AWS waf documentation change
Summary
Standardized terminology by replacing 'protection pack or web ACL' with 'protection pack (web ACL)' throughout the document for consistency
Security assessment
The changes are purely terminological clarifications to improve documentation consistency. No security vulnerabilities, mitigations, or new security features are mentioned. The updates maintain existing security guidance about Bot Control deployment without altering security implications.
Diff
diff --git a/waf/latest/developerguide/waf-bot-control-deploying.md b/waf/latest/developerguide/waf-bot-control-deploying.md index c5cfb5a2a..794ac5866 100644 --- a//waf/latest/developerguide/waf-bot-control-deploying.md +++ b//waf/latest/developerguide/waf-bot-control-deploying.md @@ -23 +23 @@ Before you deploy your Bot Control implementation for production traffic, test a -This guidance is intended for users who know generally how to create and manage AWS WAF protection pack or web ACLs, rules, and rule groups. Those topics are covered in prior sections of this guide. +This guidance is intended for users who know generally how to create and manage AWS WAF protection packs (web ACLs), rules, and rule groups. Those topics are covered in prior sections of this guide. @@ -35 +35 @@ You are charged additional fees when you use this managed rule group. For more i -Add the managed AWS rule group `AWSManagedRulesBotControlRuleSet` to a new or existing protection pack or web ACL and configure it so that it doesn't alter current protection pack or web ACL behavior. +Add the managed AWS rule group `AWSManagedRulesBotControlRuleSet` to a new or existing protection pack (web ACL) and configure it so that it doesn't alter current protection pack (web ACL) behavior. @@ -55 +55 @@ With this override, you can monitor the potential impact of the Bot Control rule - * Position the rule group so that it's evaluated last in the protection pack or web ACL, with a priority setting that's numerically higher than any other rules or rule groups that you're already using. For more information, see [Setting rule priority](./web-acl-processing-order.html). + * Position the rule group so that it's evaluated last in the protection pack (web ACL), with a priority setting that's numerically higher than any other rules or rule groups that you're already using. For more information, see [Setting rule priority](./web-acl-processing-order.html). @@ -59 +59 @@ This way, your current handling of traffic isn't disrupted. For example, if you - 2. ###### Enable logging and metrics for the protection pack or web ACL + 2. ###### Enable logging and metrics for the protection pack (web ACL) @@ -61 +61 @@ This way, your current handling of traffic isn't disrupted. For example, if you -As needed, configure logging, Amazon Security Lake data collection, request sampling, and Amazon CloudWatch metrics for the protection pack or web ACL. You can use these visibility tools to monitor the interaction of the Bot Control managed rule group with your traffic. +As needed, configure logging, Amazon Security Lake data collection, request sampling, and Amazon CloudWatch metrics for the protection pack (web ACL). You can use these visibility tools to monitor the interaction of the Bot Control managed rule group with your traffic. @@ -63 +63 @@ As needed, configure logging, Amazon Security Lake data collection, request samp - * For information about logging, see [Logging AWS WAF protection pack or web ACL traffic](./logging.html). + * For information about logging, see [Logging AWS WAF protection pack (web ACL) traffic](./logging.html). @@ -71 +71 @@ As needed, configure logging, Amazon Security Lake data collection, request samp - 3. ###### Associate the protection pack or web ACL with a resource + 3. ###### Associate the protection pack (web ACL) with a resource @@ -73 +73 @@ As needed, configure logging, Amazon Security Lake data collection, request samp -If the protection pack or web ACL isn't already associated with a resource, associate it. For information, see [Associating or disassociating protection with an AWS resource](./web-acl-associating-aws-resource.html). +If the protection pack (web ACL) isn't already associated with a resource, associate it. For information, see [Associating or disassociating protection with an AWS resource](./web-acl-associating-aws-resource.html). @@ -117 +117 @@ For additional examples, see [AWS WAF Bot Control examples](./waf-bot-control-ex -Depending on your situation, you might have decided that you want to leave some Bot Control rules in count mode or with a different action override. For the rules that you want to have run as they are configured inside the rule group, enable the regular rule configuration. To do this, edit the rule group statement in your protection pack or web ACL and make your changes in the **Rules** pane. +Depending on your situation, you might have decided that you want to leave some Bot Control rules in count mode or with a different action override. For the rules that you want to have run as they are configured inside the rule group, enable the regular rule configuration. To do this, edit the rule group statement in your protection pack (web ACL) and make your changes in the **Rules** pane.