AWS network-firewall documentation change
Summary
Added introductory guidance about creating/managing rule groups and clarified Suricata version support (7.0). Reorganized content about rule group definitions and inspection criteria.
Security assessment
Changes are organizational/contextual improvements without addressing vulnerabilities. Suricata version mention is informational, not security-related.
Diff
diff --git a/network-firewall/latest/developerguide/rule-groups.md b/network-firewall/latest/developerguide/rule-groups.md index 3993a2b9e..6cb9a817d 100644 --- a/network-firewall/latest/developerguide/rule-groups.md +++ b/network-firewall/latest/developerguide/rule-groups.md @@ -7 +7,3 @@ -An AWS Network Firewall _rule group_ is a reusable set of criteria for inspecting and handling network traffic. You add one or more rule groups to a firewall policy as part of policy configuration. For more information about firewall policies and firewalls, see [Firewall policies in AWS Network Firewall](./firewall-policies.html) and [Firewalls in AWS Network Firewall](./firewalls.html). +This section provides guidance for creating and managing your own rule groups in AWS Network Firewall. + +A Network Firewall _rule group_ is a reusable set of criteria for inspecting and handling network traffic. You add one or more rule groups to a firewall policy as part of policy configuration. For more information about firewall policies and firewalls, see [Firewall policies in AWS Network Firewall](./firewall-policies.html) and [Firewalls in AWS Network Firewall](./firewalls.html). @@ -30 +32 @@ Stateful rule groups are available in the following categories: -Depending on the type of rule group, you might also define rules inside the rule group. Rules provide detailed criteria for packet inspection and specify what to do when a packet matches the criteria. When Network Firewall finds a match between the criteria and a packet, we say that the packet matches the rule group. +###### Note @@ -32 +34,3 @@ Depending on the type of rule group, you might also define rules inside the rule -This section provides guidance for creating and managing your own rule groups. +AWS Network Firewall supports Suricata version 7.0. This section and others that describe Suricata-based concepts are not intended to replace or duplicate information from the Suricata documentation. For more information, see the [Suricata website](https://docs.suricata.io/en/suricata-7.0.0/). + +Depending on the type of rule group, you might also define rules inside the rule group. Rules provide detailed criteria for packet inspection and specify what to do when a packet matches the criteria. When Network Firewall finds a match between the criteria and a packet, we say that the packet matches the rule group.