AWS WAF now supports automatic application layer distributed denial of service (DDoS) protection

AWS has introduced enhanced application layer (L7) DDoS protection for AWS WAF with automatic detection and mitigation capabilities.

• Provides fast automatic detection and response to DDoS events within seconds
• Uses machine learning models to monitor traffic and establish baseline patterns
• Automatically applies rules when traffic deviates from normal patterns
• Available for AWS WAF and AWS Shield Advanced subscribers in most AWS Regions
• Supports protection for Amazon CloudFront, Application Load Balancer, and other AWS resources
• Allows custom configuration of rules like challenging or blocking suspicious requests

This enhancement reduces operational overhead for cloud security administrators by automating DDoS protection and ensuring application availability.