AWS network-firewall documentation change
Summary
Updated documentation structure with new sections about active threat defense, domain/IP protection, and threat signature rule groups. Added operational guidance and reorganized content about AWS managed rule groups.
Security assessment
The changes add detailed descriptions of security-focused managed rule groups (active threat defense, domain/IP protection, threat signatures) which are security features. However, there is no evidence of addressing a specific vulnerability or incident - this is general security documentation improvement.
Diff
diff --git a/network-firewall/latest/developerguide/nwfw-managed-rule-groups.md b/network-firewall/latest/developerguide/nwfw-managed-rule-groups.md index bf47accd2..09d4ef75a 100644 --- a//network-firewall/latest/developerguide/nwfw-managed-rule-groups.md +++ b//network-firewall/latest/developerguide/nwfw-managed-rule-groups.md @@ -5 +5 @@ -# Using AWS managed rule groups in AWS Network Firewall +# AWS managed rule groups in AWS Network Firewall @@ -7 +7 @@ -Managed rule groups are collections of predefined, ready-to-use rules that AWS writes and maintains for you. AWS managed rule groups are available for free to Network Firewall customers. +Managed rule groups are collections of predefined, ready-to-use rules that AWS writes and maintains for you. Most AWS managed rule groups are available for at no additional to Network Firewall customers. The managed rule groups offered by Network Firewall combine thorough security coverage with the convenience and experitise of AWS managed solutions. @@ -9 +9 @@ Managed rule groups are collections of predefined, ready-to-use rules that AWS w -###### Automatic updates +You can select one or more of the following rule groups to use in your Network Firewall policies: @@ -11 +11 @@ Managed rule groups are collections of predefined, ready-to-use rules that AWS w -Keeping up to date on the constantly changing threat landscape can be time consuming and expensive. Managed rule groups can save you time when you implement and use Network Firewall. AWS automatically updates managed rule groups when new vulnerabilities and threats emerge. AWS updates managed rule groups once a day to once a week. + * Active threat defense managed rule groups – protect against active threats tracked by AWS threat intelligence. @@ -13 +13,10 @@ Keeping up to date on the constantly changing threat landscape can be time consu -In some cases, AWS is notified of new vulnerabilities before public disclosure due to its participation in a number of private disclosure communities. In those cases, AWS Network Firewall can update rule groups and deploy them to your environment before a new threat is widely known. + * Domain and IP managed rule groups – protect against domains known or suspected to be associated with malware or bots. + + * Threat signature managed rule groups – inspect for and defend against signatures that represent a variety of known threat categories. + + + + +Each set of managed rule groups counts as a single rule group toward the maximum number of stateful rule groups per firewall policy. + +The following topics provide more details about the AWS managed rule groups supported by Network Firewall and how you can configure them to meet your security needs. @@ -17 +26 @@ In some cases, AWS is notified of new vulnerabilities before public disclosure d - * [Working with managed rule groups in Network Firewall](./nwfw-using-managed-rule-groups.html) + * [AWS active threat defense for AWS Network Firewall](./aws-managed-rule-groups-atd.html) @@ -23 +32,5 @@ In some cases, AWS is notified of new vulnerabilities before public disclosure d - * [Disclaimer for AWS managed rule groups in AWS Network Firewall](./aws-managed-rule-groups-disclaimer.html) + * [Working with AWS managed rule groups in the Network Firewall console](./nwfw-using-managed-rule-groups-console.html) + + * [Troubleshooting AWS managed rule groups in Network Firewall](./nwfw-using-managed-rule-groups-mitigating-false-positive.html) + + * [Considerations and disclaimers for using AWS managed rule groups in Network Firewall](./aws-managed-rule-groups-disclaimer.html) @@ -34 +47 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Rule groups +Setting rule group capacity @@ -36 +49 @@ Rule groups -Working with managed rule groups in Network Firewall +Active threat defense managed rule groups