For workloads with high volumes of requests, consider evaluating AWS Shield Advanced to reduce costs per request. There are no underwriting contracts or commitments as managed rules are charged by the hour. If you choose to use WAF Managed Rules from AWS Marketplace, you can subscribe to managed rules and only pay for what you use. In the solution that includes the ElasticSearch Kibana dashboard, you will be charged based on the use of AWS Kinesis Data Firehose, ElasticSearck, Kibana, and the other services shown in the solution.

The solution is also equipped with different automatisms, through AWS Lambda, aimed at tuning and improving the WAF Rules, as shown in the architectural design:ĪWS WAF offers independent pricing that is charged based on the use of web ACLs, rules and number of requests inspected (traffic) according to the following logic:

Geolocation of “attacks” (malicious traffic blocked).

Active rules and relative percentage of blocked traffic.

“Malicious” traffic and therefore blocked.

The ElaticSearch Kibana dashboard is an aggregator of the information provided by the AWS WAF logs, and provides near real-time information about: The team is also able to recognize and promptly intervene in the event of an attack, detected thanks to the AWS CloudWatch monitoring system and the AWS ElaticSearch Kibana analysis and monitoring dashboard. The Operational Management team monitors the correct functioning of the WAF, carries out tuning on the filtering rules and on all aspects that guarantee its correct functioning. This implies centralized management by a specialist team that operates 24/7. Some organizations, in addition to the design, deployment and integration of AWS WAF, also entrust us with governance and operational management.

Aws waf rulesets