AWS WAF charges based on the number of web access control lists (web ACLs) that you create, the number of rules that you add per web ACL, and the number of web requests that you receive. There are no upfront commitments. AWS WAF charges are in addition to Amazon CloudFront pricing, Application Load Balancer (ALB) pricing, Amazon API Gateway pricing, and/or AWS AppSync pricing.
You will be charged for each web ACL that you create and each rule that you create per web ACL. In addition, you will be charged for the number of web requests processed by the web ACL. Pricing is the same across all AWS Regions. Monthly fees are prorated hourly. Pricing for AWS WAF Classic is the same as shown in the table below.
AWS WAF uses Web ACL Capacity Units (WCUs) to calculate and control the operating resources required to process your web ACLs. WCUs for an individual rule varies according to its type and any additional configuration. WCUs do not directly affect pricing.
AWS Managed Rules
These are optional security features that can be enabled on your web ACL. These charges are in addition to the AWS WAF fees described above. The cost savings you receive from enabling AWS Shield Advance resource protection does not apply to managed protections. Pricing is the same across all AWS Regions. Monthly fees are prorated hourly. You pay both monthly fees and usage fees where it is applicable.
|Monthly fee||Usage fee|
|Requests inspected||$10.00 per month||$1.00 per million|
|Challenge attempts analyzed||-||$0.40 per thousand|
A challenge attempt is when a user completes a Captcha challenge that is submitted to WAF for analysis, regardless of the outcome. A single Captcha response can result in multiple attempts. If the attempt is successful, you will be charged an additional request fee when the original request is automatically retried after the successful attempt.
The Bot Control free usage tier includes the first 10 million requests inspected per month.
Managed Rule Groups from AWS Marketplace
When you subscribe to a managed rule group provided by an AWS Marketplace seller, you will be charged additional fees based on the price set by the seller. These charges are in addition to the AWS WAF fees described above.