Official docs outline
8 sections- Overview
How WAF, Shield and Firewall Manager protect web applications.
- AWS WAF
Web ACLs, rules, rule groups, managed rule groups and rate-based rules.
- Web ACL rule actions
Allow, block, count, CAPTCHA and challenge actions.
- Shield and Shield Advanced
DDoS protection levels and protected resources.
- Firewall Manager
Centrally applying WAF, Shield and security group policies across accounts.
- Setting up
Account prerequisites for WAF.
- Monitoring
Logging, metrics and sampled requests.
- API usage
Using the WAF API and SDKs.
Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.