有关WAF托管规则、问题定位以及自定义页面的问题

【以下的回答经过翻译处理】 1. AWS（Marketplace）托管规则的更改没有发布进度，它们会在新的漏洞和威胁出现时由AWS（或Marketplace seller）自动更新。 2. 当AWS（或者Marketplace）托管规则更新时不会发送通知。 每当AWS（或Marketplace）托管的Web ACL更新时，您的帐户中会有一个CloudTrail UpdateWebACL API调用，您可以设置一个CloudTrail事件触发来感知UpdateWebACL API的调用。 最简单方法是订阅SNS主题，然后创建一个CloudWatch Event rule以触发此操作。 请注意，WebACL中的RuleGroup由供应商拥有和管理，您将无法查看/了解所做的更改。 "Each AWS Marketplace rule group provides a comprehensive description of the types of attacks and vulnerabilities that it's designed to protect against. To protect the intellectual property of the rule group providers, you can't view the individual rules within a rule group. This restriction also helps to keep malicious users from designing threats that specifically circumvent published rules."

• https://docs.aws.amazon.com/waf/latest/developerguide/waf-managed-rule-groups.html

3. 您可以从WAF日志（https://docs.aws.amazon.com/waf/latest/developerguide/logging.html）中获得更多信息
4. 可以通过AWS WAF的custom responses功能来实现自定义403页面。具体请参照这篇博客"Customize requests and responses with AWS WAF"：https://aws.amazon.com/blogs/security/customize-requests-and-responses-with-aws-waf/