Forum Discussion

motoki's avatar
motoki
Icon for Nimbostratus rankNimbostratus
Jul 26, 2024

F5 Rules for AWS WAF - Bot Protection Rules

Bot Protection Rulesを使って、
　特定のURLに30秒間で20回アクセスがあった場合に、それ以降のアクセスを拒否する
というルールを作成すること可能でしょうか？

 

Using Bot Protection Rules,
  Deny further access if a specific URL is accessed 20 times in 30 seconds
Is it possible to create a rule?

F5 Rules for AWS WAF

2 Replies

  • dahan's avatar
    dahan
    Icon for Employee rankEmployee
    Mar 13, 2025

    Hi Motoki,

    You can achieve the desired behavior outside of F5 managed rules by adding a new rule to the AWS Web ACL.

    While AWS may change the configuration process in the future, currently, go to Web ACLs, select the Rules tab, and click "Add my own rules and rule groups". Then, use Rule Builder to create a Rate-based rule as needed.

    Hope that helps!