AWS Cloud Practitioner: AWS Web Application Firewall (WAF) & AWS Shield

In this short series, I outline the notes that I took while preparing for the AWS Cloud Practitioner exam.

These are my personal notes that I have made while working through the A Cloud Guru exam practitioner course. They are in no way official notes from AWS.

I would advise you that if you do use my notes to help you revise for this exam, that you use them as a supplement to the most recent information in the White PapersExam Guide and go over your knowledge with practice exam papers.

Previous notes within this blog series:

AWS Web Application Firewall (WAF) & AWS Shield

What is AWS WAF?

Helps protect your web application firewall from common web exploits that could affect your:

  • Application availability
  • Compromise security
  • Consume excessive resources
  • Will inspect the traffic coming into your application at layer 7
  • It is placed in front of your firewall and will determine what goes through to your load balancer

What is AWS Shield?

  • A managed Distributed Denial of Service (DDoS) mitigation (protection) service that safeguards web applications running on AWS
  • Provides always-on detection and automatic inline mitigations that minimize application downtime and latency
  • No need to engage AWS Support to benefit from DDoS protection
  • Two tiers of AWS Shield:
    • Standard (comes with all AWS accounts)
    • Advanced – £3000 per month
  • With the advanced tier, if you experience a DDoS attack, AWS will reimburse related charges Route 53, CloudFront, and ELB DDoS

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top