Questions tagged [amazon-waf]
8 questions
1
vote
1 answer
DDOS AWS API Gateway protection
I have publicly exposed API Gateway (HTTP). To authenticate you have to provide a valid JWT.
I want to secure this APIGW with Cloudfront + WAF. After reading docs I think that API Gateway endpoint is still exposed to the Internet. The only thing…
krzysiexp
- 13
- 4
1
vote
1 answer
AWS Managed Rule Pricing
I completely read the AWS page for AWS WAF pricing, however I am still not sure how much would it cost if I create a single AWS WAF and hire just the AWS Managed Rule Set "Core Rule Set"
As I understand it should be 5 US/month for the WAF and just 1…
Matias Haeussler
- 113
- 5
0
votes
0 answers
AWS WAF create custom rules
Attackers are repeatedly using the same off-the-shelf exploit to attack my server. It doesn't work because my server is patched and I have some server side modules to prevent the exploit.
However I am wandering how I can get the AWS WAF to block…
Huw Evans
- 101
- 1
0
votes
0 answers
Does AWS WAF charge for requests that come from IP addresses that are blocked?
If an ip address exceeds its rate limit and a WAF rule blocks it for a period of time, do the future requests from that ip address still get charged to me by the WAF service?
(And if so, why it beneficial to even use a WAF service if I am charged…
Josh K
- 1
0
votes
1 answer
How to get DDOS+WAF protection on IP/server (not domain)
I've used CloudFlare and it's great.
But in this specific case we control the server IP address but we don't own the domain so can't use CloudFlare unfortunately because the domain owner isn't ready to migrate his DNS to CloudFlare.
I would really…
michaelr524
- 139
- 1
- 4
0
votes
0 answers
Handling DDoS HTTP Attack
I’ve experiencing DDoS attack today and I’ve configured Cloudflare rate limiter, also activated WAF. Cloudflare blocked several hundred thousands request. Unfortunately, my server still experiencing pretty high flood request. I don’t know why it…
Putra
- 1
- 1
0
votes
1 answer
AWS CloudWatch parse JSON case insensitive
On the WAF section of the AWS console there is a tab for "CloudWatch Log Insights" that provides a few sample queries. One of these is "Top 100 hosts".
fields @timestamp, @message
| parse @message '{"name":"Host","value":"*"}' as host
| stats…
ficuscr
- 115
- 8
0
votes
1 answer
Do AWS WAF logs capture all traffic, or just rule matches?
I want to implement some AWS WAF rules but I need more knowledge of the quantity (origin, resource, etc) of requests that come through my loadbalancer.
Can I skip ALB logs and get logs for requests to ALB using WAF? Or, does WAF only produce logs…
JoeS
- 11
- 4