Ravi Sir's Cards › AWS
Observe or stop?
This comparison card contrasts Observe or stop. Count action is described as non-terminating. It also notes later rules still run. It also notes great for learning. Block action is described as terminating deny. It also notes stops evaluation for that request. The card pairs Count action with first 24–72 hours, and Block action with after sampled review.
Read card text
What this card says
Observe or stop?
Count action
Non-terminating; later rules still run; great for learning.
Block action
Terminating deny; stops evaluation for that request.
Key points
New managed rules; uncertain signatures.
Known-bad after FP review.
Example
Override to Count / Action Block
Use when
First 24–72 hours.
After sampled review.