aws-sdk-lightsail 1.139.0 → 1.141.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 14669c86c25f68d8a1d8d5c21f506ef32177fd357c8bd1575ca00f41a487ec15
-  data.tar.gz: 747cd3d05ffbf4bfcb139924e62987c5724653fca02478203e730e7dd230929e
+  metadata.gz: 728402fc8f95b0e4281a78bd5d3529c9208f0673de999a0a96621af74b845c7d
+  data.tar.gz: a980ddbd0d4f054432ccc151e787632e941071196880823fc2a692543ff3aff4
 SHA512:
-  metadata.gz: c3f02e383179b45a66af616a51c358216e6ab7896bb48180c893e23a663ef106f25f8d8cee30e1811c9108fa116d76751cde3e6156a6e69e57b05e86c9b696e6
-  data.tar.gz: f336fdfefe76c4cdc3a25fb2253bdd69e37227ba333cdd154e082ad59a51a251fa34debbd077a577f4c16748de73d94e10a57534551eaa48e1270e323e114b80
+  metadata.gz: aed43f840cfec37cfe1bedfcf80658ce1a722cbbf1e239a8b56d854e326e5ac702fbe2316696d13b186282fde61ee9ee6763273ba604ab9cceb52fd4f901432c
+  data.tar.gz: 35c4b9a84e0f21918a4f10b0e56657ff83a4e1807027a96e60a5c7ac8c56416811303cb49aba2665f280ab1492838132b641ba4c2d55867909fc2f5e0f983203

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.141.0 (2026-10-26)
+------------------
+
+* Feature - This release adds Web Application Firewall (WAF) support for Lightsail distribution.
+
+1.140.0 (2026-10-21)
+------------------
+
+* Feature - This release adds support for metrics related to system-disk performance.
+
 1.139.0 (2026-10-20)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.139.0
+1.141.0

