How the AWS WAFCAPTCHA and Challenge rule actions work
This section explains how CAPTCHA and Challenge work.
AWS WAF CAPTCHA and Challenge are standard rule actions, so they're relatively easy to implement. To use either of them, you create the inspection criteria for your rule that identifies the requests that you want to inspect, and then specify one of the two rule actions. For general information about rule action options, see Using rule actions in AWS WAF.
In addition to implementing silent challenges and CAPTCHA puzzles from the server side,
you can integrate silent challenges in your JavaScript and iOS and Android client
applications, and you can render CAPTCHA puzzles in your JavaScript clients. These
integrations allow you to provide your end users with better performance and CAPTCHA
puzzle experiences, and they can reduce costs associated with using the rule actions and
the intelligent threat mitigation rule groups. For more information about these options,
see Client application
integrations in AWS WAF. For pricing information, see AWS WAF Pricing