Amazon WAF

AWS WAF is a web application firewall that helps protect web applications and APIs from common web exploits and bots that may affect availability, compromise security, or consume excessive resources.

Amazon WAF publishes 3 APIs on the APIs.io network: IP Sets API, Rule Groups API, and Web ACLs API. Tagged areas include Bot Management, DDoS Protection, Security, WAF, and Web Application Firewall.

The Amazon WAF catalog on APIs.io includes 1 JSON-LD context and 2 Spectral governance rulesets.

Amazon WAF’s developer surface includes authentication, developer portal, documentation, support, engineering blog, developer console, signup flow, and 17 more developer resources.

🌐 Visit website 📡 Source on GitHub

50.3/100 developing ▬ flat Agent 29/100 agent aware Full breakdown ↓
scored 2026-08-20 · rubric v0.12.0

AccessFreemiumSelf serve⚡ Free to try

3 APIs 2 Features 1 Use Cases

Bot ManagementDDoS ProtectionSecurityWAFWeb Application Firewall

Kin Score

Kin Score How this is scored →
scored 2026-08-20 · rubric v0.12.0

Composite quality — 50.3/100 · developing

Contract Quality 16.4 / 25

Developer Ergonomics 10.0 / 20

Access Clarity 10.3 / 20

Operational Transparency 3.4 / 13

Contract Governance 3.0 / 12

Discoverability 7.2 / 10

Agent readiness — 29/100 · agent aware

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

Documented Reversibility 0 / 6

MCP Server 0 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/amazon-waf: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 3

Individual APIs this provider publishes, each with its own machine-readable definition.

Rate Limits 1

Documented rate limits and quota policies.

Amazon Waf Rate Limits

5 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Amazon Waf Finops

FINOPS

Features 2

Notable capabilities this provider offers.

Automation

Automate operational tasks with Amazon WAF.

API Access

Programmatic access to Amazon WAF resources.

JSON Schema 5

Standalone JSON Schema definitions for this provider's data models.

Examples 1

Example request and response payloads for these APIs.

Use Cases 1

What developers build with this provider.

Cloud Operations

Use Amazon WAF to manage and automate cloud operations.

Resources

Get Started 4

Portal, sign-up, and the first successful call

Portal

Portal

Console

Console

Signup

Signup

Login

Documentation 1

Reference material describing how the API behaves

Documentation

Documentation

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

AgenticAccess

Design & Contract 2

Pagination, idempotency, versioning, errors, and events

SpectralRules

SpectralRules

Vocabulary

Vocabulary

Build 2

SDKs, sample code, and the tooling you integrate with

PostmanWorkspace

PostmanWorkspace

GitHubOrganization

GitHubOrganization

Access & Security 4

Authentication, authorization, and security posture

TrustCenter

TrustCenter

VulnerabilityDisclosure

VulnerabilityDisclosure

DomainSecurity

DomainSecurity

Authentication

Authentication

Learn 1

Tutorials, courses, talks, and written guidance

YouTube

YouTube

Operate 4

Status, limits, changes, and where to get help

Support

StatusPage

StackOverflow

Contact

Commercial 2

Pricing, plans, and the legal terms of use

TermsOfService

TermsOfService

PrivacyPolicy

PrivacyPolicy

Company 2

The organization behind the API

Website

Website

Blog

Blog

Other 1

Properties that don't map to a standard resource type

Knowledge Center

Knowledge Center

Source (apis.yml)

