As a managed service, AWS WAF protects web applications at the application layer from common web exploits that can compromise security or consume excessive resources.