AWS waf documentation change
Summary
Added AI traffic monetization section explaining payment challenges, integration with Bot Control, and new Monetize action parameters.
Security assessment
Documents how to implement payment requirements for AI bots. Includes caution about probabilistic detection methods but doesn't address security vulnerabilities.
Diff
diff --git a/waf/latest/developerguide/waf-bot-control.md b/waf/latest/developerguide/waf-bot-control.md index 218073014..118243f74 100644 --- a//waf/latest/developerguide/waf-bot-control.md +++ b//waf/latest/developerguide/waf-bot-control.md @@ -18,0 +19,14 @@ With Bot Control, you can easily monitor, block, or rate limit bots such as scra +Bot Control also provides AI traffic monetization, which lets you charge AI bots and agents for content access. When you add rules with the Monetize action, you can use Bot Control labels to differentiate pricing based on bot identity and verification status. For more information, see [AI traffic monetization](./waf-ai-traffic-monetization.html). + +###### Important + +To implement your AI traffic monetization policies, we use multiple detection techniques such as behavioral signals and risk-based systems to inspect and categorize inbound traffic. While these methods are designed to provide high-confidence classification, they are probabilistic and might not correctly identify or categorize all bot traffic in all cases. We continuously test and update our analysis methods to increase accuracy. We recommend using Test mode to validate that your policies produce the expected results before enabling live monetization. + +###### Monetize + +Returns an HTTP 402 Payment Required Challenge containing payment instructions. The client can complete payment and resubmit the request to gain access. Use the Monetize action to charge AI bots for content access. The Monetize action is available only for web ACLs associated with Amazon CloudFront distributions. To use this action, your web ACL must have a MonetizationConfig configured. For more information, see [AI traffic monetization](./waf-ai-traffic-monetization.html). + +Monetize action parametersParameter| Required| Description +---|---|--- +PriceMultiplier | No | Integer multiplier (1–100) applied to the base price. Default: 1. +