AWS Web Application Firewall (WAF) protect web applications and APIs from attacks
AWS WAF is your first line of defense against web exploits
Use AWS WAF to protect your API Gateway APIs
Protect from SQL injection, Cross-site scripting (XSS)
Protect against HTTP flooding attacks.
Use AWS WAF to access or restrict from embargoed nation
AWS WAF rules are evaluated before other access control features, such as resource policies, IAM policies, Lambda authorizers, and Amazon Cognito authorizers
WAF can be integrated with Application Load Balancer (ALB) (and NOT NLB)
You can deploy AWS WAF on
CloudFront
Application Load Balancer
API Gateway
AWS AppSync
https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-control-access-aws-waf.html
