AWS Web Application Firewall | Firewall Manager | AWS WAF Bot Control

This video gives you in-depth details about What is a firewall?, what is a Web Application Firewall?, How does a Firewall Manager Work? How does AWS WAF BOT control work?
Login to www.pythoholic.com for the full AWS SAAC02 course.
AWS WAF is a web application firewall that helps protect your web applications or APIs against common web exploits that may affect availability, compromise security, or consume excessive resources.
And if WAF, helps protect your web applications or APIs against common web exploits, let's talk about some of the most important exploits.
These are from the top 10 exploits on the OWASP website, you can check it out as well.
We have a lot of things lined up for you today and in today's session we will talk about:
Let's understand Firewalls and why are they important?
What is AWS Web Application Firewall?
How does a Web Application Firewall work? Benefits of using WAF
What is AWS Firewall Manager? How It works and its benefits?
AWS WAF Bot Control and How it Works?
Real-time Example of How to Identify and Control BOTS
It will be a very handy session and a very important one, so please watch the video till the end, and as usual, you know the timelines will be in the description below for your convenience.
So if you want you can skip to any part as you wish.
🍀 Timelines for your convenience:
00:00 // Intro
01:56 // Let's understand Firewalls and why are they important?
08:58 // Host-Based Firewalls
09:58 // Network-Based Firewalls
11:08 // Different Types of Firewalls
14:06 // How does a Basic Firewall Work?
16:30 // What is a Web Application Firewall and How does it Work?
17:50 // What is AWS Web Application Firewall?
25:18 // What is AWS Firewall Manager?
29:27 // How does a Web Application Firewall work?
32:54 // What are the benefits of using Firewall Manager?
34:25 // What are the benefits of using an AWS Web Application Firewall?
37:22 // How does AWS WAF work?
39:11 // What are the AWS WAF Managed Rules?
42:09 // AWS WAF Bot Control and How it Works?
46:52 // Real-time Example of How to Identify and Control BOTS
50:52 // Outro
Join this channel to get access to perks:
/ @pythoholic
⭐ Kite is a free AI-powered coding assistant that will help you code faster and smarter. The Kite plugin integrates with all the top editors and IDEs to give you smart completions and documentation while you’re typing. I've been using Kite for 6 months and I love it!
www.kite.com/get-kite/?...
🍀 If you wish to support me please choose the links below:
INSTAMOJO : instamojo.com/@pythoholic
PAYPAL : paypal.me/pythoholic
BECOME A MEMBER (PATREON) : / pythoholic
GADGETS I USE : www.amazon.in/shop/pythoholic
AWS Solutions Architect Associate Certification 2021 Playlist:
tinyurl.com/y4lr8zu4
Please follow we in the links below to stay updated: 🙌
🍀Click on the link below to subscribe: tinyurl.com/qqebnwz
🍀Instagram: / tougherapollo
🍀Facebook: / bepythoholic
🍀Twitter: / bepythoholic
🍀Discord: / discord
Disclaimer: The content provided in the channel are not affiliated in any way to the organization. We provide information here on the channel based on the knowledge we have on the topic. We advise our viewers to please do their own research and read more about them from the source provided by the organization to get a better outlook on the topic that has been covered.
These videos are just to provide you a platform to learn, and there can be mistakes and we are always trying to improve based on your feedback. we recommend viewers to have an open mind. Please support the channel to get more content like these in the future.
#AWSWAF #FirewallManager #Pythoholic

[@Pythoholic]

Login to www.pythoholic.com for the full AWS SAAC02 course.
🍀 Timelines for your convenience:
00:00​ // Intro
01:56​ // Let's understand Firewalls and why are they important?
08:58​ // Host-Based Firewalls
09:58​ // Network-Based Firewalls
11:08​ // Different Types of Firewalls
14:06​ // How does a Basic Firewall Work?
16:30​ // What is a Web Application Firewall and How does it Work?
17:50​ // What is AWS Web Application Firewall?
25:18​ // What is AWS Firewall Manager?
29:27​ // How does a Web Application Firewall work?
32:54​ // What are the benefits of using Firewall Manager?
34:25​ // What are the benefits of using an AWS Web Application Firewall?
37:22​ // How does AWS WAF work?
39:11​ // What are the AWS WAF Managed Rules?
42:09​ // AWS WAF Bot Control and How it Works?
46:52​ // Real-time Example of How to Identify and Control BOTS
50:52​ // Outro

