AWS Certified Solutions Architect – Associate (SAA-C03)Design Secure ArchitecturesMedium
A global e-commerce company uses Amazon CloudFront to deliver its web application content. To protect against common web exploits and bot traffic, they have implemented AWS WAF. The company observes an increase in sophisticated bot attacks that bypass WAF by cycling through different IP addresses and using legitimate-looking request headers. They need a solution that can identify and mitigate these advanced bot attacks without impacting legitimate user traffic. Which AWS service should they integrate with CloudFront and WAF?
- AAWS Firewall Manager
- BAmazon GuardDuty
- CAWS Bot Control for AWS WAF
- DAWS Shield Advanced
Show answer & explanationAnswer & explanation
Correct answer: C. AWS Bot Control for AWS WAF
AWS Bot Control for AWS WAF is specifically designed to identify and mitigate sophisticated, rapidly evolving bot traffic. It uses machine learning and threat intelligence to detect and block common and advanced bots, including those that mimic legitimate user behavior, without affecting valid users.
Why the other options are wrong
- A. AWS Firewall Manager helps centrally configure and manage WAF rules across multiple accounts and applications but does not provide advanced bot detection capabilities itself.
- B. Amazon GuardDuty is a threat detection service that monitors for malicious activity and unauthorized behavior across AWS accounts, but it does not directly mitigate bot traffic at the edge like WAF or Bot Control.
- D. AWS Shield Advanced provides enhanced DDoS protection but is not specifically designed to differentiate between sophisticated bots and legitimate users based on behavioral patterns.
AWS Bot Control for WAF
A managed rule group for AWS WAF that provides intelligent, real-time protection against common and sophisticated bot traffic.
- Uses machine learning and threat intelligence.
- Distinguishes between legitimate and malicious bot traffic.
- Integrates directly with AWS WAF.
Memory trick: WAF's Bot Control Blocks Sneaky Bots.