Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Cloud Formation Support for Rate-Based WAF Rule [closed]

I want to set up a Cloud Formation in aws to attach a Rate Based Rule to my LB. I have been reading the AWS documentation for hours, and I know how to create a regular WAF Rule in Cloud Formation and attach them to my LB in Cloud Formation. The problem is I cant find how to create a Rule of type Rate-Based of WAF in CF, there is not RateBasedRule object in Cloud Formation. Does anyone knows how to get around this?

like image 398
xyz Avatar asked Jun 01 '18 02:06

xyz


People also ask

What is WAF rate-based rule?

Rate-based Rules are type of Rule that can be configured in Amazon WAF, allowing you to specify the number of web requests that are allowed by a client IP in a trailing, continuously updated, 5 minute period.

What conditions are AWS WAF web application firewall rules based on?

AWS WAF lets you create rules to filter web traffic based on conditions that include IP addresses, HTTP headers and body, or custom URIs. This gives you an additional layer of protection from web attacks that attempt to exploit vulnerabilities in custom or third party web applications.

What is rate limiting in WAF?

AWS WAF checks the rate of requests every 30 seconds, and counts requests for the prior five minutes each time. Because of this, it's possible for an IP address to send requests at too high a rate for 30 seconds before AWS WAF detects and blocks it. AWS WAF can block up to 10,000 IP addresses.


1 Answers

After talking to aws support itself: This feature is not yet supported by aws as of today.

like image 95
xyz Avatar answered Sep 19 '22 14:09

xyz