AWS config documentation change
Summary
Updated regional availability lists by removing references to deprecated WAF classic rules (waf-global-rulegroup-not-empty, waf-global-rule-not-empty) and other obsolete rules (api-gwv2-access-logs-enabled, neptune-cluster-deletion-protection-enabled, etc.), while adding new rules like s3-bucket-mfa-delete-enabled and replacing some classic WAF rules with WAFv2 equivalents.
Security assessment
The changes primarily involve updating rule availability lists without evidence of addressing specific vulnerabilities. The addition of 's3-bucket-mfa-delete-enabled' documents a security feature (MFA delete protection for S3 buckets), but there's no indication the other changes fix security flaws. Removals appear to be routine deprecations of older services.
Diff
diff --git a/config/latest/developerguide/managing-rules-by-region-availability.md b/config/latest/developerguide/managing-rules-by-region-availability.md index bca673c2e..a251244dd 100644 --- a//config/latest/developerguide/managing-rules-by-region-availability.md +++ b//config/latest/developerguide/managing-rules-by-region-availability.md @@ -1499,4 +1498,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) - - * [waf-global-rule-not-empty](./waf-global-rule-not-empty.html) - @@ -4491,4 +4486,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) - - * [waf-global-rule-not-empty](./waf-global-rule-not-empty.html) - @@ -6052,4 +6043,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) - - * [waf-global-rule-not-empty](./waf-global-rule-not-empty.html) - @@ -7337,4 +7324,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) - - * [waf-global-rule-not-empty](./waf-global-rule-not-empty.html) - @@ -8708,4 +8691,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) - - * [waf-global-rule-not-empty](./waf-global-rule-not-empty.html) - @@ -8757,2 +8736,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [api-gwv2-access-logs-enabled](./api-gwv2-access-logs-enabled.html) - @@ -9341,2 +9318,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [neptune-cluster-deletion-protection-enabled](./neptune-cluster-deletion-protection-enabled.html) - @@ -9498,0 +9475,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [s3-bucket-mfa-delete-enabled](./s3-bucket-mfa-delete-enabled.html) + @@ -9623,4 +9600,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) - - * [waf-global-rule-not-empty](./waf-global-rule-not-empty.html) - @@ -9674,2 +9647,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [api-gwv2-access-logs-enabled](./api-gwv2-access-logs-enabled.html) - @@ -10366,2 +10337,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [neptune-cluster-deletion-protection-enabled](./neptune-cluster-deletion-protection-enabled.html) - @@ -10563,0 +10534,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [s3-bucket-mfa-delete-enabled](./s3-bucket-mfa-delete-enabled.html) + @@ -10718,8 +10689,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [wafv2-rulegroup-not-empty](./wafv2-rulegroup-not-empty.html) - - * [wafv2-webacl-not-empty](./wafv2-webacl-not-empty.html) - - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) - - * [waf-global-rule-not-empty](./waf-global-rule-not-empty.html) - @@ -10759,2 +10722,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [api-gwv2-access-logs-enabled](./api-gwv2-access-logs-enabled.html) - @@ -10895,2 +10856,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [ecs-fargate-latest-platform-version](./ecs-fargate-latest-platform-version.html) - @@ -11007,2 +10966,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [neptune-cluster-deletion-protection-enabled](./neptune-cluster-deletion-protection-enabled.html) - @@ -11011,2 +10968,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [netfw-multi-az-enabled](./netfw-multi-az-enabled.html) - @@ -11143,4 +11098,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) - - * [waf-global-rule-not-empty](./waf-global-rule-not-empty.html) - @@ -11186,2 +11137,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [api-gwv2-access-logs-enabled](./api-gwv2-access-logs-enabled.html) - @@ -11760,2 +11709,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [neptune-cluster-deletion-protection-enabled](./neptune-cluster-deletion-protection-enabled.html) - @@ -11915,0 +11864,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [s3-bucket-mfa-delete-enabled](./s3-bucket-mfa-delete-enabled.html) + @@ -12034,3 +11984 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) - - * [waf-global-rule-not-empty](./waf-global-rule-not-empty.html) + * [wafv2-webacl-not-empty](./wafv2-webacl-not-empty.html) @@ -13515,4 +13462,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) - - * [waf-global-rule-not-empty](./waf-global-rule-not-empty.html) - @@ -14425,0 +14370,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [nlb-cross-zone-load-balancing-enabled](./nlb-cross-zone-load-balancing-enabled.html) + @@ -14601,0 +14548,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [s3-bucket-mfa-delete-enabled](./s3-bucket-mfa-delete-enabled.html) + @@ -14792 +14740 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) + * [wafv2-rulegroup-not-empty](./wafv2-rulegroup-not-empty.html) @@ -14794 +14742 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rule-not-empty](./waf-global-rule-not-empty.html) + * [wafv2-webacl-not-empty](./wafv2-webacl-not-empty.html) @@ -16259,4 +16206,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) - - * [waf-global-rule-not-empty](./waf-global-rule-not-empty.html) - @@ -17790,4 +17733,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) - - * [waf-global-rule-not-empty](./waf-global-rule-not-empty.html) - @@ -19329,4 +19268,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) - - * [waf-global-rule-not-empty](./waf-global-rule-not-empty.html) - @@ -19364,2 +19299,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [api-gwv2-access-logs-enabled](./api-gwv2-access-logs-enabled.html) - @@ -19376,2 +19309,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [autoscaling-launch-template](./autoscaling-launch-template.html) - @@ -19464,2 +19395,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [ecs-fargate-latest-platform-version](./ecs-fargate-latest-platform-version.html) - @@ -19534,4 +19463,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [neptune-cluster-deletion-protection-enabled](./neptune-cluster-deletion-protection-enabled.html) - - * [netfw-multi-az-enabled](./netfw-multi-az-enabled.html) - @@ -19650,4 +19575,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) - - * [waf-global-rule-not-empty](./waf-global-rule-not-empty.html) - @@ -19677,2 +19598,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [api-gwv2-access-logs-enabled](./api-gwv2-access-logs-enabled.html) - @@ -19703,2 +19622,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [autoscaling-launch-template](./autoscaling-launch-template.html) - @@ -19793,2 +19710,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [ecs-fargate-latest-platform-version](./ecs-fargate-latest-platform-version.html) - @@ -19875,4 +19790,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [neptune-cluster-deletion-protection-enabled](./neptune-cluster-deletion-protection-enabled.html) - - * [netfw-multi-az-enabled](./netfw-multi-az-enabled.html) - @@ -19991,4 +19902,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) - - * [waf-global-rule-not-empty](./waf-global-rule-not-empty.html) - @@ -21510,4 +21417,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) - - * [waf-global-rule-not-empty](./waf-global-rule-not-empty.html) - @@ -22973,4 +22876,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) - - * [waf-global-rule-not-empty](./waf-global-rule-not-empty.html) - @@ -23028,2 +22927,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [api-gwv2-access-logs-enabled](./api-gwv2-access-logs-enabled.html) - @@ -23376,2 +23273,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [neptune-cluster-deletion-protection-enabled](./neptune-cluster-deletion-protection-enabled.html) - @@ -23380,2 +23275,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [netfw-multi-az-enabled](./netfw-multi-az-enabled.html) - @@ -23564,4 +23457,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) - - * [waf-global-rule-not-empty](./waf-global-rule-not-empty.html) - @@ -23997,4 +23886,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [neptune-cluster-deletion-protection-enabled](./neptune-cluster-deletion-protection-enabled.html) - - * [netfw-multi-az-enabled](./netfw-multi-az-enabled.html) - @@ -24003,2 +23888,0 @@ AWS Config currently supports the following managed rules. Before using these ru - * [nlb-cross-zone-load-balancing-enabled](./nlb-cross-zone-load-balancing-enabled.html) - @@ -24110,0 +23995,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [s3-bucket-mfa-delete-enabled](./s3-bucket-mfa-delete-enabled.html) + @@ -24207,3 +24093 @@ AWS Config currently supports the following managed rules. Before using these ru - * [waf-global-rulegroup-not-empty](./waf-global-rulegroup-not-empty.html) -