name: Amazon WAF
description: AWS WAF is a web application firewall that helps protect web applications and APIs from common web exploits and
  bots that may affect availability, compromise security, or consume excessive resources.
specificationVersion: '0.23'
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://a0.awsstatic.com/libra-css/images/logos/aws_logo_smile_1200x630.png
url: https://aws.amazon.com/waf/
created: '2024-01-15'
modified: '2026-05-19'
apis:
- aid: amazon-waf:amazon-waf-ip-sets-api
  name: Amazon WAF IP Sets API
  description: The IP Sets API from Amazon WAF — 1 operation(s) for ip sets.
  humanURL: https://aws.amazon.com/waf/
  baseURL: https://wafv2.amazonaws.com
  tags:
  - IP Sets
  properties:
  - type: OpenAPI
    url: openapi/amazon-waf-ip-sets-api-openapi.yml
  - type: Documentation
    url: https://docs.aws.amazon.com/waf/latest/APIReference/
  - type: JSONSchema
    url: json-schema/amazon-waf-web-acl-schema.json
  - type: JSONLD
    url: json-ld/amazon-waf-context.jsonld
  - type: Pricing
    url: https://aws.amazon.com/waf/pricing/
  - type: GettingStarted
    url: https://aws.amazon.com/waf/getting-started/
  - type: Authentication
    url: https://docs.aws.amazon.com/waf/latest/APIReference/CommonParameters.html
  - type: SDKs
    url: https://aws.amazon.com/tools/
  - type: StatusPage
    url: https://status.aws.amazon.com/
  - type: FAQ
    url: https://aws.amazon.com/waf/faqs/
  - type: ServiceLevelAgreement
    url: https://aws.amazon.com/waf/sla/
  - type: User Guide
    url: https://docs.aws.amazon.com/waf/latest/developerguide/what-is-aws-waf.html
  - type: APIReference
    url: https://docs.aws.amazon.com/waf/latest/APIReference/Welcome.html
  - type: Code Examples
    url: https://docs.aws.amazon.com/waf/latest/developerguide/waf-examples.html
  - type: Security
    url: https://docs.aws.amazon.com/waf/latest/developerguide/security.html
- aid: amazon-waf:amazon-waf-rule-groups-api
  name: Amazon WAF Rule Groups API
  description: The Rule Groups API from Amazon WAF — 1 operation(s) for rule groups.
  humanURL: https://aws.amazon.com/waf/
  baseURL: https://wafv2.amazonaws.com
  tags:
  - Rule Groups
  properties:
  - type: OpenAPI
    url: openapi/amazon-waf-rule-groups-api-openapi.yml
  - type: Documentation
    url: https://docs.aws.amazon.com/waf/latest/APIReference/
  - type: JSONSchema
    url: json-schema/amazon-waf-web-acl-schema.json
  - type: JSONLD
    url: json-ld/amazon-waf-context.jsonld
  - type: Pricing
    url: https://aws.amazon.com/waf/pricing/
  - type: GettingStarted
    url: https://aws.amazon.com/waf/getting-started/
  - type: Authentication
    url: https://docs.aws.amazon.com/waf/latest/APIReference/CommonParameters.html
  - type: SDKs
    url: https://aws.amazon.com/tools/
  - type: StatusPage
    url: https://status.aws.amazon.com/
  - type: FAQ
    url: https://aws.amazon.com/waf/faqs/
  - type: ServiceLevelAgreement
    url: https://aws.amazon.com/waf/sla/
  - type: User Guide
    url: https://docs.aws.amazon.com/waf/latest/developerguide/what-is-aws-waf.html
  - type: APIReference
    url: https://docs.aws.amazon.com/waf/latest/APIReference/Welcome.html
  - type: Code Examples
    url: https://docs.aws.amazon.com/waf/latest/developerguide/waf-examples.html
  - type: Security
    url: https://docs.aws.amazon.com/waf/latest/developerguide/security.html
- aid: amazon-waf:amazon-waf-web-acls-api
  name: Amazon WAF Web ACLs API
  description: The Web ACLs API from Amazon WAF — 3 operation(s) for web acls.
  humanURL: https://aws.amazon.com/waf/
  baseURL: https://wafv2.amazonaws.com
  tags:
  - Web ACLs
  properties:
  - type: OpenAPI
    url: openapi/amazon-waf-web-acls-api-openapi.yml
