• Protect your webApps from common webExploits (Layer 7)

• Layer 7 is HTTP (only)

• Can be deployed on API Gateway, ALB & Cloudfront.

• Define WEB ACL (Web Access Control List)

  • Rules can be included for: IP Address, HTTP Header, HTTP Body, URI String

• Protect from Common Attacks:

  • SQL Injection, XSS, Size Constraint, and geo-matching (block countries). Rate based Rules.

Count the occurence of events for DDoS as well!