Web application firewalls are a critical component to any secure web application. AWS WAF allows you to easily set up protection for your applications that are running on a variety of AWS services, including the following:

• Amazon CloudFront
• Amazon EC2
• Amazon Elastic Load Balancer
• Amazon API Gateway

AWS WAF protects you from a wide variety of common exploits that plague web applications, allowing you to configure rules by IP address and HTTP headers. It is even capable of detecting and stopping SQL injection attacks, which are some of the most common ways that data is exfiltrated from an application that is running on the internet.