A Cloud-Native Approach for Real-Time SQL Injection Detection and Mitigation Using AWS and Spring Boot

SQL Injection (SQLi) vulnerabilities keep tormenting web applications which, more often than not, results in serious data breaches, as well as system intrusion. In this paper, a scalable solution is proposed based on a cloud-native architecture application that incorporates both Spring Boot and Amazon Web Services (AWS) to identify and remove real-time SQL Injection attacks. By using the AWS WAF managed rules, authentication with Amazon Cognito, persistent storage with Amazon RDS, and real-time notification with AWS SNS, we develop the defence-in-depth strategy to protect web applications. The architecture is implemented and run with AWS SAM (Serverless Application Model) that guarantees automation, scalability, and a replication ease of implementation. As illustrated in our findings, this layered system has a high degree of accuracy, low latency and low cost with the ability to be deployed to the academic or industrial setting.