Known bad inputs rule group contains rules to block request patterns that are known to be invalid and are associated with exploitation or discovery of vulnerabilities Managed RuleĪmazon IP reputation list rule group contains rules that are based on Amazon internal threat intelligence These rules are described below, but you can also read about them here (opens new window). This will configure the firewall for the staging environment with some basic managed rules. The caching option is set to enabled and firewall is set to true. To have Ymir configure a basic firewall for your project environment, you need to have a project configuration similar to the one below.Įnvironments : production : ~ staging : cdn : caching : enabled # Basic environment firewall configuration If it isn't set to enabled, your firewall will get configured (and you'll pay for it), but it won't protect your project environment. To use a firewall, your project environment must have the caching option set to enabled. You can read more about costs on the AWS WAF pricing page (opens new window).

If you enable bot protection, this costs an additional $10/month as well as $1.00 per 1 million requests. There's a fixed cost per month as well as a charge of $0.60 per 1 million requests.

# CostĮnabling a firewall on your project environment will incur some additional costs. This firewall uses AWS WAF (opens new window) to protect your Ymir-managed project environment. That said, to protect yourself against more sophisticated attacks or just having peace of mind, you can have Ymir configure a firewall for you.

Basic environment firewall configurationĪWS comes with come some default denial-of-service attack (opens new window) (DoS) protection through AWS Shield Standard (opens new window).

Awsmanagedrulessqliruleset