section> Computing
  • Auto Scaling
  • Bare Metal Server
  • Dedicated Host
  • Elastic Cloud Server
  • FunctionGraph
  • Image Management Service
Network
  • Direct Connect
  • Domain Name Service
  • Elastic IP
  • Elastic Load Balancing
  • Enterprise Router
  • NAT Gateway
  • Private Link Access Service
  • Secure Mail Gateway
  • Virtual Private Cloud
  • Virtual Private Network
  • VPC Endpoint
Storage
  • Cloud Backup and Recovery
  • Cloud Server Backup Service
  • Elastic Volume Service
  • Object Storage Service
  • Scalable File Service
  • Storage Disaster Recovery Service
  • Volume Backup Service
Application
  • API Gateway (APIG)
  • Application Operations Management
  • Application Performance Management
  • Distributed Message Service (for Kafka)
  • Simple Message Notification
Data Analysis
  • Cloud Search Service
  • Data Lake Insight
  • Data Warehouse Service
  • DataArts Studio
  • MapReduce Service
  • ModelArts
  • Optical Character Recognition
Container
  • Application Service Mesh
  • Cloud Container Engine
  • Cloud Container Instance
  • Software Repository for Containers
Databases
  • Data Replication Service
  • Distributed Cache Service
  • Distributed Database Middleware
  • Document Database Service
  • GeminiDB
  • Relational Database Service
  • TaurusDB
Management & Deployment
  • Cloud Create
  • Cloud Eye
  • Cloud Trace Service
  • Config
  • Log Tank Service
  • Resource Formation Service
  • Tag Management Service
Security Services
  • Anti-DDoS
  • Cloud Firewall
  • Database Security Service
  • Dedicated Web Application Firewall
  • Host Security Service
  • Identity and Access Management
  • Key Management Service
  • Web Application Firewall
Other
  • Enterprise Dashboard
  • Marketplace
  • Price Calculator
  • Status Dashboard
APIs
  • REST API
  • API Usage Guidelines
  • Endpoints
Development and Automation
  • SDKs
  • Drivers and Tools
  • Terraform
  • Ansible
  • Cloud Create
Architecture Center
  • Best Practices
  • Blueprints
IaaSComputingAuto ScalingBare Metal ServerDedicated HostElastic Cloud ServerFunctionGraphImage Management ServiceNetworkDirect ConnectDomain Name ServiceElastic IPElastic Load BalancingEnterprise RouterNAT GatewayPrivate Link Access ServiceSecure Mail GatewayVirtual Private CloudVirtual Private NetworkVPC EndpointStorageCloud Backup and RecoveryCloud Server Backup ServiceElastic Volume ServiceObject Storage ServiceScalable File ServiceStorage Disaster Recovery ServiceVolume Backup ServicePaaSApplicationAPI Gateway (APIG)Application Operations ManagementApplication Performance ManagementDistributed Message Service (for Kafka)Simple Message NotificationData AnalysisCloud Search ServiceData Lake InsightData Warehouse ServiceDataArts StudioMapReduce ServiceModelArtsOptical Character RecognitionContainerApplication Service MeshCloud Container EngineCloud Container InstanceSoftware Repository for ContainersDatabasesData Replication ServiceDistributed Cache ServiceDistributed Database MiddlewareDocument Database ServiceGeminiDBRelational Database ServiceTaurusDBManagementManagement & DeploymentCloud CreateCloud EyeCloud Trace ServiceConfigLog Tank ServiceResource Formation ServiceTag Management ServiceSecuritySecurity ServicesAnti-DDoSCloud FirewallDatabase Security ServiceDedicated Web Application FirewallHost Security ServiceIdentity and Access ManagementKey Management ServiceWeb Application FirewallOtherOtherEnterprise DashboardMarketplacePrice CalculatorStatus Dashboard

Web Application Firewall

  • Introduction
    • Web Application Firewall
    • Product Advantages
    • Application Scenarios
    • Accessing and Using WAF
      • How to Access WAF
      • How to Use WAF
      • Related Services
      • User Permissions
  • Monitoring Metrics
  • Getting Started
  • Certificate Management
  • Domain Management
  • Rule Configurations
  • Policy Management
  • Dashboard
  • Event Management
  • FAQs
  • Change History
  • User Guide
  • Introduction
  • Accessing and Using WAF
  • Related Services

Related Services¶

This section describes the relationship between WAF and other cloud services.

