How to use AWS WAF (Web application firewall)/Web ACL? - Step By Step Tutorial (Part-11)

[@sammed.sankonatti]

You are not a human as you failed to solve CAPTCHA(XD), but you are a alien for creating such crystal clear content.

[@RahulWagh]

Thanks for the analogy 😊

[@praveenbelawadi]

Again no words . . best explaination on each topics always .. Only suggestion is Please provide user data in comment section always . .

[@RahulWagh]

Noted

[@vikramsingh-yl8rl]

You can explain each and every think in easy way ...... thank you so much

[@mpn_family]

Nice explanation, Rahul simple real-time use case for AWS Web Application Firewall (WAF) with hands-on demonstration.

[@RahulWagh]

Thanks for liking

[@zakariaelhossni1169]

you are a life saver . thank u so much for this simple and amazing video .

[@suhasvengilat1026]

Just came across this session while travelling, explained the concepts simply superb and what a flow - superb Rahul.

[@RahulWagh]

You are welcome

[@stevelane6637]

This is great. Really clear and well explained.

[@RahulWagh]

Glad to hear that

[@oluseunamao1000]

I had to become a member, what a great teacher

[@RahulWagh]

You are welcome

[@yatishv8063]

Precise video about WAF, thank you Rahul

[@RahulWagh]

You are welcome

[@deepdeep4629]

YOU ARE THE BEST ! Thank you for all

[@RahulWagh]

You are welcome

[@narasimhakudva]

Simple and crisp hands on Rahul i appreciate,

[@RahulWagh]

You are welcome

[@takrimoneline]

brother I have a problem please solve this. give your WhatsApp number please I will talk with you.

[@vineet_kumar555]

Very very good and simple explanation thank you rahul sir❤❤

[@RahulWagh]

You are welcome

[@bhavyagupta514]

Amazing Videos Sir... Thank You So much for such a nice content

[@RahulWagh]

It's my pleasure

[@ADEWUYIODESANMI]

thanks so much, please don't stop the good work

[@RahulWagh]

Cheers

[@headfullofcode]

perfect and clear example, thanks much

[@RahulWagh]

Glad it was helpful!

[@AbhinavSriraj]

Hi Rahul, In adding rules (IP sets) Can you please explain how can we add security groups to Allow/Block traffic?

[@nranjanagi]

Bro, you are just supper.. its very helpful

[@RahulWagh]

Glad to hear that

[@pinakimukherjee2084]

Excellent and helpful video. Thanks

[@RahulWagh]

You're welcome!

[@agun21st]

Wow! Explained Very easy way as abc.🎉

[@RahulWagh]

Glad to hear that

[@koteshwarrao5409]

Crystal clear explanation thank you..

[@RahulWagh]

Glad it was helpful!

[@stevelane6637]

id only add one comment Rahul. It would have been good if you did a brief overview at the end of some of the more commonly used AWS Managed Rules as well for things like defending against SQL injections etc.

[@RajivPerera]

Thank you -- this was very helpful to me.

[@RahulWagh]

Glad it was helpful!

[@raghuveer120]

Well Explained Rahul. Just one suggestion, while explaining the concept try to give real time examples this will help us to understand better.

[@RahulWagh]

There is one realtime DevOps project is coming

[@thapasujan07]

Thank you Sir. Much Love & Respect. 💌

[@RahulWagh]

You are very welcome

[@swapnilsatras1398]

कौतुकास्पद सर खूप छान शिकवले.....❤❤❤❤❤

[@RahulWagh]

Thanks swapnil

[@merajhaque8447]

Very well explained….thank u so much

[@RahulWagh]

You are welcome ❤️

[@ZuhaBuba]

Bro solved the challenge of setting up a challenge, that he could not solve, life is not always fair

[@pashan5189]

Can you please tell me what is the right approach to deploy spring boot application with mysql db without using RDS on aws ec2 free tier.

