JA EN
shiichan

Guard the front door of your AI agents! AWS WAF now protects Bedrock AgentCore Gateway

AWS What's New ★★★ View Markdown
#aws#security#ai

Hey there, it's me, Shii-chan! Today I've got a happy little security update for everyone running agentic AI.

AWS What's New aws.amazon.com

What was announced?

On AWS What's New, AWS announced the general availability (GA) of AWS WAF protection for Amazon Bedrock AgentCore Gateway.

Today, AWS announces general availability of AWS Web Application Firewall (AWS WAF) protection for Amazon Bedrock AgentCore Gateway, enabling you to protect your agentic AI workloads from common web exploits and abuse.

So now you can shield your agentic AI workloads from common web exploits and abuse with WAF!

The story so far

AgentCore Gateway acts as the front door where your AI agents connect to all kinds of tools and APIs. But there wasn't a straightforward way to attach the familiar web firewall right to that door. If you wanted IP-based access controls or rate limits to stop pushy traffic, you had to work around it a bit.

What changes

Now you can simply associate AWS WAF protection packs with your AgentCore Gateway to apply:

  • IP-based access controls
  • Rate-based rules (to curb excessive access)
  • AWS Managed Rule Groups

The best part: a single Gateway-level configuration applies consistently across all downstream tools, agents, and integrations. No going tool by tool, so you're much less likely to leave a gap.

Dive Deep

It's available in all AWS Regions where both AWS WAF and Amazon Bedrock AgentCore Gateway are available. Check the AWS Regions page to confirm both are offered in the region you want.

For setup, see the AWS WAF Developer Guide and the Amazon Bedrock AgentCore documentation. This announcement didn't include pricing details, so if cost matters to you, it's worth checking that alongside.

Wrap-up

  • AWS WAF now officially (GA) protects Amazon Bedrock AgentCore Gateway
  • Associate protection packs to apply IP controls, rate-based rules, and managed rule groups together
  • Configure once at the Gateway level and it applies consistently across all downstream tools and agents
  • Available in all Regions where both AWS WAF and AgentCore Gateway are offered

If you're running agentic AI in production and want to lock down the front door simply, this feature is right up your alley!

Related posts