SAN (storage area network)

介紹

核心功能

• Allow all requests except the ones that you specify
• Block all requests except the ones that you specify
• Count requests that match your criteria
• Run CAPTCHA checks against requests that match your criteria

結構

• Application Load Balancer + WAF
• CloudFront  + WAF

Rules

Web ACLs -protect-> AWS resources

associate it with one or more AWS resources.

The relationship between web ACL and AWS resources is one-to-many.
(same resource type)

Rules

Each rule contains a statement that defines the inspection criteria, and an action to take

Rules groups

- AWS Managed Rules
- AWS Marketplace sellers
- your own rule groups

web ACL capacity units (WCU)

calculate and control the operating resources that are required to run your rules

Default: 1,500