AWS network-firewall documentation change

Service: network-firewall · 2025-11-19 · Documentation low

File: network-firewall/latest/developerguide/firewall-policy-managing.md

Summary

Updated propagation time for firewall changes from seconds to minutes

Security assessment

The change only modifies the expected time for configuration propagation without addressing any specific vulnerability or weakness. It documents operational behavior rather than security features.

Diff

diff --git a/network-firewall/latest/developerguide/firewall-policy-managing.md b/network-firewall/latest/developerguide/firewall-policy-managing.md
index 476f00b96..d4e3bce85 100644
--- a//network-firewall/latest/developerguide/firewall-policy-managing.md
+++ b//network-firewall/latest/developerguide/firewall-policy-managing.md
@@ -11 +11 @@ This section describes how to create, update, and delete your firewall policy in
-When you make any changes to a firewall, including changes to any of the firewall's components, like rule groups, TLS inspection configurations, and firewall policies, Network Firewall propagates the changes everywhere that the firewall is used. Your changes are normally applied within seconds, but there might be a brief period of inconsistency when the changes have arrived in some places and not in others. For example, if you modify a rule group so that it drops an additional type of packet, for a firewall that uses the rule group, the new packet type might briefly be dropped by one firewall endpoint while still being allowed by another. 
+When you make any changes to a firewall, including changes to any of the firewall's components, like rule groups, TLS inspection configurations, and firewall policies, Network Firewall propagates the changes everywhere that the firewall is used. Your changes are normally applied within minutes, but there might be a brief period of inconsistency when the changes have arrived in some places and not in others. For example, if you modify a rule group so that it drops an additional type of packet, for a firewall that uses the rule group, the new packet type might briefly be dropped by one firewall endpoint while still being allowed by another.