AWS WAF Granular Geographic Match | Amazon Web Services

Опубликовано 22 января 2024, 23:21

AWS Web Application Firewall (WAF) geographic match statement adds labels to each request, to indicate ISO 3166 country and region codes. With geographic match rule statements, customers can control access at the region level. The geographic match rule statement automatically annotates a request from Texas, USA with the label awswaf:clientip:geo:region:US-TX, and a request from Queensland, Australia with the label awswaf:clientip:geo:region:AU-QLD. Customers can add label matching rules to capture region labels and block specific regions, without blocking the entire country.

Getting started with geographic match rule statements is easy. The geographic match rule adds geographic region and country labels to every request that it evaluates, enabling customers to write label match statements according to the regions they wish to block or allow. Geographic match rule statements can be combined with other AWS WAF rules to build sophisticated filtering policies.

Customers who want to block certain geographies while still allowing certain developer IP addresses from those locations can combine geo and IP match conditions to allow only authorized users.

Other customers who want to prioritize users in their primary geography to optimize resource consumption can combine geo match conditions with AWS WAF rate-based Rules. These customers can set a higher rate limit for end users in preferred countries or regions while setting a lower rate limit for others.

Learn more at go.aws/3HrMJv8.

Subscribe:
More AWS videos: go.aws/3m5yEMW
More AWS events videos: go.aws/3ZHq4BK

Do you have technical AWS questions?
Ask the community of experts on AWS re:Post: go.aws/3lPaoPb

ABOUT AWS
Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform, offering over 200 fully featured services from data centers globally. Millions of customers — including the fastest-growing startups, largest enterprises, and leading government agencies — are using AWS to lower costs, become more agile, and innovate faster.

#AWSWebApplicationFirewall #GranularGeographicMatch #GeographicMatchRuleStatements #SophisticatedFilteringPolicies #NetworkandApplicationProtection #AWSSecurityServicesFeatureDemo #AWS #AmazonWebServices #CloudComputing