AWS waf documentation change
Summary
Added announcement about new console experience and updated references from 'web ACL' to 'protection pack or web ACL' throughout the document
Security assessment
Changes primarily introduce UI updates and expand terminology to include 'protection packs' alongside web ACLs. No evidence of addressing vulnerabilities or security weaknesses. Terminology expansion doesn't inherently impact security posture.
Diff
diff --git a/waf/latest/developerguide/waf-rule-statement-type-rule-group.md b/waf/latest/developerguide/waf-rule-statement-type-rule-group.md index f2ec0426a..939a8a6cf 100644 --- a//waf/latest/developerguide/waf-rule-statement-type-rule-group.md +++ b//waf/latest/developerguide/waf-rule-statement-type-rule-group.md @@ -6,0 +7,4 @@ Rule statement characteristicsWhere to find this rule statement +**Introducing a new console experience for AWS WAF** + +You can now use the updated experience to access AWS WAF functionality anywhere in the console. For more details, see [Working with the updated console experience](./working-with-console.html). + @@ -11 +15 @@ This section explains how rule group rule statements work. -The rule group rule statement adds a reference to your web ACL rules list to a rule group that you manage. You don't see this option under your rule statements on the console, but when you work with the JSON format of your web ACL, any of your own rule groups that you've added show up under the web ACL rules as this type. For information about using your own rule groups, see [Managing your own rule groups](./waf-user-created-rule-groups.html). +The rule group rule statement adds a reference to your protection pack or web ACL rules list to a rule group that you manage. You don't see this option under your rule statements on the console, but when you work with the JSON format of your protection pack or web ACL, any of your own rule groups that you've added show up under the protection pack or web ACL rules as this type. For information about using your own rule groups, see [Managing your own rule groups](./waf-user-created-rule-groups.html). @@ -13 +17 @@ The rule group rule statement adds a reference to your web ACL rules list to a r -When you add a rule group to a web ACL, you can override the actions of rules in the group to Count or to another rule action. For more information, see [Overriding rule group actions in AWS WAF](./web-acl-rule-group-override-options.html). +When you add a rule group to a protection pack or web ACL, you can override the actions of rules in the group to Count or to another rule action. For more information, see [Overriding rule group actions in AWS WAF](./web-acl-rule-group-override-options.html). @@ -17 +21 @@ When you add a rule group to a web ACL, you can override the actions of rules in -**Not nestable** – You can't nest this statement type inside other statements, and you can't include it in a rule group. You can include it directly in a web ACL. +**Not nestable** – You can't nest this statement type inside other statements, and you can't include it in a rule group. You can include it directly in a protection pack or web ACL. @@ -23 +27 @@ When you add a rule group to a web ACL, you can override the actions of rules in - * **Console** – During the process of creating a web ACL, on the **Add rules and rule groups** page, choose **Add my own rules and rule groups** , **Rule group** , and then add the rule group that you want to use. + * **Console** – During the process of creating a protection pack or web ACL, on the **Add rules and rule groups** page, choose **Add my own rules and rule groups** , **Rule group** , and then add the rule group that you want to use.