我没有 API 网关、ALB 或 Cloudfront 我的 AWS 环境中的 WAF 解决方案是什么

I don't have API Gateway, ALB or Cloudfront what are my solution for the WAF in my AWS environment

我是 AWS 的新手,我想知道如果我的 Web 应用程序没有上述任何服务,是否还有其他 WAF 解决方案。 在文档中我只看到了那些服务的部署。

WAF 仅提供与您提到的其他 AWS 服务的集成,如果您正在寻找自我管理的 WAF 工具,您可以尝试 nginx-modsecurity-waf,您可以在您的应用程序顶部 运行。

NGINX Plus Release 12 and later support the NGINX ModSecurity WAF. The NGINX ModSecurity WAF protects web applications against SQL Injection (SQLi), Remote Code Execution (RCE), Local File Include (LFI), cross‑site scripting (XSS), and many other attacks.

您还可以通过 Nginx App 项目探索另一个付费服务。

NGINX App Protect is a modern app‑security solution that works seamlessly in DevOps environments as you deliver apps from code to customer. Built on F5’s market‑leading WAF, our software runs natively on NGINX Plus and integrates security controls into your apps.

nginx-app-protect