WAF & Edge Security across clouds
Web application firewalls and edge request filtering - managed rule sets, rate limits and IP controls in front of your origin.
10 verified modules, 2 of them live-tested apply→verify→destroy; the rest are static-validated, live-test pending.
Compare by provider
| Provider | Module | Verification |
|---|---|---|
| Akamai | Akamai App & API Protector (WAF) | static-validated |
| Alibaba Cloud | WAF 3.0 in Front of a Domain: HTTPS Only, TLS 1.2+, the Origin over HTTPS | static-validated |
| AWS | WAFv2 Web ACL (managed rules + rate limit) | ✓ live-tested |
| Azure | A WAF Policy that Blocks rather than Narrates | static-validated |
| Cloudflare | A Zone WAF Whose Managed Rulesets Actually Execute | static-validated |
| Google Cloud | Cloud Armor Security Policy (WAF) | ✓ live-tested |
| Huawei Cloud | A Dedicated WAF in Your VPC, a Policy that Blocks, and the Domain with TLS 1.2 | static-validated |
| IBM Cloud | A WAF That Tells You Removing It Leaves It Running | static-validated |
| Oracle Cloud | A WAF that Blocks rather than Narrates | static-validated |
| Tencent Cloud | A WAF That Tells You the Origin Can Still Be Reached Around It | static-validated |
How to choose
Put it where your traffic already terminates: if you front the site with a CDN, use that vendor WAF rather than standing up a second edge for requests to pass through. Then check whether you get maintained managed rule groups or only rules you write and own forever.
When not to use
A WAF is a filter, not a fix. It buys time against a known shape of request; the vulnerability underneath is still there, and a rule tuned to block it will also block someone legitimate eventually.
Other solutions
Managed Relational Database25Secrets & Key Management23DNS & Traffic Management23Messaging & Pub/Sub22Load Balancer21Virtual Machines21Virtual Private Cloud (VPC)19Cloud Firewall17Managed Kubernetes16Object Storage16Block Storage16Golden Images14Container Registry12Identity & Access12In-Memory Cache12Shared File Storage11Managed NoSQL Database11Serverless Functions10CDN & Edge Delivery10NAT Gateway10Serverless Containers9Monitoring & Observability9Managed Search9Static Site Hosting9Managed TLS Certificates9Network Peering9Audit Log Retention9Cloud Data Warehouse9API Gateway8Site-to-Site VPN8Dedicated Interconnect8Backup Service8Managed CI/CD8Transit Hub8Managed Spark8Network Flow Logs8Security Posture & Findings7Database Migration & CDC7Managed Network Firewall7Private Instance Access7Organisation Guardrails7Private Service Endpoints7Private Certificate Authority6Managed ML Platform6Transactional Email6Managed App Platform6Customer Identity6Uptime Checks6Landing Zone6Budgets & Cost Alerts5Patch Management5Managed ETL Pipelines4Workflow Orchestration4HPC Parallel File Systems4Managed BI4Data Transfer Service3Managed Active Directory3Zero Trust Application Access3Sensitive Data Discovery3