Intelligent threat mitigation in AWS WAF

This section covers the managed intelligent threat mitigation features provided by AWS WAF. These are advanced, specialized protections that you can implement to protect against threats such as malicious bots and account takeover attempts.

Note

The features described here incur additional costs, beyond the basic fees for using AWS WAF. For more information, see AWS WAF Pricing.

The guidance provided in this section is intended for users who know generally how to create and manage AWS WAF web ACLs, rules, and rule groups. Those topics are covered in prior sections of this guide.

Topics

• Options for intelligent threat mitigation in AWS WAF
• Best practices for intelligent threat mitigation in AWS WAF
• Token use in AWS WAF intelligent threat mitigation
• AWS WAF Fraud Control account creation fraud prevention (ACFP)
• AWS WAF Fraud Control account takeover prevention (ATP)
• AWS WAF Bot Control
• Client application integrations in AWS WAF
• CAPTCHA and Challenge in AWS WAF