AWS Serverless Security: Preventing HTTP Flood DDoS Attack

1

AWS WAF

AWS WAF is a web application firewall that helps protect your web applications / APIs against common web exploits and bots. Attacks may affect availability, compromise security, or consume excessive resources. AWS WAF gives you control over how traffic reaches your applications by enabling you to create security rules that control bot traffic and block common attack patterns.

#Web Application Security #Security Monitoring #Identity And Access Management 36 social mentions

2

AWS Shield

In the diagram below, we can see where the AWS WAF sits in our serverless architecture. Basically, it’s our shield in front of all requests coming into our system. But, don’t confuse this service with AWS Shield (lol, AWS has everything).

#Web Application Security #Security Monitoring #CDN 13 social mentions

3

AWS CloudFormation

AWS WAF Security Automations use AWS CloudFormation to quickly configure AWS WAF rules that help block these common types of attacks:.

#Continuous Integration #DevOps Tools #Continuous Deployment 123 social mentions