AWS WAF is a web application firewall that helps protect your web applications or APIs against common web exploits that may affect availability, compromise security, or consume excessive resources. AWS WAF gives you control over how traffic reaches your applications by enabling you to create security rules that block common attack patterns, such as SQL injection or cross-site scripting, and rules that filter out specific traffic patterns you define. You can get started quickly using Managed Rules for AWS WAF, a pre-configured set of rules managed by AWS or AWS Marketplace Sellers. The Managed Rules for WAF address issues like the OWASP Top 10 security risks. These rules are regularly updated as new issues emerge. AWS WAF includes a full-featured API that you can use to automate the creation, deployment, and maintenance of security rules.
With AWS WAF, you pay only for what you use. The pricing is based on how many rules you deploy and how many web requests your application receives. There are no upfront commitments.
You can deploy AWS WAF on Amazon CloudFront as part of your CDN solution, the Application Load Balancer that fronts your web servers or origin servers running on EC2, or Amazon API Gateway for your APIs.
Below are the cmdlets which are available with AWS WAF
| CmdletName | ServiceOperation | ServiceName |
| Add-WAFResourceTag | TagResource | AWSWAF |
| Get-WAFActivatedRulesInRuleGroupList | ListActivatedRulesInRuleGroup | AWSWAF |
| Get-WAFByteMatchSet | GetByteMatchSet | AWSWAF |
| Get-WAFByteMatchSetList | ListByteMatchSets | AWSWAF |
| Get-WAFChangeToken | GetChangeToken | AWSWAF |
| Get-WAFChangeTokenStatus | GetChangeTokenStatus | AWSWAF |
| Get-WAFGeoMatchSet | GetGeoMatchSet | AWSWAF |
| Get-WAFGeoMatchSetList | ListGeoMatchSets | AWSWAF |
| Get-WAFIPSet | GetIPSet | AWSWAF |
| Get-WAFIPSetList | ListIPSets | AWSWAF |
| Get-WAFLoggingConfiguration | GetLoggingConfiguration | AWSWAF |
| Get-WAFLoggingConfigurationList | ListLoggingConfigurations | AWSWAF |
| Get-WAFPermissionPolicy | GetPermissionPolicy | AWSWAF |
| Get-WAFRateBasedRule | GetRateBasedRule | AWSWAF |
| Get-WAFRateBasedRuleList | ListRateBasedRules | AWSWAF |
| Get-WAFRateBasedRuleManagedKey | GetRateBasedRuleManagedKeys | AWSWAF |
| Get-WAFRegexMatchSet | GetRegexMatchSet | AWSWAF |
| Get-WAFRegexMatchSetList | ListRegexMatchSets | AWSWAF |
| Get-WAFRegexPatternSet | GetRegexPatternSet | AWSWAF |
| Get-WAFRegexPatternSetList | ListRegexPatternSets | AWSWAF |
| Get-WAFResourceTag | ListTagsForResource | AWSWAF |
| Get-WAFRule | GetRule | AWSWAF |
| Get-WAFRuleGroup | GetRuleGroup | AWSWAF |
| Get-WAFRuleGroupList | ListRuleGroups | AWSWAF |
| Get-WAFRuleList | ListRules | AWSWAF |