data/lib/aws-sdk-lightsail/client.rb

@@ -2438,6 +2438,40 @@ module Aws::Lightsail
     #   to return when the origin responds with a given HTTP error code. You
     #   can also specify the HTTP status code to send to the viewer.
     #
+    # @option params [Boolean] :enable_waf
+    #   Specifies whether to enable Web Application Firewall (WAF) for the
+    #   distribution. WAF inspects viewer requests and blocks requests that
+    #   match the WAF rule groups that you enable.
+    #
+    #   When you enable WAF without specifying the `wafRules` parameter, the
+    #   distribution has no WAF rule groups enabled and doesn't block any
+    #   requests.
+    #
+    #   <note markdown="1"> WAF is available only for distributions that use the `medium_1_0` or
+    #   `large_1_0` bundle.
+    #
+    #    </note>
+    #
+    # @option params [Array<Types::WafRule>] :waf_rules
+    #   An array of objects that describe the WAF rule groups to enable for
+    #   the distribution.
+    #
+    #   The WAF rule groups that you can specify depend on the bundle of the
+    #   distribution:
+    #
+    #   * `medium_1_0` – Supports the `AWSManagedRulesCommonRuleSet`,
+    #     `AWSManagedRulesKnownBadInputsRuleSet`, and
+    #     `AWSManagedRulesAnonymousIpList` rule groups.
+    #
+    #   * `large_1_0` – Supports the rule groups for `medium_1_0`, plus
+    #     `AWSManagedRulesAdminProtectionRuleSet`,
+    #     `AWSManagedRulesSQLiRuleSet`, `AWSManagedRulesLinuxRuleSet`,
+    #     `AWSManagedRulesUnixRuleSet`, `AWSManagedRulesWindowsRuleSet`,
+    #     `AWSManagedRulesPHPRuleSet`, `AWSManagedRulesWordPressRuleSet`,
+    #     `AWSManagedRulesAmazonIpReputationList`,
+    #     `AWSManagedRulesATPRuleSet`, `AWSManagedRulesACFPRuleSet`, and
+    #     `AWSManagedRulesBotControlRuleSet` rule groups.
+    #
     # @return [Types::CreateDistributionResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateDistributionResult#distribution #distribution} => Types::LightsailDistribution
@@ -2502,6 +2536,34 @@ module Aws::Lightsail
     #         error_caching_min_ttl: 1,
     #       },
     #     ],
+    #     enable_waf: false,
+    #     waf_rules: [
+    #       {
+    #         name: "string", # required
+    #         atp_config: {
+    #           login_path: "string",
+    #           payload_type: "JSON", # accepts JSON, FORM_ENCODED
+    #           username_field: "string",
+    #           password_field: "string",
+    #           response_inspection: {
+    #             success_codes: [1],
+    #             failure_codes: [1],
+    #           },
+    #         },
+    #         acfp_config: {
+    #           payload_type: "JSON", # accepts JSON, FORM_ENCODED
+    #           creation_path: "string",
+    #           registration_page_path: "string",
+    #           response_inspection: {
+    #             success_codes: [1],
+    #             failure_codes: [1],
+    #           },
+    #         },
+    #         bot_control_config: {
+    #           inspection_level: "COMMON", # accepts COMMON, TARGETED
+    #         },
+    #       },
+    #     ],
     #   })
     #
     # @example Response structure
@@ -2558,6 +2620,25 @@ module Aws::Lightsail
     #   resp.distribution.custom_error_responses[0].response_code #=> String
     #   resp.distribution.custom_error_responses[0].response_page_path #=> String
     #   resp.distribution.custom_error_responses[0].error_caching_min_ttl #=> Integer
+    #   resp.distribution.waf.is_waf_enabled #=> Boolean
+    #   resp.distribution.waf.waf_rules #=> Array
+    #   resp.distribution.waf.waf_rules[0].name #=> String
+    #   resp.distribution.waf.waf_rules[0].atp_config.login_path #=> String
+    #   resp.distribution.waf.waf_rules[0].atp_config.payload_type #=> String, one of "JSON", "FORM_ENCODED"
+    #   resp.distribution.waf.waf_rules[0].atp_config.username_field #=> String
+    #   resp.distribution.waf.waf_rules[0].atp_config.password_field #=> String
+    #   resp.distribution.waf.waf_rules[0].atp_config.response_inspection.success_codes #=> Array
+    #   resp.distribution.waf.waf_rules[0].atp_config.response_inspection.success_codes[0] #=> Integer
+    #   resp.distribution.waf.waf_rules[0].atp_config.response_inspection.failure_codes #=> Array
+    #   resp.distribution.waf.waf_rules[0].atp_config.response_inspection.failure_codes[0] #=> Integer
+    #   resp.distribution.waf.waf_rules[0].acfp_config.payload_type #=> String, one of "JSON", "FORM_ENCODED"
+    #   resp.distribution.waf.waf_rules[0].acfp_config.creation_path #=> String
+    #   resp.distribution.waf.waf_rules[0].acfp_config.registration_page_path #=> String
+    #   resp.distribution.waf.waf_rules[0].acfp_config.response_inspection.success_codes #=> Array
+    #   resp.distribution.waf.waf_rules[0].acfp_config.response_inspection.success_codes[0] #=> Integer
+    #   resp.distribution.waf.waf_rules[0].acfp_config.response_inspection.failure_codes #=> Array
+    #   resp.distribution.waf.waf_rules[0].acfp_config.response_inspection.failure_codes[0] #=> Integer
+    #   resp.distribution.waf.waf_rules[0].bot_control_config.inspection_level #=> String, one of "COMMON", "TARGETED"
     #   resp.operation.id #=> String
     #   resp.operation.resource_name #=> String
     #   resp.operation.resource_type #=> String, one of "ContainerService", "Instance", "StaticIp", "KeyPair", "InstanceSnapshot", "Domain", "PeeredVpc", "LoadBalancer", "LoadBalancerTlsCertificate", "Disk", "DiskSnapshot", "RelationalDatabase", "RelationalDatabaseSnapshot", "ExportSnapshotRecord", "CloudFormationStackRecord", "Alarm", "ContactMethod", "Distribution", "Certificate", "Bucket"
@@ -5604,7 +5685,7 @@ module Aws::Lightsail
     #   resp.alarms[0].datapoints_to_alarm #=> Integer
     #   resp.alarms[0].treat_missing_data #=> String, one of "breaching", "notBreaching", "ignore", "missing"
     #   resp.alarms[0].statistic #=> String, one of "Minimum", "Maximum", "Sum", "Average", "SampleCount"
-    #   resp.alarms[0].metric_name #=> String, one of "CPUUtilization", "NetworkIn", "NetworkOut", "StatusCheckFailed", "StatusCheckFailed_Instance", "StatusCheckFailed_System", "ClientTLSNegotiationErrorCount", "HealthyHostCount", "UnhealthyHostCount", "HTTPCode_LB_4XX_Count", "HTTPCode_LB_5XX_Count", "HTTPCode_Instance_2XX_Count", "HTTPCode_Instance_3XX_Count", "HTTPCode_Instance_4XX_Count", "HTTPCode_Instance_5XX_Count", "InstanceResponseTime", "RejectedConnectionCount", "RequestCount", "DatabaseConnections", "DiskQueueDepth", "FreeStorageSpace", "NetworkReceiveThroughput", "NetworkTransmitThroughput", "FreeableMemory", "SwapUsage", "BurstCapacityTime", "BurstCapacityPercentage"
+    #   resp.alarms[0].metric_name #=> String, one of "CPUUtilization", "NetworkIn", "NetworkOut", "StatusCheckFailed", "StatusCheckFailed_Instance", "StatusCheckFailed_System", "ClientTLSNegotiationErrorCount", "HealthyHostCount", "UnhealthyHostCount", "HTTPCode_LB_4XX_Count", "HTTPCode_LB_5XX_Count", "HTTPCode_Instance_2XX_Count", "HTTPCode_Instance_3XX_Count", "HTTPCode_Instance_4XX_Count", "HTTPCode_Instance_5XX_Count", "InstanceResponseTime", "RejectedConnectionCount", "RequestCount", "DatabaseConnections", "DiskQueueDepth", "FreeStorageSpace", "NetworkReceiveThroughput", "NetworkTransmitThroughput", "FreeableMemory", "SwapUsage", "BurstCapacityTime", "BurstCapacityPercentage", "DiskReadOps", "DiskWriteOps", "DiskReadBytes", "DiskWriteBytes", "DiskTotalReadTime", "DiskTotalWriteTime", "DiskQueueLength"
     #   resp.alarms[0].state #=> String, one of "OK", "ALARM", "INSUFFICIENT_DATA"
     #   resp.alarms[0].unit #=> String, one of "Seconds", "Microseconds", "Milliseconds", "Bytes", "Kilobytes", "Megabytes", "Gigabytes", "Terabytes", "Bits", "Kilobits", "Megabits", "Gigabits", "Terabits", "Percent", "Count", "Bytes/Second", "Kilobytes/Second", "Megabytes/Second", "Gigabytes/Second", "Terabytes/Second", "Bits/Second", "Kilobits/Second", "Megabits/Second", "Gigabits/Second", "Terabits/Second", "Count/Second", "None"
     #   resp.alarms[0].contact_protocols #=> Array
@@ -7286,6 +7367,22 @@ module Aws::Lightsail
     #
     #     `Unit`: The published unit is `Percent`.
     #
+    #   * <b> <code>WafAllowedRequests</code> </b> - The number of viewer
+    #     requests that Web Application Firewall (WAF) allowed. This metric is
+    #     available only when WAF is enabled for the distribution.
+    #
+    #     `Statistics`: The most useful statistic is `Sum`.
+    #
+    #     `Unit`: The published unit is `None`.
+    #
+    #   * <b> <code>WafBlockedRequests</code> </b> - The number of viewer
+    #     requests that WAF blocked. This metric is available only when WAF is
+    #     enabled for the distribution.
+    #
+    #     `Statistics`: The most useful statistic is `Sum`.
+    #
+    #     `Unit`: The published unit is `None`.
+    #
     # @option params [required, Time,DateTime,Date,Integer,String] :start_time
     #   The start of the time interval for which to get metric data.
     #
@@ -7370,7 +7467,7 @@ module Aws::Lightsail
     #
     #   resp = client.get_distribution_metric_data({
     #     distribution_name: "ResourceName", # required
-    #     metric_name: "Requests", # required, accepts Requests, BytesDownloaded, BytesUploaded, TotalErrorRate, Http4xxErrorRate, Http5xxErrorRate
+    #     metric_name: "Requests", # required, accepts Requests, BytesDownloaded, BytesUploaded, TotalErrorRate, Http4xxErrorRate, Http5xxErrorRate, WafAllowedRequests, WafBlockedRequests
     #     start_time: Time.now, # required
     #     end_time: Time.now, # required
     #     period: 1, # required
@@ -7380,7 +7477,7 @@ module Aws::Lightsail
     #
     # @example Response structure
     #
-    #   resp.metric_name #=> String, one of "Requests", "BytesDownloaded", "BytesUploaded", "TotalErrorRate", "Http4xxErrorRate", "Http5xxErrorRate"
+    #   resp.metric_name #=> String, one of "Requests", "BytesDownloaded", "BytesUploaded", "TotalErrorRate", "Http4xxErrorRate", "Http5xxErrorRate", "WafAllowedRequests", "WafBlockedRequests"
     #   resp.metric_data #=> Array
     #   resp.metric_data[0].average #=> Float
     #   resp.metric_data[0].maximum #=> Float
@@ -7482,6 +7579,25 @@ module Aws::Lightsail
     #   resp.distributions[0].custom_error_responses[0].response_code #=> String
     #   resp.distributions[0].custom_error_responses[0].response_page_path #=> String
     #   resp.distributions[0].custom_error_responses[0].error_caching_min_ttl #=> Integer
+    #   resp.distributions[0].waf.is_waf_enabled #=> Boolean
+    #   resp.distributions[0].waf.waf_rules #=> Array
+    #   resp.distributions[0].waf.waf_rules[0].name #=> String
+    #   resp.distributions[0].waf.waf_rules[0].atp_config.login_path #=> String
+    #   resp.distributions[0].waf.waf_rules[0].atp_config.payload_type #=> String, one of "JSON", "FORM_ENCODED"
+    #   resp.distributions[0].waf.waf_rules[0].atp_config.username_field #=> String
+    #   resp.distributions[0].waf.waf_rules[0].atp_config.password_field #=> String
+    #   resp.distributions[0].waf.waf_rules[0].atp_config.response_inspection.success_codes #=> Array
+    #   resp.distributions[0].waf.waf_rules[0].atp_config.response_inspection.success_codes[0] #=> Integer
+    #   resp.distributions[0].waf.waf_rules[0].atp_config.response_inspection.failure_codes #=> Array
+    #   resp.distributions[0].waf.waf_rules[0].atp_config.response_inspection.failure_codes[0] #=> Integer
+    #   resp.distributions[0].waf.waf_rules[0].acfp_config.payload_type #=> String, one of "JSON", "FORM_ENCODED"
+    #   resp.distributions[0].waf.waf_rules[0].acfp_config.creation_path #=> String
+    #   resp.distributions[0].waf.waf_rules[0].acfp_config.registration_page_path #=> String
+    #   resp.distributions[0].waf.waf_rules[0].acfp_config.response_inspection.success_codes #=> Array
+    #   resp.distributions[0].waf.waf_rules[0].acfp_config.response_inspection.success_codes[0] #=> Integer