[@salwadbashashaik]

that's a nice video, explained very well

[@RahulWagh]

Glad you liked it!

[@PankajMaurya-d1g]

Thanks for your great efforts. Can you make a videos on EKS cluster creation and upgrade using Terraform,also I tried to find Karpenter videos as well as ,no one has created.

[@RahulWagh]

I will try

[@udaykumar8177]

Excellent teaching

[@RahulWagh]

Keep watching

[@kiranbakale8207]

amazing as always

[@RahulWagh]

Thank you! Cheers!

[@stevejob677]

thank you sir great session

[@RahulWagh]

You are welcome

[@devendrasingh-li7ly]

Great Session.

[@RahulWagh]

You are welcome

[@pppscooby]

Once the WAF is blocking your laptop, can you still access the EC2 via http using the EC2 on its public ip address?

[@CamiloEstebanManriquezSepulved]

Hello, greetings from Chile. How can this be done for multiple instances with different applications each and block traffic from certain countries?

[@vishakh8]

Very well explained

[@RahulWagh]

Glad it was helpful!

[@naveent2799]

On point, beautiful and precise. can you make a video on athena, glue as well.

[@RahulWagh]

I will add it to my list soon it will be there

[@SudhaRaja-b7q]

Nice explanation.

[@RahulWagh]

Glad it was helpful!

[@niroshthota5819]

Amazing in Detail

[@RahulWagh]

Thank you! Cheers!

[@RahulWagh]

Thank you! Cheers!

[@iyiempire4667]

why you created vpc why you not directly connect WAF to EC2 instance ?

[@RahulWagh]

That is not the actual practice in industry you need to have vpc to tighten you security

[@SarfarazShaikh-l5y]

Awesome great explanation. What are charges of using AWS WAF ?

[@RahulWagh]

It depends but please refer to aws docs for the charges

[@sainishree]

hostname is not printing as expected from index.html

[@atakanince]

Very helpful! Thank you!

[@RahulWagh]

You're welcome!

[@FerrySharma-x2d]

how can we create this aws architecture diagram like demo diagram shown in the video , which tool used above?

[@RahulWagh]

I used power points and aws icons to prepare those diagrams

[@thierrymemel]

Hey Brother @Rahul, am still not able to see your "join" button for the membership, I really like your content, cause of you I am being an AWS expert, Need help from anyone part of the membership program, watching you brother from Ivory Coast

[@RahulWagh]

Here is the link through which you can also join - kzbin.info/door/7p4oXcPbgk_yTSHK7QlkSgjoin

[@thierrymemel]

@@RahulWagh what am saying is : I don't see the "Join" button on my side here when I click on the the link this what I mean.

[@Giridhar_KS]

Excellent Teaching. Thank you. I have a question ..I have added the code to display the Server Details in the EC2 Instance and when I try opening the page, it displays the Apache Page instead of showing the Server Details.. This has happened when I tried the previous parts as well.. Any particular reason for this ?

[@RahulWagh]

Try to check the /var/www/html directory for correct page

[@Giridhar_KS]

@@RahulWagh Hi Rahul, I checked this page and this is pointing to the Apache default index.html page

[@babysharma4634]

​@@RahulWaghsame happened with me please help me I am to late for my project please for this problem

[@tehsinbashir1292]

is there any video you create for this "Final Project: AWS Security Services Choose any project that you are interested in doing. The main thing is to learn and to have fun doing it. Come up with an innovative idea related to the course material that you are interested in implementing and securing. Requirements: Use two or more AWS Services. At least one of the two services has to be a security service. The total time spent on the project - including research, design, configuring, coding, testing, redesign, etc., should be around 10 - 15 hours. Submit: 2 - 3 page written report outlining the project details Include screenshots in the report Appendix"

[@takrimoneline]

very important videos ❤❤❤❤

[@RahulWagh]

Glad you think so!

