AWS cli medium security documentation change
Summary
Updated AWS CLI version reference and clarified behavior of invalid rule names in WAF overrides for managed vs customer-owned rule groups
Security assessment
The change clarifies that invalid rule names in overrides are handled differently between managed and customer-owned rule groups. For managed groups, invalid rules are silently ignored (potentially leading to unintended security configurations), while customer-owned groups fail updates. This addresses potential security misconfigurations by documenting the exact behavior, helping users avoid unintended rule application.
Diff
diff --git a/cli/latest/reference/wafv2/get-web-acl.md b/cli/latest/reference/wafv2/get-web-acl.md index 3685f3601..219258f76 100644 --- a//cli/latest/reference/wafv2/get-web-acl.md +++ b//cli/latest/reference/wafv2/get-web-acl.md @@ -15 +15 @@ - * [AWS CLI 2.28.15 Command Reference](../../index.html) » + * [AWS CLI 2.28.16 Command Reference](../../index.html) » @@ -2085 +2085 @@ WebACL -> (structure) ->>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -2095 +2095 @@ WebACL -> (structure) ->>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -4414 +4414 @@ WebACL -> (structure) ->>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -4424 +4424 @@ WebACL -> (structure) ->>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -6018 +6018 @@ WebACL -> (structure) ->>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -6028 +6028 @@ WebACL -> (structure) ->>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -8501 +8501 @@ WebACL -> (structure) ->>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -8511 +8511 @@ WebACL -> (structure) ->>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -10105 +10105 @@ WebACL -> (structure) ->>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -10115 +10115 @@ WebACL -> (structure) ->>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -12367 +12367 @@ WebACL -> (structure) ->>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -12377 +12377 @@ WebACL -> (structure) ->>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -13971 +13971 @@ WebACL -> (structure) ->>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -13981 +13981 @@ WebACL -> (structure) ->>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -16227 +16227 @@ WebACL -> (structure) ->>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -16237 +16237 @@ WebACL -> (structure) ->>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -17831 +17831 @@ WebACL -> (structure) ->>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -17841 +17841 @@ WebACL -> (structure) ->>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -20125 +20125 @@ WebACL -> (structure) ->>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -20135 +20135 @@ WebACL -> (structure) ->>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -21729 +21729 @@ WebACL -> (structure) ->>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -21739 +21739 @@ WebACL -> (structure) ->>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -22967 +22967 @@ WebACL -> (structure) ->>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -22977 +22977 @@ WebACL -> (structure) ->>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -25660 +25660 @@ WebACL -> (structure) ->>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -25670 +25670 @@ WebACL -> (structure) ->>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -27989 +27989 @@ WebACL -> (structure) ->>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -27999 +27999 @@ WebACL -> (structure) ->>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -29593 +29593 @@ WebACL -> (structure) ->>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -29603 +29603 @@ WebACL -> (structure) ->>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -32076 +32076 @@ WebACL -> (structure) ->>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -32086 +32086 @@ WebACL -> (structure) ->>>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -33680 +33680 @@ WebACL -> (structure) ->>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -33690 +33690 @@ WebACL -> (structure) ->>>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -35942 +35942 @@ WebACL -> (structure) ->>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -35952 +35952 @@ WebACL -> (structure) ->>>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -37546 +37546 @@ WebACL -> (structure) ->>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -37556 +37556 @@ WebACL -> (structure) ->>>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -39802 +39802 @@ WebACL -> (structure) ->>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -39812 +39812 @@ WebACL -> (structure) ->>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -41406 +41406 @@ WebACL -> (structure) ->>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -41416 +41416 @@ WebACL -> (structure) ->>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -43700 +43700 @@ WebACL -> (structure) ->>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -43710 +43710 @@ WebACL -> (structure) ->>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -45692 +45692 @@ WebACL -> (structure) ->>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -45702 +45702 @@ WebACL -> (structure) ->>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -46930 +46930 @@ WebACL -> (structure) ->>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -46940 +46940 @@ WebACL -> (structure) ->>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -47150 +47150 @@ WebACL -> (structure) ->>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -47160 +47160 @@ WebACL -> (structure) ->>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -49102 +49102 @@ WebACL -> (structure) ->>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -49112 +49112 @@ WebACL -> (structure) ->>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -51431 +51431 @@ WebACL -> (structure) ->>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -51441 +51441 @@ WebACL -> (structure) ->>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -53035 +53035 @@ WebACL -> (structure) ->>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -53045 +53045 @@ WebACL -> (structure) ->>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -55518 +55518 @@ WebACL -> (structure) ->>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -55528 +55528 @@ WebACL -> (structure) ->>>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -57122 +57122 @@ WebACL -> (structure) ->>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -57132 +57132 @@ WebACL -> (structure) ->>>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -59384 +59384 @@ WebACL -> (structure) ->>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -59394 +59394 @@ WebACL -> (structure) ->>>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -60988 +60988 @@ WebACL -> (structure) ->>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -60998 +60998 @@ WebACL -> (structure) ->>>>>>>>>>>>> Take care to verify the rule names in your overrides. If you provide a rule name that doesn’t match the name of any rule in the rule group, WAF doesn’t return an error and doesn’t apply the override setting. +>>>>>>>>>>>>> Verify the rule names in your overrides carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn’t exactly match the case-sensitive name of an existing rule in the rule group. @@ -63244 +63244 @@ WebACL -> (structure)