AWS strongly recommends protecting against HTTP request floods by using rate-based rules in AWS WAF to automatically 'Block' or 'Challenge' requests matching a specific aggregation key (which is by default 'IP address'), when the number of…