How does AWS WAF prevent SQL Injection?

WAF inspects the body, query parameters, and headers of incoming HTTP requests for malicious SQL keyword patterns and signatures (e.g., ' OR '1'='1). If a match is found, WAF blocks the request and returns an HTTP 403 Forbidden, preventing the payload from reaching the application database.