Authenticate legitimate AI agent traffic with AWS WAF Bot Control

AWS WAF Web Bot Authentication (WBA) is a standards-based feature that uses HTTP Message Signatures (asymmetric cryptography) and a public-key signature directory to verify automated agents; the document explains verification flow, new WAF labels (verified, invalid, expired, unknown_bot, vendor/name/account tokens), default allow behavior for verified AI agents, deployment steps, signing guidance, monitoring, and customer use cases.