AWS network-firewall documentation change
Summary
Added a note clarifying that AWS Marketplace managed rule groups use a 'stateful-domain-rulegroup' resource type that consumes domain capacity from firewall policies, and only AWS Marketplace managed rule groups can use this capacity.
Security assessment
This change provides clarification about resource types and capacity allocation for AWS Marketplace rule groups. It's a documentation update about service behavior and resource management, not related to any security vulnerability or incident.
Diff
diff --git a/network-firewall/latest/developerguide/aws-marketplace-rule-groups.md b/network-firewall/latest/developerguide/aws-marketplace-rule-groups.md index 83b5bceb5..0bbc70e04 100644 --- a//network-firewall/latest/developerguide/aws-marketplace-rule-groups.md +++ b//network-firewall/latest/developerguide/aws-marketplace-rule-groups.md @@ -14,0 +15,4 @@ AWS Marketplace rule groups are available by subscription through the AWS Market +###### Note + +Some AWS Marketplace managed rule groups use a `stateful-domain-rulegroup` resource type that is available only with managed rules. You will see this resource type identified in the Amazon Resource Name (ARN) for the rule group. This resource type consumes capacity from your firewall policy's total available domain capacity. Only AWS Marketplace managed rule groups can use this capacity. For more information about domain capacity, see [Firewall policy settings](https://docs.aws.amazon.com/network-firewall/latest/developerguide/firewall-policy-settings.html). +