| Get-WAFSampledRequestList | GetSampledRequests | AWSWAF |
| Get-WAFSizeConstraintSet | GetSizeConstraintSet | AWSWAF |
| Get-WAFSizeConstraintSetList | ListSizeConstraintSets | AWSWAF |
| Get-WAFSqlInjectionMatchSet | GetSqlInjectionMatchSet | AWSWAF |
| Get-WAFSqlInjectionMatchSetList | ListSqlInjectionMatchSets | AWSWAF |
| Get-WAFSubscribedRuleGroupList | ListSubscribedRuleGroups | AWSWAF |
| Get-WAFWebACL | GetWebACL | AWSWAF |
| Get-WAFWebACLList | ListWebACLs | AWSWAF |
| Get-WAFXssMatchSet | GetXssMatchSet | AWSWAF |
| Get-WAFXssMatchSetList | ListXssMatchSets | AWSWAF |
| New-WAFByteMatchSet | CreateByteMatchSet | AWSWAF |
| New-WAFGeoMatchSet | CreateGeoMatchSet | AWSWAF |
| New-WAFIPSet | CreateIPSet | AWSWAF |
| New-WAFRateBasedRule | CreateRateBasedRule | AWSWAF |
| New-WAFRegexMatchSet | CreateRegexMatchSet | AWSWAF |
| New-WAFRegexPatternSet | CreateRegexPatternSet | AWSWAF |
| New-WAFRule | CreateRule | AWSWAF |
| New-WAFRuleGroup | CreateRuleGroup | AWSWAF |
| New-WAFSizeConstraintSet | CreateSizeConstraintSet | AWSWAF |
| New-WAFSqlInjectionMatchSet | CreateSqlInjectionMatchSet | AWSWAF |
| New-WAFWebACL | CreateWebACL | AWSWAF |
| New-WAFWebACLMigrationStack | CreateWebACLMigrationStack | AWSWAF |
| New-WAFXssMatchSet | CreateXssMatchSet | AWSWAF |
| Remove-WAFByteMatchSet | DeleteByteMatchSet | AWSWAF |
| Remove-WAFGeoMatchSet | DeleteGeoMatchSet | AWSWAF |
| Remove-WAFIPSet | DeleteIPSet | AWSWAF |
| Remove-WAFLoggingConfiguration | DeleteLoggingConfiguration | AWSWAF |
| Remove-WAFPermissionPolicy | DeletePermissionPolicy | AWSWAF |
| Remove-WAFRateBasedRule | DeleteRateBasedRule | AWSWAF |
| Remove-WAFRegexMatchSet | DeleteRegexMatchSet | AWSWAF |
| Remove-WAFRegexPatternSet | DeleteRegexPatternSet | AWSWAF |
| Remove-WAFResourceTag | UntagResource | AWSWAF |
| Remove-WAFRule | DeleteRule | AWSWAF |
| Remove-WAFRuleGroup | DeleteRuleGroup | AWSWAF |
| Remove-WAFSizeConstraintSet | DeleteSizeConstraintSet | AWSWAF |
| Remove-WAFSqlInjectionMatchSet | DeleteSqlInjectionMatchSet | AWSWAF |
| Remove-WAFWebACL | DeleteWebACL | AWSWAF |
| Remove-WAFXssMatchSet | DeleteXssMatchSet | AWSWAF |
| Update-WAFByteMatchSet | UpdateByteMatchSet | AWSWAF |
| Update-WAFGeoMatchSet | UpdateGeoMatchSet | AWSWAF |
| Update-WAFIPSet | UpdateIPSet | AWSWAF |
| Update-WAFRateBasedRule | UpdateRateBasedRule | AWSWAF |
| Update-WAFRegexMatchSet | UpdateRegexMatchSet | AWSWAF |
| Update-WAFRegexPatternSet | UpdateRegexPatternSet | AWSWAF |
| Update-WAFRule | UpdateRule | AWSWAF |
| Update-WAFRuleGroup | UpdateRuleGroup | AWSWAF |
| Update-WAFSizeConstraintSet | UpdateSizeConstraintSet | AWSWAF |
| Update-WAFSqlInjectionMatchSet | UpdateSqlInjectionMatchSet | AWSWAF |
