AWS Security ChangesHomeSearch

AWS waf documentation change

Service: waf · 2025-06-19 · Documentation low

File: waf/latest/developerguide/ddos-app-layer-protections.md

Summary

Added announcement about new console experience and updated references from 'web ACL' to 'protection pack or web ACL' in cost coverage details

Security assessment

Changes focus on UI updates and terminology expansion (protection packs). No security vulnerabilities addressed. Updates relate to billing structure and product naming rather than security controls.

Diff

diff --git a/waf/latest/developerguide/ddos-app-layer-protections.md b/waf/latest/developerguide/ddos-app-layer-protections.md
index 40c25e393..bbc72c2b2 100644
--- a//waf/latest/developerguide/ddos-app-layer-protections.md
+++ b//waf/latest/developerguide/ddos-app-layer-protections.md
@@ -4,0 +5,4 @@
+**Introducing a new console experience for AWS WAF**
+
+You can now use the updated experience to access AWS WAF functionality anywhere in the console. For more details, see [Working with the updated console experience](./working-with-console.html). 
+
@@ -15 +19 @@ When you protect an application layer resource with Shield Advanced, Shield Adva
-Your Shield Advanced subscription covers the costs of using standard AWS WAF capabilities for resources that you protect with Shield Advanced. The standard AWS WAF fees that are covered by your Shield Advanced protections are the cost per web ACL, the cost per rule, and the base price per million requests for web request inspection, up to 1,500 WCUs and up to the default body size. 
+Your Shield Advanced subscription covers the costs of using standard AWS WAF capabilities for resources that you protect with Shield Advanced. The standard AWS WAF fees that are covered by your Shield Advanced protections are the cost per protection pack or web ACL, the cost per rule, and the base price per million requests for web request inspection, up to 1,500 WCUs and up to the default body size.
@@ -17 +21 @@ Your Shield Advanced subscription covers the costs of using standard AWS WAF cap
-Enabling Shield Advanced automatic application layer DDoS mitigation adds a rule group to your web ACL that uses 150 web ACL capacity units (WCUs). These WCUs count against the WCU usage in your web ACL. For more information, see [Automating application layer DDoS mitigation with Shield Advanced ](./ddos-automatic-app-layer-response.html), [Protecting the application layer with the Shield Advanced rule group](./ddos-automatic-app-layer-response-rg.html), and [Web ACL capacity units (WCUs) in AWS WAF](./aws-waf-capacity-units.html).
+Enabling Shield Advanced automatic application layer DDoS mitigation adds a rule group to your protection pack or web ACL that uses 150 web ACL capacity units (WCUs). These WCUs count against the WCU usage in your protection pack or web ACL. For more information, see [Automating application layer DDoS mitigation with Shield Advanced ](./ddos-automatic-app-layer-response.html), [Protecting the application layer with the Shield Advanced rule group](./ddos-automatic-app-layer-response-rg.html), and [Web ACL capacity units (WCUs) in AWS WAF](./aws-waf-capacity-units.html).