> ## Documentation Index
> Fetch the complete documentation index at: https://docs.m3ter.com/llms.txt
> Use this file to discover all available pages before exploring further.

# WAF Rules for HTTP Requests

We apply two types of Rules/Rule Groups to our Web Application Firewall (WAF). These impose constraints on HTTP requests you make to the m3ter platform.

## Managed by AWS

* [Core rule set (CRS) managed rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-baseline.html#aws-managed-rule-groups-baseline-crs)
* [Known bad inputs managed rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-baseline.html#aws-managed-rule-groups-baseline-known-bad-inputs)
* [SQL database managed rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-use-case.html#aws-managed-rule-groups-use-case-sql-db)

## Managed by m3ter

* Request Body Size Rule:

  * Blocks all HTTP requests having a body larger than 512,000 bytes.

## Error Response

If your requests are blocked by any of these rules, a 403 (Forbidden) response is returned.