Web Application Firewalls

Can anyone recommend a WAF to protect SH on AWS?

I use CSF for our firewall on our vps