AWS waf documentation change
Summary
Updated terminology to consistently use 'protection pack (web ACL)' instead of 'protection pack or web ACL' throughout the document
Security assessment
The changes are purely terminological clarifications to align documentation with product naming conventions. There is no evidence of addressing a security vulnerability or weakness, nor any new security features being documented. The updates maintain existing security guidance without altering functionality.
Diff
diff --git a/waf/latest/developerguide/how-aws-waf-works-resources.md b/waf/latest/developerguide/how-aws-waf-works-resources.md index 316116b20..29629f348 100644 --- a//waf/latest/developerguide/how-aws-waf-works-resources.md +++ b//waf/latest/developerguide/how-aws-waf-works-resources.md @@ -11 +11 @@ You can now use the updated experience to access AWS WAF functionality anywhere -You can use an AWS WAF protection pack or web ACL to protect global or regional resource types. You do this by associating the protection pack or web ACL with the resources that you want to protect. The protection pack or web ACL and any AWS WAF resources that it uses must be located in the Region where the associated resource is located. For Amazon CloudFront distributions, this is set to US East (N. Virginia). +You can use an AWS WAF protection pack (web ACL) to protect global or regional resource types. You do this by associating the protection pack (web ACL) with the resources that you want to protect. The protection pack (web ACL) and any AWS WAF resources that it uses must be located in the Region where the associated resource is located. For Amazon CloudFront distributions, this is set to US East (N. Virginia). @@ -15 +15 @@ You can use an AWS WAF protection pack or web ACL to protect global or regional -You can associate an AWS WAF protection pack or web ACL with a CloudFront distribution using the AWS WAF console or APIs. You can also associate a protection pack or web ACL with a CloudFront distribution when you create or update the distribution itself. To configure an association in AWS CloudFormation, you must use the CloudFront distribution configuration. For information about Amazon CloudFront, see [Using AWS WAF to Control Access to Your Content](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-awswaf.html) in the _Amazon CloudFront Developer Guide_. +You can associate an AWS WAF protection pack (web ACL) with a CloudFront distribution using the AWS WAF console or APIs. You can also associate a protection pack (web ACL) with a CloudFront distribution when you create or update the distribution itself. To configure an association in AWS CloudFormation, you must use the CloudFront distribution configuration. For information about Amazon CloudFront, see [Using AWS WAF to Control Access to Your Content](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-awswaf.html) in the _Amazon CloudFront Developer Guide_. @@ -17 +17 @@ You can associate an AWS WAF protection pack or web ACL with a CloudFront distri -AWS WAF is available globally for CloudFront distributions, but you must use the Region US East (N. Virginia) to create your protection pack or web ACL and any resources used in the protection pack or web ACL, such as rule groups, IP sets, and regex pattern sets. Some interfaces offer a region choice of "Global (CloudFront)". Choosing this is identical to choosing Region US East (N. Virginia) or "us-east-1". +AWS WAF is available globally for CloudFront distributions, but you must use the Region US East (N. Virginia) to create your protection pack (web ACL) and any resources used in the protection pack (web ACL), such as rule groups, IP sets, and regex pattern sets. Some interfaces offer a region choice of "Global (CloudFront)". Choosing this is identical to choosing Region US East (N. Virginia) or "us-east-1". @@ -42 +42 @@ You can use AWS WAF to protect the following regional resource types: -You can only associate a protection pack or web ACL to an Application Load Balancer that's within AWS Regions. For example, you cannot associate a protection pack or web ACL to an Application Load Balancer that's on AWS Outposts. +You can only associate a protection pack (web ACL) to an Application Load Balancer that's within AWS Regions. For example, you cannot associate a protection pack (web ACL) to an Application Load Balancer that's on AWS Outposts. @@ -44 +44 @@ You can only associate a protection pack or web ACL to an Application Load Balan -You must create any protection pack or web ACL that you want to associate with an Amplify app in the Global CloudFront Region. You might already have a Regional protection pack or web ACL in your AWS account, but they are not compatible with Amplify. +You must create any protection pack (web ACL) that you want to associate with an Amplify app in the Global CloudFront Region. You might already have a Regional protection pack (web ACL) in your AWS account, but they are not compatible with Amplify. @@ -46 +46 @@ You must create any protection pack or web ACL that you want to associate with a -The protection pack or web ACL and any other AWS WAF resources that it uses must be located in the same Region as the protected resources. When monitoring and managing web requests for a protected regional resource, AWS WAF keeps all data in the same Region as the protected resource. +The protection pack (web ACL) and any other AWS WAF resources that it uses must be located in the same Region as the protected resources. When monitoring and managing web requests for a protected regional resource, AWS WAF keeps all data in the same Region as the protected resource. @@ -50 +50 @@ The protection pack or web ACL and any other AWS WAF resources that it uses must -You can associate a single protection pack or web ACL with one or more AWS resources, with the following restrictions: +You can associate a single protection pack (web ACL) with one or more AWS resources, with the following restrictions: @@ -52 +52 @@ You can associate a single protection pack or web ACL with one or more AWS resou - * You can associate each AWS resource with only one protection pack or web ACL. The relationship between protection pack or web ACL and AWS resources is one-to-many. + * You can associate each AWS resource with only one protection pack (web ACL). The relationship between protection pack (web ACL) and AWS resources is one-to-many. @@ -54 +54 @@ You can associate a single protection pack or web ACL with one or more AWS resou - * You can associate a protection pack or web ACL with one or more CloudFront distributions. You cannot associate a protection pack or web ACL that you have associated with a CloudFront distribution with any other AWS resource type. + * You can associate a protection pack (web ACL) with one or more CloudFront distributions. You cannot associate a protection pack (web ACL) that you have associated with a CloudFront distribution with any other AWS resource type.