Does WAF charge for requests which it blocks? The pricing page mentions that, it will charge for the number of web requests processed by the web ACL. Does it mean any request that hits the WAF or is it only for requests that are allowed through? I am planning to use WAF to rate-limit requests to try and prevent Denial of Wallet attacks. If all requests are charged for, then Denial of Wallet attacks would still be possible since these requests are being paid for.
Back
