AWS cli documentation change
Summary
Added documentation for new 'Monetize' action in WAF RuleGroups and 'MonetizationConfig' structure enabling payment requirements for CloudFront distributions
Security assessment
The change introduces a new terminating action ('Monetize') that blocks requests without payment. This adds documentation for a security feature (access control through payment verification) but doesn't address any existing vulnerability. The feature provides new request-blocking capabilities but shows no evidence of patching a security flaw.
Diff
diff --git a/cli/latest/reference/wafv2/get-rule-group.md b/cli/latest/reference/wafv2/get-rule-group.md index 8fe8cae88..2a293873f 100644 --- a//cli/latest/reference/wafv2/get-rule-group.md +++ b//cli/latest/reference/wafv2/get-rule-group.md @@ -14,2 +14,2 @@ - * [previous](get-regex-pattern-set.html "get-regex-pattern-set") | - * [AWS CLI 2.35.3 Command Reference](../../index.html) » + * [previous](get-revenue-statistics-time-series.html "get-revenue-statistics-time-series") | + * [AWS CLI 2.35.5 Command Reference](../../index.html) » @@ -22 +22 @@ - * [← get-regex-pattern-set](get-regex-pattern-set.html "previous chapter \(use the left arrow\)") / + * [← get-revenue-statistics-time-series](get-revenue-statistics-time-series.html "previous chapter \(use the left arrow\)") / @@ -3610,0 +3611,16 @@ RuleGroup -> (structure) +>>>>>>>> +>>>>>>>> Monetize -> (structure) +>>>>>>>> +>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>> +>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>> +>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>> +>>>>>>>>>> Constraints: +>>>>>>>>>> +>>>>>>>>>> * min: `1` +>>>>>>>>>> * max: `3` +>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>> + @@ -7571,0 +7588,16 @@ RuleGroup -> (structure) +>>>>>>>>>> +>>>>>>>>>> Monetize -> (structure) +>>>>>>>>>> +>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>>> +>>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `3` +>>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>>> + @@ -10308,0 +10341,16 @@ RuleGroup -> (structure) +>>>>>>>>>> +>>>>>>>>>> Monetize -> (structure) +>>>>>>>>>> +>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>>> +>>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `3` +>>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>>> + @@ -14677,0 +14726,16 @@ RuleGroup -> (structure) +>>>>>>>>>>> +>>>>>>>>>>> Monetize -> (structure) +>>>>>>>>>>> +>>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>>>> +>>>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>>>> +>>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>>>> +>>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>> +>>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>>> * max: `3` +>>>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>>>> + @@ -17414,0 +17479,16 @@ RuleGroup -> (structure) +>>>>>>>>>>> +>>>>>>>>>>> Monetize -> (structure) +>>>>>>>>>>> +>>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>>>> +>>>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>>>> +>>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>>>> +>>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>> +>>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>>> * max: `3` +>>>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>>>> + @@ -21305,0 +21386,16 @@ RuleGroup -> (structure) +>>>>>>>>>>> +>>>>>>>>>>> Monetize -> (structure) +>>>>>>>>>>> +>>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>>>> +>>>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>>>> +>>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>>>> +>>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>> +>>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>>> * max: `3` +>>>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>>>> + @@ -24042,0 +24139,16 @@ RuleGroup -> (structure) +>>>>>>>>>>> +>>>>>>>>>>> Monetize -> (structure) +>>>>>>>>>>> +>>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>>>> +>>>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>>>> +>>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>>>> +>>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>> +>>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>>> * max: `3` +>>>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>>>> + @@ -27927,0 +28040,16 @@ RuleGroup -> (structure) +>>>>>>>>>> +>>>>>>>>>> Monetize -> (structure) +>>>>>>>>>> +>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>>> +>>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `3` +>>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>>> + @@ -30664,0 +30793,16 @@ RuleGroup -> (structure) +>>>>>>>>>> +>>>>>>>>>> Monetize -> (structure) +>>>>>>>>>> +>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>>> +>>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `3` +>>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>>> + @@ -34625,0 +34770,16 @@ RuleGroup -> (structure) +>>>>>>>>>> +>>>>>>>>>> Monetize -> (structure) +>>>>>>>>>> +>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>>> +>>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `3` +>>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>>> + @@ -37362,0 +37523,16 @@ RuleGroup -> (structure) +>>>>>>>>>> +>>>>>>>>>> Monetize -> (structure) +>>>>>>>>>> +>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>>> +>>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `3` +>>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>>> + @@ -39435,0 +39612,16 @@ RuleGroup -> (structure)