[@takrimoneline]

@@RahulWagh can you help me

[@RahulWagh]

what help do you need?

[@takrimoneline]

@@RahulWagh now I cannot explain give you telephone number please

[@vellaladevika9961]

pls tell amplify app hosting

[@karthicholan4689]

We can block the User IP Range by Deny rule in Security Group. Then what is the use of WAF. Please clarify if i am wrong.

[@RahulWagh]

Here are the scenarios where you need the power of WAF to block the requests- 1. You wanna block requests based on country, city 2. You wanna check requests header and block suspicious elements coming in http/https requests 3. You wanna check cookie information before processing requests. Above are the few examples which is not possible with security groups deny rules

[@cletusuzoma4652]

There’s no deny rule in security group. You can have deny rule with Nacls. Security group operates on a deny all bases which means that you have to explicitly allow any traffic and any traffic allowed in is also allowed out. This makes security group stateful unlike NACLs that is stateless, which means whatever is allowed in must be allowed out else it will be denied.

[@subbaraosopparapu6708]

Array waf videos or doc please help with this if u have any links

[@new9light]

Sir ji you are awesome

[@new9light]

Big fan of your work

[@RahulWagh]

@@new9light thanks 🙏 !

[@ancientpast]

SIR WHEN I HIT THE ELB DNS RECORD ITS SHOWING 403 FORBIDDEN BUT HIT IP ITS OPENED HOW SIR

[@RahulWagh]

There could be many region please re check the setup again

[@qadeersipra9347]

Very well explained , Love from Pakistan

[@thermalreboot]

There are common questions that this tutorial ignores, https has become the default protocol for web servers, you don't tell us if we need a second target group or security group for https requests. You should assume what we want in https and should tell us if we need to create a second target group or if the WAF/LB will perform https to the user and run over http for the backend.

[@bijeeshkalavoor2977]

Thank you ❤

[@vigneshm5365]

Thank Thank Thank you very much

[@RahulWagh]

So nice of you

[@nileshacharekar9465]

Thank you very much

[@RahulWagh]

Most welcome

[@sahadevdahit]

Cloud front topic please ❤❤

[@vibinbg4882]

Thanku ☺

[@shubhamagarwal2076]

Thanks you 🌹🌹

[@RahulWagh]

You are so welcome!

[@ndipsamuel475]

Thank you

[@RahulWagh]

You are welcome

[@alichales-h4q]

65 or 65 thousands ip address within our ip address range

[@gauravchoudhary3733]

Hi Rahul, Please create some videos on Cloud Migration Services like; AWS Application Migration Service, AWS Database Migration Service and AWS DataSync.

[@iHKG0]

Thx!

[@RahulWagh]

Any time

[@srgrmohan]

Hi Rahul

[@RahulWagh]

👋 hello

[@am2427]

You look like Sundar Pichai

[@johndonuts4258]

70% of the video is about confoguring a vpc and not waf...

[@RahulWagh]

Yeah but how would you do the waf setup without vpc

[@rohtasprajapati1587]

You could focus more on WAF application features and best practices to implement it.

[@munteanionut3993]

He structured every video so that if you are interested in only one topic, then you have all the pre-requisites of that specific topic within the very same vide. This way, you do not have to browse around youtube. If you already know how to setup vpc, subnets and all the others you can just skip using the timestamps of the sections in the video slider.

[@youngolutosin1658]

This is best way to solidify things.

[@shivputrabhalki1829]

well explained, but you look like Sundar pichai😂

[@RahulWagh]

Thanks but I am not Mr sundar pichai

[@harishdaga1439]

So, you can't solve captchas, which means you're a bot. I'd be happy to be a bot like you.

[@RahulWagh]

Hahaha so true

[@harishdaga1439]

@@RahulWagh I definitely want to thank you for video's in the playlist. I created and destroyed VPCs and subnets ten times, and now I am very familiar with VPCs. It answered all my basic questions about VPCs.