It does so by monitoring HTTP and HTTPS requests directed towards our CloudFront distribution, ALB or API gateway.
It does not allow seemingly malicious looking traffic through it, like the guards at the gates of our city will not let anyone who looks to be suspicious, or looks like they have intention to cause harm to the city and its citizens (in this case, the network's traffic). Just like all firewalls, we can imagine WAF like a layer of protection around our deployment, like a city surrounded by protective walls. AWS WAF or Web Application Firewall as the name suggests is a firewall which protects our applications or APIs from web exploits and bots which can be used to launch a DDoS attack on your deployment. AWS offers a wide range of services, out of which some are specifically built for security of our deployments and saves us from the hassle of setting up a security infrastructure from the developer's end.
0 kommentar(er)
