A public API is receiving a large number of HTTP requests from a single IP address.
Limit the rate before requests reach the application.
Which setting is most appropriate?
Configure an AWS WAF rate-based rule at the API entry point.
Detailed explanation
S3 object lifecycle management is not an HTTP rate-limit control.
S3 object lifecycle management is not an HTTP rate-limit control.
DNS TTL does not limit HTTP request volume.
DNS TTL does not limit HTTP request volume.
The rule aggregates request counts over a period and can control requests that exceed the threshold.
The rule aggregates request counts over a period and can control requests that exceed the threshold.
A Network ACL filters packets and does not aggregate HTTP request rates.
A Network ACL filters packets and does not aggregate HTTP request rates.
Check official documentation
Compare the following points with the official documentation.
AWS WAF rate-based rulesの公式説明を確認する。
What to confirm
ネットワークACLとHTTPレート制限の違いを説明できる。
Key points
- AWS WAF
- Rate-based rule
- HTTP request rate
Notes
- Environment: AWS公式SOA-C03試験ガイドとAWS公式ドキュメントの確認
- Confirm current AWS service behavior in the official documentation.
Foundation review
Application-layer control
WAF evaluates web requests, whereas a Network ACL evaluates network packets.
Threshold behavior
A rate rule reacts to volume rather than merely changing DNS caching.