AWS WAF | Managed Rules for AWS WAF Flashcards
How accurate is your GeoIP database?
Managed Rules for AWS WAF
AWS WAF | Security, Identity & Compliance
The accuracy of the IP Address to country lookup database varies by region. Based on recent tests, our overall accuracy for the IP address to country mapping is 99.8%.
What are AWS WAF Managed Rules?
Managed Rules for AWS WAF
AWS WAF | Security, Identity & Compliance
AWS WAF Managed Rules are an easy way to deploy pre-configured rules to protect your applications common threats like application vulnerabilities like OWASP, bots, or Common Vulnerabilities and Exposures (CVE). All Managed Rules are automatically updated by AWS Marketplace security Sellers.
How can I subscribe to Managed Rules?
Managed Rules for AWS WAF
AWS WAF | Security, Identity & Compliance
You can subscribe to a Managed Rule provided by a Marketplace security Seller from the AWS WAF console or from the AWS Marketplace. All subscribed Managed Rules will be available for you to add to an AWS WAF web ACL.
Can I use Managed Rules along with my existing AWS WAF rules?
Managed Rules for AWS WAF
AWS WAF | Security, Identity & Compliance
Yes, you can use Managed Rules along with your custom AWS WAF rules. You can add Managed Rules to your existing AWS WAF web ACL to which you might have already added your own rules.
Does a Managed Rule have multiple AWS WAF rules?
Managed Rules for AWS WAF
AWS WAF | Security, Identity & Compliance
Yes, each Managed Rule could have multiple AWS WAF rules. The number of rules depends on each security seller and their Marketplace product.
Will Managed Rules add to my existing AWS WAF limit on number of rules?
Managed Rules for AWS WAF
AWS WAF | Security, Identity & Compliance
The number of rules inside a Managed Rule does not impact your AWS WAF limits. But each Managed Rule added to your web ACL will count as 1 rule.
How can I disable a Managed Rule?
Managed Rules for AWS WAF
AWS WAF | Security, Identity & Compliance
You can add a Managed Rule to a web ACL or remove it from the web ACL anytime. The Managed Rules are disabled once you disassociate a Managed Rule from any web ACLs.