AWS WAF Integration | Supported Services

Answer - B and C.

The AWS documentation mentions the following.

You use AWS WAF to control how Amazon CloudFront or an Application Load Balancer responds to web requests.

You start by creating conditions, rules, and web access control lists (web ACLs)

You define your conditions, combine your conditions into rules, and combine the rules into a web ACL.

For more information on AWS WAF, please refer to the below URL:

The AWS WAF (Web Application Firewall) service is designed to protect web applications from various attacks like SQL injection, Cross-Site Scripting (XSS), and more. It provides customizable rules that allow you to control the web traffic that accesses your application.

The AWS WAF service can be used in combination with other AWS services to provide more comprehensive security and protection to web applications. Among the options provided in the question, the correct answers are:

B. AWS ELB (Elastic Load Balancer) - This service can be used along with AWS WAF to distribute incoming traffic to multiple instances of your web application. You can configure your AWS ELB to send traffic to your AWS WAF before routing it to your web application, which ensures that incoming traffic is checked by AWS WAF before reaching your application.

C. AWS CloudFront - This is a Content Delivery Network (CDN) service that can be used to distribute content to users around the world. AWS WAF can be used with AWS CloudFront to filter and block malicious traffic before it reaches your web application. You can also use AWS CloudFront to improve the performance of your web application by caching content closer to your users.

A. AWS SQS (Simple Queue Service) - This service is a message queuing service that allows you to decouple and scale microservices, distributed systems, and serverless applications. However, it is not typically used in combination with AWS WAF for web application security.

D. AWS Lambda - This service is a serverless computing service that allows you to run code without provisioning or managing servers. While it can be used in combination with AWS WAF, it is not typically used for web application security.

In summary, the two services that can be used along with AWS WAF to provide comprehensive web application security are AWS ELB and AWS CloudFront.