Web Application Firewall (WAF) and Shield Docs

What is WAF:

Helps protect your web application from common web exploits that could affect application availability, compromise security, or consume excessive resource.

简单来说就是一道防火墙, 保护你免受常见的 web 攻击, 比如 XSS, SQL Inject 等等.

What are they used for:

  • Monitor the HTTP ans HTTPS requests that are forwarded to an Amazon API Gateway API, Amazon CloudFront or Application Load Balancer

  • AWS WAF gives you control over which traffic to allow or block your web application by defining customizable web security rules.

What is Shield:

Protect you from DDOS attack.

Type of AWS Shield:

  • AWS Shield Standard

  • AWS Shield Advanced