How Catch Group uses AWS WAF Bot Control on their ecommerce platform
summary
Catch Group recounts a DDoS that produces an 11x request spike and forces rapid changes: they deploy CloudFront + Route 53, upgrade to AWS Shield Advanced, enable AWS WAF with Amazon Managed Rules in count mode, add a generous global rate limit and a geo-block to Australia/NZ, and roll out AWS WAF Bot Control (then-new targeted bot capability) plus a WAF SDK client and Datadog dashboards. A third‑party vendor stays as fallback; outcome is effective mitigation, faster tuning, and lower TCO versus commercial appliances.
AI-written summary · about
chapters (8)
- 0:00Introduction and threat landscape
- 11:17Catch's DDoS journey
- 18:47Evaluating security solutions
- 24:26Implementing AWS Bot Control
- 30:23Targeted bot detection
- 34:22Final results and takeaways
- 35:33Best practices for security
- 45:49Closing remarks
related talks
33mNetwork and application protection on AWS
29mWeb application protection on AWS
53mHow AWS threat intelligence becomes managed firewall rules
45mThe good, the bad and the verified - AWS WAF vs. bots
42mProtect your workloads from DDoS attacks with Shield Advanced
11mAWS On Air ft. Automatic Application Layer DDoS
27mSecuring Applications and Managing WAFs at a large scale
41mSeven patterns to increase application availability