AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-06-16 · Documentation low

File: cli/latest/reference/wafv2/update-rule-group.md

Summary

Added documentation for new 'Monetize' rule action and '--monetization-config' option to support request monetization features

Security assessment

The change introduces a new terminating action (Monetize) that blocks unpaid requests, which is a security control mechanism. However, there's no evidence of it addressing an existing vulnerability. It adds documentation for a security feature (payment-based access control) but doesn't fix a security flaw.

Diff

diff --git a/cli/latest/reference/wafv2/update-rule-group.md b/cli/latest/reference/wafv2/update-rule-group.md
index 3361585ec..0d547e051 100644
--- a//cli/latest/reference/wafv2/update-rule-group.md
+++ b//cli/latest/reference/wafv2/update-rule-group.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
@@ -102,0 +103 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+    [--monetization-config <value>]
@@ -3390,0 +3392,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>> 
+>>>>>>> Monetize -> (structure)
+>>>>>>>
+>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>> 
+>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>
+>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>> 
+>>>>>>>>> Constraints:
+>>>>>>>>> 
+>>>>>>>>>   * min: `1`
+>>>>>>>>>   * max: `3`
+>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>> 
+
@@ -7351,0 +7369,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>> 
+>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>
+>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>> 
+>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>
+>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>> 
+>>>>>>>>>>> Constraints:
+>>>>>>>>>>> 
+>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>> 
+
@@ -10088,0 +10122,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>> 
+>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>
+>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>> 
+>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>
+>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>> 
+>>>>>>>>>>> Constraints:
+>>>>>>>>>>> 
+>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>> 
+
@@ -14457,0 +14507,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>>> 
+>>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>>
+>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>>> 
+>>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>>
+>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>>> 
+>>>>>>>>>>>> Constraints:
+>>>>>>>>>>>> 
+>>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>>> 
+
@@ -17194,0 +17260,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>>> 
+>>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>>
+>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>>> 
+>>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>>
+>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>>> 
+>>>>>>>>>>>> Constraints:
+>>>>>>>>>>>> 
+>>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>>> 
+
@@ -21085,0 +21167,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>>> 
+>>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>>
+>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>>> 
+>>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>>
+>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>>> 
+>>>>>>>>>>>> Constraints:
+>>>>>>>>>>>> 
+>>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>>> 
+
@@ -23822,0 +23920,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>>> 
+>>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>>
+>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>>> 
+>>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>>
+>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>>> 
+>>>>>>>>>>>> Constraints:
+>>>>>>>>>>>> 
+>>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>>> 
+
@@ -27707,0 +27821,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>> 
+>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>
+>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>> 
+>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>
+>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>> 
+>>>>>>>>>>> Constraints:
+>>>>>>>>>>> 
+>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>> 
+
@@ -30444,0 +30574,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>> 
+>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>
+>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>> 
+>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>
+>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>> 
+>>>>>>>>>>> Constraints:
+>>>>>>>>>>> 
+>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>> 
+
@@ -34405,0 +34551,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>> 
+>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>
+>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>> 
+>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>
+>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>> 
+>>>>>>>>>>> Constraints:
+>>>>>>>>>>> 
+>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>> 
+
@@ -37142,0 +37304,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>>>> 
+>>>>>>>>> Monetize -> (structure)
+>>>>>>>>>
+>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL.
+>>>>>>>>>> 
+>>>>>>>>>> PriceMultiplier -> (string)
+>>>>>>>>>>
+>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100.
+>>>>>>>>>>> 
+>>>>>>>>>>> Constraints:
+>>>>>>>>>>> 
+>>>>>>>>>>>   * min: `1`
+>>>>>>>>>>>   * max: `3`
+>>>>>>>>>>>   * pattern: `^([1-9][0-9]?|100)$`
+>>>>>>>>>>> 
+
@@ -39215,0 +39393,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2-
+>>>>>>> 
+>>>>>>> Monetize -> (structure)
+>>>>>>>