All 7 AWS WAF & Shield questions
More in AWS WAF & Shield
What is AWS WAF and how does it protect web applications from common attacks? What is AWS Shield, and what is the difference between Shield Standard and Shield Advanced? How do AWS WAF managed rule groups simplify protecting applications against common, well known attack patterns? How does rate based rules in AWS WAF help mitigate application layer DDoS attacks and abusive traffic patterns? How does AWS Shield Advanced provide cost protection and access to specialized DDoS response support during a major attack? How should an organization design a layered defense in depth strategy combining WAF, Shield, security groups, and network ACLs to protect a public facing application?
Advertisement
AWS › AWS WAF & Shield

How does AWS WAF Bot Control help distinguish between legitimate automated traffic and malicious bots?

Intermediate

Answer

AWS WAF Bot Control provides visibility into bot traffic hitting your application and lets you create rules to allow known good bots, such as legitimate search engine crawlers, while blocking or challenging traffic identified as coming from potentially malicious bots, such as those used for content scraping or automated account takeover attempts, using a combination of AWS's own threat intelligence and behavioral analysis.
aws wafv2 create-web-acl --name bot-control-acl --scope REGIONAL --rules '[{"Name":"AWSManagedRulesBotControlRuleSet","Priority":1,"Statement":{"ManagedRuleGroupStatement":{"VendorName":"AWS","Name":"AWSManagedRulesBotControlRuleSet"}}}]'
Real-world example An online ticketing platform enables WAF Bot Control to automatically challenge suspicious automated traffic attempting to buy up large quantities of tickets the moment they go on sale, while still allowing legitimate search engine crawlers to index the site normally.

Common follow-ups: What is the difference between blocking and challenging suspicious bot traffic?;How does Bot Control distinguish good bots from bad bots technically?

Amazon CloudFront & Content Delivery;Amazon API Gateway
All 7 AWS WAF & Shield questions