AWS waf documentation change
Summary
Added entries for CloudFront flat-rate pricing integration and updated managed policies with new permissions
Security assessment
Documents IAM policy updates for new pricing plan permissions but does not address security vulnerabilities. The managed policy changes relate to access control but are part of feature enablement rather than security remediation.
Diff
diff --git a/waf/latest/developerguide/doc-history.md b/waf/latest/developerguide/doc-history.md index 7c54723e0..f27890a43 100644 --- a//waf/latest/developerguide/doc-history.md +++ b//waf/latest/developerguide/doc-history.md @@ -16,0 +17,2 @@ Change| Description| Date +[AWS WAF managed policy changes](./security-iam-awsmanpol.html#security-iam-awsmanpol-updates)| Added Amazon CloudFront Flat rate pricing permissions to the `AWSWAFConsoleFullAccess`, and `AWSWAFConsoleReadOnlyAccess` managed policies.| November 18, 2025 +[AWS WAF integration with CloudFront flat-rate pricing plans](./cloudfront-features.html)| You can now subscribe CloudFront distributions associated with AWS WAF to a flat-rate pricing plan. This new pricing plan is different from pay-as-you-go pricing in that pricing plans have preset service quotas for usage and resources. Once you subscribe a distribution for a pricing plan, you won't receive unexpected usage charges for that distribution. You will have a single price for all resources and features that are included in the pricing plan. | November 18, 2025 @@ -133 +135 @@ Change| Description| Date -[Shield Advanced automatic application layer DDoS mitigation](./manage-automatic-mitigation-in-cfn.html)| Added guidance for using AWS CloudFormation to manage the web ACLs that you use with automatic application layer DDoS mitigation. | August 30, 2023 +[Shield Advanced automatic application layer DDoS mitigation](./manage-automatic-mitigation-in-cfn.html)| Added guidance for using CloudFormation to manage the web ACLs that you use with automatic application layer DDoS mitigation. | August 30, 2023