A public website receives a large number of requests from the same source in a short period.
The team wants to act on the request count during a defined period.
Which AWS WAF capability is appropriate?
An AWS WAF rate-based rule evaluates request counts over a time window and applies the web ACL action when the rate is exceeded.
Detailed explanation
A rate-based rule tracks requests during a defined period and can control sources that exceed the configured rate.
A rate-based rule tracks requests during a defined period and can control sources that exceed the configured rate.
Artifact provides compliance documents and does not filter web traffic.
Artifact provides compliance documents and does not filter web traffic.
IAM policies define permissions and do not provide WAF web-traffic rate control.
IAM policies define permissions and do not provide WAF web-traffic rate control.
Config evaluates resource configuration and does not directly control the rate of HTTP traffic.
Config evaluates resource configuration and does not directly control the rate of HTTP traffic.
Check official documentation
Compare the following points with the official documentation.
AWS WAF Developer Guideのrate-based ruleとCount actionの説明を確認する。
What to confirm
設定したレートを超えたリクエストが、Web ACLのアクションに従って処理される。
Key points
- Rate-based rule
- AWS WAF
- Request count
Notes
- Environment: AWS公式WAFドキュメントの確認
- Confirm current security service capabilities and support-plan conditions in the official AWS documentation.
Foundation review
Traffic threshold
A rate-based rule can connect an observed request rate to the web ACL action.
Observe before blocking
A count action can help validate a threshold before an enforcement action is chosen.