AWS WAF Made Simple: Protect Your Web Apps In The Cloud | Full Tutorial

Get started with the AWS Web Application Firewall (WAF) to protect your web apps in the cloud with this tutorial that walks through step-by-step how to create your first AWS WAF ACL. This video explains:
- What the AWS WAF is and what resources it can protect
- The role of Web ACLs, Rules, and Rule groups
- How to create your first WAF and web ACLs using AWS-Managed rules
- How Count rule actions work and how they're different from Block rule actions
- Why the order of rules matters
- How to implement the OWASP Top 10 rule set to block common web attacks

#aws #awssecurity #waf #webapplicationfirewall #firewall

💬 Chat with me on Discord

🔖 Chapters & Topics Covered
00:00 - 00:07 - Intro
00:08 - 00:33 - About the AWS WAF
00:34 - 00:59 - Supported resources
01:00 - 01:30 - 3 core components
01:31 - 02:46 - AWS WAF pricing
02:47 - 03:21 - Creating a web ACL
03:22 - 04:16 - Creating/adding rules
04:17 - 05:13 - Configuring rules
05:14 - 05:27 - Setting rule priorities
05:28 - 05:58 - Configuring CloudWatch metrics
05:59 - 06:05 - Reviewing and creating the web ACL
06:06 - 06:38 - AWS WAF Web ACL settings
06:39 - 07:35 - Understanding AWS-managed rules
07:36 - 08:43 - Count vs. Block rule actions
08:44 - 09:19 - Other WAF features
09:20 - 09:33 - OWASP Top 10 ruleset
09:34 - 09:48 - Deleting your resources
09:49 - 10:07 - Summary
10:08 - 10:18 - Outro

[dalhama]

Great explanation, just starting to learn more about AWS WAF, and this helped a lot. Just subscribed to the channel, will check more videos. Keep up the good work

[AthelstanEngland]

Thanks for this. We are interested in using WAF as a means to implement Microsoft Authenticator MFA to front end an internal (on AWS) intranet site. I understand WAF is the best tool for this. Could you give some pointers for this?

[tgsoon]

This is no full tutorial. just a basic one.