terraform-waf-owasp Use AWS WAF at terraform to Rate Limit & Mitigate OWASP's Top 10 (except for CSRF Enforcement) Web Application Vulnerabilities Global WAF for CloudFront usage Regional WAF for Regional/ALB usage For more information: AWS Blog - https://aws.amazon.com/about-aws/whats-new/2017/07/use-aws-waf-to-mitigate-owasps-top-10-web-application-vulnerabilities/ AWS Whitepaper - https://d0.awsstatic.com/whitepapers/Security/aws-waf-owasp.pdf