Making rate limiting in AWS less terrible
APIGW Usage Plans won't get you the per-user rate limiting you need. And using a WAF is an incomplete solution. But rolling your own is of course fraught with the usual challenges.
Warren Parad
Articles by Warren Parad, Authress CTO | Tech Entertainer | International Speaker | Cloud Security Architect | AWS Community Builder | Host of Adventures In DevOps