Can I apply this to existing API Gateways?

Yes, the skill provides specific AWS CLI commands and workflows to associate newly created WAF Web ACLs with existing regional REST or HTTP API stages.

Does it support bot mitigation?

Yes, it includes implementation steps for AWS WAF Bot Control to identify and manage automated traffic such as scrapers, search engine crawlers, and malicious attack bots.

How do I monitor blocked traffic using this skill?

The skill includes configurations for CloudWatch metrics, sampled request lookups, and WAF logging to S3 via Kinesis Firehose for comprehensive security analysis.

Is rate limiting customizable per specific API endpoint?

Yes, the skill demonstrates how to use Scope-Down Statements to apply different rate limits to specific URI paths, such as sensitive login or checkout endpoints.

How does this skill help with OWASP compliance?

It configures AWS Managed Rule Sets specifically designed to block common vulnerabilities like SQL injection, Cross-Site Scripting (XSS), and other risks defined in the OWASP Top 10.

AWS API Gateway Security with WAF

Name: AWS API Gateway Security with WAF
Author: mukul975

bymukul975

•

4,121

•

Cloud Infrastructure

Secures AWS API Gateway endpoints using WAF managed rules, rate limiting, and bot protection to mitigate OWASP Top 10 risks.

This skill provides a comprehensive framework for hardening AWS API Gateway endpoints against web vulnerabilities and automated threats. It automates the configuration of AWS WAF Web ACLs with managed rule sets for OWASP Top 10 protection, implements sophisticated rate limiting to prevent DDoS attacks, and deploys bot control mechanisms to filter malicious automated traffic. By integrating real-time monitoring and logging through CloudWatch and Kinesis, it ensures that cloud-native APIs maintain high availability and security compliance while minimizing the surface area for common web attacks.

Key Features

01Managed rule group configuration for OWASP Top 10 protection

02Real-time security monitoring and CloudWatch alarm integration

03IP reputation and geolocation-based access filtering

04Advanced rate limiting and throttling per IP address

05Automated bot detection and mitigation via AWS Bot Control

064,121 GitHub stars

Use Cases

01Preventing brute-force attacks on authentication endpoints with targeted rate limiting

02Automating the deployment of WAF policies for high-traffic serverless architectures

03Hardening public API endpoints against common injection and XSS attacks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills securing-api-gateway-with-aws-waf

For use in Claude.ai and ChatGPT

Key Features

01Managed rule group configuration for OWASP Top 10 protection

02Real-time security monitoring and CloudWatch alarm integration

03IP reputation and geolocation-based access filtering

04Advanced rate limiting and throttling per IP address

05Automated bot detection and mitigation via AWS Bot Control

064,121 GitHub stars

Use Cases

01Preventing brute-force attacks on authentication endpoints with targeted rate limiting

02Automating the deployment of WAF policies for high-traffic serverless architectures

03Hardening public API endpoints against common injection and XSS attacks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills securing-api-gateway-with-aws-waf

For use in Claude.ai and ChatGPT