AWS waf documentation change
Summary
Added protection pack disassociation procedures and a note about DDoS protection when associating Application Load Balancers. Updated terminology to include protection packs.
Security assessment
The change adds documentation about enabling resource-level DDoS protection when using Application Load Balancers with web ACLs, which qualifies as security feature documentation. However, there is no evidence of addressing a specific security vulnerability.
Diff
diff --git a/waf/latest/developerguide/web-acl-dissociating-aws-resource.md b/waf/latest/developerguide/web-acl-dissociating-aws-resource.md index 687e06fb4..3a1c4f3fe 100644 --- a//waf/latest/developerguide/web-acl-dissociating-aws-resource.md +++ b//waf/latest/developerguide/web-acl-dissociating-aws-resource.md @@ -5 +5,26 @@ -# Disassociating a web ACL from an AWS resource +**Introducing a new console experience for AWS WAF** + +You can now use the updated experience to access AWS WAF functionality anywhere in the console. For more details, see [Working with the updated console experience](./working-with-console.html). + +# Disassociating a protection from an AWS resource + +Disassociating a protection pack + + + 1. Choose the protection pack that you want to edit. The console makes the main protection pack card editable, and also opens a side panel with details you can edit. + + 2. In the protection pack card, choose the **Edit** link next to **Resources** to open the **Manage resources** panel. + + 3. In the **Manage resources** section for the rule group, choose the resource you want to disassociate, and then choose **Disassociate**. + +###### Note + +You must disassociate one resource at a time. Do not choose multiple resources. + + 4. In the confirmation page, type "disassociate", and then choose **Disassociate**. + + + + +Disassociating a web ACL + @@ -13 +38 @@ To dissociate a web ACL from an AWS resource, perform the following procedure. - 2. In the navigation pane, choose **Web ACLs**. + 2. In the navigation pane, choose **web ACLs**. @@ -22,0 +48,4 @@ You must disassociate one resource at a time. Do not choose multiple resources. +###### Note + +When you choose to associate an Application Load Balancer with your webACL, **Resource-level DDoS protection** is enabled. For more information, see [AWS WAF Distributed Denial of Service (DDoS) prevention](./waf-anti-ddos.html). + @@ -34 +63 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Associating a web ACL with an AWS resource +Associating protection with an AWS resource @@ -36 +65 @@ Associating a web ACL with an AWS resource -Using web ACLs with rules and rule groups +Using protection pack or web ACLs with rules and rule groups