Note: It’s recommended that you use a version as close as possible to the latest. This allows you to test a new version and promote it to your web ACL when you’re ready, and to return to a previously tested version if necessary. With the version management feature, you can choose to stay on a specific version, meaning that it won’t update until you explicitly move to a newer version. This ensures you have the latest protection as soon as it’s available.

Case 1: Control automatic updates for a managed rule group by selecting a specific versionīy default, managed rule groups are updated automatically as updates become available. In this blog, we go through four use cases to demonstrate how you can use these features to improve your security posture by customizing managed rules.

Custom responses – Send a custom HTTP response back to the client from AWS WAF when a rule blocks a connection request.

Scope-down statements – Use to narrow the scope of the requests that a rule group evaluates.

Versioning can be used to return to previously tested versions.

Version management – You can select a specific version of a managed rule group.

Labels can be used to alter the behavior or default action of managed rules.

Labels – Metadata that can be added to web requests when a rule is matched.

Recently, AWS WAF launched four new features that are centered on rule customization: AWS Managed Rules for AWS WAF provides a group of rules created by AWS that can be used help protect you against common application vulnerabilities and other unwanted access to your systems without having to write your own rules. AWS Threat Research Team updates AWS Managed Rules to respond to an ever-changing threat landscape in order to protect your applications.

Awsmanagedrulessqliruleset