You want to take the advantages of AWS WebApplication Firewall instead of CloudFlare WAF. - Source: dev.to / 22 days ago

If you aren't using API Gateway (REST API to be specific) your options are a bit more limited. You can get some benefit from WAF, though it's not really designed to be tenant-based. Still, it can help. Beyond that, you're mostly on your own. Keep in mind that anything you implement in your code is already sharing some amount of resources. Let's just hope AWS decides to add it to other places, like AppSync, in the... - Source: dev.to / about 1 month ago

WAF is a Web Application Firewall, which allows the inspection of HTTP requests. - Source: dev.to / 3 months ago

Add a firewall and other mechanisms for protecting your endpoints against malicious traffic and bots before it hits your workload and consumes those precious worker threads (e.g.: WAF). - Source: dev.to / 3 months ago

AWS WAF: The AWS Web Application Firewall (WAF) helps protect your web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources. - Source: dev.to / 6 months ago

I was told in another forum to look at Private Packagist... But how is that different? Instead of installing packages from packagist.org.. You pay to Packagist.com to do the same thing? You just download from packagist.com cloud instead of packagist.org? Source: almost 2 years ago

We have a private Satis instance. Our ITSec team reviews all packages before we add them to Satis. Packagist.com is available for us but the CI-CD servers can reach only the private Satis. Source: almost 2 years ago

Https://packagist.com maybe tell them about a local packagist install. Source: almost 2 years ago

"[MANAGER] requested this to be done in PHP. You as IT will know that most modern programming and scripting languages work only with packaging software properly. Composer sends requests (majority of cases) to packagist.com and to github.com. It will add thousands of hours to do everything that composer does manually. Please sign here to authorize the usage of 4000 hours and the possible delay of 4000 hours.... Source: almost 2 years ago

Another downside that only really exists with non-PHP boilerplates is getting updates isn'T as easy. With PHP we're able to use packagist.com and make our code available via composer. Other languages don't have this so SaaS Pegasus provides zip downloads and Gravity provides access to a GitHub repo. This means you have to apply bug fixes yourself. With Parthenon, you do composer update and you'll get the latest... Source: about 2 years ago