They embraced digital transformation by incorporating the use of web applications to complete daily tasks and store vast amounts of data online. With Amazon WAF, you pay only for what you use and the pricing is based on how many rules you deploy and how many web requests your application receives.Many people are taking their business online to remain competitive and the way their business uses the Internet has dramatically changed in the past decade. You can deploy Amazon WAF on the Application Load Balancer that fronts your web servers or origin servers running on EC2, Amazon API Gateway for your REST APIs, or Amazon AppSync for your GraphQL APIs. Amazon WAF includes a full-featured API that you can use to automate the creation, deployment, and maintenance of security rules.

These rules are regularly updated as new issues emerge. The Managed Rules for Amazon WAF address issues like the OWASP Top 10 security risks and automated bots that consume excess resources, skew metrics, or can cause downtime.

You can get started quickly using Managed Rules for Amazon WAF, a pre-configured set of rules managed by Amazon Web Services. You can also customize rules that filter out specific traffic patterns. Amazon WAF gives you control over how traffic reaches your applications by enabling you to create security rules that control bot traffic and block common attack patterns, such as SQL injection or cross-site scripting. Amazon WAF is a web application firewall that helps protect your web applications or APIs against common web exploits and bots that may affect availability, compromise security, or consume excessive resources.

What is web application firewall