Introduction

Welcome to the AWS WAF Best Practices Guide. The purpose of this project is to offer a set of operational best practices for AWS WAF.

• WAF Prerequisites
• Configuring WAF Rules
• Monitoring WAF Rules
• Using WAF with other AWS Services

Related guides

In addition to the AWS WAF User Guide, AWS has published several other guides that may help your implementation of AWS WAF.

• Migrating your AWS WAF Classic resources to AWS WAF
• Security Automations for AWS WAF
• Guidelines for Implementing AWS WAF
• Best practices for intelligent threat mitigation
• Best practices for using the CAPTCHA and Challenge actions
• Discover the benefits of AWS WAF advanced rate-based rules
• How to configure block duration for IP addresses rate limited by AWS WAF