AWS waf documentation change

Service: waf · 2026-06-16 · Documentation low

File: waf/latest/developerguide/limits.md

Summary

Added quotas for AI traffic monetization features including protection packs, pricing tiers, content zones, and payment limits.

Security assessment

Documents service limits for new monetization capabilities. No evidence this addresses security vulnerabilities, though it relates to security feature configuration limits.

Diff

diff --git a/waf/latest/developerguide/limits.md b/waf/latest/developerguide/limits.md
index 34ae85f84..c29c304d3 100644
--- a//waf/latest/developerguide/limits.md
+++ b//waf/latest/developerguide/limits.md
@@ -89,0 +90,13 @@ Maximum number of calls by all accounts in an organization to `ListResourcesForW
+AWS WAF has the following quotas for AI traffic monetization features. Quotas marked as adjustable can be increased through a [quota increase request](https://console.aws.amazon.com/servicequotas/home/services/wafv2/quotas).
+
+Resource | Default quota | Adjustable  
+---|---|---  
+Protection packs per account | 25 | Yes  
+Protection packs per protection pack (web ACL) | 10 | Yes  
+Pricing tiers per protection pack | 20 | No  
+Content zones per protection pack | 50 | Yes  
+Payment providers per protection pack | 3 | No  
+Minimum price per request | $0.00001 (10^-5 USD) | No  
+Maximum price per request | $100 | No  
+Access token TTL range | 60-86400 seconds | No  
+