AWS WAF is a web application firewall that helps protect apps and APIs against bots and exploits that consume resources, skew metrics, or cause downtime.