AWS Security, Identity & Compliance

AWS WAF

Web application firewall that blocks common web attacks and bad bots.

What is AWS WAF?

AWS WAF inspects web requests to CloudFront, load balancers, API Gateway and more, blocking common attacks such as SQL injection and cross-site scripting, abusive bots and request floods.

Key features

  • Managed rule groups for common threats
  • Rate-based rules
  • Bot Control and account-takeover protection
  • Geo and IP blocking
  • Detailed logging

What it is used for

  • Blocking SQL injection and XSS
  • Rate limiting
  • Bot control

When to use it

  • Public websites and APIs
  • Login pages targeted by bots
  • Compliance requirements for a WAF

When something else fits better

  • Internal-only applications with no public access

How pricing works

Charged per web ACL, per rule and per million requests inspected; advanced managed protections cost extra. Prices change and differ by region; we confirm current costs for your setup before you commit.

Equivalent on Google Cloud

The closest Google Cloud service is Cloud Armor: dDoS protection and web application firewall for apps behind Google load balancers.

How DomainHostly helps with AWS WAF

  • Plan: choose the right setup, size and region for your workload and budget.
  • Set up securely: configure AWS WAF with least-privilege access, encryption and backups where they apply.
  • Migrate: move from shared hosting, your own servers or the other cloud with minimal downtime.
  • Run and optimise: monitoring, updates and regular cost reviews so you only pay for what you use.

Security, Identity & Compliance: Identity and access, encryption keys, secrets, firewalls, threat detection and compliance.

What to consider: Security, Identity & Compliance

  • Grant the least privilege needed and prefer roles or service accounts over long-lived keys.
  • Turn on multi-factor authentication for every administrator account.
  • Enable audit logs and threat detection from day one; they are hard to reconstruct after an incident.

Related services: Security, Identity & Compliance