No more typing reviews! Try our Samantha, our new voice AI agent.

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

AWS WAF is highly valued for its ease of configuration and deployment, with straightforward initial setup and cloud-native integration.
The scalability and flexibility of AWS WAF are significant advantages, as it can automatically scale according to requirements and integrate with multiple AWS services.
AWS WAF offers robust security features, providing protection against threats like SQL injection and scripting attacks, which enhances overall security posture.
The customizable and highly configurable rules system in AWS WAF allows precise management of web application traffic, including geolocation-based access restrictions.
Customers appreciate the pay-as-you-go billing model of AWS WAF, allowing for cost-effective use without upfront payments or subscriptions.

CONS

AWS WAF must provide more features and improve security, including adding better bot and DDoS protection.
Pricing and cost management must be more intuitive, especially for smaller clients and businesses without technical expertise.
Technical support could be more responsive, knowledgeable, and user-friendly compared to other vendors.
Automation capabilities need improvement to reduce manual efforts in configuring rules and policy management.
Comprehensive and up-to-date documentation is necessary to avoid reliance on support and community forums.
 

AWS WAF Pros review quotes

Azam S M - PeerSpot reviewer
Infrastructure Lead at Danat Fz LLC
Oct 9, 2025
The biggest benefit of AWS WAF for us is to filter malicious requests, so we can protect our environment and application from malicious actors.
Eucharia Okafor - PeerSpot reviewer
Dev Ops Engineer at a tech vendor with 1,001-5,000 employees
Dec 22, 2025
AWS WAF has helped to strengthen the security of my environment; it has also helped to improve the posture of our application, prevent all DDoS attacks and unnecessary traffic and SQL injection that is reducing the performance of our application.
reviewer2849304 - PeerSpot reviewer
Senior Cloud Security at a healthcare company with 5,001-10,000 employees
Jun 5, 2026
AWS WAF has positively impacted our organization by improving our defense from our WAF firewalling the web application, including production and non-production environments.
Learn what your peers think about AWS WAF. Get advice and tips from experienced pros sharing their opinions. Updated: August 2026.
908,834 professionals have used our research since 2012.
Shashank N - PeerSpot reviewer
Security Engineer Dev Sec Ops at a outsourcing company with 1,001-5,000 employees
May 10, 2026
The initial setup is easy.
reviewer1340643 - PeerSpot reviewer
Security Engineer at a computer software company with 1,001-5,000 employees
Apr 8, 2025
Some valuable features of AWS WAF include its seamless integration and ease of orchestration within the AWS platform.
Abdalla Kenawy - PeerSpot reviewer
AWS DevOps SRE/Infrastructure Engineer at Capgemini
Oct 30, 2024
The automation of blocking for security attacks is valuable, with AWS applying rate limiting.
Kavin Kalaiarasu - PeerSpot reviewer
Security Analyst at M2P Fintech
Jan 6, 2025
The cloud-native nature of AWS is crucial since most of our workload is in AWS, making AWS WAF native to Amazon Web Services.
EN
OCI/AWS Consultant at a government with 11-50 employees
Nov 11, 2024
AWS WAF acts as a barrier, analyzing HTTP communications between external users and web applications.
Sita Thomas - PeerSpot reviewer
Associate Vice President - Engineering at Fedo.ai
Nov 27, 2024
One of the most valuable features of AWS WAF is its ability to filter web app traffic, allowing us to specify conditions such as IP addresses and HTTP headers.
AshishGautam - PeerSpot reviewer
IT Project Manager at Rajiv Gandhi Cancer Institute In India
Dec 27, 2023
The product's initial setup phase was very simple.
 

AWS WAF Cons review quotes

Azam S M - PeerSpot reviewer
Infrastructure Lead at Danat Fz LLC
Oct 9, 2025
One of the things that should be improved in AWS WAF is the monitoring; we need to identify the requests and where they are coming from.
Eucharia Okafor - PeerSpot reviewer
Dev Ops Engineer at a tech vendor with 1,001-5,000 employees
Dec 22, 2025
AWS WAF can be improved if the dashboard is enhanced in such a way that everything will be displayed automatically without you going in there to see what is going on.
reviewer2849304 - PeerSpot reviewer
Senior Cloud Security at a healthcare company with 5,001-10,000 employees
Jun 5, 2026
AWS WAF can be improved by not being too sensitive for some data because with some XML, it is sometimes very sensitive.
Learn what your peers think about AWS WAF. Get advice and tips from experienced pros sharing their opinions. Updated: August 2026.
908,834 professionals have used our research since 2012.
Shashank N - PeerSpot reviewer
Security Engineer Dev Sec Ops at a outsourcing company with 1,001-5,000 employees
May 10, 2026
The issue with AWS WAF is that the rule structure is very complicated and it is very hard to maintain.
reviewer1340643 - PeerSpot reviewer
Security Engineer at a computer software company with 1,001-5,000 employees
Apr 8, 2025
AWS WAF's signature sets have room for improvement due to false positives.
Abdalla Kenawy - PeerSpot reviewer
AWS DevOps SRE/Infrastructure Engineer at Capgemini
Oct 30, 2024
Compatibility and integration functionalities, especially with services like Kafka for event-driven messaging, could be better.
Kavin Kalaiarasu - PeerSpot reviewer
Security Analyst at M2P Fintech
Jan 6, 2025
The dashboarding could be improved, and the default metrics provided by AWS WAF could be upgraded.
EN
OCI/AWS Consultant at a government with 11-50 employees
Nov 11, 2024
There is a lot of innovation talk, however, implementation might be lacking.
Sita Thomas - PeerSpot reviewer
Associate Vice President - Engineering at Fedo.ai
Nov 27, 2024
I find the documentation somewhat complex to implement during the initial stages.
AshishGautam - PeerSpot reviewer
IT Project Manager at Rajiv Gandhi Cancer Institute In India
Dec 27, 2023
The area of reporting in the product needs to have a proper format.