Pricing - AWS WAF - Amazon Web Services (AWS)

AWS WAF charges based on the number of web access control lists (web ACLs) that you create, the number of rules that you add per web ACL, and the number of web requests that you receive. There are no upfront commitments. AWS WAF charges are in addition to Amazon CloudFront pricing, Application Load Balancer (ALB) pricing, Amazon API Gateway pricing, and/or AWS AppSync pricing.

AWS WAF

You will be charged for each web ACL that you create and each rule that you create per web ACL. In addition, you will be charged for the number of web requests processed by the web ACL

Note 1: AWS WAF uses the Web ACL Capacity Unit (WCU) to calculate and control the operating resources that it uses to process your web ACLs, rule groups, and rules. The WCU for an individual rule varies according to its type and any additional configuration settings. WCUs do not directly effect pricing.

Note 2: Price is the same across all AWS Regions.

Note 3: Price for AWS WAF Classic is same as shown in the table above.

Managed Rules Groups

There is no additional charge for using AWS Managed Rules for AWS WAF other than as described above. When you subscribe to Managed Rule Group provided by an AWS Marketplace seller, you will be charged additional fees based on the price set by the seller. These charges are in addition to the AWS WAF fees described above.

Pricing examples

Let’s assume that you have a web application with traffic of 10 million requests per month.

Case A: No Managed Rule Group, and 19 rules written by you

Web ACL charges = $5.00 * 1 = $5.00
Rule charges = $1.00 * 19 = $19.00
Request charges = $0.60/million * 10 million = $6.00
Total combined charges = $30.00/month

Case B: One Managed Rule Group from an AWS Marketplace seller, and 9 rules written by you

Let’s assume that the seller sets the price of its Managed Rules at $20.00 per month (prorated hourly) and $1.20 per 1 million requests seen and processed by the Managed Rules.

Web ACL charges = $5.00 * 1 = $5.00
Rule charges = $1.00 * (1 Managed Rule Group + 9 rules) = $10.00
Request charges = $0.60/million * 10 million = $6.00
Total AWS WAF charges = $21.00/month

Managed Rules charges = $20.00
Managed Rules request charges = $1.20/million * 10 million = $12.00
Total AWS Marketplace charges = $32.00/month

Total combined charges = $53.00/month

Case C: One Rule Group that contains 5 rules, and 9 rules written by you

Web ACL charges = $5.00 * 1 = $5.00
Rule charges = $1.00 * (1 Rule Group + 5 Rules + 9 Rules) = $15.00
Request charges = $0.60/million * 10 million = $6.00
Total combined charges = $26.00/month

Pricing calculator

Additional pricing resources

AWS Pricing Calculator

Easily calculate your monthly costs with AWS

Economics Resource Center

Additional resources for switching to AWS

AWS WAF Pricing