The movie got the attention of the most powerful man in the world.Īccording to journalist Fred Kaplan, after seeing a special screening of the movie “War Games,” then-President Ronald Reagan asked the US Military Joint Chiefs of Staff if something like this could really happen. In 1983, there was a movie called War Games about a boy, David, played by Matthew Broderick, who hacks into NORAD’s Military Computer System and accidentally ALMOST starts World War III. But we all know there is nothing simple about API Security. The simple answer is that it is about applying and managing security for your APIs. You can find more such articles here.APIs are everywhere – and API security is of the utmost importance for every organization.īecause I have spent my entire career in the world of APIs and Internet applications, I have seen first-hand some of the vulnerabilities that can exist with APIs.Īccording to a recent Gartner CIO and Technical Executive survey, cyber and information security are at the top of the list for planned investments in 2022.

Here is the official Documentation for AWS WAF and API Gateway. We hope this article has been informative and helpful in getting started with AWS WAF and API Gateway. With a wide range of pre-configured rules and the ability to create custom rules, AWS WAF provides a powerful and flexible solution for protecting web applications. Finally, we integrated AWS WAF with API Gateway and tested the setup by simulating an attack.īy using AWS WAF with API Gateway, you can add an additional layer of security to your API and protect it from various web attacks. We started by creating an HTTP API on API Gateway, followed by creating an AWS WAF Web ACL to define our rules for protecting the API. In this article, we explored how to use AWS WAF to protect an HTTP API on API Gateway from web attacks.

If the setup is working correctly, you should see an error message indicating that the request has been blocked by AWS WAF.In the URL, append the following code snippet to simulate an SQL injection attack:.Open a web browser and navigate to your API URL.Follow the steps below to simulate an attack: To test the setup, we can simulate an attack on our API and see if the AWS WAF Web ACL is able to block it.

Api gateway waf