Can AWS WAF and CloudFront protect an externally hosted online shop?
We run a small online shop that has become slow over the past few days because of heavy bot traffic and a large number of requests. Our provider…
bot protection
How can I safely offer a few free API-powered previews without getting abused?
I'm building an ecommerce website where customers can preview an example of a customized product before ordering. The preview uses a paid API, and I'd like to let…
How can I mislead crawlers checking my .env file?
I'm dealing with a pesky problem on my web server where malicious crawlers keep trying to find my exposed credentials by checking the `/.env` file. I'm looking for…
How can I improve my rate limit rules on WAF with CloudFront?
I'm working with a CloudFront distribution in front of an internal Application Load Balancer (ALB) using the new VPC origins feature, and I have a WAFv2 connected to…