Managed rules for AWS Web Application Firewall
Managed rules for AWS WAF are designed to help you spend less time writing firewall rules and more time building applications.
Managed rules for AWS Web Application Firewall (WAF) are a set of rules written, curated and managed by AWS Marketplace Sellers that can be easily deployed in front of your web applications running on Amazon CloudFront, AWS Application Load Balancers, or Amazon API Gateway.
With these managed rules, you can quickly get started and protect your web application or APIs against common threats like the OWASP Top 10 security risks, threats specific to Content Management Systems (CMS) like WordPress or Joomla, or even emerging Common Vulnerabilities and Exposures (CVE) without having to manage infrastructure.

Benefits
Rules managed by security experts
Easy to get started
Choice of protections
With managed rules you get a wide selection of protections from security experts and AWS Marketplace Sellers. You can choose from a variety of widely applicable protections like IP reputation lists and OWASP Top 10 protections, or choose from platform-specific rules like WordPress or Joomla rules.
Pay as you go
Meet the managed rules sellers

Cyber Security Cloud Managed Rules for AWS WAF -HighSecurity OWASP Set-

Cyber Security Cloud Managed Rules for AWS WAF -API Gateway/Serverless-
Cyber Security Cloud Managed Rules are compiled in a comprehensive package to mitigate and minimize vulnerabilities, including the most serious OWASP API Security/Serverless Top 10 Threats. Learn more
Cyber Security Cloud Managed Rules for AWS WAF Classic -OWASP Set-


Bot protection rules
Bot Protections Rules is a partner managed rule group for AWS WAF that stops a broad range of malicious bots activities such as vulnerability scanners, web scrapers, DDoS tools, and forum spam tools. Learn more
Web exploits OWASP rules
F5 Web Exploits OWASP Rules for AWS WAF, provides protection against web attacks that are part of the OWASP Top 10, such as: SQLi, XSS, command injection, No-SQLi injection, path traversal, and predictable resource. Learn more
Common Vulnerabilities and Exposures (CVE)
CVE Rules for AWS WAF provides protection for high profile CVEs targeting the following systems: Apache, Apache Struts, Bash, Elasticsearch, IIS, JBoss, JSP, Java, Joomla, MySQL, Node.js, PHP, PHPMyAdmin, Perl, Ruby On Rails, and WordPress. Learn more
API attacks
Protects against API attacks, web attacks (such as XML external entity attacks) and server side request forgery. The rule set includes support for XML and JSON payloads, and common web API frameworks. Learn more

General and known exploits rule group
Fortinet WAF RuleGroups are based on the FortiWeb web application firewall security service signatures, and are updated on a regular basis to include the latest threat information from FortiGuard Labs. The General and Known Exploits RuleGroup detects common and advanced OWASP Top 10 threats including numerous Injection attacks, URL Redirects, HTTP Response Splitting, Database Disclosure vulnerabilities and other Common Vulnerabilities and Exposures (CVEs). Please see our other RuleGroups for additional protections. Learn more
Malicious bots
Fortinet WAF RuleGroups are based on the FortiWeb web application firewall security service signatures, and are updated on a regular basis to include the latest threat information from FortiGuard Labs. The Malicious Bots RuleGroup analyzes requests and blocks known content scrapers, spiders looking for vulnerabilities, and other unwanted automated clients that OWASP has identified as risks to web applications. Please see our other RuleGroups for additional protections. Learn more
SQLi/XSS

Complete OWASP top 10 rulegroup
Fortinet WAF RuleGroups are based on the FortiWeb web application firewall security service signatures, and are updated on a regular basis to include the latest threat information from FortiGuard Labs. The Complete OWASP Top 10 RuleGroup combines Fortinet’s other AWS WAF RuleGroups into one comprehensive package that includes the SQLi/XSS, General and Known Exploits, and Malicious Bots RuleGroups. Learn more
API Gateway


IP reputation on AWS WAF
Imperva's Managed Rules for IP Reputation allows you to take a proactive approach to security by providing an extensive IP whitelist/blacklist which is regularly monitored and updated. Imperva's reputation feed leverages crowd-sourcing from aggregated attack data to update its list with newly detected malicious sources. Learn more
Fortinet FortiWeb Cloud WAF SaaS defends web-based applications from known and zero-day threats including the OWASP Top 10. The solution enables rapid deployment with minimal configuration required.
Resources
Learn about shield web applications and edge devices from risks that can compromise security, affect application availability, or result in the consumption of excessive resources.

ON-DEMAND WEBINAR
An introduction to modern application security and web application firewalls.

ON-DEMAND WEBINAR
Learn how to understand and protect applications in your pipeline.
Why buy in AWS Marketplace?
AWS Marketplace is a curated digital catalog that makes it easy to find, test, buy, and deploy the third-party software you want, with the simplified procurement and controls you need.
2M+
12,000+
2,000+
325K+