| Update-WAFWebACL | UpdateWebACL | AWSWAF |
| Update-WAFXssMatchSet | UpdateXssMatchSet | AWSWAF |
| Write-WAFLoggingConfiguration | PutLoggingConfiguration | AWSWAF |
| Write-WAFPermissionPolicy | PutPermissionPolicy | AWSWAF |
| Add-WAFRResourceTag | TagResource | AWSWAF Regional |
| Get-WAFRActivatedRulesInRuleGroupList | ListActivatedRulesInRuleGroup | AWSWAF Regional |
| Get-WAFRByteMatchSet | GetByteMatchSet | AWSWAF Regional |
| Get-WAFRByteMatchSetList | ListByteMatchSets | AWSWAF Regional |
| Get-WAFRChangeToken | GetChangeToken | AWSWAF Regional |
| Get-WAFRChangeTokenStatus | GetChangeTokenStatus | AWSWAF Regional |
| Get-WAFRGeoMatchSet | GetGeoMatchSet | AWSWAF Regional |
| Get-WAFRGeoMatchSetList | ListGeoMatchSets | AWSWAF Regional |
| Get-WAFRIPSet | GetIPSet | AWSWAF Regional |
| Get-WAFRIPSetList | ListIPSets | AWSWAF Regional |
| Get-WAFRLoggingConfiguration | GetLoggingConfiguration | AWSWAF Regional |
| Get-WAFRLoggingConfigurationList | ListLoggingConfigurations | AWSWAF Regional |
| Get-WAFRPermissionPolicy | GetPermissionPolicy | AWSWAF Regional |
| Get-WAFRRateBasedRule | GetRateBasedRule | AWSWAF Regional |
| Get-WAFRRateBasedRuleList | ListRateBasedRules | AWSWAF Regional |
| Get-WAFRRateBasedRuleManagedKey | GetRateBasedRuleManagedKeys | AWSWAF Regional |
| Get-WAFRRegexMatchSet | GetRegexMatchSet | AWSWAF Regional |
| Get-WAFRRegexMatchSetList | ListRegexMatchSets | AWSWAF Regional |
| Get-WAFRRegexPatternSet | GetRegexPatternSet | AWSWAF Regional |
| Get-WAFRRegexPatternSetList | ListRegexPatternSets | AWSWAF Regional |
| Get-WAFRResourceForWebACLList | ListResourcesForWebACL | AWSWAF Regional |
| Get-WAFRResourceTag | ListTagsForResource | AWSWAF Regional |
| Get-WAFRRule | GetRule | AWSWAF Regional |
| Get-WAFRRuleGroup | GetRuleGroup | AWSWAF Regional |
| Get-WAFRRuleGroupList | ListRuleGroups | AWSWAF Regional |
| Get-WAFRRuleList | ListRules | AWSWAF Regional |
| Get-WAFRSampledRequestList | GetSampledRequests | AWSWAF Regional |
| Get-WAFRSizeConstraintSet | GetSizeConstraintSet | AWSWAF Regional |
| Get-WAFRSizeConstraintSetList | ListSizeConstraintSets | AWSWAF Regional |
| Get-WAFRSqlInjectionMatchSet | GetSqlInjectionMatchSet | AWSWAF Regional |
| Get-WAFRSqlInjectionMatchSetList | ListSqlInjectionMatchSets | AWSWAF Regional |
| Get-WAFRSubscribedRuleGroup | ListSubscribedRuleGroups | AWSWAF Regional |
| Get-WAFRWebACL | GetWebACL | AWSWAF Regional |
| Get-WAFRWebACLForResource | GetWebACLForResource | AWSWAF Regional |
| Get-WAFRWebACLList | ListWebACLs | AWSWAF Regional |
| Get-WAFRXssMatchSet | GetXssMatchSet | AWSWAF Regional |
| Get-WAFRXssMatchSetList | ListXssMatchSets | AWSWAF Regional |
