TLDR InfoSec · MISCELLANEOUS

AWS WAF BOT CONTROL MANAGED RULE GROUP EXPANDS BOT DETECTION CAPABILITIES

aws.amazon.com2 min read

Summary from the TLDR InfoSec newsletter

AWS' WAF team announced a set of enhancements to the bot control managed rule group. AWS added token reuse detection across ASNs and geographic locations with customizable sensitivity levels. It also added new bot categories, labels for cloud service providers, and labels for automated browser extensions such as Selenium IDE. WAF labels will be emitted in CloudWatch logs for each rule to enhance visibility.