Skill UI

A comprehensive guide for implementing centralized security controls on API gateways (e.g., Kong, AWS API Gateway, Azure APIM). It covers critical defense layers including JWT-based authentication enforcement, advanced rate limiting and throttling, request validation against schemas, TLS termination, and Web Application Firewall (WAF) integration. Use this when establishing a robust, layer-7 security posture for microservice APIs.

This skill covers the deployment and fine-tuning of Web Application Firewall (WAF) rules across major cloud platforms like AWS, Azure, and Cloudflare. It addresses critical security needs such as mitigating OWASP vulnerabilities (SQLi, XSS), managing bot traffic, implementing rate limiting, and ensuring compliance (e.g., PCI-DSS). The workflow guides users through deploying managed rule sets, creating custom rate-based logic, and minimizing false positives.

This workflow performs a comprehensive review against the Azure Well-Architected Framework (WAF) using your existing Infrastructure as Code (IaC) and deployed resources. It systematically checks the five pillars—Reliability, Security, Cost Optimization, Operational Excellence, and Performance Efficiency—identifying architectural risks, drift, and compliance gaps. Findings are automatically logged and converted into actionable GitHub issues for streamlined remediation.