AWS Firewall Manager announces security policy support for enhanced application layer (L7) DDoS protection within AWS WAF. The application layer (L7) DDoS protection is an AWS Managed Rule group that automatically detects and mitigates DDoS events of any applications on Amazon CloudFront, Application Load Balancer (ALB) and other AWS services supported by WAF. AWS Firewall Manager helps cloud security administrators and site reliability engineers protect applications while reducing the operational overhead of manually configuring and managing rules.
Working with AWS Firewall Manager, customers can provide defense in depth policies to address the full range of web site protections from the newly released AWS WAF (L7) DDoS protections to non-HTTP based threats to web site infrastructure. By looking at the totality of a web-sites’ technology stack, customers can define and deploy all the needed protections.
AWS Firewall Manager support for application layer (L7) DDoS protection can be enabled for all AWS WAF and AWS Shield users. Customers can add this specialized Amazon Managed Rule set to a new or existing AWS Firewall Manager policy. AWS Firewall Manager supports this Amazon Managed Rule set in all regions where WAF offers the feature which means all Advanced subscribers in all supported AWS Regions, except Asia Pacific (Thailand), Mexico (Central), and China (Beijing and Ningxia). You can deploy this AWS Managed Rule group for your Amazon CloudFront, ALB, and other supported AWS resources.
To learn more about how AWS Firewall Manager works with WAF’s new Managed Rules, see the AWS Firewall Manager documentation for more details and the AWS Region Table for the list of regions where AWS Firewall Manager is currently available. To learn more about AWS Firewall Manager, its features, and its pricing, visit the AWS Firewall Manager website.
Categories: general:products/aws-govcloud-us,marketing:marchitecture/security-identity-and-compliance,general:products/aws-firewall-manager,general:products/aws-waf
Source: Amazon Web Services
Latest Posts
- Amazon ECR Pull Through Cache Now Supports Referrer Discovery and Sync

- Amazon SageMaker HyperPod now supports flexible instance groups

- (Updated) Microsoft 365 Copilot: Updates to memory and personalization [MC1158329]
![(Updated) Microsoft 365 Copilot: Updates to memory and personalization [MC1158329] 4 pexels alljos 866351](data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==)
- (Updated) Anthropic Claude Sonnet is now available in Microsoft 365 Copilot [MC1247880]
![(Updated) Anthropic Claude Sonnet is now available in Microsoft 365 Copilot [MC1247880] 5 pexels cottonbro 7429474](data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==)



![(Updated) Microsoft 365 Copilot: Updates to memory and personalization [MC1158329] 4 pexels alljos 866351](https://mwpro.co.uk/wp-content/uploads/2024/08/pexels-alljos-866351-150x150.webp)
![(Updated) Anthropic Claude Sonnet is now available in Microsoft 365 Copilot [MC1247880] 5 pexels cottonbro 7429474](https://mwpro.co.uk/wp-content/uploads/2025/06/pexels-cottonbro-7429474-150x150.webp)
