AWS waf documentation change
Summary
Standardized references to 'protection pack (web ACL)' instead of 'protection pack or web ACL' in label match context explanations
Security assessment
These changes refine documentation phrasing to emphasize that protection packs are web ACLs, without altering security functionality or addressing vulnerabilities. The updates maintain existing security concepts rather than introducing new ones.
Diff
diff --git a/waf/latest/developerguide/waf-rule-label-match.md b/waf/latest/developerguide/waf-rule-label-match.md index abcfea3b0..087d44b84 100644 --- a//waf/latest/developerguide/waf-rule-label-match.md +++ b//waf/latest/developerguide/waf-rule-label-match.md @@ -13 +13 @@ This section explains how to use a label match statement to evaluate web request -A label's prefix defines the context of the rule group or protection pack or web ACL where the label's rule is defined. In a rule's label match statement, if your label or namespace match string doesn't specify the prefix, AWS WAF uses the prefix for the label match rule. +A label's prefix defines the context of the rule group or protection pack (web ACL) where the label's rule is defined. In a rule's label match statement, if your label or namespace match string doesn't specify the prefix, AWS WAF uses the prefix for the label match rule. @@ -15 +15 @@ A label's prefix defines the context of the rule group or protection pack or web - * Labels for rules that are defined directly inside a protection pack or web ACL have a prefix that specifies the protection pack or web ACL context. + * Labels for rules that are defined directly inside a protection pack (web ACL) have a prefix that specifies the protection pack (web ACL) context. @@ -28 +28 @@ Some managed rule groups add labels. You can retrieve these through the API by c -If you want to match against a rule that's in a different context than the context of your rule, you must provide the prefix in your match string. For example, if you want to match against labels that are added by rules in a managed rule group, you could add a rule in your protection pack or web ACL with a label match statement whose match string specifies the rule group's prefix followed by your additional match criteria. +If you want to match against a rule that's in a different context than the context of your rule, you must provide the prefix in your match string. For example, if you want to match against labels that are added by rules in a managed rule group, you could add a rule in your protection pack (web ACL) with a label match statement whose match string specifies the rule group's prefix followed by your additional match criteria.