All regexes added to the single set are matched by the OR statement, i.e. The Regex Pattern Set is another resource that helps to organize regexes, in fact, is a set of regexes. This rule includes one statement that declares that the Host Header should match Regex Pattern Set, thus only in this case it will be passed. There is the PreventHostInjections rule that prevents the Host Header vulnerabilities.

AWS-AWSManagedRulesKnownBadInputsRuleSetĪWS provides a lot of rules such as baseline and use-case specific rules, for details, please refer to the Baseline rule groups.

The ACL includes three managed AWS rules that secure the exposed traffic: The WAF ACL resource is the main resource used for the configuration The default web ACL option is Block.

WAF configuration (the right part of the scheme).

Prerequisites (mostly the left part of the scheme) - AWS ALB, Compute Resources (EC2, EKS, etc.).

Deployed infrastructure includes Nginx Ingress Controller.

To follow the instruction, check the following prerequisites:

This page contains accurate information on how to configure AWS WAF using Terraform with the aim to have a secured traffic exposure and to prevent the Host Header vulnerabilities. Secured Secrets Management for Application Deployment.Deploy Application With Custom Build Tool/Framework.Scaffold and Deploy FastAPI Application.

Migrate CI Pipelines From Jenkins to Tekton.Aggregate Application Logs Using EFK Stack.Static Application Security Testing Overview.Static Application Security Testing Static Application Security Testing.Platform Capabilities Platform Capabilities.Associate IAM Roles With Service Accounts.Configure AWS WAF With Terraform Configure AWS WAF With Terraform Table of contents.

Manage Jenkins CD Pipeline Job Provisioner.Manage Jenkins CI Pipeline Job Provisioner.Manage Jenkins Pipelines Manage Jenkins Pipelines.

Aws waf api gateway