StudyToCert

All certifications / Security Specialty / Lessons

AWS Certified Security – Specialty SCS-C03 · Domain 3: Infrastructure Security

Edge protection with AWS WAF: web ACLs, managed rule groups, rate-based rules and OWASP Top 10 threats

▶ Watch the overview video

Last reviewed September 29, 2026 · Leer en español

AWS WAF is a web application firewall. It inspects HTTP and HTTPS requests before they reach your application and allows, blocks, counts or challenges them. You attach a web ACL (web access control list) to a protected resource: a CloudFront distribution, an Application Load Balancer, an API Gateway REST API, an AppSync GraphQL API, a Cognito user pool, an App Runner service or a Verified Access instance.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 3 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study Security Specialty for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the Security Specialty study plan