Review CloudFront WAF rules blocking operator automation against backend API #90

Background

The May 2026 operator feedback survey surfaced that multiple providers' automation against the stake.aztec.network backend API is being blocked by CloudFront. One large provider reported being unable to track on-chain stake events through the API as a result.

The API isn't a supported public surface and Foundation guidance is that operators needing stable programmatic access should run their own indexer (atp-indexer). That part will be addressed in the operator docs.

Ask

Worth a review of the current WAF rules to see if the patterns blocking legitimate operator traffic can be loosened without weakening DDoS protection.