AWS WAF | AWS WAF Configuration Flashcards
How can I test a Managed Rule?
AWS WAF Configuration
AWS WAF | Security, Identity & Compliance
AWS WAF allows you to configure a “count” action for a Managed Rule, which counts the number of web requests that are matched by the rules inside the Managed Rule. You can look at the number of counted web requests to estimate how many of your web requests would be blocked if you enable the Managed Rule.
Can I configure custom error pages?
AWS WAF Configuration
AWS WAF | Security, Identity & Compliance
Yes, you can configure CloudFront to present a custom error page when requests are blocked. Please see the CloudFront Developer Guide for more information
How long does it take AWS WAF to propagate my rules?
AWS WAF Configuration
AWS WAF | Security, Identity & Compliance
After an initial setup, adding or changing to rules typically takes around a minute to propagate worldwide.
How can I see if my rules are working?
AWS WAF Configuration
AWS WAF | Security, Identity & Compliance
AWS WAF includes two different ways to see how your website is being protected: one-minute metrics are available in CloudWatch and Sampled Web Requests are available in the AWS WAF API or management console. These allow you to see which requests were blocked, allowed, or counted and what rule was matched on a given request (i.e., this web request was blocked due to an IP address condition, etc.). For more information see the AWS WAF Developer Guide.
How can I test my rules?
AWS WAF Configuration
AWS WAF | Security, Identity & Compliance
AWS WAF allows you to configure a “count” action for rules, which counts the number of web requests that meet your rule conditions. You can look at the number of counted web requests to estimate how many of your web requests would be blocked or allowed if you enable the rule.
How long are Real-Time Metrics and Sampled Web Requests stored?
AWS WAF Configuration
AWS WAF | Security, Identity & Compliance
Real-Time Metrics are stored in Amazon CloudWatch. Using Amazon CloudWatch you can configure the time period in which you want to expire events. Sampled Web Requests are stored for up to 2 hours.
