Help prevent account fraud with AWS WAF
summary
Newly released AWS WAF Fraud Control adds an AWS WAF token and client interrogation flow that runs proof‑of‑work JavaScript, collects hundreds of client attributes, and issues tamper‑proof tokens; protections arrive as a single Amazon‑managed rule group for account creation fraud prevention and account takeover. Three token options exist—embed WAF Captcha, apply a challenge on the signup GET, or use the WAF SDK—and the engine inspects ~18 layers, uses reputation and a stolen‑credentials DB, and is live in 22 regions with tiered pricing and challenge/captcha actions free.
AI-written summary · about
chapters (14)
- 0:00Intro
- 0:46Expectations
- 1:42High complexity
- 3:40Long implementation cycles
- 5:41High costs and vendor lock-ins
- 6:19Imagine a fraud prevention feature that...
- 7:06Introducing Account Creation Fraud Prevention
- 10:33Few underlying AWS WAF concepts
- 16:07Acquiring Tokens for Account Creation Fraud Prevention
- 24:08Request Inspection
- 31:21Configure Account Creation Fraud Prevention
- 32:33Determine Best Client-Side Integration Option
- 35:26Tiered, simplified, and reduced pricing
- 36:46Pricing examples
related talks
15mLevel up security: Advanced AWS WAF rules & bot detection techniques
45mThe good, the bad and the verified - AWS WAF vs. bots
52mStaying ahead of threat actors with Amazon Cognito
16mAutomating AWS WAF: Pioneering future security
18mEnhance application security at the edge with AWS
29mWeb application protection on AWS
33mNetwork and application protection on AWS
51mProtect your internet-facing web applications hosted on AWS