AWS Firewall Manager announces security policy support for enhanced application layer (L7) DDoS protection within AWS WAF. The application layer (L7) DDoS protection is an AWS Managed Rule group that automatically detects and mitigates DDoS events of any applications on Amazon CloudFront, Application Load Balancer (ALB) and other AWS services supported by WAF. AWS Firewall Manager helps cloud security administrators and site reliability engineers protect applications while reducing the operational overhead of manually configuring and managing rules.
Working with AWS Firewall Manager, customers can provide defense in depth policies to address the full range of web site protections from the newly released AWS WAF (L7) DDoS protections to non-HTTP based threats to web site infrastructure. By looking at the totality of a web-sites’ technology stack, customers can define and deploy all the needed protections.
AWS Firewall Manager support for application layer (L7) DDoS protection can be enabled for all AWS WAF and AWS Shield users. Customers can add this specialized Amazon Managed Rule set to a new or existing AWS Firewall Manager policy. AWS Firewall Manager supports this Amazon Managed Rule set in all regions where WAF offers the feature which means all Advanced subscribers in all supported AWS Regions, except Asia Pacific (Thailand), Mexico (Central), and China (Beijing and Ningxia). You can deploy this AWS Managed Rule group for your Amazon CloudFront, ALB, and other supported AWS resources.
To learn more about how AWS Firewall Manager works with WAF’s new Managed Rules, see the AWS Firewall Manager documentation for more details and the AWS Region Table for the list of regions where AWS Firewall Manager is currently available. To learn more about AWS Firewall Manager, its features, and its pricing, visit the AWS Firewall Manager website.
Categories: general:products/aws-govcloud-us,marketing:marchitecture/security-identity-and-compliance,general:products/aws-firewall-manager,general:products/aws-waf
Source: Amazon Web Services
Latest Posts
- Amazon Timestream for InfluxDB Now Supports Advanced Metrics

- Amazon CloudWatch Logs now supports data protection, OpenSearch PPL and OpenSearch SQL for the Infrequent Access ingestion class

- Amazon GameLift Servers expands instance support with next-generation EC2 instance families

- (Updated) Microsoft 365 Copilot: Customize how managers are identified in Workforce Insights agent and Copilot responses [MC1260710]
![(Updated) Microsoft 365 Copilot: Customize how managers are identified in Workforce Insights agent and Copilot responses [MC1260710] 5 pexels kuan yu huang 252427105 32459953](data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==)




![(Updated) Microsoft 365 Copilot: Customize how managers are identified in Workforce Insights agent and Copilot responses [MC1260710] 5 pexels kuan yu huang 252427105 32459953](https://mwpro.co.uk/wp-content/uploads/2025/06/pexels-kuan-yu-huang-252427105-32459953-150x150.webp)
