AWS waf documentation change
Summary
Updated documentation to include 'protection pack' terminology alongside web ACL references, added note about new console experience, and adjusted capacity unit explanations to account for protection packs.
Security assessment
The changes primarily introduce 'protection pack' as a new component in AWS WAF's capacity unit calculations and update UI references. There is no evidence of addressing a security vulnerability, patching an exploit, or disclosing a security risk. The updates focus on feature integration (protection packs) and usability improvements (console experience).
Diff
diff --git a/waf/latest/developerguide/aws-waf-capacity-units.md b/waf/latest/developerguide/aws-waf-capacity-units.md index 1339dc3ff..15050597b 100644 --- a//waf/latest/developerguide/aws-waf-capacity-units.md +++ b//waf/latest/developerguide/aws-waf-capacity-units.md @@ -5 +5,5 @@ -Determining the WCUs for a rule group or web ACL +Determining the WCUs for a rule group, protection pack, or web ACL + +**Introducing a new console experience for AWS WAF** + +You can now use the updated experience to access AWS WAF functionality anywhere in the console. For more details, see [Working with the updated console experience](./working-with-console.html). @@ -25 +29 @@ The WCU requirements for a rule group are determined by the rules that you defin -Each rule group has an immutable capacity setting, which the owner assigns at creation. This is true for managed rule groups and rule groups that you create through AWS WAF. When you modify a rule group, your changes must keep the rule group's WCUs within its capacity. This ensures that web ACLs that are using the rule group remain within their capacity requirements. +Each rule group has an immutable capacity setting, which the owner assigns at creation. This is true for managed rule groups and rule groups that you create through AWS WAF. When you modify a rule group, your changes must keep the rule group's WCUs within its capacity. This ensures that protection packs or web ACLs that are using the rule group remain within their capacity requirements. @@ -27 +31 @@ Each rule group has an immutable capacity setting, which the owner assigns at cr -The WCUs that are in use in a rule group is the sum of the WCUs for the rules minus any processing optimizations that AWS WAF is able to obtain by combining the behavior of the rules. For example, if you define two rules to examine the same web request component, and the rules each apply a particular transformation to the component before inspecting it, AWS WAF might be able to charge you just once for applying the transformation. The WCU cost to use a rule group in a web ACL is always the fixed WCU setting that you defined at the rule group creation. +The WCUs that are in use in a rule group is the sum of the WCUs for the rules minus any processing optimizations that AWS WAF is able to obtain by combining the behavior of the rules. For example, if you define two rules to examine the same web request component, and the rules each apply a particular transformation to the component before inspecting it, AWS WAF might be able to charge you just once for applying the transformation. The WCU cost to use a rule group in a protection pack or web ACL is always the fixed WCU setting that you defined at the rule group creation. @@ -31 +35 @@ When you create a rule group, take care to set the capacity high enough to accom -###### Web ACL WCUs +###### Protection pack or web ACL WCUs @@ -33 +37 @@ When you create a rule group, take care to set the capacity high enough to accom -The WCU requirements for a web ACL are determined by the rules and rule groups that you use inside the web ACL. +The WCU requirements for a protection pack or web ACL are determined by the rules and rule groups that you use inside the protection pack or web ACL. @@ -35 +39 @@ The WCU requirements for a web ACL are determined by the rules and rule groups t - * The cost of using a rule group in a web ACL is the rule group's capacity setting. + * The cost of using a rule group in a protection pack or web ACL is the rule group's capacity setting. @@ -37 +41 @@ The WCU requirements for a web ACL are determined by the rules and rule groups t - * The cost of using a rule is the rule's calculated WCUs minus any processing optimizations that AWS WAF is able to obtain from the web ACL's combination of rules. For example, if you define two rules to examine the same web request component, and the rules each apply a particular transformation to the component before inspecting it, AWS WAF might be able to charge you just once for applying the transformation. + * The cost of using a rule is the rule's calculated WCUs minus any processing optimizations that AWS WAF is able to obtain from the protection pack or web ACL's combination of rules. For example, if you define two rules to examine the same web request component, and the rules each apply a particular transformation to the component before inspecting it, AWS WAF might be able to charge you just once for applying the transformation. @@ -42 +46 @@ The WCU requirements for a web ACL are determined by the rules and rule groups t -The basic price for a web ACL includes up to 1,500 WCUs. Using more than 1,500 WCUs incurs additional fees, according to a tiered pricing model. AWS WAF automatically adjusts your web ACL pricing as your web ACL WCU usage changes. For pricing details, see [AWS WAF Pricing](https://aws.amazon.com/waf/pricing/). +The basic price for a protection pack or web ACL includes up to 1,500 WCUs. Using more than 1,500 WCUs incurs additional fees, according to a tiered pricing model. AWS WAF automatically adjusts your protection pack or web ACL pricing as your protection pack or web ACL WCU usage changes. For pricing details, see [AWS WAF Pricing](https://aws.amazon.com/waf/pricing/). @@ -44 +48 @@ The basic price for a web ACL includes up to 1,500 WCUs. Using more than 1,500 W -The maximum capacity for a web ACL is 5,000 WCUs. +The maximum capacity for a protection pack or web ACL is 5,000 WCUs. @@ -46 +50 @@ The maximum capacity for a web ACL is 5,000 WCUs. -## Determining the WCUs for a rule group or web ACL +## Determining the WCUs for a rule group, protection pack, or web ACL @@ -48 +52 @@ The maximum capacity for a web ACL is 5,000 WCUs. -As noted in prior sections, the total WCUs used in a rule group or web ACL will be equal to _or less than_ the sum of the WCUs for all of the rules that are defined in the rule group or web ACL. +As noted in prior sections, the total WCUs used in a rule group, protection pack, or web ACL will be equal to _or less than_ the sum of the WCUs for all of the rules that are defined in the rule group, protection pack, or web ACL. @@ -50 +54 @@ As noted in prior sections, the total WCUs used in a rule group or web ACL will -In the AWS WAF console, you can see the capacity consumed when you add rules to your web ACL or rule group. The console displays the current capacity units used as you add the rules. +In the AWS WAF console, you can see the capacity consumed when you add rules to your protection pack, web ACL, or rule group. The console displays the current capacity units used as you add the rules. @@ -52 +56 @@ In the AWS WAF console, you can see the capacity consumed when you add rules to -Through the API, you can check the maximum capacity requirements for the rules that you want to use in a web ACL or rule group. To do this, provide the JSON listing of the rules to the check capacity call. For more information, see [CheckCapacity](https://docs.aws.amazon.com/waf/latest/APIReference/API_CheckCapacity.html) in the _AWS WAFV2 API Reference_. +Through the API, you can check the maximum capacity requirements for the rules that you want to use in a protection pack, web ACL, or rule group. To do this, provide the JSON listing of the rules to the check capacity call. For more information, see [CheckCapacity](https://docs.aws.amazon.com/waf/latest/APIReference/API_CheckCapacity.html) in the _AWS WAFV2 API Reference_.