skills.rest
xalgord
xalgordCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

implementing-cloud-waf-rules

Deploy and tune WAF rules on AWS WAF, Azure WAF, and Cloudflare against OWASP Top 10 attacks.

954|172|Updated Mar 13, 2026
Search Tags:#owasp#cloudflare#cloud security#false positives#waf rules#Rate limiting#aws waf
One-click install
npx skills add https://github.com/xalgord/xalgorix --skill implementing-cloud-waf-rules
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: implementing-cloud-waf-rules
Source: https://github.com/xalgord/xalgorix/tree/main/internal/tools/skills/data/cloud-security/implementing-cloud-waf-rules
Command: npx skills add https://github.com/xalgord/xalgorix --skill implementing-cloud-waf-rules

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Web applications behind cloud load balancers face SQL injection, XSS, credential stuffing, and bot attacks, and misconfigured WAFs either let attacks through or block legitimate users with false positives. This Skill provides a validated workflow for deploying, tuning, and verifying cloud WAF rules so protection actually works.

Core Features & Use Cases

  • Managed Rule Deployment: Configure AWS Managed Rules (Common, SQLi, Known Bad Inputs) in Count mode before switching to Block enforcement.
  • Rate Limiting & Bot Defense: Create rate-based rules scoped to login endpoints, geo-blocking, and IP reputation lists to stop brute force and credential stuffing.
  • False Positive Tuning: Enable WAF logging to S3, analyze blocks with Athena queries, and apply targeted rule exclusions like SizeRestrictions_BODY for upload endpoints.
  • Use Case: An e-commerce API under credential stuffing attack gets a 100-requests-per-5-minutes rate rule on /api/auth/login, Bot Control evaluation, and a verified block-mode Web ACL within two weeks.

Quick Start

Ask the AI to create an AWS WAF Web ACL with managed OWASP rule sets in Count mode and a rate-limiting rule protecting your login endpoint.

Frequently Asked Questions about implementing-cloud-waf-rules

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deploy AWS WAF managed rules for OWASP protection?▼

Create a Web ACL with aws wafv2 create-web-acl and attach managed rule groups like AWSManagedRulesCommonRuleSet and AWSManagedRulesSQLiRuleSet. Start each group with OverrideAction set to Count, then switch to None for blocking after validation.

How to configure rate limiting on AWS WAF for login endpoints?▼

Add a RateBasedStatement rule with a limit such as 100 requests per 5 minutes per IP, and use a ScopeDownStatement matching the login URI path. AWS rate rules have a 5-minute minimum evaluation window.

Why is my AWS WAF not blocking any attacks?▼

Common causes are managed rules stuck in Count override mode, the Web ACL never associated with the ALB or CloudFront resource, or a default Allow action with no terminating block rule. Verify with get-web-acl and list-resources-for-web-acl.

How do I reduce AWS WAF false positives blocking legitimate traffic?▼

Enable WAF logging to S3 with put-logging-configuration, then query logs in Athena to find rules blocking legitimate requests. Apply targeted exclusions, such as removing SizeRestrictions_BODY for file upload endpoints.

When should I not use a cloud WAF?▼

A WAF is not suited for network-level DDoS protection, which requires AWS Shield or Azure DDoS Protection. It is also a compensating control and does not replace fixing injection vulnerabilities in application code.

Related Skills

Explore More Software Engineering Skills→
bingookbingook

WAF BYPASS MASTERY

Automate WAF bypass and penetration testing with SQL injection, XSS, and SSRF techniques.

Community
Advanced
fzymgc-housefzymgc-house

grafana

Manage Grafana, Loki, and Prometheus operations for Kubernetes observability.

Official
Advanced
awsaws
2.5k

shieldadvanced

Configures AWS Shield Advanced DDoS protection, mitigation, SRT access, and cost protection.

Official
Advanced
etiennemunnichetiennemunnich
8

waf-rule-management

Automate WAF rule management for ModSecurity, Coraza, and OWASP CRS.

Community
Advanced