Questions tagged with AWS WAF
Content language: English
Select up to 5 tags to filter
Sort by most recent
Browse through the questions and answers listed below or filter and sort to narrow down your results.
Hi all,
I would like to hear your approaches when applying a rate-based rule via AWS WAF.
What are the best ways to permanently block IP addresses that trigger the RBR? I would also like to send...
1
answers
0
votes
290
views
asked 4 days agolg...
I have set up a WAF to protect my API with targeted bot control. I use the fetch wrapper `AwsWafIntegration.fetch()` to call the api, however when I call the API from localhost the WAF responds with a...
0
answers
0
votes
263
views
asked 5 days agolg...
Hi
- We had associated the ACFP managed rule group to an existing Web ACL.
Got the integration URL as shown in screenshot below.
Issue:
- As shown in the screenshot below, there is only option to...
0
answers
0
votes
109
views
asked 5 days agolg...
I want to create custom rule that will restrict body size limit greater then 10 MB. how can i do that.
2
answers
0
votes
108
views
asked 6 days agolg...
Hi all,
I've tried looking for documentation but am not seeing anything specific. I would like to send a notification to various destinations (Teams channel and e-mail) whenever an AWS WAF Rate-Based...
1
answers
0
votes
319
views
asked 12 days agolg...
Hi all,
I'm working on an automation process that creates a **WAFv2 WebACL** whenever a **CloudFront distribution** is created, using **EventBridge** and **Step Functions**.
The automation should...
2
answers
1
votes
400
views
asked 16 days agolg...
Does Private Apple Relay IP counted under the AWS anonymous IP list managed rule group for the WAF ?lg...
How does the AWS anonymous IP list managed rule group for the WAF treat Private Apple Relay? Tying to understand if a Private Apple Relay IP would be counted under the managed rule...
0
answers
0
votes
276
views
asked 21 days agolg...
Hello,
I am trying to setup WAF IP blocking but just cannot seem to get it working at all. I have added my own IP and I can still access all our services just fine, from DBs to ECS to EC2 servers,...
Accepted AnswerAWS WAF
1
answers
0
votes
414
views
asked 23 days agolg...
How to use AWS WAF to prevent "awselb/2.0" server information exposure in HTTP response header?lg...
![vulnerability snapshot](/media/postImages/original/IM2QRdsK_0Tx-P4R-ruiM5jg)
We identified this vulnerability in our VAPT reports. unfortunately, AWS doesn't provide any option to remove the header....
3
answers
0
votes
712
views
asked 25 days agolg...
In AWS WAF, I'm trying to do a really simple regex to match a URI path but have it be case insensitive.
I am not a regex expert so it's possible this is wrong, but it tests ok at Regex101. And it's...
Accepted AnswerAWS WAF
1
answers
0
votes
468
views
asked a month agolg...
I'm currently using another company's VPS and Cloudflare as a CDN, but I've encountered security issues with my server. That's why I want to migrate my server to AWS EC2 and CloudFront. In my past...
1
answers
0
votes
672
views
asked a month agolg...
I followed the steps described in this documentation:
https://docs.aws.amazon.com/waf/latest/developerguide/waf-js-captcha-api.html
When a user tries to complete a Captcha verification on the JS...
1
answers
0
votes
516
views
asked a month agolg...