Blocking bots using AWS WAF

Example to block bots on APIGateway

• First create a condition. Below example condition is to match a header —

• Then create a rule. A rule can have multiple condition. Ideally a rule condition is a group of related checks.

• Then associate the rule to the web-acl that the APIGateway endpoint points to.

• Example below is a webacl used by an app endpoint.