AWS WAF and CloudFront KVS Enable App-to-Edge Bot Blocking

This article details a feedback loop where an application detects malicious behavior and updates AWS WAF and CloudFront KeyValueStore to block future requests at the edge. The architecture uses JA4 fingerprinting and dynamic label interpolation to identify and stop bots. A production note suggests using a separate batch process for KVS updates instead of direct application writes.