AWS waf documentation change
Summary
Added new console experience announcement and updated terminology from 'web ACL' to 'protection pack or web ACL' in multiple instances
Security assessment
The changes primarily update terminology and add UI documentation. While ATP (Account Takeover Prevention) is a security feature, the modifications don't address specific vulnerabilities but rather clarify existing security configuration examples.
Diff
diff --git a/waf/latest/developerguide/waf-atp-control-example-basic.md b/waf/latest/developerguide/waf-atp-control-example-basic.md index b314ddafd..8e61bc82e 100644 --- a//waf/latest/developerguide/waf-atp-control-example-basic.md +++ b//waf/latest/developerguide/waf-atp-control-example-basic.md @@ -4,0 +5,4 @@ +**Introducing a new console experience for AWS WAF** + +You can now use the updated experience to access AWS WAF functionality anywhere in the console. For more details, see [Working with the updated console experience](./working-with-console.html). + @@ -7 +11 @@ -The following JSON listing shows an example web ACL with an AWS WAF Fraud Control account takeover prevention (ATP) managed rule group. Note the additional sign-in page configuration, which gives the rule group the information it needs to monitor and manage your login requests. This JSON includes the web ACL's automatically generated settings, like the label namespace and the web ACL's application integration URL. +The following JSON listing shows an example protection pack or web ACL with an AWS WAF Fraud Control account takeover prevention (ATP) managed rule group. Note the additional sign-in page configuration, which gives the rule group the information it needs to monitor and manage your login requests. This JSON includes the protection pack or web ACL's automatically generated settings, like the label namespace and the protection pack or web ACL's application integration URL. @@ -14 +18 @@ The following JSON listing shows an example web ACL with an AWS WAF Fraud Contro - "Description": "This is a test web ACL for ATP.", + "Description": "This is a test protection pack or web ACL for ATP.",