//
Busque em todas as páginas da documentação
7 pages in this section.
Application-layer filtering (WAF) vs network/transport DDoS protection (Shield) - what each service inspects, where it sits, and why they are complementary rather than overlapping.
Create a Web ACL with a managed rule group via SDK: create the ACL, add a managed rule group, associate it with an ALB, verify the association, and check sampled requests.
Custom rules alongside AWS Managed Rules via SDK: ByteMatchStatement and rate limits combined with a ManagedRuleGroupStatement in one Web ACL, plus reusable RuleGroups.
Analyzing blocked/allowed traffic for rule tuning: PutLoggingConfiguration for durable logs to Firehose/CloudWatch Logs/S3 vs GetSampledRequests for on-demand, no-setup sampling.
The rule tuning workflow and operational habits that keep WAF and Shield effective and low-noise: stage new rules with Count, log selectively, scope managed groups, and set up DRT access before you need it.