Web Application Firewall¶

• protection against layer 7 exploits (http)

Deploy Targets¶

• ALB ELB
• APIGateway
• Cloudfront
• AppSync GraphQL API
• Cognito User Pool

Web ACL¶

• up to 10k ips per set/rule
• http heade
• http body
• uri strings
• size constraints
• geo matching
• rate based rules
• rules are region, for Cloudfront they are global