AWS waf: Note: proactive engagement not available for Anti-DDoS AMR events
Summary
Adds a note clarifying that Shield Advanced proactive engagement is not triggered by events detected by the Anti-DDoS managed rule group (AMR), and directs users to set up alarms via AMR events/metrics or contact support.
Security assessment
Documents DDoS response behavior and how to get notified for AMR-detected events, which is security-adjacent guidance but does not address a specific vulnerability or incident.
Evidence
Proactive engagement is not available for events detected by the [Anti-DDoS managed rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-anti-ddos.html) (AMR).
Diff
diff --git a/waf/latest/developerguide/ddos-srt-proactive-engagement.md b/waf/latest/developerguide/ddos-srt-proactive-engagement.md index 2248ebb88..0ccab70fd 100644 --- a//waf/latest/developerguide/ddos-srt-proactive-engagement.md +++ b//waf/latest/developerguide/ddos-srt-proactive-engagement.md @@ -12,0 +13,4 @@ You can now use the updated experience to access AWS WAF functionality anywhere +###### Note + +Proactive engagement is not available for events detected by the [Anti-DDoS managed rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-anti-ddos.html) (AMR). The Shield Advanced console gives you visibility into events for both Shield Advanced and Anti-DDoS AMR detections. Only an event that's detected by Shield Advanced can trigger the proactive engagement. To be notified for Anti-DDoS managed rule group events, set up alarms using events and metrics generated by the Anti-DDoS AMR. Contact support to engage with SRT if needed. +