Cybersecurity
AWS WAF
Configures AWS WAF to filter web traffic: creating web access control lists (web ACLs) on CloudFront, Application Load Balancers, API Gateway, and AppSync; AWS Managed Rules tuned in Count mode; rate-based rules for HTTP floods; IP set and geographic match rules; Bot Control (Common and Targeted); turning bot labels into a confidence signal; stripping spoofed inbound x-amzn-waf-* headers; recovering the real client IP behind a CDN; Fraud Control (account takeover and account creation fraud prevention); and logging and request sampling. Use when the user wants to protect a web application or API from common exploits, bots, credential stuffing, fake-account creation, or HTTP floods at the application layer (layer 7). Routes to the right per-task procedure in references. Do NOT use for L3/L4 DDoS protection (shieldadvanced skill), multi-account WAF rollout (firewallmanager skill), CloudFront configuration (cloudfront skill), or Route 53 health checks or records (route53 skill).
Publisher / source
aws/agent-toolkit-for-aws (found on skills.sh)
Upstream record
Version
Version 3
Published
2026-11-10
Publication review
Approved for publication
Content fingerprint
c1bf535cf4c3d188a4a38009a8e12b21f4551305423c1ffbfa3023524f58cd58
Review before you use it
Publication approval is a recorded review state, not a guarantee of safe execution. Check the upstream license, required tools and permissions, and test in your intended client.
Sign in to inspect the full instructions and download the SKILL.md file. This public page contains metadata only.
Source: https://prompeteer.ai/skills-hub/6f582fb9-886a-4004-b8ea-1ee77140f4f5