If you add more than one rule to a WebACL, a request needs to match only one of the specifications to be allowed, blocked, or counted.

These services receive requests for your web sites and forwards those requests to AWS WAF for inspection against the rules configured in the WebACL. You can then associate the WebACL with an Amazon CloudFront distribution or an Application Load Balancer (ALB) - services that AWS customers commonly use to deliver content for their websites and applications.

You also need to specify a default action for a WebACL. You can add one or more rules to a WebACL, and associate each rule with an action (allow/block/count) - for example, block requests from specified IP addresses or block requests from specified referrers. A rule identifies the requests that you want to allow, block, or count.

AWS WAF is a web application firewall that helps protect your web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources.ĪWS WAF gives you control over which traffic to allow or block to your web applications by defining customizable web security rules.

Waf amazon