TLDR Tech / InfoSec
AWS WAF adds AI traffic monetization capability to help content owners charge AI bots for content access
AWS WAF Bot Control now lets publishers charge AI bots per request at the CloudFront edge, returning an HTTP 402 Payment Required with a machine-readable x402 price manifest that x402-compatible agent runtimes can settle autonomously in USDC across chains like Base and Solana. The system classifies over 650 bot types, including GPTBot, Claude-Web, and Perplexity-Bot, assigning each a Verified tier (confirmed via Web Bot Auth Ed25519 signatures or documented IP ranges) or Unverified tier (user-agent matching, behavioral fingerprinting, IP reputation), then applies per-tier actions: Monetize, Allow, Block, Count, CAPTCHA, or Challenge. Monetize works only on CloudFront-associated web ACLs, not regional ones. This normalizes 402-based machine-to-machine payment flows at the WAF layer, which means agent runtimes that auto-sign on-chain authorizations become a new request path worth scrutinizing for abuse.
Read the full story