+    #   resp.distributions[0].waf.waf_rules[0].acfp_config.response_inspection.failure_codes #=> Array
+    #   resp.distributions[0].waf.waf_rules[0].acfp_config.response_inspection.failure_codes[0] #=> Integer
+    #   resp.distributions[0].waf.waf_rules[0].bot_control_config.inspection_level #=> String, one of "COMMON", "TARGETED"
     #   resp.next_page_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/GetDistributions AWS API Documentation
@@ -7958,9 +8074,76 @@ module Aws::Lightsail
     #
     #     `Unit`: The published unit is `Count`.
     #
+    #   * <b> <code>DiskReadOps</code> </b> - The number of read operations
+    #     completed on the system disk of the instance during the period. This
+    #     metric doesn't include activity on additional disks that you attach
+    #     to the instance.
+    #
+    #     `Statistics`: The most useful statistic is `Sum`.
+    #
+    #     `Unit`: The published unit is `Count`.
+    #
+    #   * <b> <code>DiskWriteOps</code> </b> - The number of write operations
+    #     completed on the system disk of the instance during the period. This
+    #     metric doesn't include activity on additional disks that you attach
+    #     to the instance.
+    #
+    #     `Statistics`: The most useful statistic is `Sum`.
+    #
+    #     `Unit`: The published unit is `Count`.
+    #
+    #   * <b> <code>DiskReadBytes</code> </b> - The number of bytes read from
+    #     the system disk of the instance during the period. This metric
+    #     doesn't include activity on additional disks that you attach to the
+    #     instance.
+    #
+    #     `Statistics`: The most useful statistic is `Sum`.
+    #
+    #     `Unit`: The published unit is `Bytes`.
+    #
+    #   * <b> <code>DiskWriteBytes</code> </b> - The number of bytes written
+    #     to the system disk of the instance during the period. This metric
+    #     doesn't include activity on additional disks that you attach to the
+    #     instance.
+    #
+    #     `Statistics`: The most useful statistic is `Sum`.
+    #
+    #     `Unit`: The published unit is `Bytes`.
+    #
+    #   * <b> <code>DiskTotalReadTime</code> </b> - The total number of
+    #     seconds spent by all read operations that completed on the system
+    #     disk of the instance during the period. This metric doesn't include
+    #     activity on additional disks that you attach to the instance.
+    #
+    #     `Statistics`: The most useful statistic is `Average`.
+    #
+    #     `Unit`: The published unit is `Seconds`.
+    #
+    #   * <b> <code>DiskTotalWriteTime</code> </b> - The total number of
+    #     seconds spent by all write operations that completed on the system
+    #     disk of the instance during the period. This metric doesn't include
+    #     activity on additional disks that you attach to the instance.
+    #
+    #     `Statistics`: The most useful statistic is `Average`.
+    #
+    #     `Unit`: The published unit is `Seconds`.
+    #
+    #   * <b> <code>DiskQueueLength</code> </b> - The number of read and write
+    #     requests that are waiting to access the system disk of the instance.
+    #     This metric doesn't include activity on additional disks that you
+    #     attach to the instance.
+    #
+    #     `Statistics`: The most useful statistic is `Average`.
+    #
+    #     `Unit`: The published unit is `Count`.
+    #
+    #   For more information about system disk performance metrics, see [View
+    #   system disk performance metrics for your Lightsail instance][2].
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/lightsail/latest/userguide/amazon-lightsail-viewing-instance-burst-capacity
+    #   [2]: https://docs.aws.amazon.com/lightsail/latest/userguide/amazon-lightsail-viewing-instance-disk-performance-metrics
     #
     # @option params [required, Integer] :period
     #   The granularity, in seconds, of the returned data points.
@@ -8017,7 +8200,7 @@ module Aws::Lightsail
     #
     #   resp = client.get_instance_metric_data({
     #     instance_name: "ResourceName", # required
-    #     metric_name: "CPUUtilization", # required, accepts CPUUtilization, NetworkIn, NetworkOut, StatusCheckFailed, StatusCheckFailed_Instance, StatusCheckFailed_System, BurstCapacityTime, BurstCapacityPercentage, MetadataNoToken
+    #     metric_name: "CPUUtilization", # required, accepts CPUUtilization, NetworkIn, NetworkOut, StatusCheckFailed, StatusCheckFailed_Instance, StatusCheckFailed_System, BurstCapacityTime, BurstCapacityPercentage, MetadataNoToken, DiskReadOps, DiskWriteOps, DiskReadBytes, DiskWriteBytes, DiskTotalReadTime, DiskTotalWriteTime, DiskQueueLength
     #     period: 1, # required
     #     start_time: Time.now, # required
     #     end_time: Time.now, # required
@@ -8027,7 +8210,7 @@ module Aws::Lightsail
     #
     # @example Response structure
     #
-    #   resp.metric_name #=> String, one of "CPUUtilization", "NetworkIn", "NetworkOut", "StatusCheckFailed", "StatusCheckFailed_Instance", "StatusCheckFailed_System", "BurstCapacityTime", "BurstCapacityPercentage", "MetadataNoToken"
+    #   resp.metric_name #=> String, one of "CPUUtilization", "NetworkIn", "NetworkOut", "StatusCheckFailed", "StatusCheckFailed_Instance", "StatusCheckFailed_System", "BurstCapacityTime", "BurstCapacityPercentage", "MetadataNoToken", "DiskReadOps", "DiskWriteOps", "DiskReadBytes", "DiskWriteBytes", "DiskTotalReadTime", "DiskTotalWriteTime", "DiskQueueLength"
     #   resp.metric_data #=> Array
     #   resp.metric_data[0].average #=> Float
     #   resp.metric_data[0].maximum #=> Float
@@ -10256,7 +10439,9 @@ module Aws::Lightsail
     #
     #   * **Instances**: `BurstCapacityPercentage`, `BurstCapacityTime`,
     #     `CPUUtilization`, `NetworkIn`, `NetworkOut`, `StatusCheckFailed`,
-    #     `StatusCheckFailed_Instance`, and `StatusCheckFailed_System`.
+    #     `StatusCheckFailed_Instance`, `StatusCheckFailed_System`,
+    #     `DiskReadOps`, `DiskWriteOps`, `DiskReadBytes`, `DiskWriteBytes`,
+    #     `DiskTotalReadTime`, `DiskTotalWriteTime`, and `DiskQueueLength`.
     #
     #   * **Load balancers**: `ClientTLSNegotiationErrorCount`,
     #     `HealthyHostCount`, `UnhealthyHostCount`, `HTTPCode_LB_4XX_Count`,
@@ -10396,7 +10581,7 @@ module Aws::Lightsail
     #
     #   resp = client.put_alarm({
     #     alarm_name: "ResourceName", # required
-    #     metric_name: "CPUUtilization", # required, accepts CPUUtilization, NetworkIn, NetworkOut, StatusCheckFailed, StatusCheckFailed_Instance, StatusCheckFailed_System, ClientTLSNegotiationErrorCount, HealthyHostCount, UnhealthyHostCount, HTTPCode_LB_4XX_Count, HTTPCode_LB_5XX_Count, HTTPCode_Instance_2XX_Count, HTTPCode_Instance_3XX_Count, HTTPCode_Instance_4XX_Count, HTTPCode_Instance_5XX_Count, InstanceResponseTime, RejectedConnectionCount, RequestCount, DatabaseConnections, DiskQueueDepth, FreeStorageSpace, NetworkReceiveThroughput, NetworkTransmitThroughput, FreeableMemory, SwapUsage, BurstCapacityTime, BurstCapacityPercentage
+    #     metric_name: "CPUUtilization", # required, accepts CPUUtilization, NetworkIn, NetworkOut, StatusCheckFailed, StatusCheckFailed_Instance, StatusCheckFailed_System, ClientTLSNegotiationErrorCount, HealthyHostCount, UnhealthyHostCount, HTTPCode_LB_4XX_Count, HTTPCode_LB_5XX_Count, HTTPCode_Instance_2XX_Count, HTTPCode_Instance_3XX_Count, HTTPCode_Instance_4XX_Count, HTTPCode_Instance_5XX_Count, InstanceResponseTime, RejectedConnectionCount, RequestCount, DatabaseConnections, DiskQueueDepth, FreeStorageSpace, NetworkReceiveThroughput, NetworkTransmitThroughput, FreeableMemory, SwapUsage, BurstCapacityTime, BurstCapacityPercentage, DiskReadOps, DiskWriteOps, DiskReadBytes, DiskWriteBytes, DiskTotalReadTime, DiskTotalWriteTime, DiskQueueLength
     #     monitored_resource_name: "ResourceName", # required
     #     comparison_operator: "GreaterThanOrEqualToThreshold", # required, accepts GreaterThanOrEqualToThreshold, GreaterThanThreshold, LessThanThreshold, LessThanOrEqualToThreshold
     #     threshold: 1.0, # required
@@ -12072,6 +12257,51 @@ module Aws::Lightsail
     #   to return when the origin responds with a given HTTP error code. You
     #   can also specify the HTTP status code to send to the viewer.
     #
+    # @option params [Boolean] :enable_waf
+    #   Specifies whether to enable Web Application Firewall (WAF) for the
+    #   distribution. WAF inspects viewer requests and blocks requests that
+    #   match the WAF rule groups that you enable.
+    #
+    #   When you enable WAF without specifying the `wafRules` parameter, the
+    #   distribution has no WAF rule groups enabled and doesn't block any
+    #   requests.
+    #
+    #   <note markdown="1"> WAF is available only for distributions that use the `medium_1_0` or
+    #   `large_1_0` bundle.
+    #
+    #    Setting this parameter to `false` disables WAF for the distribution
+    #   and removes its WAF rule groups. You must enable the WAF rule groups
+    #   again if you enable WAF again.
+    #
+    #    </note>
+    #
+    # @option params [Array<Types::WafRule>] :waf_rules
+    #   An array of objects that describe the WAF rule groups to enable for
+    #   the distribution.
+    #
+    #   The array that you specify replaces the existing WAF rule groups of
+    #   the distribution. To keep a WAF rule group enabled, include it in the
+    #   array. To disable all WAF rule groups, specify an empty array.
+    #
+    #   You can specify this parameter only when WAF is enabled for the
+    #   distribution.
+    #
+    #   The WAF rule groups that you can specify depend on the bundle of the
+    #   distribution:
+    #
+    #   * `medium_1_0` – Supports the `AWSManagedRulesCommonRuleSet`,
+    #     `AWSManagedRulesKnownBadInputsRuleSet`, and
+    #     `AWSManagedRulesAnonymousIpList` rule groups.
+    #
+    #   * `large_1_0` – Supports the rule groups for `medium_1_0`, plus
+    #     `AWSManagedRulesAdminProtectionRuleSet`,
+    #     `AWSManagedRulesSQLiRuleSet`, `AWSManagedRulesLinuxRuleSet`,
+    #     `AWSManagedRulesUnixRuleSet`, `AWSManagedRulesWindowsRuleSet`,
+    #     `AWSManagedRulesPHPRuleSet`, `AWSManagedRulesWordPressRuleSet`,
+    #     `AWSManagedRulesAmazonIpReputationList`,
+    #     `AWSManagedRulesATPRuleSet`, `AWSManagedRulesACFPRuleSet`, and
+    #     `AWSManagedRulesBotControlRuleSet` rule groups.
+    #
     # @return [Types::UpdateDistributionResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateDistributionResult#operation #operation} => Types::Operation
@@ -12129,6 +12359,34 @@ module Aws::Lightsail
     #         error_caching_min_ttl: 1,
     #       },
     #     ],
+    #     enable_waf: false,
+    #     waf_rules: [
+    #       {
+    #         name: "string", # required
+    #         atp_config: {
+    #           login_path: "string",
+    #           payload_type: "JSON", # accepts JSON, FORM_ENCODED
+    #           username_field: "string",
+    #           password_field: "string",
+    #           response_inspection: {
+    #             success_codes: [1],
+    #             failure_codes: [1],
+    #           },
+    #         },
+    #         acfp_config: {
+    #           payload_type: "JSON", # accepts JSON, FORM_ENCODED
+    #           creation_path: "string",
+    #           registration_page_path: "string",
+    #           response_inspection: {
+    #             success_codes: [1],
+    #             failure_codes: [1],
+    #           },
+    #         },
+    #         bot_control_config: {
+    #           inspection_level: "COMMON", # accepts COMMON, TARGETED
+    #         },
+    #       },
+    #     ],
     #   })
     #
     # @example Response structure
@@ -12728,7 +12986,7 @@ module Aws::Lightsail
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-lightsail'
-      context[:gem_version] = '1.139.0'
+      context[:gem_version] = '1.141.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-lightsail/client_api.rb

