# AWS adds automatic browser security integration for CloudFront

_Published Friday, October 30, 2026 at 1:14 PM EDT · Security · Latest · Tier 2 — Notable_

AWS has introduced automatic integration of its WAF JavaScript SDK into HTML served through CloudFront, removing the need for application teams to add and maintain script tags themselves. The SDK collects browser signals used by targeted Bot Control and Fraud Control protections against account takeover and fraudulent account creation.

AWS says the feature carries no additional charge and requires a CloudFront web access control list containing at least one eligible managed rule group. It is enabled by default for qualifying new lists created in the console, but disabled by default for programmatically created lists. Existing lists remain unchanged.

## Sources

- [Recent Announcements](https://aws.amazon.com/about-aws/whats-new/2026/10/aws-waf-automatic-sdk-integration-amazon-cloudfront/)

---
Canonical: https://techandbusiness.org/newswire/mWOfK_kw_xDbvaIxuNVRIb
Published: 2026-10-30T17:14:41.474Z
Story chronology: 2026-10-30T15:57:00.000Z
Retrieved: 2026-10-30T19:40:27.189Z
Publisher: Tech & Business (techandbusiness.org)