AWS Web Application Firewall (WAF) is an AWS security service which protects web applications from various types of exploitation using AWS Managed and custom rules. In AWS WAF you define a Web access control list (ACL) and then associate it (AWS WAF) with various AWS resources such as Amazon CloudFront, API Gateway, Application Load Balancer etc.