How to use AWS WAF (Web application firewall)/Web ACL? - Step By Step Tutorial (Part-11)

Join this channel to get access to perks:
/ @rahulwagh
Welcome to this in-depth tutorial on AWS WAF, where we cover everything from setting up your environment to managing HTTP requests through your firewall. Whether you are a beginner or looking to enhance your AWS WAF skills, this tutorial is tailored for you!
🕒 TIMESTAMPS:
00:00 - What You Will Learn
00:33 - Setting Up VPC
01:18 - Setup Internet gateway
02:17 - Setup Subent
03:39 - Create Route table
06:18 - Configuring EC2 Instances
10:50 - Implementing Load Balancer
10:15 - AWS WAF Setup
17:10 - Creating Web ACLs(Web application Firewall)
19:29 - Add Rules (IP Sets)
23:24 - Blocking HTTP Requests
25:12 - Allowing HTTP Requests/Captcha
27:20 - Conclusion

[@sammed.sankonatti]

You are not a human as you failed to solve CAPTCHA(XD), but you are a alien for creating such crystal clear content.

[@RahulWagh]

Thanks for the analogy 😊

[@suhasvengilat1026]

Just came across this session while travelling, explained the concepts simply superb and what a flow - superb Rahul.

[@RahulWagh]

You are welcome

[@vikramsingh-yl8rl]

You can explain each and every think in easy way ...... thank you so much

[@headfullofcode]

perfect and clear example, thanks much

[@RahulWagh]

Glad it was helpful!

[@mpn_family]

Nice explanation, Rahul simple real-time use case for AWS Web Application Firewall (WAF) with hands-on demonstration.

[@RahulWagh]

Thanks for liking

[@koteshwarrao5409]

Crystal clear explanation thank you..

[@RahulWagh]

Glad it was helpful!

[@atakanince]

Very helpful! Thank you!

[@RahulWagh]

You're welcome!

[@thapasujan07]

Thank you Sir. Much Love & Respect. 💌

[@RahulWagh]

You are very welcome

[@agun21st]

Wow! Explained Very easy way as abc.🎉

[@RahulWagh]

Glad to hear that

[@merajhaque8447]

Very well explained….thank u so much

[@RahulWagh]

You are welcome ❤️

[@narasimhakudva]

Simple and crisp hands on Rahul i appreciate,

[@RahulWagh]

You are welcome

[@user-lx8pu1bi7u]

brother I have a problem please solve this. give your WhatsApp number please I will talk with you.

[@praveenbelawadi]

Again no words . . best explaination on each topics always .. Only suggestion is Please provide user data in comment section always . .

[@RahulWagh]

Noted

[@devendrasingh-li7ly]

Great Session.

[@RahulWagh]

You are welcome

[@salwadbashashaik]

that's a nice video, explained very well

[@RahulWagh]

Glad you liked it!

[@kiranbakale8207]

amazing as always

[@RahulWagh]

Thank you! Cheers!

[@RajivPerera]

Thank you -- this was very helpful to me.

[@RahulWagh]

Glad it was helpful!

[@bhavyagupta514]

Amazing Videos Sir... Thank You So much for such a nice content

[@RahulWagh]

It's my pleasure

[@swapnilsatras1398]

कौतुकास्पद सर खूप छान शिकवले.....❤❤❤❤❤

[@RahulWagh]

Thanks swapnil

[@udaykumar8177]

Excellent teaching

[@RahulWagh]

Keep watching

[@vishakh8]

Very well explained

[@RahulWagh]

Glad it was helpful!

[@bijeeshkalavoor2977]

Thank you ❤

[@qadeersipra9347]

Very well explained , Love from Pakistan

[@new9light]

Sir ji you are awesome

[@new9light]

Big fan of your work

[@RahulWagh]

@@new9light thanks 🙏 !

[@AbhinavSriraj]

Hi Rahul, In adding rules (IP sets) Can you please explain how can we add security groups to Allow/Block traffic?

[@shubhamagarwal2076]

Thanks you 🌹🌹

[@RahulWagh]

You are so welcome!

[@raghuveer120]

Well Explained Rahul. Just one suggestion, while explaining the concept try to give real time examples this will help us to understand better.

[@RahulWagh]

There is one realtime DevOps project is coming

[@user-dr7be6mj6z]

Hello, greetings from Chile. How can this be done for multiple instances with different applications each and block traffic from certain countries?

[@naveent2799]

On point, beautiful and precise. can you make a video on athena, glue as well.

[@RahulWagh]

I will add it to my list soon it will be there

[@user-lx8pu1bi7u]

very important videos ❤❤❤❤

[@RahulWagh]

Glad you think so!

