Concise summaries of official AWS update announcements for AWS WAF.
Information as of November 3, 2026.
AWS WAF introduces automatic SDK integration for CloudFront distributions, adding client-side signals for Bot Control, Fraud Control ATP, and Fraud Control ACFP without application code changes.
AWS Network Security Manager now generally available, supporting AWS WAF and AWS Shield Advanced to automate consistent security policy enforcement across AWS organizations.
AWS WAF supports Salt Security's managed rule group, providing detection and mitigation for API and MCP threats without custom rules
AWS WAF adds two new managed rule groups from Miggo Security, offering continuous protection against actively exploited vulnerabilities and AI/ML application threats via AWS Marketplace
AWS WAF adds pre-parse text transformations for query arguments and ten new text transformations to help normalize request content
AWS WAF now protects agentic AI workloads on Amazon Bedrock AgentCore Gateway with IP controls, rate limiting, and managed rules
AWS WAF now enables content owners to price, meter, and collect payments from AI bots and agents accessing their content and APIs, using machine-readable HTTP 402 responses for payment verification at the edge.
No updates match the selected filters. Try changing them.