AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-06-16 · Documentation low

File: cli/latest/reference/wafv2/get-rule-group.md

Summary

Added documentation for new 'Monetize' action in WAF RuleGroups and 'MonetizationConfig' structure enabling payment requirements for CloudFront distributions

Security assessment

The change introduces a new terminating action ('Monetize') that blocks requests without payment. This adds documentation for a security feature (access control through payment verification) but doesn't address any existing vulnerability. The feature provides new request-blocking capabilities but shows no evidence of patching a security flaw.

Diff

diff --git a/cli/latest/reference/wafv2/get-rule-group.md b/cli/latest/reference/wafv2/get-rule-group.md
index 8fe8cae88..2a293873f 100644
--- a//cli/latest/reference/wafv2/get-rule-group.md
+++ b//cli/latest/reference/wafv2/get-rule-group.md
@@ -14,2 +14,2 @@
-  * [previous](get-regex-pattern-set.html "get-regex-pattern-set") |
-  * [AWS CLI 2.35.3 Command Reference](../../index.html) »
+  * [previous](get-revenue-statistics-time-series.html "get-revenue-statistics-time-series") |
+  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
@@ -22 +22 @@
-  * [← get-regex-pattern-set](get-regex-pattern-set.html "previous chapter \(use the left arrow\)") /
+  * [← get-revenue-statistics-time-series](get-revenue-statistics-time-series.html "previous chapter \(use the left arrow\)") /
@@ -3610,0 +3611,16 @@ RuleGroup -> (structure)
+>>>>>>>> 
+>>>>>>>> Monetize -> (structure)
+>>>>>>>>
+>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>> 
+>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>
+>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>> 
+>>>>>>>>>> Constraints:
+>>>>>>>>>> 
+>>>>>>>>>>   * min: `1`
+>>>>>>>>>>   * max: `3`
+>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>> 
+
@@ -7571,0 +7588,16 @@ RuleGroup -> (structure)
+>>>>>>>>>> 
+>>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>>
+>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>>> 
+>>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>>
+>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>>> 
+>>>>>>>>>>>> Constraints:
+>>>>>>>>>>>> 
+>>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>>> 
+
@@ -10308,0 +10341,16 @@ RuleGroup -> (structure)
+>>>>>>>>>> 
+>>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>>
+>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>>> 
+>>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>>
+>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>>> 
+>>>>>>>>>>>> Constraints:
+>>>>>>>>>>>> 
+>>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>>> 
+
@@ -14677,0 +14726,16 @@ RuleGroup -> (structure)
+>>>>>>>>>>> 
+>>>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>>>
+>>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>>>> 
+>>>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>>>
+>>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>>>> 
+>>>>>>>>>>>>> Constraints:
+>>>>>>>>>>>>> 
+>>>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>>>> 
+
@@ -17414,0 +17479,16 @@ RuleGroup -> (structure)
+>>>>>>>>>>> 
+>>>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>>>
+>>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>>>> 
+>>>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>>>
+>>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>>>> 
+>>>>>>>>>>>>> Constraints:
+>>>>>>>>>>>>> 
+>>>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>>>> 
+
@@ -21305,0 +21386,16 @@ RuleGroup -> (structure)
+>>>>>>>>>>> 
+>>>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>>>
+>>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>>>> 
+>>>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>>>
+>>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>>>> 
+>>>>>>>>>>>>> Constraints:
+>>>>>>>>>>>>> 
+>>>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>>>> 
+
@@ -24042,0 +24139,16 @@ RuleGroup -> (structure)
+>>>>>>>>>>> 
+>>>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>>>
+>>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>>>> 
+>>>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>>>
+>>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>>>> 
+>>>>>>>>>>>>> Constraints:
+>>>>>>>>>>>>> 
+>>>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>>>> 
+
@@ -27927,0 +28040,16 @@ RuleGroup -> (structure)
+>>>>>>>>>> 
+>>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>>
+>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>>> 
+>>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>>
+>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>>> 
+>>>>>>>>>>>> Constraints:
+>>>>>>>>>>>> 
+>>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>>> 
+
@@ -30664,0 +30793,16 @@ RuleGroup -> (structure)
+>>>>>>>>>> 
+>>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>>
+>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>>> 
+>>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>>
+>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>>> 
+>>>>>>>>>>>> Constraints:
+>>>>>>>>>>>> 
+>>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>>> 
+
@@ -34625,0 +34770,16 @@ RuleGroup -> (structure)
+>>>>>>>>>> 
+>>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>>
+>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>>> 
+>>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>>
+>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>>> 
+>>>>>>>>>>>> Constraints:
+>>>>>>>>>>>> 
+>>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>>> 
+
@@ -37362,0 +37523,16 @@ RuleGroup -> (structure)
+>>>>>>>>>> 
+>>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>>
+>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>>> 
+>>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>>
+>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>>> 
+>>>>>>>>>>>> Constraints:
+>>>>>>>>>>>> 
+>>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>>> 
+
@@ -39435,0 +39612,16 @@ RuleGroup -> (structure)