Amazon Lightsail CDN distributions now support web application firewall

Amazon Lightsail CDN distributions now support integrated Web Application Firewall (WAF) capabilities, giving customers a simple, built-in way to protect their web applications. Previously, Lightsail distributions lacked native web application firewall capabilities, leaving customers without an easy-to-configure layer of protection. Lightsail now offers distribution plans with WAF capability at no additional cost.

Lightsail's distribution plans can block common web exploits, malicious request patterns, traffic from anonymizing services (e.g. VPNs, proxies, and Tor nodes), SQL injection, OS-level attacks, PHP application-layer vulnerabilities, automated bot activity, and account takeover attempts. Once enabled, customers can monitor allowed and blocked requests through distribution metrics to maintain visibility into their site traffic.

On the Lightsail console, you can enable WAF on the Security tab when you manage your distribution and monitor filtered requests on the Metrics tab. You can also enable WAF using the AWS Command Line Interface (CLI) or AWS SDKs.

To learn more about enabling WAF for your Lightsail distributions, visit the Amazon Lightsail documentation.