_site/2023/04/20/waf-managed-rules.html (105 lines of code) (raw):
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta
name="viewport"
content="width=device-width, initial-scale=1, shrink-to-fit=no"
/>
<meta name="description" content="Weekly AWS Networking Twitch Show" />
<meta name="author" content="" />
<meta property="og:title" content="Using AWS WAF labeling to address false positive with AMR" />
<meta property="og:description" content="When using AWS Managed Rule groups for WAF, sometimes you may need to make exceptions to these rules for certain web requests. This can be done by overriding the Managed Rule group rules to count matches and then creating a custom rule to handle the traffic based on the labels added to the request by the Managed Rule group.Managed Rule groups often add labels to web requests to indicate which rules were matched and provide additional information about the match. By using these labels, you can create more specific rules to handle the labeled traffic and reduce the number of false positives generated by the Managed Rule group" />
<meta property="og:image" content="https://www.theroutingloop.net/assets/image/link_background.jpg" />
<meta property="og:site_name" content="The Routing Loop" />
<title>The Routing Loop</title>
<!-- Bootstrap core CSS -->
<link href="/assets/css/main.css" rel="stylesheet" />
<script async src="https://www.googletagmanager.com/gtag/js?id=G-2K7T1C764L"></script>
<script>
window.dataLayer = window.dataLayer || [];
function gtag(){dataLayer.push(arguments);}
gtag('js', new Date());
gtag('config', 'G-2K7T1C764L');
</script>
</head>
<body>
<!-- Navigation -->
<nav class="navbar navbar-expand-lg navbar-dark bg-dark">
<div class="container">
<img src="/assets/image/520.AWS_AWS_logo_RGB_REV.png" alt="Logo" width=5% height="auto">
<button
class="navbar-toggler ml-auto"
type="button"
data-toggle="collapse"
data-target="#navbarResponsive"
aria-controls="navbarResponsive"
aria-expanded="false"
aria-label="Toggle navigation"
>
<span class="navbar-toggler-icon"></span>
</button>
<div class="collapse navbar-collapse" id="navbarResponsive">
<ul class="navbar-nav ml-auto">
<li class="nav-item">
<a class="nav-link" href="/">Home</a>
</li>
<li class="nav-item">
<a class="nav-link" href="/past/">Previous episodes</a>
</li>
<li class="nav-item">
<a class="nav-link" href="/upcoming/">Upcoming episodes</a>
</li>
<li class="nav-item">
<a class="nav-link" href="/hosts/">Hosts</a>
</li>
<li class="nav-item">
<a class="nav-link" href="https://pulse.aws/survey/6ONETCNV">Feedback</a>
</li>
</ul>
</div>
</div>
</nav>
<!-- Header -->
<header class="bg-primary py-5 mb-5" style="background-image: url('/assets/image/background.png');">
<div class="container h-100">
<div class="row h-100 align-items-center">
<div class="col-lg-12 text-center">
<h1 class="display-4 text-white mt-5 mb-2">
The Routing Loop
</h1>
<p class="lead mb-4 text-white-50">
<b>Wednesdays</b> 11 AM PT / 2 PM ET / 7 PM UK
</p>
<div class="d-flex justify-content-center">
<a href="https://www.twitch.tv/aws/" class="btn btn-light btn-lg mx-2" target="_blank">
<i class="fab fa-twitch"></i> Twitch
</a>
<!-- <a href="https://www.linkedin.com/company/amazon-web-services" class="btn btn-light btn-lg mx-2" target="_blank">
<i class="fab fa-linkedin"></i> LinkedIn
</a>
<a href="https://www.youtube.com/@AWSEventsChannel" class="btn btn-light btn-lg mx-2" target="_blank">
<i class="fab fa-youtube"></i> YouTube
</a>
<a href="https://www.facebook.com/amazonwebservices/ " class="btn btn-light btn-lg mx-2" target="_blank">
<i class="fab fa-youtube"></i> Facebook
</a>
--> </div>
</div>
</div>
</div>
</header>
<!-- Page Content -->
<div class="container mb-5">
<div class="content-area">
<span class="date">20 April 2023</span>
<h1>Using AWS WAF labeling to address false positive with AMR</h1>
<p><b>Hosts:</b><br />Tom Adamski</p>
<p><b>Guests:</b><br />Devansh Agrawal, Cloud Support Engineer </p>
<div class="abstract">
<b>Abstract:</b><br />When using AWS Managed Rule groups for WAF, sometimes you may need to make exceptions to these rules for certain web requests. This can be done by overriding the Managed Rule group rules to count matches and then creating a custom rule to handle the traffic based on the labels added to the request by the Managed Rule group.Managed Rule groups often add labels to web requests to indicate which rules were matched and provide additional information about the match. By using these labels, you can create more specific rules to handle the labeled traffic and reduce the number of false positives generated by the Managed Rule group
</div>
<div class="video-container">
<iframe src="https://player.twitch.tv/?video=1798947451&parent=www.theroutingloop.net&parent=127.0.0.1&autoplay=false" height="315" width="560" allowfullscreen="" frameborder="0"></iframe>
</div>
<a href="https://pulse.aws/survey/6ONETCNV" class="button">Session Feedback/Content Suggestions</a>
</div>
</div>
<!-- /.container -->
<!-- Footer -->
<footer class="py-5 bg-dark">
<div class="container">
<p class="m-0 text-center text-white">
Copyright © 2025 Amazon Web Services, Inc. or its affiliates. All rights reserved
</p>
</div>
<!-- /.container -->
</footer>
<!-- Bootstrap core JavaScript -->
<script src="/assets/vendor/jquery/jquery.min.js"></script>
<script src="/assets/vendor/bootstrap/js/bootstrap.bundle.min.js"></script>
</body>
</html>