AWS waf documentation change
Summary
Updated terminology from 'protection pack or web ACL' to 'protection pack (web ACL)' and added console navigation instructions. Added distinction between 'Using the new console' and 'Using the standard console' in procedural steps.
Security assessment
The changes primarily focus on terminology standardization and user interface navigation guidance. There is no evidence of addressing security vulnerabilities, patching weaknesses, or introducing new security controls. The modifications clarify existing functionality (rule action overrides) but do not alter security implications of the documented features.
Diff
diff --git a/waf/latest/developerguide/web-acl-rule-group-settings.md b/waf/latest/developerguide/web-acl-rule-group-settings.md index d42a81cf4..dcbd96bab 100644 --- a//waf/latest/developerguide/web-acl-rule-group-settings.md +++ b//waf/latest/developerguide/web-acl-rule-group-settings.md @@ -13 +13 @@ You can now use the updated experience to access AWS WAF functionality anywhere -This section describes your options for modifying how you use a rule group in your protection pack or web ACL. This information applies to all rule group types. After you add a rule group to a protection pack or web ACL, you can override the actions of the individual rules in the rule group to Count or to any other valid rule action setting. You can also override the rule group's resulting action to Count, which has no effect on how the rules are evaluated inside the rule group. +This section describes your options for modifying how you use a rule group in your protection pack (web ACL). This information applies to all rule group types. After you add a rule group to a protection pack (web ACL), you can override the actions of the individual rules in the rule group to Count or to any other valid rule action setting. You can also override the rule group's resulting action to Count, which has no effect on how the rules are evaluated inside the rule group. @@ -19 +19 @@ For information about these options, see [Overriding rule group actions in AWS W -For each rule group in a protection pack or web ACL, you can override the contained rule's actions for some or all of the rules. +For each rule group in a protection pack (web ACL), you can override the contained rule's actions for some or all of the rules. @@ -23 +23 @@ The most common use case for this is overriding the rule actions to Count to tes -You can make these changes when you're adding a managed rule group to the protection pack or web ACL, and you can make them to any type of rule group when you edit the protection pack or web ACL. These instructions are for a rule group that has already been added to the protection pack or web ACL. See additional information about this option at [Rule group rule action overrides](./web-acl-rule-group-override-options.html#web-acl-rule-group-override-options-rules). +You can make these changes when you're adding a managed rule group to the protection pack (web ACL), and you can make them to any type of rule group when you edit the protection pack (web ACL). These instructions are for a rule group that has already been added to the protection pack (web ACL). See additional information about this option at [Rule group rule action overrides](./web-acl-rule-group-override-options.html#web-acl-rule-group-override-options-rules). @@ -25 +25 @@ You can make these changes when you're adding a managed rule group to the protec -protection pack +Using the new console @@ -30 +30 @@ protection pack - 1. Choose the protection pack that you want to edit. The console makes the main protection pack card editable, and also opens a side panel with details you can edit. + 1. Choose the protection pack (web ACL) that you want to edit. The console makes the main protection pack (web ACL) card editable, and also opens a side panel with details you can edit. @@ -32 +32 @@ protection pack - 2. In the protection pack card, choose the **Edit** link next to **Rules** to open the **Manage rules** panel. + 2. In the protection pack (web ACL) card, choose the **Edit** link next to **Rules** to open the **Manage rules** panel. @@ -47 +47 @@ protection pack -web ACL +Using the standard console @@ -67 +67 @@ web ACL -The following example JSON listing shows a rule group declaration inside a protection pack or web ACL that overrides the rule actions to Count for the rules `CategoryVerifiedSearchEngine` and `CategoryVerifiedSocialMedia`. In the JSON, you override all rule actions by providing a `RuleActionOverrides` entry for each individual rule. +The following example JSON listing shows a rule group declaration inside a protection pack (web ACL) that overrides the rule actions to Count for the rules `CategoryVerifiedSearchEngine` and `CategoryVerifiedSocialMedia`. In the JSON, you override all rule actions by providing a `RuleActionOverrides` entry for each individual rule. @@ -108 +108 @@ This is an uncommon use case. Most action overrides are done at the rule level, -You can override the rule group's resulting action in the protection pack or web ACL when you add or edit the rule group. In the console, open the rule group's **Override rule group action - optional** pane and enable the override. In the JSON set `OverrideAction` in the rule group statement, as shown in the following example listing: +You can override the rule group's resulting action in the protection pack (web ACL) when you add or edit the rule group. In the console, open the rule group's **Override rule group action - optional** pane and enable the override. In the JSON set `OverrideAction` in the rule group statement, as shown in the following example listing: @@ -136 +136 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Editing a protection pack or web ACL +Editing a protection pack (web ACL)