| New-WAFRByteMatchSet | CreateByteMatchSet | AWSWAF Regional |
| New-WAFRGeoMatchSet | CreateGeoMatchSet | AWSWAF Regional |
| New-WAFRIPSet | CreateIPSet | AWSWAF Regional |
| New-WAFRRateBasedRule | CreateRateBasedRule | AWSWAF Regional |
| New-WAFRRegexMatchSet | CreateRegexMatchSet | AWSWAF Regional |
| New-WAFRRegexPatternSet | CreateRegexPatternSet | AWSWAF Regional |
| New-WAFRRule | CreateRule | AWSWAF Regional |
| New-WAFRRuleGroup | CreateRuleGroup | AWSWAF Regional |
| New-WAFRSizeConstraintSet | CreateSizeConstraintSet | AWSWAF Regional |
| New-WAFRSqlInjectionMatchSet | CreateSqlInjectionMatchSet | AWSWAF Regional |
| New-WAFRWebACL | CreateWebACL | AWSWAF Regional |
| New-WAFRWebACLMigrationStack | CreateWebACLMigrationStack | AWSWAF Regional |
| New-WAFRXssMatchSet | CreateXssMatchSet | AWSWAF Regional |
| Register-WAFRWebACL | AssociateWebACL | AWSWAF Regional |
| Remove-WAFRByteMatchSet | DeleteByteMatchSet | AWSWAF Regional |
| Remove-WAFRGeoMatchSet | DeleteGeoMatchSet | AWSWAF Regional |
| Remove-WAFRIPSet | DeleteIPSet | AWSWAF Regional |
| Remove-WAFRLoggingConfiguration | DeleteLoggingConfiguration | AWSWAF Regional |
| Remove-WAFRPermissionPolicy | DeletePermissionPolicy | AWSWAF Regional |
| Remove-WAFRRateBasedRule | DeleteRateBasedRule | AWSWAF Regional |
| Remove-WAFRRegexMatchSet | DeleteRegexMatchSet | AWSWAF Regional |
| Remove-WAFRRegexPatternSet | DeleteRegexPatternSet | AWSWAF Regional |
| Remove-WAFRResourceTag | UntagResource | AWSWAF Regional |
| Remove-WAFRRule | DeleteRule | AWSWAF Regional |
| Remove-WAFRRuleGroup | DeleteRuleGroup | AWSWAF Regional |
| Remove-WAFRSizeConstraintSet | DeleteSizeConstraintSet | AWSWAF Regional |
| Remove-WAFRSqlInjectionMatchSet | DeleteSqlInjectionMatchSet | AWSWAF Regional |
| Remove-WAFRWebACL | DeleteWebACL | AWSWAF Regional |
| Remove-WAFRXssMatchSet | DeleteXssMatchSet | AWSWAF Regional |
| Unregister-WAFRWebACL | DisassociateWebACL | AWSWAF Regional |
| Update-WAFRByteMatchSet | UpdateByteMatchSet | AWSWAF Regional |
| Update-WAFRGeoMatchSet | UpdateGeoMatchSet | AWSWAF Regional |
| Update-WAFRIPSet | UpdateIPSet | AWSWAF Regional |
| Update-WAFRRateBasedRule | UpdateRateBasedRule | AWSWAF Regional |
| Update-WAFRRegexMatchSet | UpdateRegexMatchSet | AWSWAF Regional |
| Update-WAFRRegexPatternSet | UpdateRegexPatternSet | AWSWAF Regional |
| Update-WAFRRule | UpdateRule | AWSWAF Regional |
| Update-WAFRRuleGroup | UpdateRuleGroup | AWSWAF Regional |
| Update-WAFRSizeConstraintSet | UpdateSizeConstraintSet | AWSWAF Regional |
| Update-WAFRSqlInjectionMatchSet | UpdateSqlInjectionMatchSet | AWSWAF Regional |
| Update-WAFRWebACL | UpdateWebACL | AWSWAF Regional |
