AWS solutions documentation change

Service: solutions · 2026-06-25 · Documentation low

File: solutions/latest/security-automations-for-aws-waf/solution-overview.md

Summary

Added retirement notice for Security Automations for AWS WAF solution effective December 2026, with migration guidance to native AWS WAF features

Security assessment

The change announces solution retirement and recommends migration to native AWS WAF capabilities. While it mentions 'enhanced security features' in native services, it doesn't address any specific security vulnerability, weakness, or incident. The update is a product lifecycle notification without security remediation content.

Diff

diff --git a/solutions/latest/security-automations-for-aws-waf/solution-overview.md b/solutions/latest/security-automations-for-aws-waf/solution-overview.md
index 3d202238d..986464720 100644
--- a//solutions/latest/security-automations-for-aws-waf/solution-overview.md
+++ b//solutions/latest/security-automations-for-aws-waf/solution-overview.md
@@ -8,0 +9,6 @@
+###### Important
+
+[Security Automations for AWS WAF](https://docs.aws.amazon.com/solutions/security-automations-for-aws-waf/) will retire in December 2026. Deployments (via CloudFormation or GitHub) will remain operational, but customers will assume responsibility for maintenance and API-related updates post-retirement. Customers can explore using native AWS WAF capabilities including [AWS Managed Rules](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups.html), native rate-based rules, and the [AWS WAF Console](https://console.aws.amazon.com/wafv2/) for intuitive configuration and management. These native capabilities provide superior functionality, better performance, real-time updates, and enhanced security features compared to the solution.
+
+Customers running solution versions prior to v3.0.0 (which deployed AWS WAF Classic) should first migrate to AWS WAF v2 using the [AWS WAF migration documentation](https://docs.aws.amazon.com/waf/latest/developerguide/waf-migrating-from-classic.html). Customers on v3.0.0 or later are already on AWS WAF v2 and can directly adopt native managed rules and console-based management.
+