AWS waf documentation change
Summary
Updated documentation to include references to 'protection packs' alongside web ACLs throughout the metrics monitoring guide, and added a section about the new console experience
Security assessment
The changes introduce documentation for 'protection packs' which appears to be a new security-oriented feature (likely predefined security configurations). While this adds documentation about security capabilities, there's no evidence of addressing a specific security vulnerability or incident.
Diff
diff --git a/waf/latest/developerguide/web-acl-testing-view-metrics.md b/waf/latest/developerguide/web-acl-testing-view-metrics.md index e9780732c..86b892d21 100644 --- a//waf/latest/developerguide/web-acl-testing-view-metrics.md +++ b//waf/latest/developerguide/web-acl-testing-view-metrics.md @@ -4,0 +5,4 @@ +**Introducing a new console experience for AWS WAF** + +You can now use the updated experience to access AWS WAF functionality anywhere in the console. For more details, see [Working with the updated console experience](./working-with-console.html). + @@ -7 +11 @@ -This section describes how to view metrics for your web ACL. +This section describes how to view metrics for your protection pack or web ACL. @@ -9 +13 @@ This section describes how to view metrics for your web ACL. -After you've associated a web ACL with one or more AWS resources, you can view the resulting metrics for the association in an Amazon CloudWatch graph. +After you've associated a protection pack or web ACL with one or more AWS resources, you can view the resulting metrics for the association in an Amazon CloudWatch graph. @@ -13 +17 @@ For information about AWS WAF metrics, see [AWS WAF metrics and dimensions](./wa -For each of your rules in a web ACL and for all the requests that an associated resource forwards to AWS WAF for a web ACL, CloudWatch lets you do the following: +For each of your rules in a protection pack or web ACL and for all the requests that an associated resource forwards to AWS WAF for a protection pack or web ACL, CloudWatch lets you do the following: @@ -28 +32 @@ AWS WAF with CloudFront is a global service and metrics are available only when -###### To view data for the rules in a web ACL +###### To view data for the rules in a protection pack or web ACL @@ -36 +40 @@ AWS WAF with CloudFront is a global service and metrics are available only when - 4. Select the check box for the web ACL that you want to view data for. + 4. Select the check box for the protection pack or web ACL that you want to view data for. @@ -62 +66 @@ Choose the rules for which you want to view data. -If you change the name of a rule and you want the rule's metric name to reflect the change, you must update the metric name as well. AWS WAF doesn't automatically update the metric name for a rule when you change the rule name. You can change the metric name when you edit the rule in the console, by using the rule JSON editor. You can also change both names through the APIs and in any JSON listing that you use to define your web ACL or rule group. +If you change the name of a rule and you want the rule's metric name to reflect the change, you must update the metric name as well. AWS WAF doesn't automatically update the metric name for a rule when you change the rule name. You can change the metric name when you edit the rule in the console, by using the rule JSON editor. You can also change both names through the APIs and in any JSON listing that you use to define your protection pack or web ACL or rule group. @@ -66 +70 @@ Note the following: - * If you recently associated a web ACL with an AWS resource, you might need to wait a few minutes for data to appear in the graph and for the metric for the web ACL to appear in the list of available metrics. + * If you recently associated a protection pack or web ACL with an AWS resource, you might need to wait a few minutes for data to appear in the graph and for the metric for the protection pack or web ACL to appear in the list of available metrics. @@ -68 +72 @@ Note the following: - * If you associate more than one resource with a web ACL, the CloudWatch data will include requests for all of them. + * If you associate more than one resource with a protection pack or web ACL, the CloudWatch data will include requests for all of them. @@ -87 +91 @@ Monitoring and tuning your AWS WAF protections -Web ACL traffic overview dashboards +Traffic overview dashboards for protection pack or web ACLs