AWS network-firewall documentation change

Service: network-firewall · 2025-06-19 · Documentation low

File: network-firewall/latest/developerguide/rule-groups-ip-set-references.md

Summary

Added IP set reference usage context and updated section title ('Stateful domain list rule groups')

Security assessment

Clarifies compatibility of IP set references with rule types but does not introduce new security features or address vulnerabilities. Existing security feature documentation remains unchanged.

Diff

diff --git a/network-firewall/latest/developerguide/rule-groups-ip-set-references.md b/network-firewall/latest/developerguide/rule-groups-ip-set-references.md
index 07dee1e8b..79b9ab5fa 100644
--- a//network-firewall/latest/developerguide/rule-groups-ip-set-references.md
+++ b//network-firewall/latest/developerguide/rule-groups-ip-set-references.md
@@ -8,0 +9,2 @@ Limits for IP set referencesReferencing Amazon VPC prefix listsReferencing resou
+You can use an IP set reference with **Suricata compatible rule strings** and with **standard Network Firewall stateful rule groups**.
+
@@ -57 +59 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please
-Managing evaluation order for stateful rules
+Stateful domain list rule groups