Filtering and blocking web incursions with AWS WAF

This lab provides you with a basic overview of how to create and test AWS managed rules and custom rules in a web ACL using the AWS WAF service.

Level

Intermediate

Duration

Course Objectives

In this course, you will learn how to:

• Create a web access control list in AWS WAF
• Associate the web ACL to a CloudFront distribution
• Deploy AWS managed rule groups to your web ACL
• Deploy custom rules to your web ACL

Intended Audience

This course is intended for:

• Architects

Prerequisites

We recommend that attendees of this course have the following prerequisites:

• None

Course Outline

• Task 1: Test if your website is vulnerable to attacks
• Task 2: Creating a Web ACL in AWS WAF
• Task 3: Testing your web ACL
• Task 4: Test if your website is vulnerable to other types of attacks
• Task 5: Creating a custom rule in AWS WAF
• Task 6: Testing a custom rule in AWS WAF
• Task 7: Configure advanced custom rules in AWS WAF using JSON