AWS waf medium security documentation change

Service: waf · 2025-05-01 · Security-related medium

File: waf/latest/developerguide/ddos-event-mitigation-logic-continuous-inspection.md

Summary

Added important note stating AWS Shield Advanced doesn't support CloudFront tenants

Security assessment

The change highlights a security service limitation (Shield Advanced) that could lead to unprotected CloudFront tenants if ignored, directly impacting DDoS protection coverage.

Diff

diff --git a/waf/latest/developerguide/ddos-event-mitigation-logic-continuous-inspection.md b/waf/latest/developerguide/ddos-event-mitigation-logic-continuous-inspection.md
index 9b50572eb..76a1e657e 100644
--- a//waf/latest/developerguide/ddos-event-mitigation-logic-continuous-inspection.md
+++ b//waf/latest/developerguide/ddos-event-mitigation-logic-continuous-inspection.md
@@ -8,0 +9,4 @@ This page explains how Shield DDoS mitigation continually inspects traffic for C
+###### Important
+
+AWS Shield Advanced doesn’t support CloudFront tenants.
+