Individual skill
waf
Configures AWS WAF to filter web traffic: creating web access control lists (web ACLs) on CloudFront, Application Load Balancers, API Gateway, and AppSync; AWS Managed Rules tuned in Count mode; rate-based rules for HTTP floods; IP set and geographic match rules; Bot Control (Common and Targeted); turning bot labels into a confidence signal; stripping spoofed inbound x-amzn-waf-* headers; recovering the real client IP behind a CDN; Fraud Control (account takeover and account creation fraud prevention); and logging and request sampling. Use when the user wants to protect a web application or API from common exploits, bots, credential stuffing, fake-account creation, or HTTP floods at the application layer (layer 7). Routes to the right per-task procedure in references. Do NOT use for L3/L4 DDoS protection (shieldadvanced skill), multi-account WAF rollout (firewallmanager skill), CloudFront configuration (cloudfront skill), or Route 53 health checks or records (route53 skill).
skills/specialized-skills/networking-and-content-delivery-skills/waf/SKILL.md
Source commit 1761e96813ebcbd43ed81d19e837219033f0afe5
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 9, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 3,443
- Repository last updated
- Nov 8, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- engineering Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 8,839 bytesreferences/adaptive-mitigation-playbook-for-forwarded-signals.mddoc · 9,130 bytesreferences/adding-managed-rules-and-tuning-with-count-mode.mddoc · 10,325 bytesreferences/adding-rate-based-rules.mddoc · 10,725 bytesreferences/creating-a-web-acl-and-associating-it-with-a-resource.mddoc · 9,538 bytesreferences/forwarding-signals-with-dynamic-label-interpolation.mddoc · 9,677 bytesreferences/protecting-against-bots-with-bot-control.mddoc · 10,160 bytesreferences/protecting-logins-and-signups-with-fraud-control.mddoc · 9,373 bytesreferences/recovering-the-real-client-ip-behind-a-cdn.mddoc · 9,627 bytesreferences/seeing-and-managing-ai-crawler-traffic.mddoc · 7,461 bytesreferences/setting-up-logging-and-request-sampling.mddoc · 9,373 bytesreferences/stripping-inbound-waf-headers-before-trusting-them.mddoc · 7,657 bytesreferences/turning-bot-control-labels-into-a-confidence-signal.mddoc · 11,268 bytesreferences/using-ip-sets-and-geographic-match-rules.mddoc · 8,664 bytes
Read excerpt
# AWS WAF
## Overview
Domain expertise for configuring AWS WAF, the web application firewall that filters HTTP and HTTPS
traffic to CloudFront distributions, Application Load Balancers, API Gateway REST APIs, and AppSync
GraphQL APIs. Covers web ACL creation and association, AWS Managed Rules, rate-based rules, match
rules (IP set and geographic), Bot Control and the signal-forwarding workflows built on top of it,
Fraud Control for logins and signups, AI and LLM crawler management, and the logging that every
tuning workflow depends on.
This skill is a router. Each customer task maps to a procedure file under `references/`. Read the
matching reference in full before acting, then follow its constraints and steps. The reference
files are self-contained: each carries its own decision tables, constraints, procedure, and