AWS WAF · Pricing Plans
Aws Waf Plans Pricing
Aws Waf Plans Pricing is the pricing profile for AWS WAF on the APIs.io network — every figure transcribed verbatim from the provider’s own pricing page on 2026-10-28.
It defines 6 plans, including Rule group / managed rule group added to web ACL — $1.00 per month (prorated hourly); Additional WCUs beyond default allocation — $0.20 per million requests; Oversized body inspection — $0.30 per million requests, and 3 more.
The page prices API or platform usage directly, priced by usage; the service is delivered as managed.
Tagged areas include Security, Web Application Firewall, DDoS Protection, Bot Management, and Edge Security.
6 Plans
Prices the API
Basis: usage other
Delivered: managed
Transcribed from the provider's pricing page on 2026-10-28 — aws.amazon.com/waf/pricing/.
View Source
SecurityWeb Application FirewallDDoS ProtectionBot ManagementEdge SecurityCloudAmazon Web Services
Plans
Rule group / managed rule group added to web ACL
month
$1.00 per month (prorated hourly) per per rule group added to web ACL
Additional WCUs beyond default allocation
per-use
$0.20 per million requests per per million requests for each 500 WCUs beyond default 1500
Includes: default allocation of 1500 WCUs
Oversized body inspection
per-use
$0.30 per million requests per per million requests for each additional 16KB analyzed
Includes: default body inspection limit
Bot Control AMR subscription
month
Bot Control AMR subscription is $10 per month per WebACL per per WebACL
Includes: Common Bot Control includes the first 10 million requests per month for free. Targeted Bot Control includes the first 1 million requests per month for free.
Fraud Control AMR subscription
month
subscription fee of $10 per month per WebACL per per WebACL
Includes: 0 to 10k requests Included
Logs included
per-use
500 MB of CloudWatch Logs (Standard and Infrequent Access) and Vended Logs Ingestion per 1 million WAF requests per per 1 million WAF requests
Includes: 500 MB
Overage: Any usage beyond the discounted usage is billed by Amazon CloudWatch
Sources
Work with this as data
Every plan here is available over the APIs.io API and to AI agents over MCP.