Home icon

AWS WAF announces Web Bot Auth support

News



This article announces Web Bot Auth (WBA) support in AWS WAF, enabling secure authentication of legitimate AI agents and automated tools accessing web applications.

  • Web Bot Auth uses cryptographic signatures to verify automated bot requests
  • Distinguishes trusted bot traffic from potentially harmful automated access attempts
  • Relies on IETF draft standards for public key sharing and HTTP request identity
  • AWS WAF now automatically allows verified AI agent traffic by default
  • Refines previous behavior that blocked unverified bots to respect WBA verification

AWS WAF's new WBA support provides a standardized, secure method to authenticate legitimate bots while protecting against malicious automated access.



Go to article

The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.

Related articles

Aug 1
2025
How to manage AI Bots with AWS WAF and enhance security
Jul 15
2024
Protect against bots with AWS WAF Challenge and CAPTCHA actions
Jun 26
2025
Amazon Cognito introduces AWS WAF support for Managed Login
Sep 13
2024
AWS WAF Bot Control Managed Rule Group expands bot detection capabilities

The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.