Security World 4 · Edge Shields · Stage 2

Rule Order

Rules read in priority order and stop at the first terminating action. Count stops nothing, the window and the key decide the flood, and the logs must land somewhere.

  • AWS WAF rule priority
  • Terminating and Count actions
  • Rate-based rules
  • Geo match and IP sets
  • Managed rule groups
  • WAF logging and OCSF
Domain
Security
World
Security World 4: Edge Shields (Specialty)
Game type
Edge security: Set the CDN, the web firewall and the bucket in front of an application.
Time
About 35 minutes on a first attempt (estimated)
Exam guides
  • SAA-C03Task 1.2: Design secure workloads and applications
  • SOA-C03Skill 5.1.3: Audit AWS network protection services in a single account
  • SAP-C02Task 1.2: Prescribe security controls
  • SCS-C03Skill 3.1.1: Define and select edge security strategies based on anticipated threats and attacks; Skill 3.1.2: Implement appropriate network edge protection (for example, CloudFront headers, AWS WAF, AWS IoT policies, protecting against OWASP Top 10 threats, Amazon S3 cross-origin resource sharing [CORS], Shield Advanced); Skill 3.1.3: Design and implement AWS edge controls and rules based on requirements (for example, geography, geolocation, rate limiting, client fingerprinting); Skill 3.1.4: Configure integrations with AWS edge services and third-party services (for example, by ingesting data in Open Cybersecurity Schema Framework [OCSF] format, by using third-party WAF rules)