Ctrlk
BlogSupport
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Deploy WAAS for Serverless

Create a WAAS rule for serverless

When Serverless Defender is embedded in a function, it offers built-in web application firewall (WAF) capabilities, including protection against:

  • SQL injection (SQLi) attacks

  • Cross-site scripting (XSS) attacks

  • Command injection (CMDi) attacks

  • Local file system inclusion (LFI) attacks

  • Code injection attacks

Prerequisites: You already embedded Serverless Defender into your function.

WAAS serverless deployment is not supported for the following:

  1. Open Console and go to Runtime Security > Defend > WAAS > Serverless.

    waas deployment types serverless

  2. Click Add rule.

  3. Enter a rule name.

  4. Choose the rule Scope by specifying the resource collection(s) to which it applies.

    Collections define a combination of functions to which WAAS should attach itself to protect the web application:

    Use pattern matching to precisely target your rule.

    waas serverless collections

  5. Select the protections to enable.

    waas serverless protections view

  6. Select Alert or Prevent.

  7. If necessary, adjust the Proxy timeout

    The maximum duration in seconds for reading the entire request, including the body. A 500 error response is returned if a request is not read within the timeout period. For applications dealing with large files, adjusting the proxy timeout is necessary.

PreviousDeploy WAAS for App-EmbeddedNextDeploy WAAS Agentless

Last updated

Was this helpful?