AWS WAF website screenshot

AWS WAF

AWS WAF is a web application firewall that monitors and controls HTTP and HTTPS requests forwarded to protected resources such as Amazon CloudFront distributions, API Gateway REST APIs, Application Load Balancers, AWS AppSync GraphQL APIs, Cognito user pools, App Runner services, Amplify applications, and Verified Access instances. It enables rule-based blocking, rate limiting, and managed rule groups to defend against common web exploits. The AWS WAFV2 API and AWS SDKs provide programmatic access using AWS Signature Version 4 authentication.

AWS WAF publishes 1 API on the APIs.io network: AWS WAFV2 API API. Tagged areas include Security, Web Application Firewall, DDoS Protection, Bot Management, and Edge Security.

AWS WAF’s developer surface includes authentication, documentation, pricing, signup flow, engineering blog, and 5 more developer resources.

🌐 Visit website 📡 Source on GitHub
30.3/100 thin ▬ flat Agent 28/100 agent aware Full breakdown ↓
scored 2026-07-28 · rubric v0.6
AccessSelf serve
2 APIs
SecurityWeb Application FirewallDDoS ProtectionBot ManagementEdge SecurityCloud

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6
Composite quality — 30.3/100 · thin
Contract Quality 15.5 / 25
Developer Ergonomics 4.3 / 20
Commercial Clarity 3.7 / 20
Operational Transparency 0.0 / 13
Governance 0.0 / 12
Discoverability 6.9 / 10
Agent readiness — 28/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/aws-waf: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 2

Individual APIs this provider publishes, each with its own machine-readable definition.

AWS WAFV2 API

REST API for creating and managing web ACLs, rule groups, IP sets, regex pattern sets, and logging configurations across regional and CloudFront-scoped AWS WAF deployments. Requ...

AWS WAF AWS WAFV2 API API

The AWS WAFV2 API API from AWS WAF — 1 operation(s) for aws wafv2 api.

Open Collections 1

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

AWS WAFV2 API

OPEN COLLECTION

GraphQL 1

GraphQL schemas published by this provider.

AWS WAF GraphQL API

GRAPHQL

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Aws Waf Authentication

apiKey · 1 scheme

SECURITY

Aws Waf Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Aws Waf Vulnerability Disclosure

security.txt · contact published

SECURITY

Aws Waf Trust Center

PCI DSS, HIPAA, FedRAMP, GDPR, FIPS 140

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Aws Waf Agentic Access

1 operation · 1 acting

1 operations · 1 acting

AGENTIC

Resources

Get Started 1

Portal, sign-up, and the first successful call

Signup
Signup

Documentation 1

Reference material describing how the API behaves

Documentation
Documentation

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess
AgenticAccess

Access & Security 4

Authentication, authorization, and security posture

TrustCenter
TrustCenter
 VulnerabilityDisclosure
VulnerabilityDisclosure
 DomainSecurity
DomainSecurity
 Authentication
Authentication

Commercial 1

Pricing, plans, and the legal terms of use

Pricing
Pricing

Company 2

The organization behind the API

Website
Website
 Blog
Blog

Source (apis.yml)

apis.yml Raw ↑ 
aid: aws-waf
name: AWS WAF
description: AWS WAF is a web application firewall that monitors and controls HTTP and HTTPS requests forwarded to protected
  resources such as Amazon CloudFront distributions, API Gateway REST APIs, Application Load Balancers, AWS AppSync GraphQL
  APIs, Cognito user pools, App Runner services, Amplify applications, and Verified Access instances. It enables rule-based
  blocking, rate limiting, and managed rule groups to defend against common web exploits. The AWS WAFV2 API and AWS SDKs provide
  programmatic access using AWS Signature Version 4 authentication.
type: Index
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/aws-waf.png
tags:
- Security
- Web Application Firewall
- DDoS Protection
- Bot Management
- Edge Security
- Cloud
- AWS
url: https://raw.githubusercontent.com/api-evangelist/aws-waf/refs/heads/main/apis.yml
created: '2026-05-11'
modified: '2026-05-11'
specificationVersion: '0.19'
apis:
- aid: aws-waf:wafv2-api
  name: AWS WAFV2 API
  description: REST API for creating and managing web ACLs, rule groups, IP sets, regex pattern sets, and logging configurations
    across regional and CloudFront-scoped AWS WAF deployments. Requests are authenticated with AWS Signature Version 4 (SigV4)
    using AWS access keys or temporary IAM credentials.
  humanURL: https://docs.aws.amazon.com/waf/latest/APIReference/Welcome.html
  baseURL: https://wafv2.us-east-1.amazonaws.com
  tags:
  - WAF
  - Web Security
  - Rule Groups
  - IP Sets
  - AWS
  properties:
  - type: Documentation
    url: https://docs.aws.amazon.com/waf/latest/APIReference/Welcome.html
  - type: Developer Guide
    url: https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html
  - type: Endpoints
    url: https://docs.aws.amazon.com/general/latest/gr/waf.html
  - url: graphql/aws-waf-graphql.md
    type: GraphQL
- aid: aws-waf:aws-waf-aws-wafv2-api-api
  name: AWS WAF AWS WAFV2 API API
  description: The AWS WAFV2 API API from AWS WAF — 1 operation(s) for aws wafv2 api.
  humanURL: https://docs.aws.amazon.com/waf/latest/APIReference/Welcome.html
  baseURL: https://wafv2.us-east-1.amazonaws.com
  tags:
  - AWS WAFV2 API
  properties:
  - type: OpenAPI
    url: openapi/aws-waf-aws-wafv2-api-api-openapi.yml
common:
- type: AgenticAccess
  url: agentic-access/aws-waf-agentic-access.yml
- type: TrustCenter
  url: security/aws-waf-trust-center.yml
- type: VulnerabilityDisclosure
  url: security/aws-waf-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/aws-waf-domain-security.yml
- type: Authentication
  url: authentication/aws-waf-authentication.yml
- type: Website
  url: https://aws.amazon.com/waf/
- type: Documentation
  url: https://docs.aws.amazon.com/waf/
- type: Pricing
  url: https://aws.amazon.com/waf/pricing/
- type: Signup
  url: https://portal.aws.amazon.com/billing/signup
- url: https://aws.amazon.com/blogs/networking-and-content-delivery/feed/
  type: Blog
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com