AWS wellarchitected documentation change

Service: wellarchitected · 2026-05-04 · Documentation low

File: wellarchitected/2023-04-10/framework/sec_incident_response_auto_contain.md

Summary

Modified image caption to specify Kinesis Firehose, Lambda, and Event Bridge in WAF logs processing diagram

Security assessment

Change provides implementation details for incident response automation but doesn't address any security vulnerability

Diff

diff --git a/wellarchitected/2023-04-10/framework/sec_incident_response_auto_contain.md b/wellarchitected/2023-04-10/framework/sec_incident_response_auto_contain.md
index 8627ad482..bbe5b5fec 100644
--- a//wellarchitected/2023-04-10/framework/sec_incident_response_auto_contain.md
+++ b//wellarchitected/2023-04-10/framework/sec_incident_response_auto_contain.md
@@ -15 +15 @@ Once you create and practice the processes and tools from your playbooks, you ca
-![Diagram showing AWS WAF WebACL logs flow through various services for processing and blocking.](/images/wellarchitected/2023-04-10/framework/images/aws-waf-automate-block.png)
+![WAF WebACL logs flow through Kinesis Firehose , Lambda , and Event Bridge to update IPset.](/images/wellarchitected/2023-04-10/framework/images/aws-waf-automate-block.png)