@@ -692,6 +692,16 @@ module Aws::Lightsail
     UpdateRelationalDatabaseRequest = Shapes::StructureShape.new(name: 'UpdateRelationalDatabaseRequest')
     UpdateRelationalDatabaseResult = Shapes::StructureShape.new(name: 'UpdateRelationalDatabaseResult')
     ViewerMinimumTlsProtocolVersionEnum = Shapes::StringShape.new(name: 'ViewerMinimumTlsProtocolVersionEnum')
+    WafAcfpConfig = Shapes::StructureShape.new(name: 'WafAcfpConfig')
+    WafAtpConfig = Shapes::StructureShape.new(name: 'WafAtpConfig')
+    WafBotControlConfig = Shapes::StructureShape.new(name: 'WafBotControlConfig')
+    WafConfig = Shapes::StructureShape.new(name: 'WafConfig')
+    WafInspectionLevelEnum = Shapes::StringShape.new(name: 'WafInspectionLevelEnum')
+    WafPayloadTypeEnum = Shapes::StringShape.new(name: 'WafPayloadTypeEnum')
+    WafResponseInspection = Shapes::StructureShape.new(name: 'WafResponseInspection')
+    WafRule = Shapes::StructureShape.new(name: 'WafRule')
+    WafRuleList = Shapes::ListShape.new(name: 'WafRuleList')
+    WafStatusCodeList = Shapes::ListShape.new(name: 'WafStatusCodeList')
     boolean = Shapes::BooleanShape.new(name: 'boolean')
     double = Shapes::FloatShape.new(name: 'double')
     float = Shapes::FloatShape.new(name: 'float')
@@ -1286,6 +1296,8 @@ module Aws::Lightsail
     CreateDistributionRequest.add_member(:enable_private_origin_access, Shapes::ShapeRef.new(shape: boolean, location_name: "enablePrivateOriginAccess"))
     CreateDistributionRequest.add_member(:default_root_object, Shapes::ShapeRef.new(shape: string, location_name: "defaultRootObject"))
     CreateDistributionRequest.add_member(:custom_error_responses, Shapes::ShapeRef.new(shape: DistributionCustomErrorResponseList, location_name: "customErrorResponses"))
+    CreateDistributionRequest.add_member(:enable_waf, Shapes::ShapeRef.new(shape: boolean, location_name: "enableWaf"))
+    CreateDistributionRequest.add_member(:waf_rules, Shapes::ShapeRef.new(shape: WafRuleList, location_name: "wafRules"))
     CreateDistributionRequest.struct_class = Types::CreateDistributionRequest
 
