Protect your web app with carefully tuned AWS WAF.
Configures and tunes AWS WAF protections so a web application or API can filter exploits, abusive traffic, bots, and account fraud.
When to use it
Use when protecting a web application or API against common exploits, bots, credential stuffing, fake-account creation, or application-layer HTTP floods.
Give it a web-traffic protection task; it follows the matching procedure to configure AWS WAF in your account.
Requires authenticated AWS account access through an IAM role, with permissions limited to the WAF actions needed for the task.
This skill
AWS WAF
Configures your AWS WAF protections
published rule group list
Consults published WAF rule groups
AWS CloudTrail
Enables WAF configuration auditing