  - type: Documentation
    url: https://docs.aws.amazon.com/waf/latest/APIReference/
  - type: JSONSchema
    url: json-schema/amazon-waf-web-acl-schema.json
  - type: JSONLD
    url: json-ld/amazon-waf-context.jsonld
  - type: Pricing
    url: https://aws.amazon.com/waf/pricing/
  - type: GettingStarted
    url: https://aws.amazon.com/waf/getting-started/
  - type: Authentication
    url: https://docs.aws.amazon.com/waf/latest/APIReference/CommonParameters.html
  - type: SDKs
    url: https://aws.amazon.com/tools/
  - type: StatusPage
    url: https://status.aws.amazon.com/
  - type: FAQ
    url: https://aws.amazon.com/waf/faqs/
  - type: ServiceLevelAgreement
    url: https://aws.amazon.com/waf/sla/
  - type: User Guide
    url: https://docs.aws.amazon.com/waf/latest/developerguide/what-is-aws-waf.html
  - type: APIReference
    url: https://docs.aws.amazon.com/waf/latest/APIReference/Welcome.html
  - type: Code Examples
    url: https://docs.aws.amazon.com/waf/latest/developerguide/waf-examples.html
  - type: Security
    url: https://docs.aws.amazon.com/waf/latest/developerguide/security.html
common:
- type: PostmanWorkspace
  url: https://www.postman.com/kinlaneapi/amazon-waf/overview
- type: AgenticAccess
  url: agentic-access/amazon-waf-agentic-access.yml
- type: TrustCenter
  url: security/amazon-waf-trust-center.yml
- type: VulnerabilityDisclosure
  url: security/amazon-waf-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/amazon-waf-domain-security.yml
- type: Authentication
  url: authentication/amazon-waf-authentication.yml
- type: Portal
  url: https://aws.amazon.com/
- type: Website
  url: https://aws.amazon.com/waf/
- type: Documentation
  url: https://docs.aws.amazon.com/waf/
- type: TermsOfService
  url: https://aws.amazon.com/service-terms/
- type: PrivacyPolicy
  url: https://aws.amazon.com/privacy/
- type: Support
  url: https://aws.amazon.com/premiumsupport/
- type: Blog
  url: https://aws.amazon.com/blogs/security/
- type: GitHubOrganization
  url: https://github.com/aws
- type: Console
  url: https://console.aws.amazon.com/wafv2/
- type: Signup
  url: https://signin.aws.amazon.com/signup?request_type=register
- type: Login
  url: https://aws.amazon.com/console/
- type: StatusPage
  url: https://health.aws.amazon.com/health/status
- type: Knowledge Center
  url: https://repost.aws/knowledge-center
- type: YouTube
  url: https://www.youtube.com/user/AmazonWebServices
- type: StackOverflow
  url: https://stackoverflow.com/questions/tagged/aws-waf
- type: Contact
  url: https://aws.amazon.com/contact-us/
- type: SpectralRules
  url: https://raw.githubusercontent.com/api-evangelist/amazon-waf/refs/heads/main/rules/amazon-waf-spectral-rules.yml
- type: Vocabulary
  url: https://raw.githubusercontent.com/api-evangelist/amazon-waf/refs/heads/main/vocabulary/amazon-waf-vocabulary.yaml
- type: Features
  data:
  - name: Automation
    description: Automate operational tasks with Amazon WAF.
  - name: API Access
    description: Programmatic access to Amazon WAF resources.
- type: UseCases
  data:
  - name: Cloud Operations
    description: Use Amazon WAF to manage and automate cloud operations.
- type: Integrations
  url: https://aws.amazon.com/partners/
integrations:
- name: Partner Programs
- name: Resources
- name: Success Stories
- name: Work with an AWS Partner
- name: AWS Marketplace
- name: AWS Partner Central
- name: Partner Paths
- name: co-sell with AWS
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
  url: https://apievangelist.com
tags:
- AWS
- Bot Management
- DDoS Protection
- Security
- WAF
- Web Application Firewall
tags_raw:
- AWS
- Bot Management
- Ddos Protection
- Security
- WAF
- Web Application Firewall