Skip to main content

Amazon Web Application Firewall

Amazon WAF Pricing

Free Tier

WAF Bot Control Free Tier is available in the Amazon Web Services China (Ningxia) Region operated by NWCD and Amazon Web Services China (Beijing) Region operated by Sinnet. The Free Tier includes 10,000,000 requests processed by Bot Control per month.

Learn more

Amazon WAF charges based on the number of web access control lists (web ACLs) that you create, the number of rules that you add per web ACL, and the number of web requests that you receive. There are no upfront commitments. Amazon WAF charges are in addition to Application Load Balancer (ALB) pricing, Amazon API Gateway pricing, and/or Amazon AppSync pricing.

For logging with Amazon CloudWatch Logs (Standard and Infrequent Access), other Vended Logs destinations, you receive up to 500MB WAF logs free per 1M WAF Requests at no additional charge. Any usage beyond the discounted usage is billed by Amazon CloudWatch based on WAF specific Vended Logs pricing. The per GB rate for WAF-specific vended logs pricing matches the CloudWatch Vended Logs pricing per region. WAF logs specific charges will show under the VendedLog-Bytes-WAFlogs (for CW-Standard), S3-Egress-Bytes-WAFLogs (for S3), and VendedLogIA-Bytes-WAFlogs (for CW-IA) usage types.

Amazon WAF pricing

You will be charged for each web ACL that you create and each rule that you create per web ACL. In addition, you will be charged for the number of web requests processed by the web ACL.

Resource type

Resource type
Price
Web ACL

¥32.65 per month (prorated hourly)

Rule

¥6.53 per month (prorated hourly)

Request

¥3.92 per 1 million requests

Note 1: Price is the same for Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD.

Note 2: Price for Amazon WAF Classic is same as shown in the table above.

Note 3: Amazon WAF uses Web ACL Capacity Units (WCUs) to calculate and control the operating resources required to process your web ACLs. WCUs for an individual rule varies according to its type and any additional configuration. You will be charged an additional ¥1.45 per million requests for each 500 WCUs the Web ACL uses beyond the default allocation of 1500. For more information about default limits, see Developer Guide.

Note 4: Amazon WAF supports standard rule actions such as, Allow, Block, Count at no additional charge. You will be charged per each Captcha attempt and Challenge response as per table below. 

Rule Actions

Rule Actions
Price
Captcha

¥2.61 per 1 thousand attempts analyzed

Challenge

¥2.61 per 10 thousand responses served

Captcha attempt is when a user completes a Captcha challenge that is submitted to Amazon WAF for analysis, regardless of the outcome. A single Captcha response can result in multiple attempts.

Challenge response is when a user is served a challenge page by Amazon WAF as a result of a challenge action, regardless of whether the user attempts the challenge. 

Managed Rules Groups through Amazon Managed Rules

Bot Control is a paid Amazon Managed Rules that can be added to your web ACL. You will be charged for each time Bot Control is added to your web ACL. In addition, you will be charged for the number of web requests processed by Bot Control. Bot Control charges are in addition to the Amazon WAF fees described above.

Bot Control free usage tier includes 10M free requests processed by Bot Control per month.

Resource type

Resource type
Price
Bot Control

¥65.30 per month (prorated hourly)

Request

¥6.53 per 1 million requests