In this hands-on lab, you will begin deploying web applications at your company. But first, you need to set up a web application firewall (WAF) to protect against common threats detailed in the OWASP Top 10.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Create a Web Access Control List
- In the AWS WAF console, select Create web ACL.
- Give the web ACL a name.
- Give CloudWatch metrics a name (or accept the default name).
- Select Regional resources.
- Click Next.
- Add AWS Managed Rules
- Click Add rules.
- Select Add managed rule groups.
- Click to expand AWS managed rule groups.
- Select Core rule set.
- Select Known bad inputs.
- Select SQL database.
- Click Add Rules.
- Create Custom Rule for HTTP Header Injection
- Click Add rules.
- Click Add my own rules and rule groups.
- Name the rule HTTPHeaderInjection.
