AWS waf documentation change
Summary
Clarified Shield Advanced rule group location in protection pack
Security assessment
Adds specificity about DDoS protection implementation details but does not address a security vulnerability. Part of documenting security features.
Diff
diff --git a/waf/latest/developerguide/ddos-viewing-events.md b/waf/latest/developerguide/ddos-viewing-events.md index 708738034..b50a4d386 100644 --- a//waf/latest/developerguide/ddos-viewing-events.md +++ b//waf/latest/developerguide/ddos-viewing-events.md @@ -31 +31 @@ When you subscribe to Shield Advanced and add protections to your resources, you -If you enable automatic application layer DDoS mitigation for an application layer protection, Shield Advanced adds a rule group to your that it uses to manage automated protections. This rule group generates AWS WAF metrics, but they are not available to view. This is the same as for any other rule groups that you use in your protection pack (web ACL) but do not own, such as AWS Managed Rules rule groups. For more information about AWS WAF metrics, see [AWS WAF metrics and dimensions](./waf-metrics.html). For information about this Shield Advanced protection option, see [Automating application layer DDoS mitigation with Shield Advanced ](./ddos-automatic-app-layer-response.html). +If you enable automatic application layer DDoS mitigation for an application layer protection, Shield Advanced adds a rule group to your protection pack (web ACL) that it uses to manage automated protections. This rule group generates AWS WAF metrics, but they are not available to view. This is the same as for any other rule groups that you use in your protection pack (web ACL) but do not own, such as AWS Managed Rules rule groups. For more information about AWS WAF metrics, see [AWS WAF metrics and dimensions](./waf-metrics.html). For information about this Shield Advanced protection option, see [Automating application layer DDoS mitigation with Shield Advanced ](./ddos-automatic-app-layer-response.html).