AWS Web Application Firewall (WAF) Integration Options

Integrating AWS Web Application Firewall (WAF) with Other Services

Prev Question Next Question

Question

Which of the below services can be integrated with the AWS Web application firewall service.

Choose 2 answers from the options given below.

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Answer - A and C.

The AWS documentation mentions the following on the Application Load Balancer.

AWS WAF can be deployed on Amazon CloudFront and the Application Load Balancer (ALB)

As part of Amazon CloudFront it can be part of your Content Distribution Network (CDN) protecting your resources and content at the Edge locations and as part of the Application Load Balancer it can protect your origin web servers running behind the ALBs.

For more information on the web application firewall please refer to the below URL:

https://aws.amazon.com/waf/faq/

The AWS Web Application Firewall (WAF) is a managed service that helps protect web applications from common web exploits that can affect application availability, compromise security, or consume excessive resources.

AWS WAF can be integrated with various AWS services to provide a complete web protection solution. Of the options given, the two services that can be integrated with AWS WAF are AWS CloudFront and AWS Application Load Balancer.

AWS CloudFront is a content delivery network (CDN) service that delivers data, videos, applications, and APIs to customers globally with low latency and high transfer speeds. When AWS WAF is integrated with CloudFront, it can protect web applications against common web exploits such as SQL injection, cross-site scripting (XSS), and distributed denial-of-service (DDoS) attacks.

AWS Application Load Balancer (ALB) is a layer 7 load balancer that enables you to route incoming traffic to different targets, such as EC2 instances, containers, and Lambda functions. When AWS WAF is integrated with ALB, it can protect web applications against common web exploits and provide enhanced security features, such as protection against OWASP Top 10 threats.

AWS Lambda is a serverless compute service that enables you to run code without provisioning or managing servers. While AWS Lambda can be used to process and analyze data, it cannot be integrated with AWS WAF.

AWS Classic Load Balancer is a legacy load balancer that is being phased out in favor of newer load balancing solutions, such as Application Load Balancer and Network Load Balancer. AWS WAF cannot be integrated with Classic Load Balancer.

In summary, the two services that can be integrated with AWS Web Application Firewall are AWS CloudFront and AWS Application Load Balancer.