AWS WAF CloudFront Setup: Block OWASP Top 10
Set up AWS WAF with CloudFront to block OWASP Top 10 attacks, add managed rules, and automate edge protection for production apps.
Disclaimer
The views expressed on this blog are solely my own and do not represent the views or opinions of my employer. The information provided on this blog is for educational purposes only and should not be construed as professional advice.
Recent posts
Build a Real-Time AWS GuardDuty IDS with Auto-Response
Build a real-time AWS GuardDuty IDS with Lambda and EventBridge. Automate alerts, response actions, and evidence capture for cloud incidents.
EKS Security: The 2026 Hardening Checklist for ECS & Fargate
Complete AWS container security guide for ECS, EKS, Fargate with implementation roadmaps, compliance frameworks, and enterprise best practices.
Vulnerability Intelligence Is a Prioritization Problem, Not a Feed Problem
Use NVD, CISA KEV, exploit context, and asset exposure to prioritize vulnerabilities without creating alert fatigue.
AWS Network Firewall + Suricata: Leveraging Open-Source IDS Rules for Cloud Defense
Leverage open-source Suricata rules in AWS Network Firewall for advanced network threat detection beyond managed rule groups.
Security Observability with OpenTelemetry on AWS
Build vendor-neutral security observability with OpenTelemetry and ADOT. Export to Grafana for unified security dashboards without CloudWatch lock-in.
Container Image Signing and Verification: Cosign and Sigstore on AWS
Implement zero-trust container pipelines with Cosign keyless signing on AWS ECR and verification in EKS.
Event-Driven Security Automation: EventBridge + Step Functions with Open-Source Threat Intel
Build automated security response with EventBridge, Step Functions, and open-source threat intelligence from MISP and Sigma rules.
Secrets Management Showdown: HashiCorp Vault vs AWS SSM and Secrets Manager
Compare HashiCorp Vault with AWS SSM and Secrets Manager. Decision framework for choosing the right secrets management approach.
IaC Security Scanning: Checkov and tfsec vs AWS-Native Controls
Shift-left IaC security with Checkov, tfsec, and AWS CloudFormation Guard. Compare tools and build defense-in-depth scanning.
Building a Multi-Cloud SIEM: Wazuh on AWS vs Security Hub
Deploy Wazuh SIEM on AWS for multi-cloud visibility or use Security Hub for AWS-native monitoring. Complete comparison guide.
Software Supply Chain Security on AWS: SBOM Generation with Syft, Grype, and CodePipeline
Build regulatory-compliant SBOM pipelines with Syft, Grype, and AWS CodePipeline for software supply chain security.
OPA vs Kyverno on EKS: Policy-as-Code Security
Compare OPA Gatekeeper and Kyverno on EKS, enforce admission control, and block risky Kubernetes manifests before deployment.
EKS Runtime Security: GuardDuty vs Falco for Container Threat Detection
Head-to-head comparison of AWS GuardDuty and Falco for EKS runtime security with real detection scenarios.
CloudFront Geo Blocking with AWS WAF: 2026 Setup
Block traffic by country in CloudFront with AWS WAF geo match rules, auditable exceptions, and production-ready edge controls.