登录查看更多内容

What are the benefits and challenges of using AWS WAF and Shield?

由人工智能和领英社区提供技术支持

If you are using Amazon Web Services (AWS) to host your web applications, you may want to protect them from malicious attacks and unwanted traffic. AWS offers two services that can help you do that: AWS WAF and AWS Shield. But what are the benefits and challenges of using these services, and how do they fit into your network security framework? In this article, we will explain what AWS WAF and AWS Shield are, how they work, and what you need to consider before using them.

此文章中的业界达人

由社区从 2 条内容中精选。了解更多

Ben Abrams

Supreme Unicorn Hunter of Planet Earth and the Entire Galaxy Besides | Cyber Security | Infrastructure Security |…

1 What is AWS WAF?

AWS WAF is a web application firewall that lets you define rules to filter and block requests that match certain criteria. For example, you can block requests from specific IP addresses, countries, or user agents, or requests that contain SQL injection or cross-site scripting attacks. You can also use AWS WAF to rate limit requests, monitor web traffic, and create custom responses. AWS WAF works at the edge of your network, in front of your web servers or load balancers, and integrates with other AWS services like CloudFront, API Gateway, and Application Load Balancer.

添加您的观点

2 What is AWS Shield?

AWS Shield is a managed service that provides protection against distributed denial-of-service (DDoS) attacks. DDoS attacks are attempts to overwhelm your web servers with large volumes of traffic, causing them to slow down or crash. AWS Shield automatically detects and mitigates common DDoS attacks at the network and transport layers, such as SYN floods, UDP floods, and NTP amplification. AWS Shield also offers a higher level of protection, called AWS Shield Advanced, that covers attacks at the application layer, such as HTTP floods, and provides additional features like cost protection, attack visibility, and 24/7 support.

添加您的观点

3 What are the benefits of using AWS WAF and Shield?

Using AWS WAF and Shield can provide several advantages for your web applications and network security. These include the ability to block malicious requests and protect against DDoS attacks, customize web security with rules that fit your needs, save time and resources with managed services, and leverage AWS's global network and infrastructure to handle large web traffic. Additionally, you can integrate with other AWS services to further enhance your web security, such as CloudFront, Lambda, and S3.

添加您的观点

Ben Abrams

Supreme Unicorn Hunter of Planet Earth and the Entire Galaxy Besides | Cyber Security | Infrastructure Security | Information Security | Engineering Leadership | CISSP |
举报内容
If you are on AWS and concerned about load based attacks, these services are a must. Certainly they have other capabilities that are valuable, but these ones make them a must, even if you are using another CDN. If I can take down your load balancer, it does not matter how well your application itself scales. At my last organization we ran a multi layer WAF setup that included Edge device WAF (Cloudfront + ALB) as well as a WAF that sat directly in front of the web applications (think ingress controller or service mesh). We used the interior WAF to focus on malicious intent and used AWS WAF + Shield as the edge rate limiter. We created intelligence sharing between the two so we could optimize cost, performance, and more.

已翻译

赞

4 What are the challenges of using AWS WAF and Shield?

Using AWS WAF and Shield can also pose some challenges for your web applications and network security. For example, you need to pay for the services based on the number of rules, web ACLs, requests, or protected resources you use, which can add up to your AWS bill. Moreover, you need to monitor and update your rules and web ACLs regularly to ensure they are effective and relevant, while also testing them before deploying. Additionally, you need to comply with AWS's terms and conditions, which may limit your control or flexibility over your web security. This could mean not being able to use certain features or tools that are not supported by AWS, or having to share some information or data with AWS for the purposes of providing the services.

添加您的观点

5 How to use AWS WAF and Shield effectively?

To use AWS WAF and Shield effectively, you should assess your web security needs and goals, review and test your rules and web ACLs regularly, enable AWS Shield Advanced for more protection, and integrate AWS WAF and Shield with other AWS services and third-party solutions. Doing so can help you optimize your web security and network security framework. AWS offers tools and guides to evaluate your web security posture, create and manage your rules and web ACLs, respond to DDoS attacks with the DDoS Response Team (DRT), and improve your web performance with CloudFront, Lambda, and S3.

添加您的观点

Ben Abrams

Supreme Unicorn Hunter of Planet Earth and the Entire Galaxy Besides | Cyber Security | Infrastructure Security | Information Security | Engineering Leadership | CISSP |
举报内容
I think one of the most important things in automation. I would highly recommend using AWS Firewall Manager. Essentially we define a policy that we define the scope of assets (accounts, tags, etc) and then ensure (via AWS Config) that when new resources are spun up that meet the criteria have required protections being dynamically managed. This is extremely valuable in systems such as k8s that may be creating and destroying load balancers on a regular basis. Another key benefit of using FMS is that it will ensure that when you create an ipset for example it can be used across all AWS accounts (hand wavy because I am running out of chars). Terraform, CloudFormation, etc can be used to ensure that all your resources for FMS are automated.

已翻译

赞

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Network Security

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

What are the benefits and challenges of using AWS WAF and Shield?

1

2

3

4

5

6

1 What is AWS WAF?

2 What is AWS Shield?

3 What are the benefits of using AWS WAF and Shield?

4 What are the challenges of using AWS WAF and Shield?

5 How to use AWS WAF and Shield effectively?

6 Here’s what else to consider

Network Security

给文章评分

感谢您的反馈

更多Network Security相关文章

更多相关阅读内容

What are the benefits and challenges of using AWS WAF and Shield?

1

2

3

4

5

6

1 What is AWS WAF?

2 What is AWS Shield?

3 What are the benefits of using AWS WAF and Shield?

4 What are the challenges of using AWS WAF and Shield?

5 How to use AWS WAF and Shield effectively?

6 Here’s what else to consider

Network Security

给文章评分

感谢您的反馈

查看其他技能