Lecture 9 Questions and Answers Graded A+

Lecture 9

What is AWS WAF - answer- AWS Saas offering
~ Software as a service
~ "Solution as a service"
- Web application firewall service offered by Amazon

What does a Web Application Firewall do? - answer- Looks for security risks in a web
application
~ OWASP Top Ten
~ Application specific web security vulnerabilities
- Usually architected to be placed in a DMZ
~ Place in front web application and proxies web traffic
- If deployed on premise:
~ Customer site server room
~ Datacenter
- If deployed
~ Uses cloud SaaS offering
~ Customers deploys in the cloud using marketplace appliance
~ Customer installs their own on cloud instances

What does AWS WAF focus on? - answer- AWS helps protect web applications from
attacks

- For web requests, it allows you to configure rules for the follow behaviors:
~ Allow
~ Block
~ Monitor (count-keep traffic of number requests)

- Based on conditions you define:
~ IP addresses
~ HTTP headers
~ HTTP body
~ URI Strings
~ SQL Injection
~ Cross-Site Scripting

- HTTP and HTTPS requests sent to various AWS services
~ Amazon CloudFront
~ Application Load Balancer
~ Amazon API Gateways
~ AWS AppSync