AWS WAF

#How AWS WAF works

Each rule matches properties of a request, such as its path, headers or rate. When a rule matches, it applies an action: allow, block, CAPTCHA or Challenge. The AWS developer guide covers the rule types and actions.

#Why it matters for AI agents

Sites on AWS can gate requests with Challenge or CAPTCHA actions. An agent that sends a request without the browser's own session can receive a challenge page instead of the data it asked for.

#Wield and AWS WAF

When a site shows a challenge, Wield stops with site_challenge and asks you to solve it in your own tab. Wield does not solve or work around the firewall. Its runs use the browser session you already have, and it does not send requests that would try to get past a check.

#Related terms

• Akamai Bot Manager
• CAPTCHA
• Cloudflare Turnstile
• Rate limiting
• Site challenge

#FAQ

#What is the AWS WAF Challenge action?

Challenge is an action where the browser must pass a silent check before the request is served. The browser then holds a token for later requests. CAPTCHA is the action that shows a puzzle the visitor must solve. The AWS developer guide describes both.

#Does AWS WAF block all bots?

No. The rules decide what is filtered, and the site owner chooses them. Bot Control classifies bot traffic, but a site has to enable it and set the actions.