AWS has announced AWS WAF Captcha to help block unwanted bot traffic by requiring users to successfully complete challenges before their web request are allowed to reach AWS WAF protected resources. Captcha is an acronym for Completely Automated Public Turing test to tell Computers and Humans Apart and is commonly used to distinguish between robotic and human visitors to prevent activity like web scraping, credential stuffing, and spam. You can configure AWS WAF rules to require WAF Captcha challenges to be solved for specific resources that are frequently targeted by bots such as login, search, and form submissions. You can also require WAF Captcha challenges for suspicious requests based on the rate, attributes, or labels generated from AWS Managed Rules, such as AWS WAF Bot Control or the Amazon IP Reputation list. WAF Captcha challenges are simple for humans while remaining effective against bots. WAF Captcha includes an audio version and is designed to meet WCAG accessibility requirements.

1. AWS WAF ADDS
SUPPORT FOR
CAPTCHA

2. SPEAKER
Dhaval Soni
A W S A P N A M B A S S A D O R A N D
S O L U T I O N S A R C H I T E C T
• India’s first Red Hat Certified Architect in 2009
• 10x AWS Certified Solutions Architect
• 10x Red Hat Certified Architect
• ISO/IEC 27001 Lead Auditor
• Certified Payment-Card Industry Security Implementer (CPISI)
• EU Registered European Data Protection Professional (GDPR)
• Certified Cyber Security Analyst from GFSU – Department of
Forensic Sciences, Gujarat State

3. Confidential Information - Infostretch Corporation - For intended recipients only. ©2021 Infostretch. All rights reserved. 3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
Confidential Information - Infostretch Corporation - For intended recipients only. ©2021 Infostretch. All rights reserved. 3
3
AGENDA
• What is AWS WAF?
• Latest announcement
• How will it help you?

4. WHAT IS AWS WAF?
• AWS WAF is a web application firewall that lets you monitor the HTTP
and HTTPS requests that are forwarded to an Amazon CloudFront
distribution, an Amazon API Gateway REST API, an Application Load
Balancer, or an AWS AppSync GraphQL API.
• AWS WAF also lets you control access to your content.
• Based on conditions that you specify, such as the IP addresses that
requests originate from or the values of query strings, Amazon
CloudFront, Amazon API Gateway, Application Load Balancer, or AWS
AppSync responds to requests either with the requested content or with
an HTTP 403 status code (Forbidden).
AWS WAF

5. ANNOUNCEMENT
• AWS has announced AWS WAF Captcha to help block unwanted bot
traffic by requiring users to successfully complete challenges before their
web request are allowed to reach AWS WAF protected resources.
• Captcha is an acronym for Completely Automated Public Turing test to
tell Computers and Humans Apart and is commonly used to distinguish
between robotic and human visitors to prevent activity like web scraping,
credential stuffing, and spam.

6. HOW WILL IT HELP YOU?
• You can configure AWS WAF rules to require WAF Captcha challenges
to be solved for specific resources that are frequently targeted by bots
such as login, search, and form submissions.
• You can also require WAF Captcha challenges for suspicious requests
based on the rate, attributes, or labels generated from AWS Managed
Rules, such as AWS WAF Bot Control or the Amazon IP Reputation list.
• WAF Captcha includes an audio version and is designed to meet
WCAG accessibility requirements.

7. THANK YOU!