AWS Security ChangesHomeSearch

AWS waf documentation change

Service: waf · 2026-01-25 · Documentation low

File: waf/latest/developerguide/classic-web-acl-deleting.md

Summary

Added important note about prerequisites for deleting web ACLs and permanent deletion warnings

Security assessment

The change adds operational guidance about resource cleanup before deletion but doesn't address vulnerabilities or security features

Diff

diff --git a/waf/latest/developerguide/classic-web-acl-deleting.md b/waf/latest/developerguide/classic-web-acl-deleting.md
index 1276e378b..37db0f6e2 100644
--- a//waf/latest/developerguide/classic-web-acl-deleting.md
+++ b//waf/latest/developerguide/classic-web-acl-deleting.md
@@ -20,0 +21,4 @@ This is **AWS WAF Classic** documentation. You should only use this version if y
+###### Important
+
+Deleting a web ACL is permanent and can't be undone. If the selected web ACL contains any rules or is associated with any CloudFront distributions, Application load balancer or API Gateway, remove the rules and associations before deleting. Otherwise, the delete will fail.
+