Amazon WAF billing is based on the number of active rules and the number of web requests inspected. This allows businesses to control their costs by paying only for what they use, making Amazon WAF a cost-effective solution for protecting web applications.