- Home
- Web Security Software
- AWS WAF
On the recordRead 30 Sep 202615 facts
AWS WAF
Plans and prices
Usage-based AWS WAF
Priced on request
No upfront commitments · Additional charges may apply for Bot Control, Fraud Control, DDoS Protection, CAPTCHA, and Marketplace managed rule groups
Read 30 Sep 2026 · aws.amazon.com
On the record
- Additional costs
- Marketplace managed rule groups can incur seller fees in addition to AWS WAF charges.aws.amazon.com · read 30 Sep 2026
- AI traffic monetization
- AWS WAF offers configurable pricing and payment verification for AI bots and agents accessing content and APIs, at no additional AWS WAF charge.aws.amazon.com · read 30 Sep 2026
- Bot controls
- Bot Control can block or rate-limit pervasive bots and allow common bots such as status monitors and search engines.aws.amazon.com · read 30 Sep 2026
- Compliance
- AWS states it supports 143 security standards and compliance certifications, including PCI-DSS, HIPAA/HITECH, FedRAMP, GDPR, FIPS 140-3, and NIST 800-171.aws.amazon.com · read 30 Sep 2026
- Fraud prevention
- Fraud Control monitors login and signup pages for compromised credentials and fake account creation.aws.amazon.com · read 30 Sep 2026
- Integrations
- AWS WAF charges are additional to pricing for CloudFront, Cognito, Application Load Balancer, API Gateway, AppSync, and Shield Advanced.aws.amazon.com · read 30 Sep 2026
- Intended customers
- AWS says its customers include startups, enterprises, nonprofits, and governments.aws.amazon.com · read 30 Sep 2026
- Managed rules
- Managed rule groups provide protections including bot control, account takeover prevention, and account creation fraud prevention.aws.amazon.com · read 30 Sep 2026
- Mobile telemetry
- Account takeover and account creation fraud prevention support optional or recommended JavaScript and iOS/Android SDKs for additional device telemetry.aws.amazon.com · read 30 Sep 2026
- Pricing factors
- Charges depend on web ACLs, rules, and processed requests, and pricing may vary across AWS Regions.aws.amazon.com · read 30 Sep 2026
- Protection setup
- Guided setup offers a single-page workflow with preconfigured security defaults tailored to an application type.aws.amazon.com · read 30 Sep 2026
- Purpose
- AWS WAF protects web applications from common exploits.aws.amazon.com · read 30 Sep 2026
- Rule reuse
- A centralized set of rules can be deployed across multiple websites and applications.aws.amazon.com · read 30 Sep 2026
- Support
- AWS offers pricing assistance through specialists who can provide a personalized quote.aws.amazon.com · read 30 Sep 2026
- Traffic rules
- Rules can filter requests by IP address, HTTP headers and body, and custom URIs, and can block SQL injection and cross-site scripting.aws.amazon.com · read 30 Sep 2026
