AWS WAF, Shield & Firewall Manager Technology Syllabus

Web ACLs, managed rules, rate controls, bot control, DDoS protection and multi-account governance. A structured learning blueprint for students and working engineers.

12 ModulesSuggested 6-8 week path - 40 guided hoursIntermediateBatch on Request
Request This TrainingDownload Syllabus PDFCompare Technologies

Who Is This For

  • AWS cloud, application security and platform engineers
  • Security professionals comparing technologies before choosing a specialization
  • Teams creating an internal enablement, migration or operations plan

Prerequisites

  • AWS networking, CloudFront, load balancers and HTTP security
  • Comfort reading technical diagrams, logs and policy decisions
  • Access to a vendor tenant or lab is helpful but not assumed by this published syllabus

Full Technology Syllabus — 12 Modules

M 1AWS edge and regional application-protection architecture
  • Explain AWS edge and regional application-protection architecture using current Amazon Web Services terminology and connect it to the AWS WAF, Shield & Firewall Manager architecture
  • Practice: map the components, identities, data paths and trust boundaries for AWS edge and regional application-protection architecture
  • Evidence: produce an annotated architecture diagram and explain the validation result
M 2Web ACLs, rules, priorities and evaluation
  • Explain Web ACLs, rules, priorities and evaluation using current Amazon Web Services terminology and connect it to the AWS WAF, Shield & Firewall Manager architecture
  • Practice: compare a baseline design with a risky or incomplete design for Web ACLs, rules, priorities and evaluation
  • Evidence: produce a design decision record and explain the validation result
M 3AWS managed rules and version handling
  • Explain AWS managed rules and version handling using current Amazon Web Services terminology and connect it to the AWS WAF, Shield & Firewall Manager architecture
  • Practice: trace one permitted and one denied access decision for AWS managed rules and version handling
  • Evidence: produce an access-flow worksheet and explain the validation result
M 4Custom statements, labels and scope-down logic
  • Explain Custom statements, labels and scope-down logic using current Amazon Web Services terminology and connect it to the AWS WAF, Shield & Firewall Manager architecture
  • Practice: plan a least-privilege configuration and a safe rollout sequence for Custom statements, labels and scope-down logic
  • Evidence: produce a change plan with rollback steps and explain the validation result
M 5Rate-based rules and application abuse
  • Explain Rate-based rules and application abuse using current Amazon Web Services terminology and connect it to the AWS WAF, Shield & Firewall Manager architecture
  • Practice: review policy order, dependencies, exceptions and rollback conditions for Rate-based rules and application abuse
  • Evidence: produce a policy review checklist and explain the validation result
M 6Bot Control and account-takeover controls
  • Explain Bot Control and account-takeover controls using current Amazon Web Services terminology and connect it to the AWS WAF, Shield & Firewall Manager architecture
  • Practice: configure or assess the control with secure defaults for Bot Control and account-takeover controls
  • Evidence: produce a configuration evidence sheet and explain the validation result
M 7CloudFront, ALB, API Gateway and AppSync integration
  • Explain CloudFront, ALB, API Gateway and AppSync integration using current Amazon Web Services terminology and connect it to the AWS WAF, Shield & Firewall Manager architecture
  • Practice: test expected and unexpected behavior against explicit pass criteria for CloudFront, ALB, API Gateway and AppSync integration
  • Evidence: produce a pass/fail validation record and explain the validation result
M 8AWS Shield Standard and Advanced concepts
  • Explain AWS Shield Standard and Advanced concepts using current Amazon Web Services terminology and connect it to the AWS WAF, Shield & Firewall Manager architecture
  • Practice: locate the relevant telemetry and build an investigation timeline for AWS Shield Standard and Advanced concepts
  • Evidence: produce an investigation timeline and explain the validation result
M 9Firewall Manager multi-account policy
  • Explain Firewall Manager multi-account policy using current Amazon Web Services terminology and connect it to the AWS WAF, Shield & Firewall Manager architecture
  • Practice: triage a realistic finding and separate risk from expected activity for Firewall Manager multi-account policy
  • Evidence: produce a triage note with severity rationale and explain the validation result
M 10Logging, metrics and sampled-request analysis
  • Explain Logging, metrics and sampled-request analysis using current Amazon Web Services terminology and connect it to the AWS WAF, Shield & Firewall Manager architecture
  • Practice: tune a noisy control without removing required visibility for Logging, metrics and sampled-request analysis
  • Evidence: produce a tuning record with before-and-after evidence and explain the validation result
M 11False-positive tuning and change safety
  • Explain False-positive tuning and change safety using current Amazon Web Services terminology and connect it to the AWS WAF, Shield & Firewall Manager architecture
  • Practice: troubleshoot a production-style failure using an evidence-first workflow for False-positive tuning and change safety
  • Evidence: produce a troubleshooting runbook entry and explain the validation result
M 12Multi-account edge-security capstone
  • Explain Multi-account edge-security capstone using current Amazon Web Services terminology and connect it to the AWS WAF, Shield & Firewall Manager architecture
  • Practice: combine design, validation, operations and handover in the capstone for Multi-account edge-security capstone
  • Evidence: produce a concise capstone handover and portfolio artifact and explain the validation result

Practice Blueprint

🗺️

Architecture and trust-boundary mapping

Map components, identities, data paths and trust boundaries.

⚙️

Guided configuration and policy review

Build and review a safe configuration or policy change.

🔎

Alert, log or finding investigation

Use logs, findings or alerts to make an evidence-based decision.

🧰

Troubleshooting and operational capstone

Combine design, validation, tuning and handover into one scenario.

Learning Outcomes

  • Explain the AWS WAF, Shield & Firewall Manager architecture and its security control points
  • Design a safe configuration and policy workflow for AWS WAF, Shield & Firewall Manager
  • Use platform evidence to investigate, tune and troubleshoot
  • Document decisions, risks, validation evidence and next actions

Official Reference Set

This learning path uses vendor documentation as the source of truth and connects practical work to current workforce and control frameworks.

FAQ

Q 1Is a live batch currently scheduled?

This is a published technology learning blueprint. Contact Techclick to confirm current trainer availability, delivery format, schedule, lab access and pricing before making a decision.

Q 2Does this promise vendor certification?

No. Vendor certification programmes and exam blueprints change independently. This syllabus focuses on practical technology skills and official documentation.

Q 3Can Techclick customize this for a team?

Yes, subject to trainer and lab availability. Share your existing environment, target outcomes and preferred timeline for a scoped discussion.

Need an AWS WAF, Shield & Firewall Manager learning path?

Share your role, current experience and desired outcome. Techclick will confirm whether a suitable batch or custom workshop is available.

Request AvailabilityBrowse All Syllabi