Detecting Malicious Web Requests With AWS Web Application Firewall

Lab Steps

lock
Logging in to the Amazon Web Services Console
lock
Creating a Web ACL
lock
Connecting to the Virtual Machine using EC2 Instance Connect
lock
Testing the Web ACL

The hands-on lab is part of this learning path

Ready for the real environment experience?

DifficultyBeginner
Time Limit1h
Students323
Ratings
4.4/5
starstarstarstarstar-half

Description

AWS Web Application Firewall (WAF) is a service that helps you protect your cloud resources from malicious web requests. AWS WAF allows you to apply security rules to block bot traffic and common web request attacks.

Learning how to use AWS WAF to protect against common exploits will help you achieve higher availability, avoid security breaches, and manage costs by preventing excessive resource consumption.

In this hands-on lab, you will use AWS WAF to create some rules to block and count certain kinds of requests. And you will test that the rules are working.

Learning Objectives

Upon completion of this beginner level lab, you will be able to:

  • Create a Web Access Control List (ACL)
  • Associate a Web ACL with an Application Load Balancer
  • Create Managed and custom Web ACL rules
  • Test that the rules you created are working

Intended Audience

  • Candidates for the AWS Certified Advanced Networking Specialty certification
  • Cloud Architects
  • DevOps Engineers

Prerequisites

Familiarity with the following will be beneficial but is not required:

  • ELB Application Load Balancers
  • The Bash shell

The following lab and course can be used to fulfill the prerequisites:

Updates

October 22nd, 2021 - Added information about request size constraints

Environment before
PREVIEW
arrow_forward
Environment after
PREVIEW
About the Author
Students54940
Labs139
Courses2
Learning paths3

Andrew is a Labs Developer with previous experience in the Internet Service Provider, Audio Streaming, and CryptoCurrency industries. He has also been a DevOps Engineer and enjoys working with CI/CD and Kubernetes.

He holds multiple AWS certifications including Solutions Architect Associate and Professional.