
AWS WAF introduces JA4 fingerprinting and allows using JA3 and JA4 fingerprints as aggregation keys in rate-based rules to enhance client request identification and security.


<div>
<p>
AWS WAF has introduced new features for improved client request identification and protection:
</p>
<ul>
<li>Added JA4 TLS client fingerprinting for incoming requests</li>
<li>Enables blocking malicious clients and allowing known clients</li>
<li>Supports using JA4 and JA3 fingerprints as aggregation keys in rate-based rules</li>
<li>JA4 fingerprint is a 36-character representation of TLS Client Hello</li>
<li>Available for Amazon CloudFront and Application Load Balancer</li>
<li>No additional cost, standard AWS WAF pricing applies</li>
</ul>
<p>
These features enhance the ability to identify and mitigate sophisticated attacks by creating more precise rules based on client behavior patterns.
</p>
</div>


AWS WAF adds JA4 fingerprinting and aggregation on JA3 and JA4 fingerprints for rate-based rules

Related articles

Related articles

Feb 18
2025
AWS WAF enhances Data Protection and logging experience

Feb 24
2025
AWS WAF enhances integration with Service Quotas

Mar 18
2025
AWS WAF now supports URI fragment field matching

Aug 30
2024
AWS WAF enhances rate-based rules to support lower rate limits