AWS waf documentation change
Summary
Updated documentation about WAF metrics visibility and App Runner resource ARN exclusion
Security assessment
Changes include punctuation fixes, clarification about metrics visibility in Firewall Manager deployments, and exclusion of App Runner ARNs. These are documentation improvements without security implications.
Diff
diff --git a/waf/latest/developerguide/waf-metrics.md b/waf/latest/developerguide/waf-metrics.md index d4d4e3889..b3ffc6e22 100644 --- a//waf/latest/developerguide/waf-metrics.md +++ b//waf/latest/developerguide/waf-metrics.md @@ -23 +23 @@ You can see the following metrics for protection packs (web ACLs), rules, rule g - * **Rule groups owned by another account** – Rule group metrics are generally visible only to the rule group owner. However, if you override the rule action for a rule, the metrics for that rule will be listed under your protection pack (web ACL) metrics. Additionally, labels added by any rule group are listed in your protection pack (web ACL) metrics + * **Rule groups owned by another account** – Rule group metrics are generally visible only to the rule group owner. However, if you override the rule action for a rule, the metrics for that rule will be listed under your protection pack (web ACL) metrics. Additionally, labels added by any rule group are listed in your protection pack (web ACL) metrics. @@ -25 +25 @@ You can see the following metrics for protection packs (web ACLs), rules, rule g -Rule groups in this category are [AWS Managed Rules for AWS WAF](./aws-managed-rule-groups.html), [AWS Marketplace rule groups](./marketplace-rule-groups.html), [Recognizing rule groups provided by other services](./waf-service-owned-rule-groups.html), and rule groups that are shared with you by another account. +Rule groups in this category are [AWS Managed Rules for AWS WAF](./aws-managed-rule-groups.html), [AWS Marketplace rule groups](./marketplace-rule-groups.html), [Recognizing rule groups provided by other services](./waf-service-owned-rule-groups.html), and rule groups that are shared with you by another account. When a protection pack (web ACL) is deployed through Firewall Manager, any rules within the WebACL that have a Count action will not display their metrics in the member account. @@ -80 +80 @@ AWS WAF core dimensions Dimension | Description -`Resource` | The Amazon Resource Name (ARN) of the protected resource. +`Resource` | The Amazon Resource Name (ARN) of the protected resource. This dimension does not include App Runner resource ARNs.