AWS WAF Adds Salt Security Managed Rule Group for API and AI Agent Threat Detection

AWS Web Application Firewall (WAF) incorporated a managed rule group from Salt Security available through AWS Marketplace, focusing on API and Model Context Protocol (MCP) threat detection. The rule group detects common and sophisticated API attack vectors including brute force, SSRF, GraphQL abuses, prototype pollution, and JWT anomalies. It also identifies traffic from AI agents and MCP endpoints to enforce access controls and observability.

This managed rule group simplifies security management by eliminating the need for customers to write custom detection rules, applying rate limits on sensitive request parameters and labeling request metadata for analysis. It can be deployed directly from AWS WAF console with version control and region support on eligible AWS regions, subject to marketplace pricing.