     CreateDistributionResult.add_member(:distribution, Shapes::ShapeRef.new(shape: LightsailDistribution, location_name: "distribution"))
@@ -2485,6 +2497,7 @@ module Aws::Lightsail
     LightsailDistribution.add_member(:viewer_minimum_tls_protocol_version, Shapes::ShapeRef.new(shape: string, location_name: "viewerMinimumTlsProtocolVersion"))
     LightsailDistribution.add_member(:default_root_object, Shapes::ShapeRef.new(shape: string, location_name: "defaultRootObject"))
     LightsailDistribution.add_member(:custom_error_responses, Shapes::ShapeRef.new(shape: DistributionCustomErrorResponseList, location_name: "customErrorResponses"))
+    LightsailDistribution.add_member(:waf, Shapes::ShapeRef.new(shape: WafConfig, location_name: "waf"))
     LightsailDistribution.struct_class = Types::LightsailDistribution
 
     LoadBalancer.add_member(:name, Shapes::ShapeRef.new(shape: ResourceName, location_name: "name"))
@@ -3155,6 +3168,8 @@ module Aws::Lightsail
     UpdateDistributionRequest.add_member(:enable_private_origin_access, Shapes::ShapeRef.new(shape: boolean, location_name: "enablePrivateOriginAccess"))
     UpdateDistributionRequest.add_member(:default_root_object, Shapes::ShapeRef.new(shape: string, location_name: "defaultRootObject"))
     UpdateDistributionRequest.add_member(:custom_error_responses, Shapes::ShapeRef.new(shape: DistributionCustomErrorResponseList, location_name: "customErrorResponses"))
+    UpdateDistributionRequest.add_member(:enable_waf, Shapes::ShapeRef.new(shape: boolean, location_name: "enableWaf"))
+    UpdateDistributionRequest.add_member(:waf_rules, Shapes::ShapeRef.new(shape: WafRuleList, location_name: "wafRules"))
     UpdateDistributionRequest.struct_class = Types::UpdateDistributionRequest
 
     UpdateDistributionResult.add_member(:operation, Shapes::ShapeRef.new(shape: Operation, location_name: "operation"))
@@ -3208,6 +3223,40 @@ module Aws::Lightsail
     UpdateRelationalDatabaseResult.add_member(:operations, Shapes::ShapeRef.new(shape: OperationList, location_name: "operations"))
     UpdateRelationalDatabaseResult.struct_class = Types::UpdateRelationalDatabaseResult
 
+    WafAcfpConfig.add_member(:payload_type, Shapes::ShapeRef.new(shape: WafPayloadTypeEnum, location_name: "payloadType"))
+    WafAcfpConfig.add_member(:creation_path, Shapes::ShapeRef.new(shape: string, location_name: "creationPath"))
+    WafAcfpConfig.add_member(:registration_page_path, Shapes::ShapeRef.new(shape: string, location_name: "registrationPagePath"))
+    WafAcfpConfig.add_member(:response_inspection, Shapes::ShapeRef.new(shape: WafResponseInspection, location_name: "responseInspection"))
+    WafAcfpConfig.struct_class = Types::WafAcfpConfig
+
+    WafAtpConfig.add_member(:login_path, Shapes::ShapeRef.new(shape: string, location_name: "loginPath"))
+    WafAtpConfig.add_member(:payload_type, Shapes::ShapeRef.new(shape: WafPayloadTypeEnum, location_name: "payloadType"))
+    WafAtpConfig.add_member(:username_field, Shapes::ShapeRef.new(shape: string, location_name: "usernameField"))
+    WafAtpConfig.add_member(:password_field, Shapes::ShapeRef.new(shape: string, location_name: "passwordField"))
+    WafAtpConfig.add_member(:response_inspection, Shapes::ShapeRef.new(shape: WafResponseInspection, location_name: "responseInspection"))
+    WafAtpConfig.struct_class = Types::WafAtpConfig
+
+    WafBotControlConfig.add_member(:inspection_level, Shapes::ShapeRef.new(shape: WafInspectionLevelEnum, location_name: "inspectionLevel"))
+    WafBotControlConfig.struct_class = Types::WafBotControlConfig
+
+    WafConfig.add_member(:is_waf_enabled, Shapes::ShapeRef.new(shape: boolean, location_name: "isWafEnabled"))
+    WafConfig.add_member(:waf_rules, Shapes::ShapeRef.new(shape: WafRuleList, location_name: "wafRules"))
+    WafConfig.struct_class = Types::WafConfig
+
+    WafResponseInspection.add_member(:success_codes, Shapes::ShapeRef.new(shape: WafStatusCodeList, location_name: "successCodes"))
+    WafResponseInspection.add_member(:failure_codes, Shapes::ShapeRef.new(shape: WafStatusCodeList, location_name: "failureCodes"))
+    WafResponseInspection.struct_class = Types::WafResponseInspection
+
+    WafRule.add_member(:name, Shapes::ShapeRef.new(shape: string, required: true, location_name: "name"))
+    WafRule.add_member(:atp_config, Shapes::ShapeRef.new(shape: WafAtpConfig, location_name: "atpConfig"))
+    WafRule.add_member(:acfp_config, Shapes::ShapeRef.new(shape: WafAcfpConfig, location_name: "acfpConfig"))
+    WafRule.add_member(:bot_control_config, Shapes::ShapeRef.new(shape: WafBotControlConfig, location_name: "botControlConfig"))
+    WafRule.struct_class = Types::WafRule
+
+    WafRuleList.member = Shapes::ShapeRef.new(shape: WafRule)
+
+    WafStatusCodeList.member = Shapes::ShapeRef.new(shape: integer)
+
     setupHistoryList.member = Shapes::ShapeRef.new(shape: SetupHistory)
 
 

