AWS Security ChangesHomeSearch

AWS waf documentation change

Service: waf · 2025-06-19 · Documentation low

File: waf/latest/developerguide/waf-rule-group-creating.md

Summary

Added console notice and updated documentation to reference 'protection packs' in rule group creation and capacity management

Security assessment

Integrates 'protection packs' into security configuration documentation, indicating a new security feature layer. No vulnerability fixes mentioned, but expands security feature documentation.

Diff

diff --git a/waf/latest/developerguide/waf-rule-group-creating.md b/waf/latest/developerguide/waf-rule-group-creating.md
index d4cb2ce27..edfdd0d02 100644
--- a//waf/latest/developerguide/waf-rule-group-creating.md
+++ b//waf/latest/developerguide/waf-rule-group-creating.md
@@ -4,0 +5,4 @@
+**Introducing a new console experience for AWS WAF**
+
+You can now use the updated experience to access AWS WAF functionality anywhere in the console. For more details, see [Working with the updated console experience](./working-with-console.html). 
+
@@ -23 +27 @@ You can't change the name after you create the rule group.
-  4. For **Region** , choose the Region where you want to store the rule group. To use a rule group in web ACLs that protect Amazon CloudFront distributions, you must use the global setting. You can use the global setting for regional applications, too.
+  4. For **Region** , choose the Region where you want to store the rule group. To use a rule group in protection pack or web ACLs that protect Amazon CloudFront distributions, you must use the global setting. You can use the global setting for regional applications, too.
@@ -27 +31 @@ You can't change the name after you create the rule group.
-  6. Add rules to the rule group using the **Rule builder** wizard, the same as you do in web ACL management. The only difference is that you can't add a rule group to another rule group. 
+  6. Add rules to the rule group using the **Rule builder** wizard, the same as you do in protection pack or web ACL management. The only difference is that you can't add a rule group to another rule group. 
@@ -29 +33 @@ You can't change the name after you create the rule group.
-  7. For **Capacity** , set the maximum for the rule group's use of web ACL capacity units (WCUs). This is an immutable setting. For information about WCUs, see [Web ACL capacity units (WCUs) in AWS WAF](./aws-waf-capacity-units.html). 
+  7. For **Capacity** , set the maximum for the rule group's use of protection pack or web ACL capacity units (WCUs). This is an immutable setting. For information about WCUs, see [Web ACL capacity units (WCUs) in AWS WAF](./aws-waf-capacity-units.html).