| Update-WAFRXssMatchSet | UpdateXssMatchSet | AWSWAF Regional |
| Write-WAFRLoggingConfiguration | PutLoggingConfiguration | AWSWAF Regional |
| Write-WAFRPermissionPolicy | PutPermissionPolicy | AWSWAF Regional |
| Add-WAF2ResourceTag | TagResource | AWSWAF V2 |
| Add-WAF2WebACLToResource | AssociateWebACL | AWSWAF V2 |
| Get-WAF2AvailableManagedRuleGroupList | ListAvailableManagedRuleGroups | AWSWAF V2 |
| Get-WAF2IPSet | GetIPSet | AWSWAF V2 |
| Get-WAF2IPSetList | ListIPSets | AWSWAF V2 |
| Get-WAF2LoggingConfiguration | GetLoggingConfiguration | AWSWAF V2 |
| Get-WAF2LoggingConfigurationList | ListLoggingConfigurations | AWSWAF V2 |
| Get-WAF2ManagedRuleGroup | DescribeManagedRuleGroup | AWSWAF V2 |
| Get-WAF2PermissionPolicy | GetPermissionPolicy | AWSWAF V2 |
| Get-WAF2RateBasedStatementManagedKey | GetRateBasedStatementManagedKeys | AWSWAF V2 |
| Get-WAF2RegexPatternSet | GetRegexPatternSet | AWSWAF V2 |
| Get-WAF2RegexPatternSetList | ListRegexPatternSets | AWSWAF V2 |
| Get-WAF2ResourcesForWebACLList | ListResourcesForWebACL | AWSWAF V2 |
| Get-WAF2ResourceTag | ListTagsForResource | AWSWAF V2 |
| Get-WAF2RuleGroup | GetRuleGroup | AWSWAF V2 |
| Get-WAF2RuleGroupList | ListRuleGroups | AWSWAF V2 |
| Get-WAF2SampledRequest | GetSampledRequests | AWSWAF V2 |
| Get-WAF2WebACL | GetWebACL | AWSWAF V2 |
| Get-WAF2WebACLForResource | GetWebACLForResource | AWSWAF V2 |
| Get-WAF2WebACLsList | ListWebACLs | AWSWAF V2 |
| New-WAF2IPSet | CreateIPSet | AWSWAF V2 |
| New-WAF2RegexPatternSet | CreateRegexPatternSet | AWSWAF V2 |
| New-WAF2RuleGroup | CreateRuleGroup | AWSWAF V2 |
| New-WAF2WebACL | CreateWebACL | AWSWAF V2 |
| Remove-WAF2FirewallManagerRuleGroup | DeleteFirewallManagerRuleGroups | AWSWAF V2 |
| Remove-WAF2IPSet | DeleteIPSet | AWSWAF V2 |
| Remove-WAF2LoggingConfiguration | DeleteLoggingConfiguration | AWSWAF V2 |
| Remove-WAF2PermissionPolicy | DeletePermissionPolicy | AWSWAF V2 |
| Remove-WAF2RegexPatternSet | DeleteRegexPatternSet | AWSWAF V2 |
| Remove-WAF2ResourceTag | UntagResource | AWSWAF V2 |
| Remove-WAF2RuleGroup | DeleteRuleGroup | AWSWAF V2 |
| Remove-WAF2WebACL | DeleteWebACL | AWSWAF V2 |
| Remove-WAF2WebACLFromResource | DisassociateWebACL | AWSWAF V2 |
| Test-WAF2Capacity | CheckCapacity | AWSWAF V2 |
| Update-WAF2IPSet | UpdateIPSet | AWSWAF V2 |
| Update-WAF2RegexPatternSet | UpdateRegexPatternSet | AWSWAF V2 |
| Update-WAF2RuleGroup | UpdateRuleGroup | AWSWAF V2 |
| Update-WAF2WebACL | UpdateWebACL | AWSWAF V2 |
| Write-WAF2LoggingConfiguration | PutLoggingConfiguration | AWSWAF V2 |
| Write-WAF2PermissionPolicy | PutPermissionPolicy | AWSWAF V2 |
You can also check other AWS Services, and each services cmdlets we are providing.