AWS WAF now protects Bedrock AgentCore Gateway in GA

Full analysis

AWS has reached general availability for AWS Web Application Firewall (WAF) integration with Amazon Bedrock AgentCore Gateway, the traffic-routing layer for agentic AI workloads. Enterprises can now attach a WAF protection pack at the Gateway level to enforce IP-based access controls, rate-limiting rules to throttle abusive traffic, and AWS Managed Rule Groups covering common exploits, known bad inputs, and bot traffic — with a single configuration automatically covering all downstream tools, agents, and integrations behind the Gateway. The announcement targets the security gap that emerges as companies move agentic applications from prototype to production, giving platform and security teams a consistent, centralized control point rather than requiring per-agent hardening. The feature is available in all AWS regions where both services are offered.