Tools/AWS_WAF
AWS WAF
L7 web application firewall — blocks SQL injection, XSS, and rate-limits bad actors in front of ALBs/CloudFront/API Gateway. Most-used open-source equivalent is ModSecurity (paired with the OWASP Core Rule Set) — the long-standing standard OSS WAF engine; Coraza is the modern Go-based, ModSecurity-compatible alternative gaining adoption for its easier embedding into reverse proxies like NGINX/Envoy.