AWS waf documentation change
Summary
Added documentation about dynamic label interpolation using ${namespace:} syntax in Bot Control for custom requests/responses, allowing single-rule handling of entire label namespaces.
Security assessment
The change documents a new WAF Bot Control feature that simplifies security configurations but doesn't address a specific vulnerability. Bot Control is a security feature, so this adds security documentation.
Diff
diff --git a/waf/latest/developerguide/waf-bot-control-components.md b/waf/latest/developerguide/waf-bot-control-components.md index 1e18a0fb0..227fec44d 100644 --- a//waf/latest/developerguide/waf-bot-control-components.md +++ b//waf/latest/developerguide/waf-bot-control-components.md @@ -51 +51 @@ Your costs for using the Bot Control managed rule group increase with the number - * **Custom requests and responses** – You can add custom headers to requests that you allow and you can send custom responses for requests that you block by pairing label matching with the AWS WAF custom request and response features. For more information about customizing requests and responses, see [Customized web requests and responses in AWS WAF](./waf-custom-request-response.html). + * **Custom requests and responses** – You can add custom headers to requests that you allow and you can send custom responses for requests that you block by pairing label matching with the AWS WAF custom request and response features. With dynamic label interpolation, you can use ${namespace:} syntax to resolve Bot Control label values at evaluation time. A single rule can then forward an entire label namespace as a header value, instead of requiring one rule for each label. For more information about customizing requests and responses, see [Customized web requests and responses in AWS WAF](./waf-custom-request-response.html). For information about dynamic interpolation, see [Dynamic label interpolation](./waf-dynamic-label-interpolation.html).