Category ""
ADVERTISING
amazon.com DownloadThis section explains what a rate-based rule statement is and how it works. A rate-based rule counts incoming requests and rate limits requests when they are coming at too fast a rate.
Learn about AWS WAF and Shield pricing, including features, costs, and strategies for optimizing web application security and managing expenses.
The rate-based rule support with ASN is available in regions where the enhanced rate-based rules are currently supported. There is no additional cost for using ASN in Match statement and rate-based rules, however standard AWS WAF charges still apply.
Rule Evaluation: Based on pre-configured rules, AWS WAF evaluates whether a request matches any unwanted patterns, such as SQL injections or cross-site scripting (XSS).
Implement strategies like rate-based rules or AWS Shield to control costs associated with processing high volumes of web requests while maintaining adequate security measures.
For example, if an IPSet includes the IP address 192.0.2.44, AWS WAF will allow or block requests based on that IP address. If set to true, AWS WAF will allow, block, or count requests based on all IP addresses except 192.0.2.44.
These charges are separate from those of Amazon CloudFront, AWS Cognito, ALB, Amazon API Gateway, and AWS AppSync. The cost depends on each web ACL, rule per ACL, web requests processed, and varies across AWS regions.
Previously, the minimum value that could be specified for the rate limit was 100, but with this update, values of 10 or greater can now be specified. The guidance on the AWS WAF page has also been updated to state, "Rate limit must be between 10 and 2,000,000,000."
There is no additional cost for using this feature, however standard AWS WAF charges still apply. For more information about pricing, visit the AWS WAF Pricing page.
There is no additional cost for using this feature, however standard AWS WAF charges still apply. For more information about pricing, visit the AWS WAF Pricing page.
Prior to configuring a rate-based rule, customers want to have an idea of the number of aggregate requests coming from a client, which they can then use as a baseline for setting a rate-limit value.
The Rule in WAF can be configured in CloudFormation with the resource name AWS::WAF::Rule. The following sections describe 10 examples of how to use the resource and its parameters.