AWS WAF and AI crawlers: IP sets from the official lists vs Bot Control's CategoryAI
AWS WAF gives you two ways to handle AI bots: the paid Bot Control rule group, whose CategoryAI rule blocks every AI bot it recognizes, or your own rules on IP sets built from the operators' published lists. Here is how each works, with a sync script and rules you can paste.