You can use AWS WAF web access control lists (ACLs) to minimize the impact of distributed denial of service (DDoS) attacks. With Firewall Manager, you set up protection once and the service automatically applies protection to an entire AWS account and all its resources, including new resources added after protection was set up, and the ability to support multiple AWS accounts. AWS Firewall Managerįirewall Manager simplifies the management and maintenance of multiple accounts and resources for a variety of protections, including AWS WAF, AWS Shield Advanced, Amazon VPC Security Groups, AWS Network Firewall, and Amazon Route 53 Resolver DNS Firewall. Combining AWS WAF with Firewall Manager lets you use the WAF between AWS accounts and automate AWS WAF configuration.Ĭombining AWS with WAF lets you protect your web applications against distributed denial of service (DDoS) attacks. What Are AWS Firewall Manager and AWS Shield?ĪWS WAF, AWS Firewall Manager, and AWS Shield together to secure web applications deployed on AWS.ĪWS WAF on its own gives you fine-grained control over protection of web resources.You can also configure CloudFront to return a custom error page when a request is blocked.ĪWS WAF is part of a set of cloud security services provided by Amazon, which also includes AWS Firewall Manager and AWS Shield, Amazon’s distributed denial of service (DDoS) mitigation solution. You can limit access based on criteria including:Ī service associated with a protected resource either provides the requested resources, if allowed by the WAF, or returns HTTP 403 (Forbidden) status code if disallowed by the WAF. AWS WAF is a web application firewall that monitors HTTP(S) requests directed to Amazon CloudFront distributions, Amazon API Gateway REST APIs, Application Load Balancers, or AWS AppSync GraphQL APIs.ĪWS WAF can also control access to web content.

Aws waf api gateway