AWS network-firewall documentation change

Service: network-firewall · 2025-02-27 · Documentation low

File: network-firewall/latest/developerguide/firewall-updating.md

Summary

Added note about traffic analysis metrics collection timing

Security assessment

The change adds clarification about when traffic analysis metrics are collected but does not address security vulnerabilities or add security features.

Diff

diff --git a/network-firewall/latest/developerguide/firewall-updating.md
index b5e0b3d46..3b8df2392 100644
--- a/network-firewall/latest/developerguide/firewall-updating.md
+++ b/network-firewall/latest/developerguide/firewall-updating.md
@@ -26,0 +27,4 @@ If your firewall update changes your stateful rule evaluation order type, you wi
+###### Important
+
+Network Firewall only starts collecting traffic analysis metrics when you enable **Traffic analysis mode** on your firewall. Traffic observed before you enable **Traffic analysis mode** is not included in reporting. 
+