AWS waf documentation change
Summary
Added new console experience notice, updated terminology to include 'protection pack' alongside web ACL references, and adjusted documentation links
Security assessment
The changes introduce 'protection pack' terminology and update Shield Advanced documentation to include this concept. While this relates to DDoS protection configurations, there is no evidence of addressing a specific security vulnerability. The updates enhance documentation about existing security features (Shield Advanced protections).
Diff
diff --git a/waf/latest/developerguide/ddos-get-started-web-acl-rbr.md b/waf/latest/developerguide/ddos-get-started-web-acl-rbr.md index 83a3e0838..6a9886fc3 100644 --- a//waf/latest/developerguide/ddos-get-started-web-acl-rbr.md +++ b//waf/latest/developerguide/ddos-get-started-web-acl-rbr.md @@ -4,0 +5,4 @@ +**Introducing a new console experience for AWS WAF** + +You can now use the updated experience to access AWS WAF functionality anywhere in the console. For more details, see [Working with the updated console experience](./working-with-console.html). + @@ -19 +23 @@ If you manage your Shield Advanced protections through AWS Firewall Manager usin -Your Shield Advanced subscription covers the costs of using standard AWS WAF capabilities for resources that you protect with Shield Advanced. The standard AWS WAF fees that are covered by your Shield Advanced protections are the cost per web ACL, the cost per rule, and the base price per million requests for web request inspection, up to 1,500 WCUs and up to the default body size. +Your Shield Advanced subscription covers the costs of using standard AWS WAF capabilities for resources that you protect with Shield Advanced. The standard AWS WAF fees that are covered by your Shield Advanced protections are the cost per protection pack or web ACL, the cost per rule, and the base price per million requests for web request inspection, up to 1,500 WCUs and up to the default body size. @@ -21 +25 @@ Your Shield Advanced subscription covers the costs of using standard AWS WAF cap -Enabling Shield Advanced automatic application layer DDoS mitigation adds a rule group to your web ACL that uses 150 web ACL capacity units (WCUs). These WCUs count against the WCU usage in your web ACL. For more information, see [Automating application layer DDoS mitigation with Shield Advanced ](./ddos-automatic-app-layer-response.html), [Protecting the application layer with the Shield Advanced rule group](./ddos-automatic-app-layer-response-rg.html), and [Web ACL capacity units (WCUs) in AWS WAF](./aws-waf-capacity-units.html). +Enabling Shield Advanced automatic application layer DDoS mitigation adds a rule group to your protection pack or web ACL that uses 150 web ACL capacity units (WCUs). These WCUs count against the WCU usage in your protection pack or web ACL. For more information, see [Automating application layer DDoS mitigation with Shield Advanced ](./ddos-automatic-app-layer-response.html), [Protecting the application layer with the Shield Advanced rule group](./ddos-automatic-app-layer-response-rg.html), and [Web ACL capacity units (WCUs) in AWS WAF](./aws-waf-capacity-units.html). @@ -31 +35 @@ Shield Advanced gives you the option to configure layer 7 DDoS mitigation for ea - 1. The **Configure layer 7 DDoS protections** page lists each resource that isn't yet associated with a web ACL. For each of these, either choose an existing web ACL or create a new web ACL. For any resource that already has an associated web ACL, you can change web ACLs by first disassociating the current one through AWS WAF. For more information, see [Associating or disassociating a web ACL with an AWS resource](./web-acl-associating-aws-resource.html). + 1. The **Configure layer 7 DDoS protections** page lists each resource that isn't yet associated with a web ACL. For each of these, either choose an existing web ACL or create a new web ACL. For any resource that already has an associated web ACL, you can change web ACLs by first disassociating the current one through AWS WAF. For more information, see [Associating or disassociating protection with an AWS resource](./web-acl-associating-aws-resource.html). @@ -43 +47 @@ With automatic application layer DDoS mitigation, Shield Advanced maintains a ra -Automatic application layer DDoS mitigation works only with web ACLs that were created using the latest version of AWS WAF (v2). +Automatic application layer DDoS mitigation works only with protection pack or web ACLs that were created using the latest version of AWS WAF (v2).