AWS waf documentation change
Summary
Updated descriptions for ChallengesAttempted, ChallengesSolved, ChallengesAttemptedSdk, and ChallengesSolvedSdk metrics to clarify they include challenges served by Challenge rule actions and challenges run as part of CAPTCHA actions when no token is present.
Security assessment
This change provides clarification on metric reporting for AWS WAF's security features (silent challenges and CAPTCHA). It enhances documentation accuracy but does not indicate a security vulnerability fix or incident response. The update helps users better understand what these security-related metrics track.
Diff
diff --git a/waf/latest/developerguide/waf-metrics.md b/waf/latest/developerguide/waf-metrics.md index 9739f8854..553c7fbc9 100644 --- a//waf/latest/developerguide/waf-metrics.md +++ b//waf/latest/developerguide/waf-metrics.md @@ -63,2 +63,2 @@ AWS WAF core metrics Metric | Description -`ChallengesAttempted` | The number of attempts that were submitted by an end user in response to a silent challenge served by a Challenge rule. Reporting criteria: There is a nonzero value. Valid statistics: Sum -`ChallengesSolved` | The number of silent challenge solutions submitted that successfully passed the silent challenge served by a Challenge rule. Reporting criteria: There is a nonzero value. Valid statistics: Sum +`ChallengesAttempted` | The number of attempts that were submitted by an end user in response to a silent challenge served by AWS WAF. This includes challenges served by a Challenge rule action and challenges run as part of a CAPTCHA action when no token is present. Reporting criteria: There is a nonzero value. Valid statistics: Sum +`ChallengesSolved` | The number of silent challenge solutions submitted that successfully passed a silent challenge served by AWS WAF. This includes challenges served by a Challenge rule action and challenges run as part of a CAPTCHA action when no token is present. Reporting criteria: There is a nonzero value. Valid statistics: Sum @@ -154,2 +154,2 @@ Account metrics Metric | Description -`ChallengesAttemptedSdk` | The number of attempts that were submitted by an end user in response to a silent challenge served by the Challenge JavaScript API. Reporting criteria: There is a nonzero value. Valid statistics: Sum -`ChallengesSolvedSdk` | The number of silent challenge solutions submitted that successfully passed the silent challenge served by the Challenge JavaScript API. Reporting criteria: There is a nonzero value. Valid statistics: Sum +`ChallengesAttemptedSdk` | The number of attempts that were submitted by an end user in response to a silent challenge served through the Challenge JavaScript API. This includes challenges initiated by a Challenge action and challenges run as part of a CAPTCHA action when no token is present. Reporting criteria: There is a nonzero value. Valid statistics: Sum +`ChallengesSolvedSdk` | The number of silent challenge solutions submitted that successfully passed a silent challenge served through the Challenge JavaScript API. This includes challenges initiated by a Challenge action and challenges run as part of a CAPTCHA action when no token is present. Reporting criteria: There is a nonzero value. Valid statistics: Sum