AWS WAF

Question 1

What is WAF

Answer 1

web application firewall lets you monitor the http and https requests forwarded to Amzon cloudFront, ALB or API Gateway

WAF also , lets you control access to your content.

layer 7 - sees the query strings as well..

You can configure like what ip addresses are allowed and what query string parameters need to bbe passed for the request to be allowed.

Then the ALB or cloudfront or API gateway will either allow this request to be received or return a 403 error code.

Question 2

Three types of WAF behaviours

Answer 2

1 - Allow all the requests except the ones you specify
2- Block all the request except the ones you specify
3- Count the requests that match the properties you specify.

Question 3

WAF protection

Answer 3

Extra protection against the web attacks using the condition you specify. You can specify the conditions by using the characteristics of web requests such as :

Ip addresses that requests originate from.
Country that requests originate from.
Values in request headers
strrings that appear in requests, either specific string or the one the match with regex,
Length of requests
Presence of SQL code that is likely to be malicious(known as SQL injection)
Presence of SQL script that is likely to be malicious (known as ccross-site-scripting)