Select Language:
If you’re using AWS CloudFront and want to protect your website from malicious attacks, setting up AWS WAF (Web Application Firewall) is a good step. While it’s not always straightforward to tell if a certain request is harmful just by looking at access logs, configuring AWS WAF can help you identify and block suspicious traffic.
The good news is that if you are on CloudFront’s free plan, AWS WAF is included by default. This means you can start monitoring metrics to see if there are requests that seem suspicious. These insights can help you decide whether further action is necessary to protect your site.
However, keep in mind that with the free plan, you can’t block bot traffic directly with WAF. To do more active filtering and blocking, you might need to upgrade your plan or explore additional tools.
Overall, enabling AWS WAF on CloudFront is a smart move to enhance security. Start by checking your CloudFront metrics to identify potential threats, and then make adjustments based on what you see. This proactive approach will help keep your website safer from malicious requests.


