AWS just made AI bot monetization a WAF setting

The debate about how to monetize AI crawler traffic has been running for two years. AWS just turned it into a checkbox in the WAF console.

AWS WAF's new AI traffic monetization feature — part of its Bot Control suite — lets publishers set a price for AI bot and agent access, collect payment at the edge, and serve the response in a single request cycle. No custom middleware. No bespoke auth flows. CloudFront plus config.

"When an AI bot or agent requests a protected resource like an article, a data feed, or a licensed archive, AWS WAF returns a machine-readable HTTP 402 Payment Required response using the x402 open protocol for machine-to-machine payments."

That's the detail worth sitting with: HTTP 402. The status code that's existed since 1996 — "payment required" — barely used until now, when AI agents can actually pay.

What actually changed