AWS WAF now supports a Salt Security managed rule group for API and MCP threat detection

AWS WAF now supports the Salt Security managed rule group for API and MCP threat detection, available through AWS Marketplace.

• Detects API attacks including credential brute force, excessive GraphQL queries, SSRF, and JWT anomalies
• Identifies and blocks unauthenticated Model Context Protocol (MCP) endpoint traffic
• Applies rate limiting to sensitive parameters like user IDs and email addresses
• Labels request attributes for enhanced observability and downstream analysis
• Subscribe and deploy directly from AWS WAF console with no additional configuration

The managed rule group eliminates the need to write and maintain custom rules for API security and AI agent threat detection.