An AWS WAF web ACL fronting the HTTP API.
| Rule | Detail | Action | Blocked (24h) |
|---|---|---|---|
| rate-limit | 2000 req / 5 min / IP | block | 211 |
| common (AWSManagedRulesCommonRuleSet) | OWASP common | block | 64 |
| sqlInjection (AWSManagedRulesSQLiRuleSet) | SQLi signatures | block | 43 |
Configured via app.firewall in cloud.config.