AWS waf medium security documentation change

Service: waf · 2025-05-01 · Security-related medium

File: waf/latest/developerguide/getting-started-fms-shield.md

Summary

Clarified that Firewall Manager policies only apply to CloudFront standard distributions

Security assessment

The limitation could lead to misconfigurations where users assume policies apply to all distribution types, potentially leaving resources unprotected against DDoS attacks.

Diff

diff --git a/waf/latest/developerguide/getting-started-fms-shield.md b/waf/latest/developerguide/getting-started-fms-shield.md
index 3f31dbb95..732129f3b 100644
--- a//waf/latest/developerguide/getting-started-fms-shield.md
+++ b//waf/latest/developerguide/getting-started-fms-shield.md
@@ -12,0 +13,4 @@ You can use AWS Firewall Manager to enable AWS Shield Advanced protections acros
+Currently, AWS Firewall Manager policies only apply to your CloudFront standard distributions.
+
+###### Important
+