AWS WAF lets you create rules to filter web traffic based on conditions that include IP addresses, HTTP headers and body, or custom URIs. This gives you an additional layer of protection from web attacks that attempt to exploit vulnerabilities in custom or third party web applications. In addition, AWS WAF makes it easy to create rules that block common web exploits like SQL injection and cross site scripting.

AWS WAF Bot Control is a managed rule group that gives you visibility and control over common and pervasive bot traffic that can consume excess resources or perform other undesired activities. With just a few clicks, you can block, pervasive bots, such as scrapers, scanners, and crawlers, or you can allow common bots, such as status monitors and search engines.

AWS WAF is fully integrated with Amazon CloudWatch, making it easy to setup custom alarms when thresholds are exceeded or particular attacks occur. Also, AWS WAF's does provide real-time metrics and capture raw requests that include details about IP addresses, geo locations, URIs, User-Agent and Referrers.

AWS WAF supports seamless integration with other AWS services like Firewall manager and other networking services. You can centrally manage AWS WAF deployments across multiple AWS accounts by using Firewall Manager. This makes the governance easier than ever by ensuring that all the rules we create are in line with the security policy defined by the organization.