AWS network-firewall documentation change
Summary
Updated Suricata Action-order documentation link to version 7.0.8
Security assessment
Routine update to external documentation version reference without explicit security context.
Diff
diff --git a/network-firewall/latest/developerguide/firewall-policy-processing.md b/network-firewall/latest/developerguide/firewall-policy-processing.md index de163e249..dd95d5b9d 100644 --- a/network-firewall/latest/developerguide/firewall-policy-processing.md +++ b/network-firewall/latest/developerguide/firewall-policy-processing.md @@ -23 +23 @@ When Network Firewall forwards a packet to the stateful engine for inspection, i -The Suricata stateful rules engine controls how the stateful rules in your firewall policy are processed. The engine evaluates the packet's traffic flow against the conditions in the policy's stateful rules until it finds a match or exhausts all of the rules. When the engine finds a match, it handles the packet according to the rule's configuration. By default, the Suricata stateful rules engine orders rule processing according to the rule action setting, processing first the rules with pass action, then drop, then alert. For more information, see [Managing evaluation order for Suricata compatible rules in AWS Network Firewall](./suricata-rule-evaluation-order.html) and the [Suricata Action-order documentation](https://suricata.readthedocs.io/en/suricata-7.0/configuration/suricata-yaml.html#action-order). +The Suricata stateful rules engine controls how the stateful rules in your firewall policy are processed. The engine evaluates the packet's traffic flow against the conditions in the policy's stateful rules until it finds a match or exhausts all of the rules. When the engine finds a match, it handles the packet according to the rule's configuration. By default, the Suricata stateful rules engine orders rule processing according to the rule action setting, processing first the rules with pass action, then drop, then alert. For more information, see [Managing evaluation order for Suricata compatible rules in AWS Network Firewall](./suricata-rule-evaluation-order.html) and the [Suricata Action-order documentation](https://suricata.readthedocs.io/en/suricata-7.0.8/configuration/suricata-yaml.html#action-order).