Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Bot Control Rules  选择 CAPTCHA


添加:Token Domain List 

Image Removed



webacl-alb-api-001默认规则:AWS-AWSManagedRulesBotControlRuleSet规则如下

...

上传样例代码到EC2的NGINX(  /usr/share/nginx/html )里面,呈现为客户端可访问的网页如下:

Code Block
themeRDark

    server {
        listen       80;
        #listen       [::]:80;
        #server_name  _;
        root         /usr/share/nginx/html;
        index index.html index.htm

        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;

        error_page 404 /404.html;
        location = /404.html {
        }

        error_page 500 502 503 504 /50x.html;
        location = /50x.html {
        }
    }

...

4.4、步骤四:配置AWF

1、在WAF ACL关联ALB

Image RemovedImage Added


2、配置Token Domain列表

当 WAF 从 web 请求中侦测 token 时,默认只会接受与 ACL 所关联资源的 host domain。当请求是通过ALB 时,需要把custom host domain 配置到 Token domain 列表中。配置参考文档

Image RemovedImage Added


4.5、步骤五:场景测试

1、访问集成 SDK 的前端网页,观察WEB-API的响应

...