Introduction to AWS Web Application Firewall


2m 50s


Please note: This course has been replaced with a more recent version found here.


Security is one of the hottest topics within the cloud industry right now, mostly due to uncertainty and a lack of understanding when it comes to knowing how to secure the cloud really is. With this in mind, public cloud vendors focus massive effort and resources into security, resulting in additional levels of security at all layers within their cloud architecture.

This made way for the development of the AWS Web Application Firewall (WAF) service which was launched at Re:Invent in October 2015.

This course looks at all the elements of AWS Web Application Firewall from a beginners introduction to the service from what it is and when to use it within your environment, to how it can be used in conjunction with other services like AWS CloudWatch and AWS Lambda to help with automation of your security.

If you have thoughts or suggestions for this course, please contact Cloud Academy at


Hello and welcome to this course where we shall be discussing the AWS service Web Application Firewall or AWS WAF as it's more commonly known and referred to as. We'll start this course off looking at the basics of the service and moving on progressively into more technical and advanced configuration.

Before we start this course, I would like to introduce myself. My name is Stuart Scott. I'm one of the trainers here at Cloud Academy, specializing in AWS Amazon Web Services. Feel free to connect with me with any questions using the details on the screen. Alternatively, you can always get in touch with us here at Cloud Academy using the community forum where one of our cloud experts will reply to your question or query.

This course is intended for security architects, technical engineers and website administrators who have the responsibility for ensuring web applications and websites are not compromised or exploited within their environment. This course is also useful for anyone who requires a deeper understanding of the WAF service itself.

Throughout this course, we shall cover a number of different topics, giving you a sound understanding of the complete WAF service. These beingWhat is WAF and what does it do? When and why should you use WAF? I'll then give a demonstration on how to configure WAF. We'll then look at monitoring, the service limitations, how WAF works with AWS CloudFront, automation and then finally the pricing.

This course will provide you with the following: An understanding of what AWS WAF is and what it does, knowledge of how to configure and implement a WAF solution, you'll understand how AWS WAF works closely with AWS CloudFront, and you'll gain an awareness of WAF automation.

There are a number of pre-requisites for this course, all of which require a basic understanding of the following topics,AWS CloudWatch which is applicable to lecture 5 only, AWS SNS again applicable to lecture 5, AWS CloudFront, this is applicable to lecture 7, and finally AWS Lambda which is applicable to lecture 8.

Feedback on our courses here at Cloud Academy are valuable to both us as trainers and any students looking to take the same course in the future. If you have any feedback, positive or negative, it would be greatly appreciated if you could use the comment section found on the landing page of this course.

That brings us to the end of this lecture. Coming up next, I will explain exactly what WAF is and what it can do.

About the Author
Learning Paths

Stuart has been working within the IT industry for two decades covering a huge range of topic areas and technologies, from data center and network infrastructure design, to cloud architecture and implementation.

To date, Stuart has created 150+ courses relating to Cloud reaching over 180,000 students, mostly within the AWS category and with a heavy focus on security and compliance.

Stuart is a member of the AWS Community Builders Program for his contributions towards AWS.

He is AWS certified and accredited in addition to being a published author covering topics across the AWS landscape.

In January 2016 Stuart was awarded ‘Expert of the Year Award 2015’ from Experts Exchange for his knowledge share within cloud services to the community.

Stuart enjoys writing about cloud technologies and you will find many of his articles within our blog pages.