Tag aws-s3

TL;DR: Absolutely! Using a Web Application Firewall (WAF) can be very advantageous, even when serving a static website through Amazon CloudFront. Here’s why: How to implement it: Monitor your WAF rules for issues: AWS Advanced DDoS Protection:

Note from the year 2025: This is not really recommended anymore, its better to use CloudFront origin access control (OAC) and keep your buckets private. My CloudFront distribution was doing a 307 redirect to my S3 regional endpoint and the…