I think part of the problem is the SS bypass function is just not great. Another part might be not having everything whitelisted that needs to be. For example, using the NoScript browser plugin I can see that this webpage right here attempts connections to reddit.com, redditmedia.com, redditstatic.com, datadome.co, google.com and sentry.io. Source: over 1 year ago

We have AWS enterprise support, after weeks of trying to mitigate with WAF under the direction of AWS, they finally recommended DataDome to us (via AWS MarketPlace) and admitted that Shield/WAF isn't as advanced as their solution. Source: about 2 years ago

There are specialized products like https://datadome.co/ (disclaimer: I know them) which are specialized in bot protection, they're probably too expensive for a personal use but maybe you can try reaching their support to see if there'd be a way to get it cheap for personal use. Source: over 2 years ago

DataDome | NYC / Paris | Full Time | Onsite or Remote https://datadome.co https://docs.datadome.co/ Bot hunters is a full time job! With our SaaS cybersecurity technology, we detect and manage non-human traffic in real-time to protect our clients’ websites and APIs. Named as a Strong Performer by Forrester, DataDome is a growing cybersecurity pioneering in bot detection and protection for content publishers,... - Source: Hacker News / almost 3 years ago

You know they do have app analytics right? Source: over 1 year ago

You can create unique links for the Google ad campaign and track it on Apple’s side. See https://developer.apple.com/app-store-connect/analytics/. Source: over 2 years ago