AWS network-firewall documentation change
Summary
Clarified Geographic IP filtering introduction and updated section title ('Working with stateful rule groups')
Security assessment
Rephrases existing Geo IP filtering description and updates headings. While Geo IP filtering is a security feature, the change does not introduce new security documentation—it refines existing content.
Diff
diff --git a/network-firewall/latest/developerguide/rule-groups-geo-ip-filtering.md b/network-firewall/latest/developerguide/rule-groups-geo-ip-filtering.md index 9106b02fd..445101d2a 100644 --- a//network-firewall/latest/developerguide/rule-groups-geo-ip-filtering.md +++ b//network-firewall/latest/developerguide/rule-groups-geo-ip-filtering.md @@ -7 +7 @@ -Use Geographic IP filtering to filter on country codes for the IP addresses of network traffic. You can use Geographic IP filtering with Suricata compatible rule strings and with the standard Network Firewall stateful rule groups. +You can use Geographic IP filtering with **Suricata compatible rule strings** and with **standard Network Firewall stateful rule groups**. This optional filter matches country codes for the IP addresses of network traffic. @@ -46 +46 @@ IP set references -Options for providing stateful rules +Working with stateful rule groups