ABC operates a growing e-commerce platform with global traffic. As the platform scaled, it began facing a surge in malicious activity including attempted SQL injection, credential stuffing, and bot-driven scraping. The security team struggled to implement consistent protections across environments and lacked visibility into real-time attack patterns.
ABC deployed AWS WAF across its Application Load Balancer and CloudFront distribution. The security team enabled AWS Managed Rule Sets and supplemented them with custom rules tailored to their login APIs, checkout endpoints, and admin panel access.
Key actions included:
Enabling AWSManagedRulesCommonRuleSet and AWSManagedRulesKnownBadInputsRuleSet
Implementing rate-limiting on login attempts and search forms
Using IP reputation lists to block known bad actors
Logging traffic to Amazon Kinesis for threat analysis
Integrating alerts into AWS Security Hub for incident response
Blocked over 95% of malicious requests automatically
Prevented two major credential stuffing attempts with zero downtime
Reduced false positives with custom tuning of managed rules
Gained complete visibility into HTTP traffic patterns and threat sources
Achieved OWASP Top 10 coverage without modifying application code
