AWS Security ChangesHomeSearch

AWS waf documentation change

Service: waf · 2025-08-22 · Documentation low

File: waf/latest/developerguide/waf-rule-label-requirements.md

Summary

Clarified terminology by replacing 'protection pack or web ACL' with 'protection pack (web ACL)' in multiple places to indicate web ACL context

Security assessment

The changes are documentation clarifications about label structure terminology rather than addressing security vulnerabilities or introducing security features. No evidence of security incident remediation or vulnerability disclosure in the diff.

Diff

diff --git a/waf/latest/developerguide/waf-rule-label-requirements.md b/waf/latest/developerguide/waf-rule-label-requirements.md
index 02621b18f..f4b7fd098 100644
--- a//waf/latest/developerguide/waf-rule-label-requirements.md
+++ b//waf/latest/developerguide/waf-rule-label-requirements.md
@@ -32 +32 @@ A label is a string made up of a prefix, optional namespaces, and a name. The co
-A fully qualified label has a prefix, optional namespaces, and label name. The prefix identifies the rule group or protection pack or web ACL context of the rule that added the label. Namespaces might be used to add more context for the label. The label name provides the lowest level of detail for a label. It often indicates the specific rule that added the label to the request. 
+A fully qualified label has a prefix, optional namespaces, and label name. The prefix identifies the rule group or protection pack (web ACL) context of the rule that added the label. Namespaces might be used to add more context for the label. The label name provides the lowest level of detail for a label. It often indicates the specific rule that added the label to the request. 
@@ -36 +36 @@ The label prefix varies depending on its origin.
-  * **Your labels** – The following shows the full label syntax for labels that you create in your protection pack or web ACL and rule group rules. The entity types are `rulegroup` and `webacl`.
+  * **Your labels** – The following shows the full label syntax for labels that you create in your protection pack (web ACL) and rule group rules. The entity types are `rulegroup` and `webacl`.
@@ -44 +44 @@ The label prefix varies depending on its origin.
-When you define a label for a rule in a rule group or protection pack or web ACL, you control the custom namespace strings and the label name. The rest is generated for you by AWS WAF. AWS WAF automatically prefixes all labels with `awswaf` and the account and protection pack or web ACL or rule group entity settings.
+When you define a label for a rule in a rule group or protection pack (web ACL), you control the custom namespace strings and the label name. The rest is generated for you by AWS WAF. AWS WAF automatically prefixes all labels with `awswaf` and the account and protection pack (web ACL) or rule group entity settings.