AWS waf documentation change
Summary
Updated terminology from 'protection pack or web ACL' to 'protection pack (web ACL)' throughout the document to clarify relationship between concepts
Security assessment
The changes are purely terminological clarifications (changing 'or' to parentheses) to emphasize that a protection pack is a type of web ACL. No specific security vulnerabilities, mitigations, or new security features are mentioned in the diff. The existing security recommendations about using AWS Managed Rules remain unchanged.
Diff
diff --git a/waf/latest/developerguide/waf-migrating-procedure-additional.md b/waf/latest/developerguide/waf-migrating-procedure-additional.md index 0e98c0aa5..cbb279ca1 100644 --- a//waf/latest/developerguide/waf-migrating-procedure-additional.md +++ b//waf/latest/developerguide/waf-migrating-procedure-additional.md @@ -9 +9 @@ You can now use the updated experience to access AWS WAF functionality anywhere -# Migrating a protection pack or web ACL: additional considerations +# Migrating a protection pack (web ACL): additional considerations @@ -11 +11 @@ You can now use the updated experience to access AWS WAF functionality anywhere -Review your new protection pack or web ACL and consider the options available to you in the new AWS WAF to be sure that the configuration is as efficient as possible and that it's using the latest available security options. +Review your new protection pack (web ACL) and consider the options available to you in the new AWS WAF to be sure that the configuration is as efficient as possible and that it's using the latest available security options. @@ -15 +15 @@ Review your new protection pack or web ACL and consider the options available to -Consider implementing additional AWS Managed Rules in your protection pack or web ACL to increase the security posture for your application. These are included with AWS WAF at no additional cost. AWS Managed Rules feature the following types of rule groups: +Consider implementing additional AWS Managed Rules in your protection pack (web ACL) to increase the security posture for your application. These are included with AWS WAF at no additional cost. AWS Managed Rules feature the following types of rule groups: @@ -42 +42 @@ Work with your application team and check your security posture. Find out what f -Plan the timing of the switch with your application team. The switch from the old protection pack or web ACL association to the new one can take a small amount of time to propagate to all areas where your resources are stored. The propagation time can be from a few seconds to a number of minutes. During this time, some requests will be processed by the old protection pack or web ACL and others will be processed by the new protection pack or web ACL. Your resources will be protected throughout the switch, but you might notice inconsistencies in request handling while the switch is underway. +Plan the timing of the switch with your application team. The switch from the old protection pack (web ACL) association to the new one can take a small amount of time to propagate to all areas where your resources are stored. The propagation time can be from a few seconds to a number of minutes. During this time, some requests will be processed by the old protection pack (web ACL) and others will be processed by the new protection pack (web ACL). Your resources will be protected throughout the switch, but you might notice inconsistencies in request handling while the switch is underway. @@ -44 +44 @@ Plan the timing of the switch with your application team. The switch from the ol -When you are ready to switch over, follow the procedure at [Migrating a protection pack or web ACL: switchover](./waf-migrating-procedure-switchover.html). +When you are ready to switch over, follow the procedure at [Migrating a protection pack (web ACL): switchover](./waf-migrating-procedure-switchover.html).