Our Blog

AWS WAF announces automatic SDK integration for Amazon CloudFront distributions

Published
October 30, 2026
https://aws.amazon.com/about-aws/whats-new/2026/10/aws-waf-automatic-sdk-integration-amazon-cloudfront/

AWS WAF Automatic SDK Integration for Amazon CloudFront

AWS WAF now offers automatic SDK integration for Amazon CloudFront distributions. When enabled, CloudFront automatically adds the script tag for the AWS WAF JavaScript SDK to the HTML it serves, without altering your application code, build process, or deployment. This SDK provides the client-side signals required by three AWS WAF managed rule groups: Bot Control, Fraud Control account takeover prevention (ATP), and Fraud Control account creation fraud prevention (ACFP).

Previously, integrating these signals required adding a script tag to every page of every application you wanted to protect, which was a recurring task and a common source of misconfiguration. Automatic SDK integration eliminates this per-application work.

What to do

  • Enable automatic SDK integration for web ACLs used with Amazon CloudFront and containing the specified managed rule groups.
  • Configure the setting using the AWS Management Console, CLI, SDK, CDK, or CloudFormation.
  • Review the AWS WAF Developer Guide for requirements, limitations, and Content Security Policy guidance.

Source: AWS release notes




If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.

Follow our blog

Get the latest insights and advice on AWS services from our experts.

By clicking Sign Up you're confirming that you agree with our Terms and Conditions.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Related posts

Check out other insights from the team at West Loop Strategy.

View all
https://aws.amazon.com/about-aws/whats-new/2026/02/aws-backup-adds-cross-region-database-snapshot-logically-air-gapped-vaults/

AWS Backup adds cross-Region database snapshot copy to logically air-gapped vaults

AWS Backup now supports single-action database snapshot copies to logically air-gapped vaults across AWS Regions
Read more
https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-opensearch-cluster-insights/

Amazon OpenSearch Service expands Cluster Insights with a new insight

Amazon OpenSearch Service expands Cluster Insights availability to all OpenSearch versions and Elasticsearch version 6
Read more
https://aws.amazon.com/about-aws/whats-new/2026/08/secrets-manager-cisco-netskope/

AWS Secrets Manager adds managed external secrets support for Cisco Security Platform and Netskope

AWS Secrets Manager now extends its managed external secrets capability to include Cisco Security Platform API keys and Netskope API tokens, enabling you to automatically rotate these third-party credentials directly from the AWS console without writing any custom rotation code
Read more
View all