AWS cli documentation change
Summary
Added documentation for new 'Monetize' rule action and '--monetization-config' option to support request monetization features
Security assessment
The change introduces a new terminating action (Monetize) that blocks unpaid requests, which is a security control mechanism. However, there's no evidence of it addressing an existing vulnerability. It adds documentation for a security feature (payment-based access control) but doesn't fix a security flaw.
Diff
diff --git a/cli/latest/reference/wafv2/update-rule-group.md b/cli/latest/reference/wafv2/update-rule-group.md index 3361585ec..0d547e051 100644 --- a//cli/latest/reference/wafv2/update-rule-group.md +++ b//cli/latest/reference/wafv2/update-rule-group.md @@ -15 +15 @@ - * [AWS CLI 2.35.3 Command Reference](../../index.html) » + * [AWS CLI 2.35.5 Command Reference](../../index.html) » @@ -102,0 +103 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2- + [--monetization-config <value>] @@ -3390,0 +3392,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2- +>>>>>>> +>>>>>>> Monetize -> (structure) +>>>>>>> +>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>> +>>>>>>>> PriceMultiplier -> (string) +>>>>>>>> +>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>> +>>>>>>>>> Constraints: +>>>>>>>>> +>>>>>>>>> * min: `1` +>>>>>>>>> * max: `3` +>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>> + @@ -7351,0 +7369,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2- +>>>>>>>>> +>>>>>>>>> Monetize -> (structure) +>>>>>>>>> +>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>> +>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>> +>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `1` +>>>>>>>>>>> * max: `3` +>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>> + @@ -10088,0 +10122,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2- +>>>>>>>>> +>>>>>>>>> Monetize -> (structure) +>>>>>>>>> +>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>> +>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>> +>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `1` +>>>>>>>>>>> * max: `3` +>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>> + @@ -14457,0 +14507,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2- +>>>>>>>>>> +>>>>>>>>>> Monetize -> (structure) +>>>>>>>>>> +>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>>> +>>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `3` +>>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>>> + @@ -17194,0 +17260,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2- +>>>>>>>>>> +>>>>>>>>>> Monetize -> (structure) +>>>>>>>>>> +>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>>> +>>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `3` +>>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>>> + @@ -21085,0 +21167,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2- +>>>>>>>>>> +>>>>>>>>>> Monetize -> (structure) +>>>>>>>>>> +>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>>> +>>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `3` +>>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>>> + @@ -23822,0 +23920,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2- +>>>>>>>>>> +>>>>>>>>>> Monetize -> (structure) +>>>>>>>>>> +>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>>> +>>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `3` +>>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>>> + @@ -27707,0 +27821,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2- +>>>>>>>>> +>>>>>>>>> Monetize -> (structure) +>>>>>>>>> +>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>> +>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>> +>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `1` +>>>>>>>>>>> * max: `3` +>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>> + @@ -30444,0 +30574,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2- +>>>>>>>>> +>>>>>>>>> Monetize -> (structure) +>>>>>>>>> +>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>> +>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>> +>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `1` +>>>>>>>>>>> * max: `3` +>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>> + @@ -34405,0 +34551,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2- +>>>>>>>>> +>>>>>>>>> Monetize -> (structure) +>>>>>>>>> +>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>> +>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>> +>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `1` +>>>>>>>>>>> * max: `3` +>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>> + @@ -37142,0 +37304,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2- +>>>>>>>>> +>>>>>>>>> Monetize -> (structure) +>>>>>>>>> +>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>> +>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>> +>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `1` +>>>>>>>>>>> * max: `3` +>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>> + @@ -39215,0 +39393,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2- +>>>>>>> +>>>>>>> Monetize -> (structure) +>>>>>>>