A web application runs behind an Application Load Balancer.
HTTP requests containing SQL-injection patterns should be inspected and blocked.
Which AWS service is primarily appropriate?
AWS WAF uses a web ACL and rules to inspect HTTP or HTTPS requests and control common web attacks such as SQL injection.
Detailed explanation
Trusted Advisor reports recommendations and does not directly filter incoming web requests.
Trusted Advisor reports recommendations and does not directly filter incoming web requests.
AWS WAF evaluates request conditions and can allow, block, or count requests that match SQL-injection rules.
AWS WAF evaluates request conditions and can allow, block, or count requests that match SQL-injection rules.
Firewall Manager distributes protection policies; it does not parse application SQL statements itself.
Firewall Manager distributes protection policies; it does not parse application SQL statements itself.
Shield provides DDoS protection; it is not the general request-content inspection service for SQL injection.
Shield provides DDoS protection; it is not the general request-content inspection service for SQL injection.
Check official documentation
Compare the following points with the official documentation.
AWS WAF Developer GuideのWhat is AWS WAF?とSQL injection match conditionの説明を確認する。
What to confirm
条件に一致するリクエストがWAFルールに従ってブロックまたはカウントされる。
Key points
- AWS WAF
- Web ACL
- SQL injection
Notes
- Environment: AWS公式WAFドキュメントの確認
- Confirm current security service capabilities and support-plan conditions in the official AWS documentation.
Foundation review
Web-layer defense
WAF can inspect request fields and apply an allow, block, or count action.
Layer distinction
DDoS protection and organization-wide policy management solve different problems from request inspection.