Monitoring AWS WAF, AWS Firewall Manager, and AWS Shield Advanced
Monitoring is an important part of maintaining the reliability, availability, and performance of your services.
Note
For information about monitoring your Shield Advanced resources and identifying possible DDoS events using Shield Advanced, see AWS Shield.
As you start monitoring these services, you should create a monitoring plan that includes answers to the following questions:
-
What are your monitoring goals?
-
What resources will you monitor?
-
How often will you monitor these resources?
-
What monitoring tools will you use?
-
Who will perform the monitoring tasks?
-
Who should be notified when something goes wrong?
The next step is to establish a baseline for normal performance in your environment, by measuring performance at various times and under different load conditions. As you monitor AWS WAF, Firewall Manager, Shield Advanced and related services, store historical monitoring data so that you can compare it with current performance data, identify normal performance patterns and performance anomalies, and devise methods to address issues.
For AWS WAF, you should monitor the following items at a minimum to establish a baseline:
-
The number of allowed web requests
-
The number of blocked web requests