data/lib/aws-sdk-lightsail/types.rb

@@ -3795,6 +3795,42 @@ module Aws::Lightsail
     #   can also specify the HTTP status code to send to the viewer.
     #   @return [Array<Types::DistributionCustomErrorResponse>]
     #
+    # @!attribute [rw] enable_waf
+    #   Specifies whether to enable Web Application Firewall (WAF) for the
+    #   distribution. WAF inspects viewer requests and blocks requests that
+    #   match the WAF rule groups that you enable.
+    #
+    #   When you enable WAF without specifying the `wafRules` parameter, the
+    #   distribution has no WAF rule groups enabled and doesn't block any
+    #   requests.
+    #
+    #   <note markdown="1"> WAF is available only for distributions that use the `medium_1_0` or
+    #   `large_1_0` bundle.
+    #
+    #    </note>
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] waf_rules
+    #   An array of objects that describe the WAF rule groups to enable for
+    #   the distribution.
+    #
+    #   The WAF rule groups that you can specify depend on the bundle of the
+    #   distribution:
+    #
+    #   * `medium_1_0` – Supports the `AWSManagedRulesCommonRuleSet`,
+    #     `AWSManagedRulesKnownBadInputsRuleSet`, and
+    #     `AWSManagedRulesAnonymousIpList` rule groups.
+    #
+    #   * `large_1_0` – Supports the rule groups for `medium_1_0`, plus
+    #     `AWSManagedRulesAdminProtectionRuleSet`,
+    #     `AWSManagedRulesSQLiRuleSet`, `AWSManagedRulesLinuxRuleSet`,
+    #     `AWSManagedRulesUnixRuleSet`, `AWSManagedRulesWindowsRuleSet`,
+    #     `AWSManagedRulesPHPRuleSet`, `AWSManagedRulesWordPressRuleSet`,
+    #     `AWSManagedRulesAmazonIpReputationList`,
+    #     `AWSManagedRulesATPRuleSet`, `AWSManagedRulesACFPRuleSet`, and
+    #     `AWSManagedRulesBotControlRuleSet` rule groups.
+    #   @return [Array<Types::WafRule>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/CreateDistributionRequest AWS API Documentation
     #
     class CreateDistributionRequest < Struct.new(
@@ -3810,7 +3846,9 @@ module Aws::Lightsail
       :viewer_minimum_tls_protocol_version,
       :enable_private_origin_access,
       :default_root_object,
-      :custom_error_responses)
+      :custom_error_responses,
+      :enable_waf,
+      :waf_rules)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -7866,6 +7904,22 @@ module Aws::Lightsail
     #     `Statistics`: The most useful statistic is `Average`.
     #
     #     `Unit`: The published unit is `Percent`.
+    #
+    #   * <b> <code>WafAllowedRequests</code> </b> - The number of viewer
+    #     requests that Web Application Firewall (WAF) allowed. This metric
+    #     is available only when WAF is enabled for the distribution.
+    #
+    #     `Statistics`: The most useful statistic is `Sum`.
+    #
+    #     `Unit`: The published unit is `None`.
+    #
+    #   * <b> <code>WafBlockedRequests</code> </b> - The number of viewer
+    #     requests that WAF blocked. This metric is available only when WAF
+    #     is enabled for the distribution.
+    #
+    #     `Statistics`: The most useful statistic is `Sum`.
+    #
+    #     `Unit`: The published unit is `None`.
     #   @return [String]
     #
     # @!attribute [rw] start_time
@@ -8283,9 +8337,79 @@ module Aws::Lightsail
     #
     #     `Unit`: The published unit is `Count`.
     #
+    #   * <b> <code>DiskReadOps</code> </b> - The number of read operations
+    #     completed on the system disk of the instance during the period.
+    #     This metric doesn't include activity on additional disks that you
+    #     attach to the instance.
+    #
+    #     `Statistics`: The most useful statistic is `Sum`.
+    #
+    #     `Unit`: The published unit is `Count`.
+    #
+    #   * <b> <code>DiskWriteOps</code> </b> - The number of write
+    #     operations completed on the system disk of the instance during the
+    #     period. This metric doesn't include activity on additional disks
+    #     that you attach to the instance.
+    #
+    #     `Statistics`: The most useful statistic is `Sum`.
+    #
+    #     `Unit`: The published unit is `Count`.
+    #
+    #   * <b> <code>DiskReadBytes</code> </b> - The number of bytes read
+    #     from the system disk of the instance during the period. This
+    #     metric doesn't include activity on additional disks that you
+    #     attach to the instance.
+    #
+    #     `Statistics`: The most useful statistic is `Sum`.
+    #
+    #     `Unit`: The published unit is `Bytes`.
+    #
+    #   * <b> <code>DiskWriteBytes</code> </b> - The number of bytes written
+    #     to the system disk of the instance during the period. This metric
+    #     doesn't include activity on additional disks that you attach to
+    #     the instance.
+    #
+    #     `Statistics`: The most useful statistic is `Sum`.
+    #
+    #     `Unit`: The published unit is `Bytes`.
+    #
+    #   * <b> <code>DiskTotalReadTime</code> </b> - The total number of
+    #     seconds spent by all read operations that completed on the system
+    #     disk of the instance during the period. This metric doesn't
+    #     include activity on additional disks that you attach to the
+    #     instance.
+    #
+    #     `Statistics`: The most useful statistic is `Average`.
+    #
+    #     `Unit`: The published unit is `Seconds`.
+    #
+    #   * <b> <code>DiskTotalWriteTime</code> </b> - The total number of
+    #     seconds spent by all write operations that completed on the system
+    #     disk of the instance during the period. This metric doesn't
+    #     include activity on additional disks that you attach to the
+    #     instance.
+    #
+    #     `Statistics`: The most useful statistic is `Average`.
+    #
+    #     `Unit`: The published unit is `Seconds`.
+    #
+    #   * <b> <code>DiskQueueLength</code> </b> - The number of read and
+    #     write requests that are waiting to access the system disk of the
+    #     instance. This metric doesn't include activity on additional
+    #     disks that you attach to the instance.
+    #
+    #     `Statistics`: The most useful statistic is `Average`.
+    #
+    #     `Unit`: The published unit is `Count`.
+    #
+    #   For more information about system disk performance metrics, see
+    #   [View system disk performance metrics for your Lightsail
+    #   instance][2].
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/lightsail/latest/userguide/amazon-lightsail-viewing-instance-burst-capacity
+    #   [2]: https://docs.aws.amazon.com/lightsail/latest/userguide/amazon-lightsail-viewing-instance-disk-performance-metrics
     #   @return [String]
     #
     # @!attribute [rw] period
@@ -11352,6 +11476,11 @@ module Aws::Lightsail
     #   configured for the distribution.
     #   @return [Array<Types::DistributionCustomErrorResponse>]
     #
+    # @!attribute [rw] waf
+    #   An object that describes the Web Application Firewall (WAF)
+    #   configuration of the distribution.
+    #   @return [Types::WafConfig]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/LightsailDistribution AWS API Documentation
     #
     class LightsailDistribution < Struct.new(
@@ -11377,7 +11506,8 @@ module Aws::Lightsail
       :tags,
       :viewer_minimum_tls_protocol_version,
       :default_root_object,
-      :custom_error_responses)
+      :custom_error_responses,
+      :waf)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -12715,7 +12845,9 @@ module Aws::Lightsail
     #
     #   * **Instances**: `BurstCapacityPercentage`, `BurstCapacityTime`,
     #     `CPUUtilization`, `NetworkIn`, `NetworkOut`, `StatusCheckFailed`,
-    #     `StatusCheckFailed_Instance`, and `StatusCheckFailed_System`.
+    #     `StatusCheckFailed_Instance`, `StatusCheckFailed_System`,
+    #     `DiskReadOps`, `DiskWriteOps`, `DiskReadBytes`, `DiskWriteBytes`,
+    #     `DiskTotalReadTime`, `DiskTotalWriteTime`, and `DiskQueueLength`.
     #
     #   * **Load balancers**: `ClientTLSNegotiationErrorCount`,
     #     `HealthyHostCount`, `UnhealthyHostCount`, `HTTPCode_LB_4XX_Count`,
@@ -15135,6 +15267,53 @@ module Aws::Lightsail
     #   can also specify the HTTP status code to send to the viewer.
     #   @return [Array<Types::DistributionCustomErrorResponse>]
     #
+    # @!attribute [rw] enable_waf
+    #   Specifies whether to enable Web Application Firewall (WAF) for the
+    #   distribution. WAF inspects viewer requests and blocks requests that
+    #   match the WAF rule groups that you enable.
+    #
+    #   When you enable WAF without specifying the `wafRules` parameter, the
+    #   distribution has no WAF rule groups enabled and doesn't block any
+    #   requests.
+    #
+    #   <note markdown="1"> WAF is available only for distributions that use the `medium_1_0` or
+    #   `large_1_0` bundle.
+    #
+    #    Setting this parameter to `false` disables WAF for the distribution
+    #   and removes its WAF rule groups. You must enable the WAF rule groups
+    #   again if you enable WAF again.
+    #
+    #    </note>
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] waf_rules
+    #   An array of objects that describe the WAF rule groups to enable for
+    #   the distribution.
+    #
+    #   The array that you specify replaces the existing WAF rule groups of
+    #   the distribution. To keep a WAF rule group enabled, include it in
+    #   the array. To disable all WAF rule groups, specify an empty array.
+    #
+    #   You can specify this parameter only when WAF is enabled for the
+    #   distribution.
+    #
+    #   The WAF rule groups that you can specify depend on the bundle of the
+    #   distribution:
+    #
+    #   * `medium_1_0` – Supports the `AWSManagedRulesCommonRuleSet`,
+    #     `AWSManagedRulesKnownBadInputsRuleSet`, and
+    #     `AWSManagedRulesAnonymousIpList` rule groups.
+    #
+    #   * `large_1_0` – Supports the rule groups for `medium_1_0`, plus
+    #     `AWSManagedRulesAdminProtectionRuleSet`,
+    #     `AWSManagedRulesSQLiRuleSet`, `AWSManagedRulesLinuxRuleSet`,
+    #     `AWSManagedRulesUnixRuleSet`, `AWSManagedRulesWindowsRuleSet`,
+    #     `AWSManagedRulesPHPRuleSet`, `AWSManagedRulesWordPressRuleSet`,
+    #     `AWSManagedRulesAmazonIpReputationList`,
+    #     `AWSManagedRulesATPRuleSet`, `AWSManagedRulesACFPRuleSet`, and
+    #     `AWSManagedRulesBotControlRuleSet` rule groups.
+    #   @return [Array<Types::WafRule>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/UpdateDistributionRequest AWS API Documentation
     #
     class UpdateDistributionRequest < Struct.new(
@@ -15149,7 +15328,9 @@ module Aws::Lightsail
       :use_default_certificate,
       :enable_private_origin_access,
       :default_root_object,
-      :custom_error_responses)
+      :custom_error_responses,
+      :enable_waf,
+      :waf_rules)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -15523,6 +15704,276 @@ module Aws::Lightsail
       include Aws::Structure
     end
 
