Security, Identity, and Compliance
AWS WAF
Layer 7 request filtering for supported web and API endpoints.
Key points
- WAF filters HTTP(S) requests to supported endpoints with web ACL rules, including rate-based rules.
- Rules should target application-layer traffic without being mistaken for identity or data authorization.
Best-known use cases
- Filter malicious requests before they reach supported data APIs.
- Apply rate-based rules to public ingestion and reporting endpoints.
What candidates often confuse it with
- WAF handles Layer 7 request filtering; Shield provides DDoS protection and API Gateway manages API contracts and throttling.
Key takeaway
Choose WAF when a public data API or reporting endpoint needs application-layer request controls.
Relevant exam tasks
- D1.2 — Task 1.2: Transform and process data
- 1.2.8 — Create data APIs to make data available to other systems by using AWS services.