AWS network-firewall documentation change
Summary
Restructured Suricata version documentation, removed version 7.0 references, and added general documentation note
Security assessment
Reorganization of version upgrade notes and documentation links. No direct evidence of security issue remediation or new security features added.
Diff
diff --git a/network-firewall/latest/developerguide/stateful-rule-groups-ips.md b/network-firewall/latest/developerguide/stateful-rule-groups-ips.md index 6e11b1547..b77db7fd9 100644 --- a/network-firewall/latest/developerguide/stateful-rule-groups-ips.md +++ b/network-firewall/latest/developerguide/stateful-rule-groups-ips.md @@ -7 +7 @@ -A stateful rule group is a rule group that uses Suricata compatible intrusion prevention system (IPS) specifications. Suricata is an open source network IPS that includes a standard rule-based language for stateful network traffic inspection. AWS Network Firewall supports Suricata version 7.0. +A stateful rule group is a rule group that uses Suricata compatible intrusion prevention system (IPS) specifications. Suricata is an open source network IPS that includes a standard rule-based language for stateful network traffic inspection. @@ -15 +15 @@ As needed, depending on the rules that you provide, the stateful engine performs -The rest of this section provides requirements and additional information for using Suricata compatible rules with Network Firewall. For full information about Suricata, see the Suricata website at [Suricata](https://suricata.io/) and the [Suricata User Guide](https://docs.suricata.io/en/suricata-7.0.0/). AWS Network Firewall supports Suricata version 7.0. +The rest of this section provides requirements and additional information for using Suricata compatible rules with Network Firewall. @@ -17 +17 @@ The rest of this section provides requirements and additional information for us -###### Suricata version upgrade to 7.0 +###### Note @@ -19 +19 @@ The rest of this section provides requirements and additional information for us -AWS Network Firewall supports Suricata version 7.0. Network Firewall upgraded from Suricata version 6.0.9 to 7.0 in November of 2024. +This section and others that describe Suricata-based concepts are not intended to replace or duplicate information from the Suricata documentation. For more Suricata-specific information, see the [Suricata documentation](https://docs.suricata.io/en/suricata-7.0.8/). @@ -21 +21,3 @@ AWS Network Firewall supports Suricata version 7.0. Network Firewall upgraded fr -###### Note +###### Previous Suricata major version upgrade + +When Network Firewall upgrades to a new major version of Suricata, related changes are tracked here. @@ -23 +25 @@ AWS Network Firewall supports Suricata version 7.0. Network Firewall upgraded fr -For full information about the upgrade from version 6.0.9, see [Upgrading 6.0 to 7.0](https://docs.suricata.io/en/latest/upgrade.html#upgrading-6-0-to-7-0). +Network Firewall upgraded from Suricata version 6.0.9 to 7.0 in November of 2024. For full information about the upgrade from version 6.0.9, see [Upgrading 6.0 to 7.0](https://docs.suricata.io/en/latest/upgrade.html#upgrading-6-0-to-7-0). @@ -25 +27 @@ For full information about the upgrade from version 6.0.9, see [Upgrading 6.0 to -The following are examples of the changes in this upgrade: +The following are examples of the changes in that upgrade: