AWS waf documentation change
Summary
Updated terminology from 'protection pack or web ACL' to 'protection pack (web ACL)' throughout the document for consistency
Security assessment
Changes are purely terminological clarifications without addressing security vulnerabilities or introducing new security features. The updates standardize references to web ACLs but don't alter security guidance or reveal new security considerations.
Diff
diff --git a/waf/latest/developerguide/waf-rule-group-editing.md b/waf/latest/developerguide/waf-rule-group-editing.md index b4452d255..8993fd179 100644 --- a//waf/latest/developerguide/waf-rule-group-editing.md +++ b//waf/latest/developerguide/waf-rule-group-editing.md @@ -15 +15 @@ To add or remove rules from a rule group or change configuration settings, acces -If you change a rule group that you're currently using in a protection pack or web ACL, those changes will affect your protection pack or web ACL behavior wherever it's being used. Be sure to test and tune all changes in a staging or testing environment until you are comfortable with the potential impact to your traffic. Then test and tune your updated rules in count mode with your production traffic before enabling them. For guidance, see [Testing and tuning your AWS WAF protections](./web-acl-testing.html). +If you change a rule group that you're currently using in a protection pack (web ACL), those changes will affect your protection pack (web ACL) behavior wherever it's being used. Be sure to test and tune all changes in a staging or testing environment until you are comfortable with the potential impact to your traffic. Then test and tune your updated rules in count mode with your production traffic before enabling them. For guidance, see [Testing and tuning your AWS WAF protections](./web-acl-testing.html). @@ -33 +33 @@ If you don't see the rule group that you want to edit, check the Region selectio -If you change the name of a rule and you want the rule's metric name to reflect the change, you must update the metric name as well. AWS WAF doesn't automatically update the metric name for a rule when you change the rule name. You can change the metric name when you edit the rule in the console, by using the rule JSON editor. You can also change both names through the APIs and in any JSON listing that you use to define your protection pack or web ACL or rule group. +If you change the name of a rule and you want the rule's metric name to reflect the change, you must update the metric name as well. AWS WAF doesn't automatically update the metric name for a rule when you change the rule name. You can change the metric name when you edit the rule in the console, by using the rule JSON editor. You can also change both names through the APIs and in any JSON listing that you use to define your protection pack (web ACL) or rule group. @@ -40 +40 @@ If you change the name of a rule and you want the rule's metric name to reflect -When you create or change a protection pack or web ACL or other AWS WAF resources, the changes take a small amount of time to propagate to all areas where the resources are stored. The propagation time can be from a few seconds to a number of minutes. +When you create or change a protection pack (web ACL) or other AWS WAF resources, the changes take a small amount of time to propagate to all areas where the resources are stored. The propagation time can be from a few seconds to a number of minutes. @@ -44 +44 @@ The following are examples of the temporary inconsistencies that you might notic - * After you create a protection pack or web ACL, if you try to associate it with a resource, you might get an exception indicating that the protection pack or web ACL is unavailable. + * After you create a protection pack (web ACL), if you try to associate it with a resource, you might get an exception indicating that the protection pack (web ACL) is unavailable. @@ -46 +46 @@ The following are examples of the temporary inconsistencies that you might notic - * After you add a rule group to a protection pack or web ACL, the new rule group rules might be in effect in one area where the protection pack or web ACL is used and not in another. + * After you add a rule group to a protection pack (web ACL), the new rule group rules might be in effect in one area where the protection pack (web ACL) is used and not in another. @@ -63 +63 @@ Creating a rule group -Using your rule group in a protection pack or web ACL +Using your rule group in a protection pack (web ACL)