AWS WAF Pricing Calculator - WAF, Bot Control, Fraud Control & DDoS
AWS WAF pricing calculator for web ACLs, rules, request volume, Bot Control, Fraud Control, CAPTCHA, Challenge, and application-layer DDoS activation plus request charges. Estimate monthly AWS WAF costs by region with Glue-style optional sections.
Reference pricesExample monthly cost in US East (N. Virginia)
2 web ACLs with 10 custom rules and 3 managed rule groups in total inspecting 50 million requests a month, plus Bot Control at the Common inspection level on both web ACLs for 20 million requests, priced by this calculator at AWS list prices.
Estimated total: $83.00 per month
| Breakdown | Monthly cost |
|---|---|
| AWS WAF | $53.00 |
| ↳ 2 web ACLs | $10.00 |
| ↳ 13 rules and rule groups | $13.00 |
| ↳ 50M requests @ $0.60/M | $30.00 |
| Bot Control | $30.00 |
| ↳ 2 web ACL subscriptions | $20.00 |
| ↳ 20M common requests | $10.00 |
| ↳↳ 10M @ $0.00/M | $0.00 |
| ↳↳ 10M @ $1.00/M | $10.00 |
Priced on 15 Oct 2026 from CloudBurn's AWS price data. Prices in USD, excluding tax.
Free price alerts · Platform launching early 2027
Get an email when WAF prices change
CloudBurn re-checks AWS prices every week and emails you when a price behind this calculator changes.
30% founding-member discount
Only waitlist members get it. Join now and keep 30% off for as long as you keep your plan.
Alert emails only arrive when a price changes; the waitlist sends two a month at most. Unsubscribe anytime. Privacy policy
Tick the box to also save your spot on CloudBurn Platform:
- Price your whole stack in minutesThe AWS Simple Pricing Calculator puts WAF and the rest of your AWS services in one estimate, ready to export.
- Know the cost before you deployThe GitHub App estimates what your Terraform, CDK or CloudFormation changes will cost before they ship.
- Find the waste, then fix itScans of your live AWS accounts show what is costing money for nothing, with clear steps to fix each finding.
Frequently Asked Questions
How does AWS WAF request pricing change with WCU and body inspection?
AWS WAF starts with a base request charge, then increases the per-million request rate when your web ACL exceeds 1,500 WCU. If you inspect request bodies beyond the default 16 KB, AWS also adds a separate per-million request surcharge.
How are Fraud Control requests billed when both protections are enabled?
Account Takeover Prevention and Account Creation Fraud Prevention each add their own monthly subscription fee, but the tiered request fee is applied to the combined analyzed request volume across both protections.
Related tools