WebACL + rules + requests
AWS WAF Pricing Calculator
Estimate WAF WebACL hours, rule charges, and request volume alongside your CloudFront distribution — before Bot Control doubles the line item.
- No signup
- Instant results
- ~2 min
Rates reviewed
Read the full breakdown — Amazon CloudFront Pricing covers billing dimensions, traps, and a 30-day cleanup plan.
WAF footprint
us-east-1list rates, pricing as of 2026-10-17. CloudFront/ALB/API Gateway resource charges excluded. Managed rule group marketplace fees use base $1/rule estimate. Bot Control models the Common level; Fraud Control models Account Takeover Prevention (ATP) with one subscription per Web ACL — Account Creation Fraud Prevention is a separate $10/month subscription. Source: AWS public pricing.
Add-on volumes
Tiered: $1,000/M first 2M, $700/M next 3M, $400/M next 10M, $200/M next 15M, $50/M above 30M.
Estimated WAF Cost
WebACLs · rules · requests
Total Monthly Cost
live resultBot Control, Fraud Control, and CAPTCHA breakdown unlocks after email
Unlock WAF Cost Breakdown
See Bot Control, Fraud Control, and CAPTCHA line items, and rule consolidation tips.
Full breakdown unlocked
Detailed line items are now visible.
Want this applied to your real account?
FactualMinds right-sizes WAF rule sets, CloudFront + WAF integration, and Shield Advanced trade-offs for SaaS edge security.
Talk to Security Experts →Who This Tool Is For
Web and platform teams attaching WAF to CloudFront distributions, ALBs, or API Gateway stages.
Why We Built This Tool
WAF bills $5 per WebACL, $1 per rule, and $0.60 per million requests — managed rule groups and Bot Control stack on top fast at scale.
What Problem It Solves
- ACL sprawl. One WebACL per distribution multiplies the $5/month base fee.
- Rule bloat. Every managed rule group counts as rules — AWS and marketplace groups add monthly fees.
- Request volume. High-traffic APIs pay more on inspection than on the ACL base fee.
Pair with the CloudFront calculator and CloudFront security pricing guide.
Frequently Asked Questions
How is AWS WAF priced?
WAF charges $5/month per Web ACL, $1/month per rule (including each managed rule group), and $0.60 per million requests inspected in us-east-1.
Is WAF included with CloudFront?
No. WAF is a separate service attached to CloudFront, ALB, API Gateway, or AppSync. CloudFront data transfer and request charges bill separately.
What does Bot Control add?
Common Bot Control adds a $10/month subscription per Web ACL plus $1.00 per million requests after the first 10 million each month, on top of the $1 rule-group fee. Targeted Bot Control is $10.00 per million after the first 1 million.
Does Shield Advanced include WAF?
Shield Advanced ($3,000/month org subscription) includes limited WAF usage on protected resources. Model Shield separately if evaluating Advanced.
How do I reduce WAF request charges?
Increase CloudFront cache hit ratio so fewer requests reach origin-side inspection. Block obvious bots at the edge with scoped rules before enabling full Bot Control.
Regional vs CloudFront-scope WebACL?
Pricing dimensions are the same; attach scope depends on resource type. Regional ACLs protect ALB/API Gateway; CloudFront-scope ACLs protect distributions globally.
Related AWS Tools
Shield Pricing Calculator
Standard vs Advanced DDoS protection costs.
CloudFront Pricing Calculator
CDN egress and requests alongside WAF.
API Gateway Pricing Calculator
API traffic that WAF can protect.
ELB Pricing Calculator
ALB-backed apps with regional WAF.
CloudTrail Pricing Calculator
Audit API changes to WAF rules.