Questions tagged with AWS WAF

I'm trying to integrate AWS WAF CAPTCHA into my website which also uses Content-Security-Policy header. But CAPTCHA JS-library tries to load SVG-images using data:-URLs and I get the following...

AWS WAF uses Machile Learning or Artificial Inteligence to create managed rules?

How can we best architect the proxy server with existing Global Accelerator, ALB, WAF, etc?

I'm using AWS WAF to protect my Cognito User Pool, but I've noticed that I can't enable WAF Fraud Control features...

Hi, need some advice here. We switched our broadband service provider and the subscription plan. The new plan does not provide a fixed ip address. In the past, we used the fixed ip address as the...

For the course of the past few hours, my service is being hit by hundreds of request to an endpoint that doesn't exists on my API. I'm already using WAF but looks like it is not picking up this...

I have a Cloudfront with S3 and ALB origins. My Cloudfront has WAF in front. How is it possible CD metrics register a high volume 401 error? WAF didn't receive/register that volume of requests. Only...

Hi everyone, I'm reaching out for advice on optimizing the cost associated with my Tier 2 AWS WAF configuration. My current monthly bill is around $1,000, which seems high for my needs. My...

We have a WAF set up in front of our API that is hosted in ECS/Fargate with some rule sets that can cause a block, like the AWSManagedRulesCommonRuleSet. The block in itself seems to work, as requests...

Hello, I've enabled the AWS WAF service in my project. I've also set the rule action of HostingProviderIPList Rule in AWSManagedRulesAnonymousIpList as "Challenge." After analyzing the WAF logs from...

Hi, We are using WAF Web ACL rules that are receiving all requests to our Load Balancer and filtering them (ALLOW or BLOCK). However there are some application requests which we are 100% sure that...

Hi all, I would like to hear your approaches when applying a rate-based rule via AWS WAF. What are the best ways to permanently block IP addresses that trigger the RBR? I would also like to send...