Skip to content

Review CloudFront WAF rules blocking operator automation against backend API #90

@y3v63n

Description

@y3v63n

Background

The May 2026 operator feedback survey surfaced that multiple providers' automation against the stake.aztec.network backend API is being blocked by CloudFront. One large provider reported being unable to track on-chain stake events through the API as a result.

The API isn't a supported public surface and Foundation guidance is that operators needing stable programmatic access should run their own indexer (atp-indexer). That part will be addressed in the operator docs.

Ask

Worth a review of the current WAF rules to see if the patterns blocking legitimate operator traffic can be loosened without weakening DDoS protection.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions