Questions tagged with AWS WAF

Hi all, To receive updates on AWS Managed WAF rules, I need to set up a SNS subscription, which sounds simpler as it is. **Situation:** * I need to subscribe to the AWS managed SNS topic...

I am using AWS WAF WEB ACL for protecting my API. I have configured rate based WAF rules for http flooding but this rate based rule will only block if hit from an IP crossed 100 times within 5...

I am being charged for AWS WAF. I want to delete the WAF service and stop the charges. In the Billing Console, I see that the charges are incurring from WAF in "Any" region. However, I do not see any...

Hello Experts, Does anyone have experience with protecting on-premises web applications using WAF and Shield Advance? The DNS has already been moved to Route 53. What would be the best practices to...

Hello! I currently have a Kubernets cluster and AWS ingress controller with ALB installed. Additionally, I created WAF and associated it to my application load balancer Now, I'm trying to configure...

The body of my request is quite simple, it has some parameters and a nested array: ```json { "id": "[0-9]{10}", "name": "[a-Z]{3-20}", "array": [ { "countryCode": "[A-Z]{2}" // more...

Hi All, I have many ALBs and I would implement an automation script to put it on and put it off a custom maintenance page on a single ALB when needed. I tried adding a custom rule in the listener...

Hi I am trying to follow the best practices, for Public API gateways ("aws_api_gateway_rest_api") I associate a AWS WAF, should I do the same for private API gateways? Thanks Laeli

Hello everyone :) I would appreciate some help in understanding how to create email alerts to inform about incoming connections from known malicious IP addresses, and a way I can test the solution...

Hi all. I was testing new WAF Captcha Integration feature and I created some API Keys with some custom domains. Now I want to delete those keys but I'm not able because there's no button in Console...

AWS Web Waf integration throws an error "TypeError: Failed to fetch", instead of returning a failed response when using AwsWafIntegration.fetch with a POST requests that requires a CAPTCHA. It works...

Hi, In our WebACL log, we keep seeing requests to our ALB from different countries but targeting the same host ip address in the request header. This ip seems to belong to AWS. Is there a way to...