AWS Security ChangesHomeSearch

AWS waf documentation change

Service: waf · 2025-06-19 · Documentation low

File: waf/latest/developerguide/web-acl-deleting.md

Summary

Updated documentation to include protection pack deletion procedures alongside web ACL deletion. Added new console experience notice and detailed steps for disassociating resources from protection packs.

Security assessment

The changes introduce documentation for managing protection packs but do not address security vulnerabilities or weaknesses. The updates focus on UI changes and expanded resource management procedures without security-specific context.

Diff

diff --git a/waf/latest/developerguide/web-acl-deleting.md b/waf/latest/developerguide/web-acl-deleting.md
index 11f816512..5242c9100 100644
--- a//waf/latest/developerguide/web-acl-deleting.md
+++ b//waf/latest/developerguide/web-acl-deleting.md
@@ -5 +5 @@
-# Deleting a web ACL
+**Introducing a new console experience for AWS WAF**
@@ -7 +7 @@
-This section provides procedures for deleting web ACLs through the AWS console. 
+You can now use the updated experience to access AWS WAF functionality anywhere in the console. For more details, see [Working with the updated console experience](./working-with-console.html). 
@@ -9 +9,33 @@ This section provides procedures for deleting web ACLs through the AWS console.
-To delete a web ACL, you first disassociate all AWS resources from the web ACL. Perform the following procedure.
+# Deleting a protection pack or web ACL
+
+This section provides procedures for deleting protection pack or web ACLs through the AWS console. 
+
+To delete a protection pack or web ACL, you first disassociate all AWS resources from the protection pack or web ACL. Perform the following procedure.
+
+To delete a protection pack
+    
+
+  1. Sign in to the AWS Management Console and open the AWS WAF console at [https://console.aws.amazon.com/wafv2/homev2](https://console.aws.amazon.com/wafv2/homev2). 
+
+  2. In the navigation pane, choose **Resources & Protections**.
+
+  3. In the protection pack card, choose the **Edit** link next to **Resources** to open the **Manage resources** panel.
+
+  4. In the **Manage resources** section for the rule group, choose the resource you want to disassociate, and then choose **Disassociate**.
+
+###### Note
+
+You must disassociate one resource at a time. Do not choose multiple resources. 
+
+  5. In the confirmation page, type "disassociate", and then choose **Disassociate**. Repeat to disassociate each resource in the protection pack.
+
+  6. Choose the protection pack that you want to delete. The console makes the main protection pack card editable, and also opens a side panel with details you can edit.
+
+  7. In the details panel, choose the trash can icon.
+
+  8. In the confirmation page, type "delete" and then choose **Delete**.
+
+
+
+
+To delete a web ACL
@@ -11 +42,0 @@ To delete a web ACL, you first disassociate all AWS resources from the web ACL.
-###### To delete a web ACL
@@ -15 +46 @@ To delete a web ACL, you first disassociate all AWS resources from the web ACL.
-  2. In the navigation pane, choose **Web ACLs**.
+  2. In the navigation pane, choose **web ACLs**.
@@ -21 +52 @@ To delete a web ACL, you first disassociate all AWS resources from the web ACL.
-If you don't see the web ACL that you want to delete, make sure the Region selection inside the Web ACLs section is correct. Web ACLs that protect Amazon CloudFront distributions are in **Global (CloudFront)**.
+If you don't see the web ACL that you want to delete, make sure the Region selection inside the web ACLs section is correct. Any web ACLs that protect Amazon CloudFront distributions are in **Global (CloudFront)**.
@@ -23 +54 @@ If you don't see the web ACL that you want to delete, make sure the Region selec
-  4. On the **Associated AWS resources** tab, for each associated resource, select the radio button next to the resource name and then choose **Disassociate**. This disassociates the web ACL from your AWS resources. 
+  4. On the **Associated AWS resources** tab, for each associated resource, select the radio button next to the resource name and then choose **Disassociate**. This disassociates the protection pack or web ACL from your AWS resources. 
@@ -25 +56 @@ If you don't see the web ACL that you want to delete, make sure the Region selec
-  5. In the navigation pane, choose **Web ACLs**.
+  5. In the navigation pane, choose **web ACLs**.