AWS Security ChangesHomeSearch

AWS waf documentation change

Service: waf · 2026-07-10 · Documentation low

File: waf/latest/developerguide/limits.md

Summary

Added Amazon Bedrock AgentCore Gateway to body inspection limit documentation and service coverage

Security assessment

Expands documentation of existing security feature (request body inspection) to cover a new service (Amazon Bedrock AgentCore Gateway). No security vulnerability is addressed, but it informs users about security controls for additional services.

Diff

diff --git a/waf/latest/developerguide/limits.md b/waf/latest/developerguide/limits.md
index a69ad7fe3..500300c89 100644
--- a//waf/latest/developerguide/limits.md
+++ b//waf/latest/developerguide/limits.md
@@ -61 +61 @@ Maximum size of a web request body that can be inspected for Amazon Bedrock Agen
-Maximum size of a web request body that can be inspected for CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access protections** |  64 KB  
+Maximum size of a web request body that can be inspected for CloudFront, API Gateway, Amazon Cognito, App Runner, Verified Access, and Amazon Bedrock AgentCore Gateway protections** |  64 KB  
@@ -71 +71 @@ Maximum number of Geo match country codes inside a single rule  |  50
-**By default, the body inspection limit is set to 16 KB for CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access resources, but you can increase this for any of these resources in your protection pack (web ACL) configuration, up to the listed maximum. For more information, see [Considerations for managing body inspection in AWS WAF](./web-acl-setting-body-inspection-limit.html).
+**By default, the body inspection limit is set to 16 KB for CloudFront, API Gateway, Amazon Cognito, App Runner, Verified Access, and Amazon Bedrock AgentCore Gateway resources, but you can increase this for any of these resources in your protection pack (web ACL) configuration, up to the listed maximum. For more information, see [Considerations for managing body inspection in AWS WAF](./web-acl-setting-body-inspection-limit.html).