+    # Describes the configuration of the account creation fraud prevention
+    # Web Application Firewall (WAF) rule group. The rule group inspects
+    # account creation requests to your application.
+    #
+    # @!attribute [rw] payload_type
+    #   The content type of the request body of account creation requests.
+    #
+    #   The following content types are possible:
+    #
+    #   * `JSON` – The request body is in JSON format.
+    #
+    #   * `FORM_ENCODED` – The request body is form encoded.
+    #   @return [String]
+    #
+    # @!attribute [rw] creation_path
+    #   The path of the endpoint that accepts completed account creation
+    #   forms (for example, `/signup/submit`). This endpoint must accept
+    #   `POST` requests.
+    #
+    #   Constraints:
+    #
+    #   * Must start with a forward slash (`/`).
+    #
+    #   * Must contain from 1 to 256 characters.
+    #   @return [String]
+    #
+    # @!attribute [rw] registration_page_path
+    #   The path of the page that displays the account creation form (for
+    #   example, `/signup`).
+    #
+    #   Constraints:
+    #
+    #   * Must start with a forward slash (`/`).
+    #
+    #   * Must contain from 1 to 256 characters.
+    #   @return [String]
+    #
+    # @!attribute [rw] response_inspection
+    #   An object that describes the HTTP status codes that your application
+    #   returns for successful and failed account creation attempts.
+    #   @return [Types::WafResponseInspection]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/WafAcfpConfig AWS API Documentation
+    #
+    class WafAcfpConfig < Struct.new(
+      :payload_type,
+      :creation_path,
+      :registration_page_path,
+      :response_inspection)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes the configuration of the account takeover prevention Web
+    # Application Firewall (WAF) rule group. The rule group inspects login
+    # requests to the login path of your application.
+    #
+    # @!attribute [rw] login_path
+    #   The path of the login endpoint of your application (for example,
+    #   `/login`). Login paths that start with the path that you specify are
+    #   a match.
+    #
+    #   Constraints:
+    #
+    #   * Must start with a forward slash (`/`).
+    #
+    #   * Must contain from 1 to 256 characters.
+    #   @return [String]
+    #
+    # @!attribute [rw] payload_type
+    #   The content type of the request body of login requests.
+    #
+    #   The following content types are possible:
+    #
+    #   * `JSON` – The request body is in JSON format.
+    #
+    #   * `FORM_ENCODED` – The request body is form encoded.
+    #   @return [String]
+    #
+    # @!attribute [rw] username_field
+    #   The name of the field in the request body that contains the username
+    #   (for example, `/username` for `JSON` or `username` for
+    #   `FORM_ENCODED`).
+    #
+    #   Constraints:
+    #
+    #   * For a `JSON` payload, must be a JSON pointer that starts with a
+    #     forward slash (`/`).
+    #
+    #   * Must contain from 1 to 512 characters.
+    #   @return [String]
+    #
+    # @!attribute [rw] password_field
+    #   The name of the field in the request body that contains the password
+    #   (for example, `/password` for `JSON` or `password` for
+    #   `FORM_ENCODED`).
+    #
+    #   Constraints:
+    #
+    #   * For a `JSON` payload, must be a JSON pointer that starts with a
+    #     forward slash (`/`).
+    #
+    #   * Must contain from 1 to 512 characters.
+    #   @return [String]
+    #
+    # @!attribute [rw] response_inspection
+    #   An object that describes the HTTP status codes that your application
+    #   returns for successful and failed login attempts.
+    #   @return [Types::WafResponseInspection]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/WafAtpConfig AWS API Documentation
+    #
+    class WafAtpConfig < Struct.new(
+      :login_path,
+      :payload_type,
+      :username_field,
+      :password_field,
+      :response_inspection)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes the configuration of the bot control Web Application
+    # Firewall (WAF) rule group.
+    #
+    # @!attribute [rw] inspection_level
+    #   The inspection level of the bot control rule group.
+    #
+    #   The following inspection levels are possible:
+    #
+    #   * `COMMON` – Detects a variety of bots that identify themselves,
+    #     such as web scraping frameworks, search engines, and automated
+    #     browsers.
+    #
+    #   * `TARGETED` – Includes the `COMMON` protections, and adds detection
+    #     for sophisticated bots that don't identify themselves. This level
+    #     uses rate limiting, CAPTCHA, and background browser challenges.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/WafBotControlConfig AWS API Documentation
+    #
+    class WafBotControlConfig < Struct.new(
+      :inspection_level)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes the Web Application Firewall (WAF) configuration of a
+    # Lightsail distribution.
+    #
+    # @!attribute [rw] is_waf_enabled
+    #   Specifies whether WAF is enabled for the distribution.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] waf_rules
+    #   An array of objects that describe the WAF rule groups enabled for
+    #   the distribution.
+    #   @return [Array<Types::WafRule>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/WafConfig AWS API Documentation
+    #
+    class WafConfig < Struct.new(
+      :is_waf_enabled,
+      :waf_rules)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes the HTTP status codes that your application returns to
+    # indicate successful and failed attempts. The Web Application Firewall
+    # (WAF) rule group uses these status codes to track successful and
+    # failed attempts.
+    #
+    # @!attribute [rw] success_codes
+    #   The HTTP status codes that indicate a successful attempt (for
+    #   example, `200`).
+    #
+    #   Constraints:
+    #
+    #   * Must contain from 1 to 10 status codes.
+    #
+    #   * Each status code must be from `0` to `999`.
+    #
+    #   * Can't contain a status code that is also in `failureCodes`.
+    #   @return [Array<Integer>]
+    #
+    # @!attribute [rw] failure_codes
+    #   The HTTP status codes that indicate a failed attempt (for example,
+    #   `401`).
+    #
+    #   Constraints:
+    #
+    #   * Must contain from 1 to 10 status codes.
+    #
+    #   * Each status code must be from `0` to `999`.
+    #
+    #   * Can't contain a status code that is also in `successCodes`.
+    #   @return [Array<Integer>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/WafResponseInspection AWS API Documentation
+    #
+    class WafResponseInspection < Struct.new(
+      :success_codes,
+      :failure_codes)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes a Web Application Firewall (WAF) rule group for a Lightsail
+    # distribution. A WAF rule group is a set of rules managed by AWS. The
+    # rules inspect viewer requests and block requests that match them.
+    #
+    # @!attribute [rw] name
+    #   The name of the WAF rule group (for example,
+    #   `AWSManagedRulesCommonRuleSet`).
+    #
+    #   For the WAF rule groups that you can specify for each bundle, see
+    #   the `wafRules` parameter of the `CreateDistribution` action.
+    #   @return [String]
+    #
+    # @!attribute [rw] atp_config
+    #   An object that describes the configuration of the account takeover
+    #   prevention rule group.
+    #
+    #   Constraints:
+    #
+    #   * Define this parameter only when the `name` is
+    #     `AWSManagedRulesATPRuleSet`.
+    #
+    #   * This parameter is required when the `name` is
+    #     `AWSManagedRulesATPRuleSet`.
+    #   @return [Types::WafAtpConfig]
+    #
+    # @!attribute [rw] acfp_config
+    #   An object that describes the configuration of the account creation
+    #   fraud prevention rule group.
+    #
+    #   Constraints:
+    #
+    #   * Define this parameter only when the `name` is
+    #     `AWSManagedRulesACFPRuleSet`.
+    #
+    #   * This parameter is required when the `name` is
+    #     `AWSManagedRulesACFPRuleSet`.
+    #   @return [Types::WafAcfpConfig]
+    #
+    # @!attribute [rw] bot_control_config
+    #   An object that describes the configuration of the bot control rule
+    #   group.
+    #
+    #   Constraints:
+    #
+    #   * Define this parameter only when the `name` is
+    #     `AWSManagedRulesBotControlRuleSet`.
+    #
+    #   * This parameter is required when the `name` is
+    #     `AWSManagedRulesBotControlRuleSet`.
+    #   @return [Types::WafBotControlConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/WafRule AWS API Documentation
+    #
+    class WafRule < Struct.new(
+      :name,
+      :atp_config,
+      :acfp_config,
+      :bot_control_config)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
   end
 end
 

