I have many ALBs and I would implement an automation script to put it on and put it off a custom maintenance page on a single ALB when needed. I tried adding a custom rule in the listener...

Hi I am trying to follow the best practices, for Public API gateways ("aws_api_gateway_rest_api") I associate a AWS WAF, should I do the same for private API gateways? Thanks Laeli