AWS WAF Now Auto-Injects SDK into CloudFront – No More Manual Script Tags
AWS WAF just dropped automatic SDK integration for CloudFront distributions, meaning the JavaScript SDK for Bot Control, Fraud Control ATP, and ACFP now gets injected automatically without touching your code. No more hunting through your app pages to add script tags manually – it's enabled by default on new web ACLs and available globally for CloudFront-backed WAF rules.
source: [aws/whats-new]