Missing pre-built rule

[reakaleek]

Describe the bug

The page with the URL https://www.elastic.co/docs/reference/security/prebuilt-rules/rules/integrations/aws/privilege_escalation_root_login_without_mfa was recently deleted.

Now, the URL just 404s.

This seems to be the related PR that might have caused this: elastic/detection-rules#5351. However, this PR only sets it to "deprecated".

Expected behavior

The URL should still be there and the page is should probably be marked as deprecated.

Steps to reproduce

No response

Tooling

• docs-builder
• migration tooling
• I'm not sure

[Mpdreamz]

This is because its moved into the _deprecated folder which we filter out:

docs-builder/src/Elastic.Documentation.Configuration/Toc/DetectionRules/DetectionRuleOverviewRef.cs

Line 49 in e40698d

.Where(f => !f.FullName.Contains($"{Path.DirectorySeparatorChar}_deprecated{Path.DirectorySeparatorChar}"))

@Mikaayenson should these deprecated rules still be visible on elastic.co, albeit with a large deprecated admonition?

[reakaleek]

Related to this, I found other entries that have many 404s in our logging list in https://github.com/elastic/docs-eng-team/issues/306

• /docs/reference/security/prebuilt-rules/rules/integrations/aws/exfiltration_ec2_snapshot_change_activity
• /docs/reference/security/prebuilt-rules/rules/integrations/aws/exfiltration_sns_email_subscription_by_rare_user
• /docs/reference/security/prebuilt-rules/rules/integrations/aws/privilege_escalation_sts_getsessiontoken_abuse
• /docs/reference/security/prebuilt-rules/rules/integrations/azure/credential_access_key_vault_modified
• /docs/reference/security/prebuilt-rules/rules/linux/persistence_etc_file_creation
• /docs/reference/security/prebuilt-rules/rules/integrations/o365/initial_access_microsoft_365_exchange_anti_phish_policy_deletion