aws-solutions / aws-waf-security-automations

This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
https://aws.amazon.com/solutions/aws-waf-security-automations
Apache License 2.0
845 stars 361 forks source link

need your help regarding WAF #98

Closed bipingagan closed 1 year ago

bipingagan commented 4 years ago

Hello,

I need to set in waf, if the 1000 request come in 15 minute per IP address, waf block the ip

I have configured WAF with cloudfarmation its working fine but the time is 1 min to count the request I need to set it 15 min

Could you please advise any Help URl

winem commented 4 years ago

I actually wanted to say that I have an idea how to do that and wanted to provide a PR but a look at the code tells me that it might be even easier. I don't use the plugin but check Athena for a query called 'logParserQuery'. I guess that one contains the limitation to get the events for the last minute (60 seconds) only.

It should (/may, as I'm not able to reproduce and test it) work to just increase the value here.

aijunpeng commented 1 year ago

closing the old ticket due to inactivity