AWS waf documentation change
Summary
Added console update notice and updated context references to include 'protection pack' alongside web ACL
Security assessment
Changes expand documentation for WAF's security features (label matching) by introducing 'protection pack' context without addressing specific vulnerabilities. The updates enhance existing security configuration guidance but don't indicate security issue remediation.
Diff
diff --git a/waf/latest/developerguide/waf-rule-label-match.md b/waf/latest/developerguide/waf-rule-label-match.md index a8b581721..abcfea3b0 100644 --- a//waf/latest/developerguide/waf-rule-label-match.md +++ b//waf/latest/developerguide/waf-rule-label-match.md @@ -4,0 +5,4 @@ +**Introducing a new console experience for AWS WAF** + +You can now use the updated experience to access AWS WAF functionality anywhere in the console. For more details, see [Working with the updated console experience](./working-with-console.html). + @@ -9 +13 @@ This section explains how to use a label match statement to evaluate web request -A label's prefix defines the context of the rule group or web ACL where the label's rule is defined. In a rule's label match statement, if your label or namespace match string doesn't specify the prefix, AWS WAF uses the prefix for the label match rule. +A label's prefix defines the context of the rule group or protection pack or web ACL where the label's rule is defined. In a rule's label match statement, if your label or namespace match string doesn't specify the prefix, AWS WAF uses the prefix for the label match rule. @@ -11 +15 @@ A label's prefix defines the context of the rule group or web ACL where the labe - * Labels for rules that are defined directly inside a web ACL have a prefix that specifies the web ACL context. + * Labels for rules that are defined directly inside a protection pack or web ACL have a prefix that specifies the protection pack or web ACL context. @@ -24 +28 @@ Some managed rule groups add labels. You can retrieve these through the API by c -If you want to match against a rule that's in a different context than the context of your rule, you must provide the prefix in your match string. For example, if you want to match against labels that are added by rules in a managed rule group, you could add a rule in your web ACL with a label match statement whose match string specifies the rule group's prefix followed by your additional match criteria. +If you want to match against a rule that's in a different context than the context of your rule, you must provide the prefix in your match string. For example, if you want to match against labels that are added by rules in a managed rule group, you could add a rule in your protection pack or web ACL with a label match statement whose match string specifies the rule group's prefix followed by your additional match criteria.