AWS WAF Now Protects Bedrock AgentCore Gateway in GA

Full analysis

AWS has announced general availability of AWS Web Application Firewall (WAF) protection for Amazon Bedrock AgentCore Gateway, a managed entry point for agentic AI workloads. Enterprises can now apply IP-based access controls, rate-limiting rules to throttle abusive traffic, and AWS Managed Rule Groups (covering common exploits, known bad inputs, and bot control) at the Gateway layer — with a single configuration automatically protecting all downstream tools, agents, and integrations behind that Gateway. The move addresses a key production-readiness gap: as companies graduate AI agent applications from prototype to production, consistent web-security enforcement at the agent infrastructure layer becomes critical. The feature is available in all AWS regions where both services operate.