AWS Web Application Firewall | Firewall Manager | AWS WAF Bot Control

[@Pythoholic]

Login to www.pythoholic.com for the full AWS SAAC02 course. 🍀 Timelines for your convenience: 00:00​ // Intro 01:56​ // Let's understand Firewalls and why are they important? 08:58​ // Host-Based Firewalls 09:58​ // Network-Based Firewalls 11:08​ // Different Types of Firewalls 14:06​ // How does a Basic Firewall Work? 16:30​ // What is a Web Application Firewall and How does it Work? 17:50​ // What is AWS Web Application Firewall? 25:18​ // What is AWS Firewall Manager? 29:27​ // How does a Web Application Firewall work? 32:54​ // What are the benefits of using Firewall Manager? 34:25​ // What are the benefits of using an AWS Web Application Firewall? 37:22​ // How does AWS WAF work? 39:11​ // What are the AWS WAF Managed Rules? 42:09​ // AWS WAF Bot Control and How it Works? 46:52​ // Real-time Example of How to Identify and Control BOTS 50:52​ // Outro

[@saimwasi5612]

Iggbx

[@mohsinnisar8567]

very descriptive and informative, with nice colorful presentation which engage the viewers and never let them be bored. PS: On top of that, very soft and nice voice you're blessed with.

[@Pythoholic]

thank u sir, you are the first to say my voice is good. thanks

[@HeyMani92]

Thank you, Team this is a great session ever in youtube :)

[@shubamsalaria971]

I have a question we can use Security groups to filter input requests on the basis of ports and we can use NACL to block input requests on the basis of IP address so why to use WAF then?

[@Pythoholic]

Certainly! Security groups, NACLs (Network Access Control Lists), and WAFs (Web Application Firewalls) all play distinct roles in the security landscape of cloud environments, especially in AWS. Here's a brief breakdown: 1. **Security Groups**: - Operate at the instance level. - Stateful: If you allow an incoming request from an IP, the response is automatically allowed, regardless of outbound rules. - Only allow rules; there are no deny rules. - Typically used to control both inbound and outbound traffic at the port and protocol level. 2. **NACLs**: - Operate at the subnet level. - Stateless: Inbound and outbound rules are treated separately. - Can have both allow and deny rules. - Used to control traffic at the subnet level based on IP protocol, port number, source/destination IP address. 3. **WAF**: - Operates at the application layer. - Protects web applications from common web exploits like SQL injection, XSS (cross-site scripting), and other OWASP top 10 threats. - Can filter traffic based on complex string patterns, HTTP headers, body content, and more. - Can be integrated with other services for logging, monitoring, and alerting. Reasons to use a WAF in addition to Security Groups and NACLs: 1. **Layered Defense**: While Security Groups and NACLs provide a good first line of defense at the network layer, WAFs provide an additional layer of security at the application layer. This multi-layered approach ensures that even if one layer is compromised, others can still provide protection. 2. **Specific Threat Protection**: WAFs are designed to protect against specific application layer threats that can't be addressed by just filtering based on IP or port. 3. **Custom Rules**: WAFs allow for the creation of custom rules tailored to the specific needs of your application, allowing for more granular control over traffic. 4. **Logging and Monitoring**: WAFs often come with enhanced logging and monitoring capabilities, providing insights into attack patterns and helping in forensic analysis. 5. **Rate-based Rules**: Some WAFs can also protect against DDoS attacks by limiting the rate of requests from a particular IP. In summary, while Security Groups and NACLs are essential for basic network-level protection, a WAF provides specialized protection for web applications against a variety of threats. Using them in conjunction offers a more comprehensive security posture.

[@zakariajaouhari2416]

hi sir, thanks for your high-quality courses, what is the name of the application that you use to prepare your presentations?

[@Pythoholic]

Powerpoint ;)

[@zakariajaouhari2416]

@@Pythoholic wow , well done , and from where you Took all the aws services logos?

[@sandipram5022]

@@zakariajaouhari2416 internet :)

[@praveenrane2787]

Very Well explained thank you so much

[@shajeep9170]

Good work 👏🏽👏🏽👏🏽

[@meow5412]

Thanks for the video! This is so good!!

[@Aniruddhasil]

Hi sir , Please sir create this video explanation on hands-on lab.

[@Pythoholic]

Sure will do that thanks much

[@SAMSung-li4kz]

Thank you very much sir. But what about AWs cloud practitioner course?

[@Pythoholic]

That will also be up shortly. Keep the support. :)

[@Reapswtf]

Anyone else getting lots of static in the audio quality during the bot control section?

[@Pythoholic]

I realized that, KZbin has just cracked up the video. I will try and fix it. Thanks for pointing out.

[@Reapswtf]

@@Pythoholic Not a problem, just wanted to know if it was me or the audio itself :) thanks.