AWS waf documentation change
Summary
Updated documentation to include references to 'protection pack' alongside existing 'web ACL' terminology throughout the metrics documentation. Added a section about the new console experience.
Security assessment
The changes primarily introduce terminology updates to include 'protection pack' (likely a new feature) and adjust metric visibility descriptions. There is no evidence of addressing a security vulnerability or weakness. The updates focus on feature awareness and metric tracking granularity rather than security controls or vulnerabilities.
Diff
diff --git a/waf/latest/developerguide/waf-metrics.md b/waf/latest/developerguide/waf-metrics.md index 5533c2cd2..cef84e81f 100644 --- a//waf/latest/developerguide/waf-metrics.md +++ b//waf/latest/developerguide/waf-metrics.md @@ -6,0 +7,4 @@ AWS WAF core metrics and dimensionsLabel metrics and dimensionsFree bot visibili +**Introducing a new console experience for AWS WAF** + +You can now use the updated experience to access AWS WAF functionality anywhere in the console. For more details, see [Working with the updated console experience](./working-with-console.html). + @@ -11 +15 @@ AWS WAF reports metrics once a minute. AWS WAF provides metrics and dimensions i -You can see summary information for AWS WAF metrics through the AWS WAF console, in the web ACL's traffic overview tab. For more information, go to the console or see [Web ACL traffic overview dashboards](./web-acl-dashboards.html). +You can see summary information for AWS WAF metrics through the AWS WAF console, in the protection pack or web ACL's traffic overview tab. For more information, go to the console or see [Traffic overview dashboards for protection pack or web ACLs](./web-acl-dashboards.html). @@ -13 +17 @@ You can see summary information for AWS WAF metrics through the AWS WAF console, -You can see the following metrics for web ACLs, rules, rule groups, and labels. +You can see the following metrics for protection pack or web ACLs, rules, rule groups, and labels. @@ -15 +19 @@ You can see the following metrics for web ACLs, rules, rule groups, and labels. - * **Your rules** – Metrics are grouped by the rule action. For example, when you test a rule in Count mode, its matches are listed as `Count` metrics for the web ACL. + * **Your rules** – Metrics are grouped by the rule action. For example, when you test a rule in Count mode, its matches are listed as `Count` metrics for the protection pack or web ACL. @@ -19 +23 @@ You can see the following metrics for web ACLs, rules, rule groups, and labels. - * **Rule groups owned by another account** – Rule group metrics are generally visible only to the rule group owner. However, if you override the rule action for a rule, the metrics for that rule will be listed under your web ACL metrics. Additionally, labels added by any rule group are listed in your web ACL metrics + * **Rule groups owned by another account** – Rule group metrics are generally visible only to the rule group owner. However, if you override the rule action for a rule, the metrics for that rule will be listed under your protection pack or web ACL metrics. Additionally, labels added by any rule group are listed in your protection pack or web ACL metrics @@ -23 +27 @@ Rule groups in this category are [AWS Managed Rules for AWS WAF](./aws-managed-r - * **Labels** \- Labels that were added to a web request during evaluation are listed in the web ACL label metrics. You can access the metrics for all labels, regardless of whether they were added by your rules and rule groups or by rules in a rule group that another account owns. + * **Labels** \- Labels that were added to a web request during evaluation are listed in the protection pack or web ACL label metrics. You can access the metrics for all labels, regardless of whether they were added by your rules and rule groups or by rules in a rule group that another account owns. @@ -69 +73 @@ AWS WAF core dimensions Dimension | Description - * `Default_Action` (only when combined with the `WebACL` dimension), which represents the action assigned to any request whose evaluation wasn't terminated by the action of a rule in the web ACL. + * `Default_Action` (only when combined with the `WebACL` dimension), which represents the action assigned to any request whose evaluation wasn't terminated by the action of a rule in the protection pack or web ACL. @@ -87 +91 @@ AWS WAF core dimensions Dimension | Description -Metrics for the labels added to requests during evaluation by your rules and by the managed rule groups that you use in your web ACL. For information, see [Web request labeling](./waf-labels.html). +Metrics for the labels added to requests during evaluation by your rules and by the managed rule groups that you use in your protection pack or web ACL. For information, see [Web request labeling](./waf-labels.html). @@ -89 +93 @@ Metrics for the labels added to requests during evaluation by your rules and by -For any single web request, AWS WAF stores metrics for at most 100 labels. Your web ACL evaluation can apply more than 100 labels and match against more than 100 labels, but only the first 100 are reflected in the metrics. +For any single web request, AWS WAF stores metrics for at most 100 labels. Your protection pack or web ACL evaluation can apply more than 100 labels and match against more than 100 labels, but only the first 100 are reflected in the metrics. @@ -119 +123 @@ Label dimensions Dimension | Description -When you don't use Bot Control in your web ACL, AWS WAF applies the Bot Control managed rule group to a sampling of your web requests, at no additional cost. This can provide an idea of the bot traffic that is coming to your protected resources. For information about Bot Control, see [AWS WAF Bot Control rule group](./aws-managed-rule-groups-bot.html). +When you don't use Bot Control in your protection pack or web ACL, AWS WAF applies the Bot Control managed rule group to a sampling of your web requests, at no additional cost. This can provide an idea of the bot traffic that is coming to your protected resources. For information about Bot Control, see [AWS WAF Bot Control rule group](./aws-managed-rule-groups-bot.html). @@ -174,2 +178,2 @@ The following are the supported values for the `Resource` dimension. -`WebAclsPerAccountCloudFront` | The number of web ACLs the customer has in CloudFront per account. This metric is only available when there is at least one web ACL in CloudFront. -`WebAclsPerAccountRegional` | The number of web ACLs the customer has in a region per account. This metric is only available when there is at least one web ACL in that region. +`WebAclsPerAccountCloudFront` | The number of protection pack or web ACLs the customer has in CloudFront per account. This metric is only available when there is at least one protection pack or web ACL in CloudFront. +`WebAclsPerAccountRegional` | The number of protection pack or web ACLs the customer has in a region per account. This metric is only available when there is at least one protection pack or web ACL in that region.