CloudFront with ELB and S3 origins + WAF

🌳 A sustainable Terraform Package which creates resources for Firewall Services on AWS

AWS App Runner with WAF Web ACLs

An Auction API built with serverless framework and cdk

Configures an AWS Web Application Firewall.

Enhance Amazon CloudFront Origin Security with AWS WAF and AWS Secrets Manager

This project creates two regional WAF IP sets and automatically updates them with AWS service's IP ranges from the ip-ranges.json file. The ranges are configurable as well as the regions for EC2 ranges. Use cases include allowing CloudFront requests, Route53 health checker and EC2 IP range (which includes AWS Lambda and CloudWatch Synthetics).

Mitigations (AWS WAF, Lambda@Edge/CloudFront Functions) to implement on AWS to attempt to prevent log4j exploitation.

Code examples for the AWS Security Blog post: How to use CI/CD to deploy and configure AWS security services with Terraform

Complete provisioning and automation management for AWS WAF V1 Rules - Regional Mode

A workshop about AWS WAF Classic and the WAF Security Automations Solution

fail2ban for load-balanced services backed using AWS WAF

Terraform module to manage AWS WAF global (CloudFront) rules

Workshop for demonstrating AWS WAF usage

Deep Security's APIs make it simple to integration with a variety of AWS Services

Log all AWS WAF Matched Rules to S3 and/or Loggly using Serverless