AWS WAF integration
Optional compensating rules in AWS WAF, for cover while the pull request that fixes the finding ships.
Integration details
Primary category
Web Application Firewall
Sync direction
AWS WAF ↔ Konvu
Findings are ingested from AWS WAF into Konvu. Based on your workflow, Konvu can then push context, status changes, and severity updates back to AWS WAF.
Status
Coming soon
What is AWS WAF?
AWS WAF is Amazon's managed web application firewall service that protects applications behind CloudFront, Application Load Balancer, API Gateway, and AppSync with custom rules and managed rule groups.
Why connect AWS WAF to Konvu
- Add a temporary AWS WAF rule for a finding Konvu has already proven exploitable, so exposure narrows while the upgrade goes through review.
- Test every rule against known exploit signatures and a sample of legitimate traffic before deployment, with rollback if false-positive rates go bad.
- Retire rules once Konvu confirms the upstream fix has shipped, so compensating controls don't silently become permanent.
How it works
Receive exploit conditions
Konvu reads the verified exploit path from a finding it has already proven exploitable.
Draft & test rule
An AWS WAF rule is drafted scoped to the vulnerable code path and tested against the exploit signature and your legitimate traffic.
Deploy with approval flow
The rule is deployed to your AWS WAF Web ACL via the approval flow your team has configured.
Monitor & retire
Blocks and false positives are monitored in production; the rule is removed once Konvu confirms the upstream fix is live.
Quick setup
When AWS WAF is available, you’ll configure it from the integrations list in Konvu.
- 1Go to /configuration/integrations in Konvu and choose AWS WAF.
- 2Authorize access and confirm the data sources you want to sync.
- 3Save the configuration to start syncing.
Sync direction
AWS WAF ↔ Konvu
Findings are ingested from AWS WAF into Konvu. Based on your workflow, Konvu can then push context, status changes, and severity updates back to AWS WAF.
Join the waitlist
We’ll let you know when the AWS WAF integration is ready. Leave your email to get updates.
More integrations
View all
Cloudflare WAF
Optional compensating rules in Cloudflare WAF, for cover while the pull request that fixes the finding ships.
- WAF
ModSecurity
Optional compensating rules in ModSecurity, for cover while the pull request that fixes the finding ships.
- WAF
Arnica
Triage Arnica SCA, SAST, and ASPM findings with exploitability evidence and remediation context.
- SCA
- SAST
- ASPM
AWS Inspector
Focus Inspector scans on exploitable CVEs in EC2, Lambda, and container images.
- Cloud Security
AWS Security Hub
Prioritize Security Hub aggregated findings using centralized exploitability analysis.
- Cloud Security
Black Duck
Add exploit evidence to Black Duck's component risk and license compliance findings.
- SCA