Category: AWS WAF

Automatically update security groups for Amazon CloudFront IP ranges using AWS Lambda
Amazon CloudFront is a content delivery network that can help you increase the performance of your web applications and significantly lower the latenc [...]

Centrally manage AWS WAF (API v2) and AWS Managed Rules at scale with Firewall Manager
Since AWS Firewall Manager was introduced in 2018, it has evolved with many more features and today also supports the newest version of AWS WAF, as we [...]

How to enhance Amazon CloudFront origin security with AWS WAF and AWS Secrets Manager
Whether your web applications provide static or dynamic content, you can improve their performance, availability, and security by using Amazon CloudFr [...]

Automate AWS Firewall Manager onboarding using AWS Centralized WAF and VPC Security Group Management solution
Many customers—especially large enterprises—run workloads across multiple AWS accounts and in multiple AWS regions. AWS Firewall Manager service, laun [...]

Automatically updating AWS WAF Rule in real time using Amazon EventBridge
In this post, I demonstrate a method for collecting and sharing threat intelligence between Amazon Web Services (AWS) accounts by using AWS WAF, Amazo [...]

Deploying defense in depth using AWS Managed Rules for AWS WAF (part 2)
In this post, I show you how to use recent enhancements in AWS WAF to manage a multi-layer web application security enforcement policy. These enhancem [...]

Defense in depth using AWS Managed Rules for AWS WAF (part 1)
In this post, I discuss how you can use recent enhancements in AWS WAF to manage a multi-layer web application security enforcement policy. These enha [...]

Migrating your rules from AWS WAF Classic to the new AWS WAF
In November 2019, Amazon launched a new version of AWS Web Application Firewall (WAF) that offers a richer and easier to use set of features. In this [...]

Deploy a dashboard for AWS WAF with minimal effort
In this post, I’ll show you how to deploy a solution in your Amazon Web Services (AWS) account that will provide a fully automated dashboard for AWS W [...]

AWS Shield Threat Landscape report is now available
AWS Shield is a managed threat protection service that safeguards applications running on AWS against exploitation of application vulnerabilities, bad [...]