AWS waf documentation change
Summary
Updated terminology from 'protection pack or web ACL' to 'protection pack (web ACL)' throughout the document, clarifying that protection packs are web ACLs.
Security assessment
The changes are purely terminological clarifications to improve documentation consistency. There is no mention of security vulnerabilities, mitigations, or new security features. The updates focus on logging configuration requirements and permissions, which are operational rather than security-specific.
Diff
diff --git a/waf/latest/developerguide/logging-kinesis.md b/waf/latest/developerguide/logging-kinesis.md index c23f15085..5aabd90ad 100644 --- a//waf/latest/developerguide/logging-kinesis.md +++ b//waf/latest/developerguide/logging-kinesis.md @@ -11 +11 @@ You can now use the updated experience to access AWS WAF functionality anywhere -# Sending protection pack or web ACL traffic logs to an Amazon Data Firehose delivery stream +# Sending protection pack (web ACL) traffic logs to an Amazon Data Firehose delivery stream @@ -13 +13 @@ You can now use the updated experience to access AWS WAF functionality anywhere -This section provides information for sending your protection pack or web ACL traffic logs to an Amazon Data Firehose delivery stream. +This section provides information for sending your protection pack (web ACL) traffic logs to an Amazon Data Firehose delivery stream. @@ -17 +17 @@ This section provides information for sending your protection pack or web ACL tr -You are charged for logging in addition to the charges for using AWS WAF. For information, see [Pricing for logging protection pack or web ACL traffic information](./logging-pricing.html). +You are charged for logging in addition to the charges for using AWS WAF. For information, see [Pricing for logging protection pack (web ACL) traffic information](./logging-pricing.html). @@ -19 +19 @@ You are charged for logging in addition to the charges for using AWS WAF. For in -To send logs to Amazon Data Firehose, you send logs from your protection pack or web ACL to an Amazon Data Firehose delivery stream which you configure in Firehose. After you enable logging, AWS WAF delivers logs to your storage destination through the HTTPS endpoint of Firehose. +To send logs to Amazon Data Firehose, you send logs from your protection pack (web ACL) to an Amazon Data Firehose delivery stream which you configure in Firehose. After you enable logging, AWS WAF delivers logs to your storage destination through the HTTPS endpoint of Firehose. @@ -27 +27 @@ For information about creating your delivery stream, see [Creating an Amazon Dat -## Configuring an Amazon Data Firehose delivery stream for your protection pack or web ACL +## Configuring an Amazon Data Firehose delivery stream for your protection pack (web ACL) @@ -29 +29 @@ For information about creating your delivery stream, see [Creating an Amazon Dat -Configure an Amazon Data Firehose delivery stream for your protection pack or web ACL as follows. +Configure an Amazon Data Firehose delivery stream for your protection pack (web ACL) as follows. @@ -31 +31 @@ Configure an Amazon Data Firehose delivery stream for your protection pack or we - * Create it using the same account as you use to manage the protection pack or web ACL. + * Create it using the same account as you use to manage the protection pack (web ACL). @@ -33 +33 @@ Configure an Amazon Data Firehose delivery stream for your protection pack or we - * Create it in the same Region as the protection pack or web ACL. If you are capturing logs for Amazon CloudFront, create the firehose in US East (N. Virginia) Region, `us-east-1`. + * Create it in the same Region as the protection pack (web ACL). If you are capturing logs for Amazon CloudFront, create the firehose in US East (N. Virginia) Region, `us-east-1`. @@ -50 +50 @@ To understand the permissions required for your Kinesis Data Firehose configurat -You must have the following permissions to successfully enable protection pack or web ACL logging with an Amazon Data Firehose delivery stream. +You must have the following permissions to successfully enable protection pack (web ACL) logging with an Amazon Data Firehose delivery stream.