Amazon WAF charges based on the number of web access control lists (web ACLs) that you create, the number of rules that you add per web ACL, and the number of web requests that you receive. There are no upfront commitments. Amazon WAF charges are in addition to Application Load Balancer (ALB) pricing, Amazon API Gateway pricing, and/or Amazon AppSync pricing.

Amazon WAF pricing

You will be charged for each web ACL that you create and each rule that you create per web ACL. In addition, you will be charged for the number of web requests processed by the web ACL.

Resource type Price
Web ACL ¥ 32.65 per month (prorated hourly)
Rule ¥ 6.53 per month (prorated hourly)
Request ¥ 3.92 per 1 million requests

Note 1: Price is the same for Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD.
Note 2: Price for Amazon WAF Classic is same as shown in the table above.

Amazon WAF uses Web ACL Capacity Units (WCUs) to calculate and control the operating resources required to process your web ACLs. WCUs for an individual rule varies according to its type and any additional configuration. WCUs do not directly affect pricing.

Managed Rules Groups through Amazon Managed Rules

Bot Control is a paid Amazon Managed Rules that can be added to your web ACL. You will be charged for each time Bot Control is added to your web ACL. In addition, you will be charged for the number of web requests processed by Bot Control. Bot Control charges are in addition to the Amazon WAF fees described above.

Bot Control free usage tier includes 10M free requests processed by Bot Control per month.

Resource type Price
Bot Control ¥ 65.30 per month (prorated hourly)
Request ¥ 6.53 per 1 million requests

Learn how to get started with Amazon WAF

Visit the getting started page
Ready to build?
Get started with Amazon WAF
Have more questions?
Contact us