AWS waf documentation change
Summary
Updated documentation to include 'protection pack' terminology alongside web ACLs, added section about new console experience, and adjusted rule priority explanations
Security assessment
The changes introduce 'protection packs' as a new organizational structure for security rules and update console references. While WAF is security-related, there's no evidence this addresses a specific vulnerability. The updates appear to document expanded functionality rather than fix security flaws.
Diff
diff --git a/waf/latest/developerguide/web-acl-processing-order.md b/waf/latest/developerguide/web-acl-processing-order.md index 89e65dacd..da080e2b1 100644 --- a//waf/latest/developerguide/web-acl-processing-order.md +++ b//waf/latest/developerguide/web-acl-processing-order.md @@ -5 +5,5 @@ -# Setting rule priority in a web ACL +**Introducing a new console experience for AWS WAF** + +You can now use the updated experience to access AWS WAF functionality anywhere in the console. For more details, see [Working with the updated console experience](./working-with-console.html). + +# Setting rule priority @@ -9 +13 @@ This section explains how AWS WAF uses numeric priority settings to set the eval -In a web ACL and inside any rule group, you determine the evaluation order of the rules using numeric priority settings. You must give each rule in a web ACL a unique priority setting within that web ACL, and you must give each rule in a rule group a unique priority setting within that rule group. +In a protection pack or web ACL and inside any rule group, you determine the evaluation order of the rules using numeric priority settings. You must give each rule in a protection pack or web ACL a unique priority setting within that protection pack or web ACL, and you must give each rule in a rule group a unique priority setting within that rule group. @@ -13 +17 @@ In a web ACL and inside any rule group, you determine the evaluation order of th -When you manage rule groups and web ACLs through the console, AWS WAF assigns unique numeric priority settings for you based on the order of the rules in the list. AWS WAF assigns the lowest numeric priority to the rule at the top of the list, and the highest numeric priority to the rule at the bottom. +When you manage rule groups, protection pack or web ACLs through the console, AWS WAF assigns unique numeric priority settings for you based on the order of the rules in the list. AWS WAF assigns the lowest numeric priority to the rule at the top of the list, and the highest numeric priority to the rule at the bottom. @@ -15 +19 @@ When you manage rule groups and web ACLs through the console, AWS WAF assigns un -When AWS WAF evaluates any web ACL or rule group against a web request, it evaluates the rules from the lowest numeric priority setting on up until it either finds a match that terminates the evaluation or exhausts all of the rules. +When AWS WAF evaluates any rule group, protection pack or web ACL against a web request, it evaluates the rules from the lowest numeric priority setting on up until it either finds a match that terminates the evaluation or exhausts all of the rules. @@ -17 +21 @@ When AWS WAF evaluates any web ACL or rule group against a web request, it evalu -For example, say you have the following rules and rule groups in your web ACL, prioritized as shown: +For example, say you have the following rules and rule groups in your protection pack, prioritized as shown: @@ -38 +42 @@ For example, say you have the following rules and rule groups in your web ACL, p -AWS WAF would evaluate the rules for this web ACL in the following order: +AWS WAF would evaluate the rules for this protection pack in the following order: @@ -61 +65 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Using web ACLs with rules and rule groups +Using protection pack or web ACLs with rules and rule groups @@ -63 +67 @@ Using web ACLs with rules and rule groups -Rule and rule group actions in a web ACL +Rule and rule group actions