Create an AppSync graphql API protected with WAF rules. This WebACL limits the requests to certain countries and protects against common graphql attacks.
This sample project demonstrates how to protect an AppSync Graphql API against attacks using WAF (Web Application Firewall) rules.
This pattern deploys a graphql API with DynamoDB resolvers, and a WAF web ACL with rules for protecting GraphQL APIs.
< Back to all patterns
Clone repo
git clone https://github.com/aws-samples/serverless-patterns/cd serverless-patterns/waf-appsync-cdkDeploy
cdk deploy --allTesting
See the GitHub repo for detailed testing instructions.
Cleanup
Delete the stack:
cdk destroy.Created by:
