SQL Injection (D) and XSS (E): The solution configures two native AWS WAF rules that are designed to protect against common SQL injection or cross-site scripting (XSS) patterns in the URI, query string, or body of a request. You can also configure IP retention and remove expired IP addresses from these IP lists. Manual IP lists (B and C): This component creates two specific AWS WAF rules that allow you to manually insert IP addresses that you want to block or allow. Security Automations for AWS WAF architectureĪWS Managed Rules (A): This set of AWS managed core rules provides protection against exploitation of a wide range of common application vulnerabilities or other unwanted traffic. This solution can be easily installed in your AWS accounts via launching the provided AWS CloudFormation template.įor a detailed solution implementation guide, refer to Solution Landing Page Security Automations for AWS WAF You can use AWS WAF to create custom, application-specific rules that block attack patterns to ensure application availability, secure resources, and prevent excessive resource consumption. Once deployed, AWS WAF protects your Amazon CloudFront distributions or Application Load Balancers by inspecting web requests. Users can select from preconfigured protective features that define the rules included in an AWS WAF web access control list (web ACL). The Security Automations for AWS WAF solution is a reference implementation that automatically deploys a set of AWS WAF (web application firewall) rules that filter common web-based attacks.

Note: If you want to use the solution without building from source, navigate to Solution Landing Page Table of contents

In order to view the service metrics, you must add the service to monitoring in your Dynatrace environment.🚀 Solution Landing Page | 🚧 Feature request | 🐛 Bug Report

To enable monitoring for this service, you first need to integrate Dynatrace with Amazon Web Services:

'cloudwatch:GetMetricData', 'cloudwatch:GetMetricStatistics', 'cloudwatch:ListMetrics', 'sts:GetCallerIdentity', 'tag:GetResources', 'tag:GetTagKeys', and 'ec2:DescribeAvailabilityZones' for All monitored Amazon services.

'apigateway:GET' for Amazon API Gateway.

In this example, from the complete list of permissions you need to select

What is aws waf