AWS re:Invent 2019: Using Amazon CloudFront, AWS WAF, and Lambda@Edge to keep spammers out (CMY303)

In this session, we look at the timeline, analysis, and solution implemented for a sudden attack by spammers. Suddenly, the number of newly registered users in our system spiked. We could see that these new users were likely spammers. It was a more sophisticated attack than earlier, as traffic originated from everywhere; captchas and email verifications were bypassed. We already had some countermeasures in place, including a manual process for approval. We needed a quick and cost-effective solution. By using Amazon CloudFront, AWS WAF, Lambda@Edge, and some smarts, we permanently stopped 99% of the spammers within an hour.

[@NR-bt7yz]

Wow - thanks Anders for taking the time to explain all that! AWS: Please have more talks like this from real-world implementers.

[@awssupport]

Glad you enjoyed the video! Keep a look-out for more content from our builders. 👀 ^RS

[@katelyngleason33]

this is one of my favorite reinvent presos ever.. so informative and crystal clear

[@RPRAVEENKUMAR]

Very informative and nicely delivered... All my WAF doubts cleared at high level.

[@HambaAllah-xn2zp]

Thank you!!!