CTS¶

Cloud Trace Service (CTS) provides records of operations on WAF. With CTS, you can query, audit, and backtrack these operations. For details, see the Cloud Trace Service User Guide.

Table 1 WAF operations that can be recorded by CTS¶

Operation

Resource Type

Trace Name

Creating a WAF instance

instance

createInstance

Deleting a WAF instance

instance

deleteInstance

Modifying a WAF instance

instance

modifyInstance

Modifying the protection status of a WAF instance

instance

modifyProtectStatus

Modifying the connection status of a WAF instance

instance

modifyAccessStatus

Creating a policy

policy

createPolicy

Applying a policy

policy

applyToPolicy

Modifying a policy

policy

modifyPolicy

Deleting a policy

policy

deletePolicy

Modifying alarm notification settings

alertNoticeConfig

modifyAlertNoticeConfig

Uploading a certificate

certificate

createCertificate

Changing the name of a certificate

certificate

modifyCertificate

Deleting a certificate

certificate

deleteCertificate

Adding a CC attack protection rule

policy

createCc

Modifying a CC attack protection rule

policy

modifyCc

Deleting a CC attack protection rule

policy

deleteCc

Adding a precise protection rule

policy

createCustom

Modifying a precise protection rule

policy

modifyCustom

Deleting a precise protection rule

policy

deleteCustom

Adding a blacklist or whitelist rule

policy

createWhiteblackip

Modifying a blacklist or whitelist rule

policy

modifyWhiteblackip

Deleting a blacklist or whitelist rule

policy

deleteWhiteblackip

Adding a web tamper protection rule

policy

createAntitamper

Updating a web tamper protection rule

policy

refreshAntitamper

Deleting a web tamper protection rule

policy

deleteAntitamper

Adding a false alarm masking rule

policy

createIgnore

Deleting a false alarm masking rule

policy

deleteIgnore

Adding a data masking rule

policy

createPrivacy

Modifying a data masking rule

policy

modifyPrivacy

Deleting a data masking rule

policy

deletePrivacy

Cloud Eye¶

Cloud Eye monitors the metrics of WAF, so that you can understand the protection status of WAF in a timely manner, and set protection policies accordingly. For details, see the Cloud Eye User Guide.

For details about monitoring metrics, see Monitoring Metrics.

TMS¶

Tag Management Service (TMS) is a visualized service for fast and unified tag management that enables you to label and manage WAF instances by tags.

Table 2 WAF operations supported by TMS¶

Operation

Resource Type

Event Name

Creating a WAF instance tag

Tag

createResourceTag

Deleting a WAF instance tag

Tag

deleteResourceTag

IAM¶

Identity and Access Management (IAM) provides the permission management function for WAF. Only users granted with the WAF Administrator permissions can use WAF. To obtain the permissions, contact users who have the Security Administrator permissions. For details, see the Identity and Access Management User Guide.

SMN¶

The Simple Message Notification (SMN) service provides the notification function. After the notification function is enabled in WAF, users will receive an SMS message or email when an attack on a protected domain is detected.

For details about SMN, see the Simple Message Notification User Guide.

  • Prev
  • Next
last updated: 2025-07-21 13:42 UTC - commit: b68fa6be03f6c4e33cd110ddc5d7fc0d32f0f2aa
Edit pageReport Documentation Bug
Page Contents
  • Related Services
    • CTS
    • Cloud Eye
    • TMS
    • IAM
    • SMN
© T-Systems International GmbH
  • Contact
  • Data privacy
  • Disclaimer of Liabilities
  • Imprint