Questions tagged with AWS WAF
AWS WAF is a web application firewall that helps protect your web applications or APIs against common web exploits and bots that may affect availability, compromise security, or consume excessive resources.
Content language: English
Filter questions
Select tags to filter
Sort by
Sort by most recent
Browse through the questions and answers listed below or filter and sort to narrow down your results.
422 results
I have shut down my business that uses AWS and I have tried hard to delete all resources. But two main items are, it seems, impossible for me to delete.
- Elastic IP: 34.195.183.124
- cannot be dele...
I'm looking for confirmation on whether my understanding is correct that AWS WAF (when attached to an Application Load Balancer) cannot enforce a rule that blocks requests whose body size exceeds a sp...
Hello everyone,
I’m trying to clarify a concept about AWS WAF and I would appreciate some guidance from the community.
In some AWS documentation and training materials, AWS WAF is often described as...
I'm learning about CloudFront. I've set up a distribution using the free flat-rate plan. I've created an origin pointing to my EC2 instance and created a security group allowing access from the Clou...
I am trying to use the WAFV2 feature to insert custom headers to a request.
https://docs.aws.amazon.com/waf/latest/developerguide/customizing-the-incoming-request.html
I am trying to insert a header...
I have to create 100 IP sets and each IP set contains allowlisted IPs for a tenant. My limitation is that I cannot consolidate the IP sets as I do not want tenant cross-communication. I have the WAF/W...
Can someone explain in more detail/examples what these hard quota (Quota per account per Region) limits mean for AWS WAF?
1. Maximum number of reference statements per rule group. In a rule group, a r...
We're experiencing a crash originating from the AWS WAF Mobile SDK (version 2.0.4)
on Android. The crash occurs in an obfuscated class com.amazonaws.waf.mobilesdk.j,
referencing valuesI9811.
...
We are new to AWS WAF and trying to design a simple but effective rate-limiting strategy.
Our scenario is a bit tricky:
Our users access the application from both:
* Corporate networks (shar...
I’m trying to solve a problem with AWS WAF and want a sanity check.
Goal:
I don’t want to blindly allow “trusted” users, but I also don’t want false positives blocking real customers. I still wa...
Under what circumstances does CloudFront automatically create a WAF rule named CreatedByCloudFrontForDistributionecccccccccc-Geo-BlockRule regarding geographic restrictions?
We can confirm that we hav...
asked 3 months ago
Hi all,
We are currently experiencing a situation where a single external IP address is continuously sending a very high volume of requests (tens of thousands per minute) to our application behind Am...