WHAT I'VE LEARNED: MY TOP AWS WAF TIPS FOR STRONGER PROTECTION

Summary from the TLDR InfoSec newsletter

A collection of tips for utilizing AWS WAF most effectively. Some of the tips are common best practices such as ensuring that all external endpoints are mapped, testing rules in counting mode before fully deploying, and making sure that logging and alerting are enabled. Some other tips involve utilizing features that are not enabled by default such as bot control and rate limiting.