AWS Amplify Hosting announces Web Application Firewall Protection in general availability

Today, we are announcing the general availability of our Web Application Firewall Protection for AWS Amplify Hosting. This new feature allows customers to easily attach a web application firewall to their AWS Amplify apps, enhancing the security of their hosted applications. With this integration, customers can implement robust security measures without additional configuration steps or management overhead.

The AWS WAF integration with Amplify Hosting provides access to a full range of AWS WAF capabilities. Customers can now use managed rules to protect against common web exploits and vulnerabilities such as SQL injection and cross-site scripting (XSS). Additionally, they can create custom rules based on their specific application needs, implement rate-based rules to protect against DDoS attacks, and use geo-blocking to restrict access from specific countries. This integration enables customers to implement in-depth security strategies for their web applications to help safeguard against threats.

This new feature is available in all AWS Regions where Amplify Hosting operates. Customers can attach AWS WAF to their Amplify apps through a simple one-click integration in the Amplify console or by using infrastructure as code (IaC).

Amplify Hosting will charge a $15/month per app fee to use this feature, plus any costs incurred by the AWS WAF service. To get started with AWS WAF integration for Amplify Hosting, visit the Amplify console and navigate to your app settings. Select the Firewall tab to choose predefined rules or create custom configurations. Or you can refer to the documentation.