AWS waf documentation change
Summary
Added details about Shield Advanced subscription inclusions: Layer 7 Anti-DDoS Managed Rule group access and 50B monthly request allowance
Security assessment
The change documents security-related features (Layer 7 DDoS protection) included in Shield Advanced subscriptions but does not address a specific security vulnerability
Diff
diff --git a/waf/latest/developerguide/ddos-advanced-summary-deciding.md b/waf/latest/developerguide/ddos-advanced-summary-deciding.md index 7ae91becd..c8f37ed6d 100644 --- a//waf/latest/developerguide/ddos-advanced-summary-deciding.md +++ b//waf/latest/developerguide/ddos-advanced-summary-deciding.md @@ -17 +17 @@ Enabling Shield Advanced automatic application layer DDoS mitigation adds a rule -Your subscription to Shield Advanced does not cover the use of AWS WAF for resources that you do not protect using Shield Advanced. It also does not cover any additional non-standard AWS WAF costs for protected resources. Examples of non-standard AWS WAF costs are those for Bot Control, for the CAPTCHA rule action, for web ACLs that use more than 1,500 WCUs, and for inspecting the request body beyond the default body size. The full list is provided on the AWS WAF pricing page. +Your subscription to Shield Advanced does not cover the use of AWS WAF for resources that you do not protect using Shield Advanced. It also does not cover any additional non-standard AWS WAF costs for protected resources. Examples of non-standard AWS WAF costs are those for Bot Control, for the CAPTCHA rule action, for web ACLs that use more than 1,500 WCUs, and for inspecting the request body beyond the default body size. The full list is provided on the AWS WAF pricing page. Your subscription to Shield Advanced includes access to the Layer 7 Anti-DDoS Amazon Managed Rule group. As part of your subscription, you will get up to 50 billion requests to Shield Advanced protected AWS WAF resources in a calendar month. Requests beyond 50 billion will be billed as per the AWS Shield Advanced pricing page.