AWS Security ChangesHomeSearch

AWS waf documentation change

Service: waf · 2026-01-25 · Documentation low

File: waf/latest/developerguide/fms-delete-rule-group.md

Summary

Added warning about policy impact and permanent deletion consequences

Security assessment

Operational guidance about policy management rather than security controls

Diff

diff --git a/waf/latest/developerguide/fms-delete-rule-group.md b/waf/latest/developerguide/fms-delete-rule-group.md
index da6e93c75..df6894134 100644
--- a//waf/latest/developerguide/fms-delete-rule-group.md
+++ b//waf/latest/developerguide/fms-delete-rule-group.md
@@ -14,0 +15,4 @@ To delete a rule group from a Firewall Manager DNS Firewall policy, you must per
+###### Important
+
+Removing a rule group from your Firewall Manager DNS Firewall policy removes its effect from VPCs that have the policy applied, regardless of whether you also delete the rule group from your DNS Firewall rule groups. Deleting a rule group is a permanent action and can't be undone.
+