AWS WAF with AWS Lambda Function URLs?

Question

Is it possible to set up AWS WAF with AWS Lambda function URLs?

Didn't manage to find any info on it.

Accepted Answer

AWS WAF cannot be configured directly, but using CloudFront, WAF can be integrated and secured.
Refer to this blog for more details - 
https://aws.amazon.com/blogs/compute/securing-lambda-function-urls-using-amazon-cognito-amazon-cloudfront-and-aws-waf/

Answer

AWS WAF cannot be configured on Lambda Function URLs.

You can set Lambda Function URLs to CloudFront origin and enable AWS WAF for CloudFront.

Answer

Lambda function URLs do not support WAF. If you need WAF, use API Gateway instead of function URLs.

If you use a CloudFront distribution instead, you will need to make sure that the requests are coming from CF. Users may be able to guess the URL and invoke the function directly, bypassing WAF. To prevent that you could add a special header with some secret value in CloudFront and you will need to verify that header in your Lambda functions.

Answer

You can use CloudFront + labdaAtedge to fully secure the access using url signing. I wrote a whole article explaining the process [here](https://medium.com/@dario_26152/restrict-access-to-lambda-functionurl-to-cloudfront-using-aws-iam-988583834705)

AWS WAF with AWS Lambda Function URLs?

相关内容