AWS WAF 管理员的一天.pdf

1、 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.N E T 3 1 7Tzoori TamamDan AvidanA day in the life of an AWS WAF administrator(he/him)Principal So

2、lutions Architect SpecialistAWS(he/him)Platform Team LeadHSBC 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.TodayssessionA technical level 300 talkDealing with common AWS WAF scenariosTips and tricks A fake story,followed by a real one 2025,Amazon Web Services,Inc.or its affilia

3、tes.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Waking up a new day,a new app 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.A website and mobile app for finding,buying,a

4、nd selling robots.No AI expertise required.My company is launching a new application 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Frontend architectureWeb and Mobile UsersAmazonCloudFrontAmazon VPCWeb AppALBInstanceAuto Scaling GroupInstanceAPI GatewayAWS Regional SerrvicesLamb

5、daIntegrationsAWS Global ServicesAutomated clientsStatic AssetsClientsWeb and APItraffic 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Morning co

6、ffee Setting up 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.WhereCentralized for simplicityDecentralized for different security requirementsWhenSome things to be enforced day1Some things to be tunedWhoCentral ownership(SecOps)Team ownership(App)WhatWhat is good enough to start