Achieving 40% Reduced Downtime and Improved Application Performance through Efficient Resource Management

Solutions

• We have implemented the following AWS WAF rules in the existing infrastructure for different layers of protection:
• Defends against resource overconsumption, business metric distortion, downtime, and malicious bot behaviors. Provides visibility via Amazon CloudWatch and enables bot traffic management.
• Defends web applications from OWASP vulnerabilities.
• Blocks SQL injection attack patterns, preventing unauthorized queries.
• Blocks invalid request patterns to prevent exploitation and discovery of vulnerabilities.
• Blocks request patterns exploiting Linux vulnerabilities, such as LFI attacks, to prevent file exposure and unauthorized code execution.
• Blocks external access to admin pages, protecting against unauthorized administrative access.
• Blocks bot sources and potential threats using Amazon threat intelligence.
• Rate-based limit rules restrict the number of requests per IP to a resource over time, guarding against brute force and DoS attacks. We have taken the rate limit as 300, as it is recommended to take 2-3 times the usual traffic, we have a total of around 150 users where active users are around 50 at a time, so 300 is recommended and it can be changed at any time