Query string – The part of a URL that appears after a ? character, if any. CloudFront supports the following methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, and PUT. HTTP method – The HTTP method, which indicates the type of operation that the request is asking the origin to perform. Header – A specified request header, for example, the User-Agent or Referer header. These conditions include IP addresses, HTTP headers, HTTP body, URI strings, SQL injection and cross-site scripting.Ĭan allow or block web requests based on strings that appear in the requests using string match conditions.įor example, AWS WAF can match values in the following request parts: We’ll now go into more detail on each service.ĪWS WAF is a web application firewall that helps protect your web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources.ĪWS WAF helps protect web applications from attacks by allowing you to configure rules that allow, block, or monitor (count) web requests based on conditions that you define.

Get 24/7 support from our DDoS response team and detailed visibility into DDoS events.

AWS WAF and AWS Shield help protect your AWS resources from web exploits and DDoS attacks.ĪWS WAF is a web application firewall service that helps protect your web apps from common exploits that could affect app availability, compromise security, or consume excessive resources.ĪWS Shield provides expanded DDoS attack protection for your AWS resources.

Aws waf cloudfront