Custom form and bot attack (AMS & Cloud services)

[nj2]

Hi, 

What are the available methods in AEM (Managed services vs Cloud Services) to safeguard custom AEM Form from bot attacks?

[EstebanBustamante]

Hi

You can explore the core component CAPTCHA, which will protect you from bots: https://www.aemcomponents.dev/content/core-components-examples/library/adaptive-form/recaptcha.html#... 

[Raja_Reddy · Accepted solution]

Hi @nj2 

In AEM, there are several methods available to safeguard custom AEM Forms from bot attacks. These methods can be implemented using either Managed Services or Cloud Services.
1.CAPTCHA:
2.Form Validation
3.Rate Limiting

4.Hidden Fields
5.JavaScript Validation
6.IP Whitelisting/Blacklisting
7. Security Auditing
Adobe Manages Services (AMS) and AEM as a Cloud Service (AEMaCS) are different offers by Adobe.

While AMS is more of a hosting offer for "classic" AEM 6.5 (similar to on-premise setups but run at/by Adobe), AEMaCS is a Software as a Service (SaaS) offer. Also AEMaCS has quite some differences compared to AEM 6.5 [1]. 

For additional details on AMS, please refer to this documentation [2] or ask your Adobe representative.

For additional details on AEMaCS, please refer to this documentation [3] (or ask your Adobe representative).

Hope that helps!

[1] https://experienceleague.adobe.com/docs/experience-manager-cloud-service/overview/what-is-new-and-di...

[2] https://helpx.adobe.com/legal/product-descriptions/adobe-experience-manager-managed-services.html

[3] https://helpx.adobe.com/legal/product-descriptions/aem-cloud-service.html