AWS waf documentation change
Summary
Replaced 'protection pack or web ACL' with 'protection pack (web ACL)' in a paragraph about CAPTCHA configuration
Security assessment
Terminology update only. The change does not alter security guidance or introduce new security-related content. The existing security recommendation about using Challenge/CAPTCHA actions remains unchanged.
Diff
diff --git a/waf/latest/developerguide/waf-atp-with-tokens.md b/waf/latest/developerguide/waf-atp-with-tokens.md index b2f6dd7c6..36faf60e2 100644 --- a//waf/latest/developerguide/waf-atp-with-tokens.md +++ b//waf/latest/developerguide/waf-atp-with-tokens.md @@ -15 +15 @@ The ATP managed rule group requires the challenge tokens that the application in -We highly recommend implementing the application integration SDKs, for the most effective use of the ATP rule group. The challenge script must run before the ATP rule group in order for the rule group to benefit from the tokens that the script acquires. This happens automatically with the application integration SDKs. If you are unable to use the SDKs, you can alternately configure your protection pack or web ACL so that it runs the Challenge or CAPTCHA rule action against all requests that will be inspected by the ATP rule group. Using the Challenge or CAPTCHA rule action can incur additional fees. For pricing details, see [AWS WAF Pricing](https://aws.amazon.com/waf/pricing/). +We highly recommend implementing the application integration SDKs, for the most effective use of the ATP rule group. The challenge script must run before the ATP rule group in order for the rule group to benefit from the tokens that the script acquires. This happens automatically with the application integration SDKs. If you are unable to use the SDKs, you can alternately configure your protection pack (web ACL) so that it runs the Challenge or CAPTCHA rule action against all requests that will be inspected by the ATP rule group. Using the Challenge or CAPTCHA rule action can incur additional fees. For pricing details, see [AWS WAF Pricing](https://aws.amazon.com/waf/pricing/).