AWS waf documentation change
Summary
Added documentation section about CloudFront flat-rate pricing plans including WAF/DDoS protection requirements
Security assessment
Documents security feature requirements (mandatory web ACL association) but does not address a specific vulnerability. Highlights security features like WAF and DDoS protection as part of pricing plans
Diff
diff --git a/waf/latest/developerguide/cloudfront-features.md b/waf/latest/developerguide/cloudfront-features.md index 70ad1be7e..baa3f1d4c 100644 --- a//waf/latest/developerguide/cloudfront-features.md +++ b//waf/latest/developerguide/cloudfront-features.md @@ -5 +5 @@ -How AWS WAF works with different distribution types +How AWS WAF works with different distribution typesUsing AWS WAF with CloudFront Pricing Plans @@ -21 +21 @@ When you create a protection pack (web ACL), you can specify one or more CloudFr - * [Using AWS WAF with CloudFront Flat-Rate Pricing Plans](./waf-cf-pricing-plans.html) + * Using AWS WAF with CloudFront Flat-Rate Pricing Plans @@ -87,0 +88,35 @@ Logging | Standard AWS WAF logs | Logs include tenant identifiers for security e +## Using AWS WAF with CloudFront Flat-Rate Pricing Plans + +CloudFront flat-rate pricing plans combine the Amazon CloudFront global content delivery network (CDN) with multiple AWS services and features into a monthly price with no overage charges, regardless of traffic spikes or attacks. + +Flat-rate pricing plans include the following AWS services and features for a simple monthly price: + + * CloudFront CDN + + * AWS WAF and DDoS protection + + * Bot management and analytics + + * Amazon Route 53 DNS + + * Amazon CloudWatch Logs ingestion + + * TLS certificate + + * Serverless edge compute + + * Amazon S3 storage credits each month + + + + +Plans are available in Free, Pro, Business, and Premium tiers to match your application's needs. Plans do not need an annual commitment to get the best available rates. Start with the Free plan and upgrade to access more capabilities and larger usage allowances. + +For more information and a complete list of plans and features, see [CloudFront flat-rate pricing plans](http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/flat-rate-pricing-plan.html) in the _Amazon CloudFront Developer Guide_. + +###### Important + +A valid AWS WAF protection pack (web ACL) must remain associated with your CloudFront distribution when using any pricing plan. You cannot remove the protection pack (web ACL) association unless you switch back to pay-as-you-go pricing. + +While a AWS WAF web ACL must remain associated with your distribution, you maintain full control over your security configuration. You can customize your protection by adjusting which rules are enabled or disabled in your web ACL, and modify rule settings to match your security requirements. For information about managing web ACL rules, see [AWS WAF Rules](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rules.html). + @@ -96 +131 @@ Enabling your protections in production -Using AWS WAF with CloudFront Pricing Plans +Use cases