TLDR InfoSec · MISCELLANEOUS
AWS WAF BOT CONTROL MANAGED RULE GROUP EXPANDS BOT DETECTION CAPABILITIES
Summary from the TLDR InfoSec newsletter
AWS' WAF team announced a set of enhancements to the bot control managed rule group. AWS added token reuse detection across ASNs and geographic locations with customizable sensitivity levels. It also added new bot categories, labels for cloud service providers, and labels for automated browser extensions such as Selenium IDE. WAF labels will be emitted in CloudWatch logs for each rule to enhance visibility.