Effective Threat Protection with AWS WAF Configuration Resulting in 3.01% of Requests Blocked in 24 Hours for a PSU

Solutions

• Configured AWS WAF and created Custom WAF rules targeting OWASP Top 10 attacks, API security threats, SQL injection, XSS, and more for enhanced application resilience. 
• Implemented AWS WAF protection against common web-based threats like SQL injection, XSS, and CSRF, with regular rule updates to adapt to evolving risks. 
• Employed mitigation strategies such as JSON validation, output encoding, and secure session management to prevent vulnerability exploitation. 
• Utilized AWS WAF IP Reputation Lists to block traffic from known malicious IP addresses and botnets. 
• Managed access with AWS IAM policies and integrated AWS Shield for DDoS protection with load balancers to safeguard against potential attacks.