AWS WAF Captcha helps block unwanted bot traffic by requiring users to successfully complete challenges before their web request are allowed to reach AWS WAF protected resources.
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.