Bot detection in AWS WAF ACL question

0

I'm using AWS WAF ACL without Bot Control. Into my Traffic Overview dashboard I see "10% of bots" metric. My question: It doesn't mean that this traffic is blocked, as far as I see zero blocked requests in dashboard? Enter image description here

Thanks, Vitaly

已提問 5 個月前檢視次數 290 次
1 個回答
1
已接受的答案

Hello.

It will not be blocked unless you include a blocking action in the AWS WAF rules.
What you're looking at are free metrics.
This is what is used for counting even if you haven't added any Bot Control rules.
https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html

Free bot visibility metrics and dimensions
When you don't use Bot Control in your web ACL, AWS WAF applies the Bot Control managed rule group to a sampling of your web requests, at no additional cost. This can provide an idea of the bot traffic that is coming to your protected resources. For information about Bot Control, see AWS WAF Bot Control rule group.

profile picture
專家
已回答 5 個月前
profile picture
專家
已審閱 5 個月前
profile picture
專家
已審閱 5 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南