AWS waf documentation change
Summary
Added references to 'protection pack' alongside web ACLs in custom response configuration and logging documentation. Introduced new console experience announcement.
Security assessment
The changes introduce 'protection pack' terminology in security configuration contexts but do not address vulnerabilities. The updates document expanded security configuration options (protection packs) which qualify as security feature documentation.
Diff
diff --git a/waf/latest/developerguide/cloudfront-waf-use-cases.md b/waf/latest/developerguide/cloudfront-waf-use-cases.md index d6b58d0db..25d6782d6 100644 --- a//waf/latest/developerguide/cloudfront-waf-use-cases.md +++ b//waf/latest/developerguide/cloudfront-waf-use-cases.md @@ -6,0 +7,4 @@ Using AWS WAF with CloudFront custom error pagesUsing AWS WAF with CloudFront fo +**Introducing a new console experience for AWS WAF** + +You can now use the updated experience to access AWS WAF functionality anywhere in the console. For more details, see [Working with the updated console experience](./working-with-console.html). + @@ -18 +22 @@ By default, when AWS WAF blocks a web request based on the criteria that you spe -You can override this behavior in your AWS WAF web ACL rules by defining custom responses. For more information about customizing response behavior using AWS WAF rules, see [Sending custom responses for Block actions](./customizing-the-response-for-blocked-requests.html). +You can override this behavior in your AWS WAF protection pack or web ACL rules by defining custom responses. For more information about customizing response behavior using AWS WAF rules, see [Sending custom responses for Block actions](./customizing-the-response-for-blocked-requests.html). @@ -38 +42 @@ For CloudFront multi-tenant distributions, you can configure custom error pages - * Through AWS WAF rules - Custom responses defined in web ACLs take precedence over both multi-tenant distribution and tenant-level custom error pages + * Through AWS WAF rules - Custom responses defined in protection pack or web ACLs take precedence over both multi-tenant distribution and tenant-level custom error pages @@ -131 +135 @@ Single destination per distribution | Separate destinations possible for multi-t - * To learn more about AWS WAF logs, see [Log fields for web ACL traffic](./logging-fields.html). + * To learn more about AWS WAF logs, see [Log fields for protection pack or web ACL traffic](./logging-fields.html).