How does amaise’s web application firewall work?
amaise uses AWS WAFv2 on two levels — both on the CDN (CloudFront) and on the load balancer (ALB):
Managed rule groups:
Common Rule Set — OWASP core protections
Known Bad Inputs Rule Set — detection of known injection patterns
Admin Protection Rule Set — protection of administrative endpoints
Amazon IP Reputation List — blocking known malicious actors
Custom rules:
Geo-blocking of disallowed countries
Rate limiting: 100 requests per 5 minutes per IP address on public and analytics endpoints
JSON content-type enforcement on API requests
IP allowlist for penetration tests and partners
All BLOCK actions are retained for 365 days in CloudWatch for forensic analysis.