Ravi Sir's Cards › AWS
Rate-based and IP sets
This revision card explains Rate-based and IP sets. It starts from the need that credential stuffing hammers /login beyond app capacity. It describes rate-based Limit per 5-minute window; IP sets for office allowlists. The how-to section covers how to create IP set , then rate rule with ScopeDown , then associate , then curl 403. An example on the card is priya Nair rate-limits clinic /login at 1000/5min.
Read card text
What this card says
Why do we need it?
Credential stuffing hammers /login beyond app capacity.
What is it?
Rate-based Limit per 5-minute window; IP sets for office allowlists.
rate-based
How to do it
Create IP set → rate rule with ScopeDown → associate → curl 403.
Example
Priya Nair rate-limits clinic /login at 1000/5min.