[@user-lx8pu1bi7u]

@@RahulWagh can you help me

[@RahulWagh]

what help do you need?

[@user-lx8pu1bi7u]

@@RahulWagh now I cannot explain give you telephone number please

[@sainishree]

hostname is not printing as expected from index.html

[@sahadevdahit]

Cloud front topic please ❤❤

[@Giridhar_KS]

Excellent Teaching. Thank you. I have a question ..I have added the code to display the Server Details in the EC2 Instance and when I try opening the page, it displays the Apache Page instead of showing the Server Details.. This has happened when I tried the previous parts as well.. Any particular reason for this ?

[@RahulWagh]

Try to check the /var/www/html directory for correct page

[@Giridhar_KS]

@@RahulWagh Hi Rahul, I checked this page and this is pointing to the Apache default index.html page

[@mycoursecollections]

Rahul Wagh Sir Looking for VPC -> DHCP option sets Concept (A-Z). Please let me know, if you already created any resources or planning to make a video, please make a video asap. Thank you

[@RahulWagh]

I will try to prepare something around it

[@mycoursecollections]

@@RahulWaghThank you for the update.

[@thierrymemel]

Hey Brother @Rahul, am still not able to see your "join" button for the membership, I really like your content, cause of you I am being an AWS expert, Need help from anyone part of the membership program, watching you brother from Ivory Coast

[@RahulWagh]

Here is the link through which you can also join - kzbin.info/door/7p4oXcPbgk_yTSHK7QlkSgjoin

[@thierrymemel]

@@RahulWagh what am saying is : I don't see the "Join" button on my side here when I click on the the link this what I mean.

[@iyiempire4667]

why you created vpc why you not directly connect WAF to EC2 instance ?

[@RahulWagh]

That is not the actual practice in industry you need to have vpc to tighten you security

[@subbaraosopparapu6708]

Array waf videos or doc please help with this if u have any links

[@tehsinbashir1292]

is there any video you create for this "Final Project: AWS Security Services Choose any project that you are interested in doing. The main thing is to learn and to have fun doing it. Come up with an innovative idea related to the course material that you are interested in implementing and securing. Requirements: Use two or more AWS Services. At least one of the two services has to be a security service. The total time spent on the project - including research, design, configuring, coding, testing, redesign, etc., should be around 10 - 15 hours. Submit: 2 - 3 page written report outlining the project details Include screenshots in the report Appendix"

[@karthicholan4689]

We can block the User IP Range by Deny rule in Security Group. Then what is the use of WAF. Please clarify if i am wrong.

[@RahulWagh]

Here are the scenarios where you need the power of WAF to block the requests- 1. You wanna block requests based on country, city 2. You wanna check requests header and block suspicious elements coming in http/https requests 3. You wanna check cookie information before processing requests. Above are the few examples which is not possible with security groups deny rules

[@cletusuzoma4652]

There’s no deny rule in security group. You can have deny rule with Nacls. Security group operates on a deny all bases which means that you have to explicitly allow any traffic and any traffic allowed in is also allowed out. This makes security group stateful unlike NACLs that is stateless, which means whatever is allowed in must be allowed out else it will be denied.

[@gauravchoudhary3733]

Hi Rahul, Please create some videos on Cloud Migration Services like; AWS Application Migration Service, AWS Database Migration Service and AWS DataSync.

[@thermalreboot]

There are common questions that this tutorial ignores, https has become the default protocol for web servers, you don't tell us if we need a second target group or security group for https requests. You should assume what we want in https and should tell us if we need to create a second target group or if the WAF/LB will perform https to the user and run over http for the backend.

[@srgrmohan]

Hi Rahul

[@RahulWagh]

👋 hello

[@user-yv7mu5bk4k]

while creating ALB you created extra security group ...i think no need to create a new SG. default SG already allowed if not allowed you can edit that only. why you are creating new SG.

[@venkatsai3264]

Hi i guess that is the sg for alb which is an extra layer of defence correct me if I'm wrong😊

[@RahulWagh]

Yeah that’s correct I can’t allow any to access ALB

[@johndonuts4258]

70% of the video is about confoguring a vpc and not waf...

[@RahulWagh]

Yeah but how would you do the waf setup without vpc

[@rohtasprajapati1587]

You could focus more on WAF application features and best practices to implement it.

[@munteanionut3993]

He structured every video so that if you are interested in only one topic, then you have all the pre-requisites of that specific topic within the very same vide. This way, you do not have to browse around youtube. If you already know how to setup vpc, subnets and all the others you can just skip using the timestamps of the sections in the video slider.

[@youngolutosin1658]

This is best way to solidify things.