Monitoring the Mitigation

evereven_AWS_CW_put-dashboard.sh

# A vantablack friday: How to be prepared to stop DDoS Attacks after Halloween
# https://blog.evereven.tech

# Create a local json file with the configuration
cat > dashboard.json << 'EOL'
{
   "widgets": [
       {
           "type": "metric",
           "properties": {
               "metrics": [
                   ["AWS/WAF", "BlockedRequests", "WebACL", "MyWebACL"],
                   ["AWS/WAF", "AllowedRequests", "WebACL", "MyWebACL"]
               ],
               "period": 60,
               "stat": "Sum",
               "region": "your-region",
               "title": "WAF Requests"
           }
       }
   ]
}
EOL

# Create the dashboard
aws cloudwatch put-dashboard --dashboard-name WAF-Dashboard --dashboard-body file://dashboard.json

# Visible at:
# https://us-west-2.console.aws.amazon.com/cloudwatch/home?#dashboards/