AWS waf documentation change
Summary
Updated documentation to introduce new console experience and expand references from 'web ACL' to include 'protection pack' throughout. Added detailed procedural steps for managing rule groups in protection packs.
Security assessment
The changes primarily focus on UI updates (new console experience) and terminology expansion to include 'protection pack' alongside web ACL. No specific security vulnerabilities, mitigations, or security feature enhancements are mentioned. The procedural updates relate to general configuration rather than addressing security flaws or introducing new security capabilities.
Diff
diff --git a/waf/latest/developerguide/web-acl-rule-group-settings.md b/waf/latest/developerguide/web-acl-rule-group-settings.md index b140abacd..d42a81cf4 100644 --- a//waf/latest/developerguide/web-acl-rule-group-settings.md +++ b//waf/latest/developerguide/web-acl-rule-group-settings.md @@ -7 +7 @@ Overriding rule actions in a rule groupOverriding a rule group's evaluation resu -# Managing rule group behavior in a web ACL +**Introducing a new console experience for AWS WAF** @@ -9 +9,5 @@ Overriding rule actions in a rule groupOverriding a rule group's evaluation resu -This section describes your options for modifying how you use a rule group in your web ACL. This information applies to all rule group types. After you add a rule group to a web ACL, you can override the actions of the individual rules in the rule group to Count or to any other valid rule action setting. You can also override the rule group's resulting action to Count, which has no effect on how the rules are evaluated inside the rule group. +You can now use the updated experience to access AWS WAF functionality anywhere in the console. For more details, see [Working with the updated console experience](./working-with-console.html). + +# Managing rule group behavior + +This section describes your options for modifying how you use a rule group in your protection pack or web ACL. This information applies to all rule group types. After you add a rule group to a protection pack or web ACL, you can override the actions of the individual rules in the rule group to Count or to any other valid rule action setting. You can also override the rule group's resulting action to Count, which has no effect on how the rules are evaluated inside the rule group. @@ -15 +19 @@ For information about these options, see [Overriding rule group actions in AWS W -For each rule group in a web ACL, you can override the contained rule's actions for some or all of the rules. +For each rule group in a protection pack or web ACL, you can override the contained rule's actions for some or all of the rules. @@ -18,0 +23,5 @@ The most common use case for this is overriding the rule actions to Count to tes +You can make these changes when you're adding a managed rule group to the protection pack or web ACL, and you can make them to any type of rule group when you edit the protection pack or web ACL. These instructions are for a rule group that has already been added to the protection pack or web ACL. See additional information about this option at [Rule group rule action overrides](./web-acl-rule-group-override-options.html#web-acl-rule-group-override-options-rules). + +protection pack + + @@ -21 +30,21 @@ The most common use case for this is overriding the rule actions to Count to tes -You can make these changes when you're adding a managed rule group to the web ACL, and you can make them to any type of rule group when you edit the web ACL. These instructions are for a rule group that has already been added to the web ACL. See additional information about this option at [Rule group rule action overrides](./web-acl-rule-group-override-options.html#web-acl-rule-group-override-options-rules). + 1. Choose the protection pack that you want to edit. The console makes the main protection pack card editable, and also opens a side panel with details you can edit. + + 2. In the protection pack card, choose the **Edit** link next to **Rules** to open the **Manage rules** panel. + + 3. In the **Manage rules** section for the rule group, choose the managed rule to open its action settings. + + * **Override rule group** – Changes the rule group action to Count mode but keeps all individual rule actions unchanged. + + * **Override all rule actions** – Applies a rule action to all rules, overriding their current state. + + * **Single rule override** – Applies a rule action to an individual rule. + + 4. When you are finished making your changes, choose **Save rule**. + + + + +web ACL + + +###### To override rule actions in a rule group @@ -38 +67 @@ You can make these changes when you're adding a managed rule group to the web AC -The following example JSON listing shows a rule group declaration inside a web ACL that overrides the rule actions to Count for the rules `CategoryVerifiedSearchEngine` and `CategoryVerifiedSocialMedia`. In the JSON, you override all rule actions by providing a `RuleActionOverrides` entry for each individual rule. +The following example JSON listing shows a rule group declaration inside a protection pack or web ACL that overrides the rule actions to Count for the rules `CategoryVerifiedSearchEngine` and `CategoryVerifiedSocialMedia`. In the JSON, you override all rule actions by providing a `RuleActionOverrides` entry for each individual rule. @@ -79 +108 @@ This is an uncommon use case. Most action overrides are done at the rule level, -You can override the rule group's resulting action in the web ACL when you add or edit the rule group. In the console, open the rule group's **Override rule group action - optional** pane and enable the override. In the JSON set `OverrideAction` in the rule group statement, as shown in the following example listing: +You can override the rule group's resulting action in the protection pack or web ACL when you add or edit the rule group. In the console, open the rule group's **Override rule group action - optional** pane and enable the override. In the JSON set `OverrideAction` in the rule group statement, as shown in the following example listing: @@ -107 +136 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Editing a web ACL +Editing a protection pack or web ACL @@ -109 +138 @@ Editing a web ACL -Associating or disassociating a web ACL with an AWS resource +Associating or disassociating protection with an AWS resource