AWS waf documentation change
Summary
Replaced 'AWS CloudFormation' with 'CloudFormation' throughout the document
Security assessment
The changes are purely terminological. While the document discusses security features (DDoS mitigation via Shield Advanced), the updates themselves don't alter security guidance or address vulnerabilities. The warning about not manually managing Shield rules in templates is existing best practice documentation.
Diff
diff --git a/waf/latest/developerguide/manage-automatic-mitigation-in-cfn.md b/waf/latest/developerguide/manage-automatic-mitigation-in-cfn.md index 4fc02cb1c..5ea34307a 100644 --- a//waf/latest/developerguide/manage-automatic-mitigation-in-cfn.md +++ b//waf/latest/developerguide/manage-automatic-mitigation-in-cfn.md @@ -11 +11 @@ You can now use the updated experience to access AWS WAF functionality anywhere -This page explains how to use AWS CloudFormation to manage your protections and AWS WAF web ACLs. +This page explains how to use CloudFormation to manage your protections and AWS WAF web ACLs. @@ -15 +15 @@ This page explains how to use AWS CloudFormation to manage your protections and -You can enable and disable automatic application layer DDoS mitigation through AWS CloudFormation, using the `AWS::Shield::Protection` resource. The effect is the same as when you enable or disable the feature through the console or any other interface. For information about the AWS CloudFormation resource, see [AWS::Shield::Protection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-shield-protection.html) in the _AWS CloudFormation user guide_. +You can enable and disable automatic application layer DDoS mitigation through AWS CloudFormation, using the `AWS::Shield::Protection` resource. The effect is the same as when you enable or disable the feature through the console or any other interface. For information about the CloudFormation resource, see [AWS::Shield::Protection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-shield-protection.html) in the _AWS CloudFormation user guide_. @@ -21 +21 @@ Shield Advanced manages automatic mitigation for your protected resource using a -If you use AWS CloudFormation to manage your web ACLs, don't add the Shield Advanced rule group rule to your web ACL template. When you update a web ACL that's being used with your automatic mitigation protections, AWS WAF automatically manages the rule group rule in the web ACL. +If you use CloudFormation to manage your web ACLs, don't add the Shield Advanced rule group rule to your web ACL template. When you update a web ACL that's being used with your automatic mitigation protections, AWS WAF automatically manages the rule group rule in the web ACL. @@ -23 +23 @@ If you use AWS CloudFormation to manage your web ACLs, don't add the Shield Adva -You'll see the following differences compared to other web ACLs that you manage through AWS CloudFormation: +You'll see the following differences compared to other web ACLs that you manage through CloudFormation: @@ -25 +25 @@ You'll see the following differences compared to other web ACLs that you manage - * AWS CloudFormation won't report any drift in the stack drift status between the actual configuration of the web ACL, with the Shield Advanced rule group rule, and your web ACL template, without the rule. The Shield Advanced rule won't appear in the actual listing for the resource in the drift details. + * CloudFormation won't report any drift in the stack drift status between the actual configuration of the web ACL, with the Shield Advanced rule group rule, and your web ACL template, without the rule. The Shield Advanced rule won't appear in the actual listing for the resource in the drift details. @@ -34 +34 @@ You will be able to see the Shield Advanced rule group rule in web ACL listings -Don't manage the Shield Advanced rule in your AWS CloudFormation web ACL template. The web ACL template shouldn't list the Shield Advanced rule. Follow the best practices for web ACL management at [Best practices for using automatic application layer DDoS mitigation](./ddos-automatic-app-layer-response-bp.html). +Don't manage the Shield Advanced rule in your CloudFormation web ACL template. The web ACL template shouldn't list the Shield Advanced rule. Follow the best practices for web ACL management at [Best practices for using automatic application layer DDoS mitigation](./ddos-automatic-app-layer-response-bp.html).