AWS network-firewall documentation change
Summary
Added entries for new domain list rule group actions and default actions for strict ordering policies
Security assessment
The changes document feature enhancements (REJECT/ALERT actions and new default actions) but do not address specific security vulnerabilities or weaknesses. This is a routine update to the change log.
Diff
diff --git a/network-firewall/latest/developerguide/document-history.md b/network-firewall/latest/developerguide/document-history.md index 8b0669c48..2f61ad1ba 100644 --- a//network-firewall/latest/developerguide/document-history.md +++ b//network-firewall/latest/developerguide/document-history.md @@ -12,0 +13,2 @@ Change| Description| Date +[Enhancements to stateful domain list rule groups](./stateful-rule-groups-domain-names.html)| You can now use `REJECT` and `ALERT` actions in your stateful domain list rule groups.| September 26, 2025 +[New default actions available for stateful rule groups](./suricata-rule-evaluation-order.html)| The `Application Layer alert established` and `Application Layer drop established` actions are now available for firewall policies using strict ordering.| September 25, 2025