Core concept
Rules: AWS Managed Rules (SQL injection, XSS, bot control), custom (regex, rate limit, geo). Actions: allow/block/count/CAPTCHA.
Advertisement
How it works
Web ACL = rule set attached to resource. Costs $5/ACL + $1/rule + $0.60/million requests.
Advertisement
Trade-offs + gotchas
Public web apps. API endpoints. Login pages. Anywhere hit by internet.