Stop using third party tools. Being able to use all the other AWS tools, IP filtering, Shield and MAP.

The leap from other platforms has been slow but the speed with all the AWS tools is unmatched. Once you move from other services (Google and Azure) the environment is much better and robust. And stop using third party tools as everything is integrated within the AWS environment.

The learning curve is complicated. And for more detailed projects I need a system administrator, because it is difficult. But of course the investment is well worth it.

Its been super easy to create and manage all the security rules for all of my Web Applications in a single place using AWS WAF

The best about AWS WAF is its pre-built defenses. This WAF acts as a shield for all my web apps and it filters out all malicious traffic and protects against common web attacks for example SQL injection, XSS, or bot attacks. It provides a variety of managed rule groups, including OWASP Top 10, Common Rules, and Bot Control which are super useful. Not only these pre-defined rules , I can create my custom rules to address specific needs for my web applications. And another very useful feature is I can easily integrate WAF with other AWS resources such as AWS Cloudfront, ALB ,Amazon API gateway etc .

The pay as you go model for AWS WAF is little bit complex for a newbie as the price depends on many factors such as number of Web access control lists created,traffic volume,configuration etc. So you must have prior knowledge to deal with AWS WAF. Except this there is nothing much to dislike about AWS WAF.

We adopt WAF in front of our single ingress point, our ALB, through which all our requests pass. We deploy a lot of different web apps, including Wordpress sites, API custom apps and so on. With AWF we can setup some default rules which covers typical attacks and we sometime set custom rules based on specific application requirements. When rules become many, you have to pay to add more.

Preset rules covers a lot of typical web app critical security issue, like SQL Injection and Wodpress attack. Monitoring is quite good. Set actions in the event of an attack is very simple to setup.

You have a budget in "points" to spent for free. Using preset rules or set your own rules consumes "points" so you can set only a certain number of rules for free. Using advanced features requires a "pro" version which is very very expensive for us.

Easy to setup and create a new ruleease of use of IP sets and regex pattern sets in which we can block IPs and domains

I am using AWS WAF for 2 years and It is easy to use setup.The dashboard is clear and gives an idea of the rules