AWS First Steps
LanguageEnglish
New feature

AWS WAF announces automatic SDK integration for Amazon CloudFront distributions

AWS WAF introduces automatic SDK integration for CloudFront distributions, adding client-side signals for Bot Control, Fraud Control ATP, and Fraud Control ACFP without application code changes.

AWS WAF now offers automatic SDK integration for Amazon CloudFront distributions. When enabled, CloudFront automatically adds the AWS WAF JavaScript SDK script tag to HTML, requiring no changes to application code, build processes, or deployments. The SDK provides client-side signals for three AWS WAF managed rule groups: Bot Control (target inspection level), Fraud Control account takeover prevention (ATP), and Fraud Control account creation fraud prevention (ACFP). Previously, teams had to manually add script tags to every page for protection, a repetitive task that often led to configuration errors, especially for teams running many applications or serving pages on systems they don't control. Enabling automatic SDK integration on a CloudFront-protecting web ACL eliminates per-application work. This feature is available for web ACLs with at least one managed rule group and can be configured via the AWS Management Console, CLI, SDK, CDK, or CloudFormation. It appears in the AWS WAF console alongside managed rule group settings and is enabled by default for new web ACLs using one of these rule groups. Programmatically created web ACLs default to disabled. Existing web ACLs remain unchanged. The automatic SDK integration incurs no additional cost. For requirements, limitations, and content security policy guidance, see the AWS WAF developer guide's section on automatic SDK integration for CloudFront distributions.

Why it matters

This update is relevant for developers and security teams looking to enhance bot and fraud detection/prevention by integrating AWS WAF with CloudFront.

Read the original AWS announcement

Related articles and terms

AWS WAF Bot Control and Fraud Prevention - Implementing Bot Mitigation and Account Takeover ProtectionDetect scrapers and automation tools with Bot Control, and prevent credential stuffing with ATP. Includes user experience design for challenges and CAPTCHA.AWS WAFA managed web application firewall that protects applications from common web attacks such as SQL injection and cross-site scriptingAWS Firewall ManagerA security management service that centrally applies and manages WAF, Shield Advanced, Security Group, and Network Firewall rules across multiple accounts and resources under OrganizationsAmazon CloudFrontA global CDN service that delivers content with low latency from over 450 edge locations worldwideCentralized Security Rules with AWS Firewall Manager - Rolling Out WAF and Security Groups Across Your OrganizationThis article explains how to centrally manage WAF rules, Security Groups, and Network Firewall policies across Organizations and maintain an organization-wide security baseline through automatic application to new accounts.