Custom keys for AWS WAF rate-based rules

This cool new feature for AWS WAF allows you to start rate-limit incoming requests by tracking non-IP elements (countries, query string parameters, AWS WAF labels, etc.).

[wuffgang]

do you need to integrate some javascript for the captcha showing up in the browser? or does it work out of the box