Resolved after 3 hours 53 minutes, affecting Expedited WAF API and Expedited WAF Management Dashboard, on September 17, 2026.
Settings management functionality has been fully restored. Reading and updating WAF settings, including IP allow and block lists, is working normally again through both the API and the Management Dashboard. Traffic protection was unaffected for the duration of this incident and all sites remained online. If you made IP list changes between September 16, 6:30 PM UTC and September 17, 2:30 PM UTC, please verify they were applied and re-submit any that were not. We apologize for the inconvenience.
Affected components
Update timeline
- investigating Sep 17, 2026, 10:31 AM UTC
We are seeing an elevated level of failures when reading or updating WAF settings, including IP allow and block lists, through both the Expedited WAF API and the Management Dashboard. Requests may fail or lists may appear empty. Traffic protection is not affected. All sites remain online and continue to be protected and served normally.
- investigating Sep 17, 2026, 12:08 PM UTC
Our engineering team is continuing to investigate and is working to restore full settings management functionality. Traffic protection remains unaffected and all sites are online and serving normally.
- investigating Sep 17, 2026, 12:53 PM UTC
We are continuing to work on restoring settings management. Traffic protection remains unaffected and all sites are online and serving normally.
- investigating Sep 17, 2026, 01:44 PM UTC
Work continues on restoring full settings management functionality. Traffic protection is unaffected and all sites remain online and serving normally.
- investigating Sep 17, 2026, 02:15 PM UTC
Our team is still actively working on this issue and restoring settings management. Traffic protection remains unaffected and all sites are online and serving normally.
- resolved Sep 17, 2026, 02:25 PM UTC
Settings management functionality has been fully restored. Reading and updating WAF settings, including IP allow and block lists, is working normally again through both the API and the Management Dashboard. Traffic protection was unaffected for the duration of this incident and all sites remained online. If you made IP list changes between September 16, 6:30 PM UTC and September 17, 2:30 PM UTC, please verify they were applied and re-submit any that were not. We apologize for the inconvenience.
Your product runs on more than Expedited Security
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services