AWS network-firewall documentation change
Summary
Removed specific Suricata version reference (7.0) from stateful rule group documentation
Security assessment
The change removes a version number without security context. No evidence of vulnerability mitigation or security feature addition.
Diff
diff --git a/network-firewall/latest/developerguide/suricata-best-practices.md b/network-firewall/latest/developerguide/suricata-best-practices.md index 4012a8e01..e003e680a 100644 --- a/network-firewall/latest/developerguide/suricata-best-practices.md +++ b/network-firewall/latest/developerguide/suricata-best-practices.md @@ -7 +7 @@ -A stateful rule group is a rule group that uses Suricata compatible intrusion prevention system (IPS) specifications. Suricata is an open source network IPS that includes a standard rule-based language for stateful network traffic inspection. AWS Network Firewall supports Suricata version 7.0. You can enter any stateful rule in Suricata compatible strings. +A stateful rule group is a rule group that uses Suricata compatible intrusion prevention system (IPS) specifications. Suricata is an open source network IPS that includes a standard rule-based language for stateful network traffic inspection. You can enter any stateful rule in Suricata compatible strings.