AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-06-16 · Documentation low

File: cli/latest/reference/wafv2/create-rule-group.md

Summary

Added documentation for a new 'Monetize' rule action and '--monetization-config' parameter to support request monetization features

Security assessment

The change introduces a new terminating rule action ('Monetize') that blocks requests until payment is completed. While this adds a security control (blocking unpaid requests), there's no evidence it addresses a specific vulnerability. It documents new monetization-related security capabilities.

Diff

diff --git a/cli/latest/reference/wafv2/create-rule-group.md b/cli/latest/reference/wafv2/create-rule-group.md
index f356d24ac..ad8da41c7 100644
--- a//cli/latest/reference/wafv2/create-rule-group.md
+++ b//cli/latest/reference/wafv2/create-rule-group.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
@@ -77,0 +78 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+    [--monetization-config <value>]
@@ -3367,0 +3369,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>> 
+>>>>>>> Monetize -> (structure)
+>>>>>>>
+>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>> 
+>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>
+>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>> 
+>>>>>>>>> Constraints:
+>>>>>>>>> 
+>>>>>>>>>   * min: `1`
+>>>>>>>>>   * max: `3`
+>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>> 
+
@@ -7328,0 +7346,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>> 
+>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>
+>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>> 
+>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>
+>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>> 
+>>>>>>>>>>> Constraints:
+>>>>>>>>>>> 
+>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>> 
+
@@ -10065,0 +10099,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>> 
+>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>
+>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>> 
+>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>
+>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>> 
+>>>>>>>>>>> Constraints:
+>>>>>>>>>>> 
+>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>> 
+
@@ -14434,0 +14484,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>>> 
+>>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>>
+>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>>> 
+>>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>>
+>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>>> 
+>>>>>>>>>>>> Constraints:
+>>>>>>>>>>>> 
+>>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>>> 
+
@@ -17171,0 +17237,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>>> 
+>>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>>
+>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>>> 
+>>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>>
+>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>>> 
+>>>>>>>>>>>> Constraints:
+>>>>>>>>>>>> 
+>>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>>> 
+
@@ -21062,0 +21144,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>>> 
+>>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>>
+>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>>> 
+>>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>>
+>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>>> 
+>>>>>>>>>>>> Constraints:
+>>>>>>>>>>>> 
+>>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>>> 
+
@@ -23799,0 +23897,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>>> 
+>>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>>
+>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>>> 
+>>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>>
+>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>>> 
+>>>>>>>>>>>> Constraints:
+>>>>>>>>>>>> 
+>>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>>> 
+
@@ -27684,0 +27798,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>> 
+>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>
+>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>> 
+>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>
+>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>> 
+>>>>>>>>>>> Constraints:
+>>>>>>>>>>> 
+>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>> 
+
@@ -30421,0 +30551,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>> 
+>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>
+>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>> 
+>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>
+>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>> 
+>>>>>>>>>>> Constraints:
+>>>>>>>>>>> 
+>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>> 
+
@@ -34382,0 +34528,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>> 
+>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>
+>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>> 
+>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>
+>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>> 
+>>>>>>>>>>> Constraints:
+>>>>>>>>>>> 
+>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>> 
+
@@ -37119,0 +37281,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>> 
+>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>
+>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>> 
+>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>
+>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>> 
+>>>>>>>>>>> Constraints:
+>>>>>>>>>>> 
+>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>> 
+
@@ -39192,0 +39370,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>> 
+>>>>>>> Monetize -> (structure)
+>>>>>>>