Posted On: Apr 11, 2023

AWS WAF customers can now use up to 5,000 Web ACL capacity units (WCU) per web ACL. WAF uses WCU to calculate and control the operating resources that are required to run WAF rules, rule groups, and web ACLs. Previously, WAF permitted a maximum of 1,500 WCU per web ACL. Customers who needed more than 1,500 WCU for their web ACLs needed to request manual limit increases. As WAF has launched new features and improved core product capabilities over the past few years, customers have asked us to increase the WCU limit so that it’s easier for them to use these new features without worrying about running out of capacity. 

Now, customers can use up to 5,000 WCU in their web ACLs without the need to request a limit increase. Web ACLs that use more than 1,500 WCUs will incur an additional charge per million requests processed for each 500 WCU the Web ACL uses beyond the default allocation of 1,500. For more information about pricing, visit the AWS WAF Pricing page.

The new WCU limit has been applied automatically to all web ACLs. The increased WCU quota applies to all AWS regions where AWS WAF is available and for each supported service, including Amazon CloudFront, Amazon Application Load Balancer, Amazon API Gateway, AWS AppSync, and Amazon Cognito. For more information about the service, visit the AWS WAF page.