AWS Security ChangesHomeSearch

AWS waf documentation change

Service: waf · 2025-08-22 · Documentation low

File: waf/latest/developerguide/ddos-automatic-app-layer-response.md

Summary

Updated terminology from 'protection pack or web ACLs' to 'protection packs (web ACLs)' in multiple sections to clarify relationship between protection packs and web ACLs

Security assessment

Changes appear to be terminology clarification rather than addressing security vulnerabilities. No mention of vulnerabilities, exploits, or security incidents. Updates focus on consistent naming conventions.

Diff

diff --git a/waf/latest/developerguide/ddos-automatic-app-layer-response.md b/waf/latest/developerguide/ddos-automatic-app-layer-response.md
index d0fed2b7e..64aaa79a8 100644
--- a//waf/latest/developerguide/ddos-automatic-app-layer-response.md
+++ b//waf/latest/developerguide/ddos-automatic-app-layer-response.md
@@ -25 +25 @@ The following list describes the caveats of Shield Advanced automatic applicatio
-  * Automatic application layer DDoS mitigation works only with protection pack or web ACLs that were created using the latest version of AWS WAF (v2). 
+  * Automatic application layer DDoS mitigation works only with protection packs (web ACLs) that were created using the latest version of AWS WAF (v2). 
@@ -29 +29 @@ The following list describes the caveats of Shield Advanced automatic applicatio
-  * Enabling automatic application layer DDoS mitigation adds a rule group to your protection pack or web ACL that uses 150 web ACL capacity units (WCUs). These WCUs count against the WCU usage in your protection pack or web ACL. For more information, see [Protecting the application layer with the Shield Advanced rule group](./ddos-automatic-app-layer-response-rg.html), and [Web ACL capacity units (WCUs) in AWS WAF](./aws-waf-capacity-units.html).
+  * Enabling automatic application layer DDoS mitigation adds a rule group to your protection pack (web ACL) that uses 150 web ACL capacity units (WCUs). These WCUs count against the WCU usage in your protection pack (web ACL). For more information, see [Protecting the application layer with the Shield Advanced rule group](./ddos-automatic-app-layer-response-rg.html), and [Web ACL capacity units (WCUs) in AWS WAF](./aws-waf-capacity-units.html).
@@ -31 +31 @@ The following list describes the caveats of Shield Advanced automatic applicatio
-  * The Shield Advanced rule group generates AWS WAF metrics, but they are not available to view. This is the same as for any other rule groups that you use in your protection pack or web ACL but do not own, such as AWS Managed Rules rule groups. For more information about AWS WAF metrics, see [AWS WAF metrics and dimensions](./waf-metrics.html). For information about this Shield Advanced protection option, see [Automating application layer DDoS mitigation with Shield Advanced ](./ddos-automatic-app-layer-response.html). 
+  * The Shield Advanced rule group generates AWS WAF metrics, but they are not available to view. This is the same as for any other rule groups that you use in your protection pack (web ACL) but do not own, such as AWS Managed Rules rule groups. For more information about AWS WAF metrics, see [AWS WAF metrics and dimensions](./waf-metrics.html). For information about this Shield Advanced protection option, see [Automating application layer DDoS mitigation with Shield Advanced ](./ddos-automatic-app-layer-response.html).