[@saimwasi5612]

Iggbx

[@HeyMani92]

Thank you, Team this is a great session ever in youtube :)

[@mohsinnisar8567]

very descriptive and informative, with nice colorful presentation which engage the viewers and never let them be bored. PS: On top of that, very soft and nice voice you're blessed with.

[@Pythoholic]

thank u sir, you are the first to say my voice is good. thanks

[@meow5412]

Thanks for the video! This is so good!!

[@praveenrane2787]

Very Well explained thank you so much

[@shajeep9170]

Good work 👏🏽👏🏽👏🏽

[@shubamsalaria971]

I have a question we can use Security groups to filter input requests on the basis of ports and we can use NACL to block input requests on the basis of IP address so why to use WAF then?

[@Pythoholic]

Certainly! Security groups, NACLs (Network Access Control Lists), and WAFs (Web Application Firewalls) all play distinct roles in the security landscape of cloud environments, especially in AWS. Here's a brief breakdown:
1. **Security Groups**:
- Operate at the instance level.
- Stateful: If you allow an incoming request from an IP, the response is automatically allowed, regardless of outbound rules.
- Only allow rules; there are no deny rules.
- Typically used to control both inbound and outbound traffic at the port and protocol level.
2. **NACLs**:
- Operate at the subnet level.
- Stateless: Inbound and outbound rules are treated separately.
- Can have both allow and deny rules.
- Used to control traffic at the subnet level based on IP protocol, port number, source/destination IP address.
3. **WAF**:
- Operates at the application layer.
- Protects web applications from common web exploits like SQL injection, XSS (cross-site scripting), and other OWASP top 10 threats.
- Can filter traffic based on complex string patterns, HTTP headers, body content, and more.
- Can be integrated with other services for logging, monitoring, and alerting.
Reasons to use a WAF in addition to Security Groups and NACLs:
1. **Layered Defense**: While Security Groups and NACLs provide a good first line of defense at the network layer, WAFs provide an additional layer of security at the application layer. This multi-layered approach ensures that even if one layer is compromised, others can still provide protection.
2. **Specific Threat Protection**: WAFs are designed to protect against specific application layer threats that can't be addressed by just filtering based on IP or port.
3. **Custom Rules**: WAFs allow for the creation of custom rules tailored to the specific needs of your application, allowing for more granular control over traffic.
4. **Logging and Monitoring**: WAFs often come with enhanced logging and monitoring capabilities, providing insights into attack patterns and helping in forensic analysis.
5. **Rate-based Rules**: Some WAFs can also protect against DDoS attacks by limiting the rate of requests from a particular IP.
In summary, while Security Groups and NACLs are essential for basic network-level protection, a WAF provides specialized protection for web applications against a variety of threats. Using them in conjunction offers a more comprehensive security posture.

[@zakariajaouhari2416]

hi sir, thanks for your high-quality courses, what is the name of the application that you use to prepare your presentations?

[@Pythoholic]

Powerpoint ;)

[@zakariajaouhari2416]

@@Pythoholic wow , well done , and from where you Took all the aws services logos?

[@sandipram5022]

@@zakariajaouhari2416 internet :)

[@Aniruddhasil]

Hi sir ,
Please sir create this video explanation on hands-on lab.

[@Pythoholic]

Sure will do that thanks much

[@Reapswtf]

Anyone else getting lots of static in the audio quality during the bot control section?

[@Pythoholic]

I realized that, TH-cam has just cracked up the video. I will try and fix it. Thanks for pointing out.

[@Reapswtf]

@@Pythoholic Not a problem, just wanted to know if it was me or the audio itself :) thanks.

[@SAMSung-li4kz]

Thank you very much sir. But what about AWs cloud practitioner course?

[@Pythoholic]

That will also be up shortly. Keep the support. :)