Next I’ll create a new web ACL and add it to an existing API Gateway resource on my account. First, I’ll go to AWS WAF and switch over to the new version. Let’s take a look at some of the changes and turn on AWS Managed Rules for AWS WAF. Each rule added to a web access control list (ACL) consumes capacity based on the type of rule being deployed, and each web ACL has a defined WCU limit. The switch to WCUs allows the creation of hundreds of rules.

We’ve removed the limit of ten rules per web access control list (ACL) with the introduction of the Web ACL Capacity Unit ( WCU). The API experience has been greatly improved, and complex rules can now be created and updated with a single API call. Creating rules is more straightforward with the introduction of the OR operator, allowing evaluations that would previously require multiple rules. Today it’s getting a number of exciting improvements. You can use AWS WAF with Amazon API Gateway, Amazon CloudFront, and Application Load Balancer. You can use AWS WAF to help block common threats like SQL injections or cross-site scripting attacks. It lets you define rules that give you control over which traffic to allow or deny to your application. We’ve also made multiple improvements to AWS Web Application Firewall with the launch of a new, improved console and API that makes it easier to keep your applications safe.ĪWS Web Application Firewall is a web application firewall. Today we’re launching a new capability called AWS Managed Rules for AWS WAF that helps you protect your applications without needing to create or manage the rules directly. We’re constantly working to reduce the pain of maintaining a strong cloud security posture. Building and deploying secure applications is critical work, and the threat landscape is always shifting.

Aws waf rulesets