data/lib/aws-sdk-lightsail.rb

@@ -54,7 +54,7 @@ module Aws::Lightsail
   autoload :EndpointProvider, 'aws-sdk-lightsail/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-lightsail/endpoints'
 
-  GEM_VERSION = '1.139.0'
+  GEM_VERSION = '1.141.0'
 
 end
 

data/sig/client.rbs

@@ -424,6 +424,10 @@ module Aws
                                      response_page_path: ::String?,
                                      error_caching_min_ttl: ::Integer?
                                    }
+                                 ],
+                                 ?enable_waf: bool,
+                                 ?waf_rules: Array[
+                                   Params::waf_rule
                                  ]
                                ) -> _CreateDistributionResponseSuccess
                              | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateDistributionResponseSuccess
@@ -1281,13 +1285,13 @@ module Aws
 
       interface _GetDistributionMetricDataResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetDistributionMetricDataResult]
-        def metric_name: () -> ("Requests" | "BytesDownloaded" | "BytesUploaded" | "TotalErrorRate" | "Http4xxErrorRate" | "Http5xxErrorRate")
+        def metric_name: () -> ("Requests" | "BytesDownloaded" | "BytesUploaded" | "TotalErrorRate" | "Http4xxErrorRate" | "Http5xxErrorRate" | "WafAllowedRequests" | "WafBlockedRequests")
         def metric_data: () -> ::Array[Types::MetricDatapoint]
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/Lightsail/Client.html#get_distribution_metric_data-instance_method
       def get_distribution_metric_data: (
                                           distribution_name: ::String,
-                                          metric_name: ("Requests" | "BytesDownloaded" | "BytesUploaded" | "TotalErrorRate" | "Http4xxErrorRate" | "Http5xxErrorRate"),
+                                          metric_name: ("Requests" | "BytesDownloaded" | "BytesUploaded" | "TotalErrorRate" | "Http4xxErrorRate" | "Http5xxErrorRate" | "WafAllowedRequests" | "WafBlockedRequests"),
                                           start_time: ::Time,
                                           end_time: ::Time,
                                           period: ::Integer,
@@ -1363,13 +1367,13 @@ module Aws
 
       interface _GetInstanceMetricDataResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetInstanceMetricDataResult]
-        def metric_name: () -> ("CPUUtilization" | "NetworkIn" | "NetworkOut" | "StatusCheckFailed" | "StatusCheckFailed_Instance" | "StatusCheckFailed_System" | "BurstCapacityTime" | "BurstCapacityPercentage" | "MetadataNoToken")
+        def metric_name: () -> ("CPUUtilization" | "NetworkIn" | "NetworkOut" | "StatusCheckFailed" | "StatusCheckFailed_Instance" | "StatusCheckFailed_System" | "BurstCapacityTime" | "BurstCapacityPercentage" | "MetadataNoToken" | "DiskReadOps" | "DiskWriteOps" | "DiskReadBytes" | "DiskWriteBytes" | "DiskTotalReadTime" | "DiskTotalWriteTime" | "DiskQueueLength")
         def metric_data: () -> ::Array[Types::MetricDatapoint]
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/Lightsail/Client.html#get_instance_metric_data-instance_method
       def get_instance_metric_data: (
                                       instance_name: ::String,
-                                      metric_name: ("CPUUtilization" | "NetworkIn" | "NetworkOut" | "StatusCheckFailed" | "StatusCheckFailed_Instance" | "StatusCheckFailed_System" | "BurstCapacityTime" | "BurstCapacityPercentage" | "MetadataNoToken"),
+                                      metric_name: ("CPUUtilization" | "NetworkIn" | "NetworkOut" | "StatusCheckFailed" | "StatusCheckFailed_Instance" | "StatusCheckFailed_System" | "BurstCapacityTime" | "BurstCapacityPercentage" | "MetadataNoToken" | "DiskReadOps" | "DiskWriteOps" | "DiskReadBytes" | "DiskWriteBytes" | "DiskTotalReadTime" | "DiskTotalWriteTime" | "DiskQueueLength"),
                                       period: ::Integer,
                                       start_time: ::Time,
                                       end_time: ::Time,
@@ -1792,7 +1796,7 @@ module Aws
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/Lightsail/Client.html#put_alarm-instance_method
       def put_alarm: (
                        alarm_name: ::String,
-                       metric_name: ("CPUUtilization" | "NetworkIn" | "NetworkOut" | "StatusCheckFailed" | "StatusCheckFailed_Instance" | "StatusCheckFailed_System" | "ClientTLSNegotiationErrorCount" | "HealthyHostCount" | "UnhealthyHostCount" | "HTTPCode_LB_4XX_Count" | "HTTPCode_LB_5XX_Count" | "HTTPCode_Instance_2XX_Count" | "HTTPCode_Instance_3XX_Count" | "HTTPCode_Instance_4XX_Count" | "HTTPCode_Instance_5XX_Count" | "InstanceResponseTime" | "RejectedConnectionCount" | "RequestCount" | "DatabaseConnections" | "DiskQueueDepth" | "FreeStorageSpace" | "NetworkReceiveThroughput" | "NetworkTransmitThroughput" | "FreeableMemory" | "SwapUsage" | "BurstCapacityTime" | "BurstCapacityPercentage"),
+                       metric_name: ("CPUUtilization" | "NetworkIn" | "NetworkOut" | "StatusCheckFailed" | "StatusCheckFailed_Instance" | "StatusCheckFailed_System" | "ClientTLSNegotiationErrorCount" | "HealthyHostCount" | "UnhealthyHostCount" | "HTTPCode_LB_4XX_Count" | "HTTPCode_LB_5XX_Count" | "HTTPCode_Instance_2XX_Count" | "HTTPCode_Instance_3XX_Count" | "HTTPCode_Instance_4XX_Count" | "HTTPCode_Instance_5XX_Count" | "InstanceResponseTime" | "RejectedConnectionCount" | "RequestCount" | "DatabaseConnections" | "DiskQueueDepth" | "FreeStorageSpace" | "NetworkReceiveThroughput" | "NetworkTransmitThroughput" | "FreeableMemory" | "SwapUsage" | "BurstCapacityTime" | "BurstCapacityPercentage" | "DiskReadOps" | "DiskWriteOps" | "DiskReadBytes" | "DiskWriteBytes" | "DiskTotalReadTime" | "DiskTotalWriteTime" | "DiskQueueLength"),
                        monitored_resource_name: ::String,
                        comparison_operator: ("GreaterThanOrEqualToThreshold" | "GreaterThanThreshold" | "LessThanThreshold" | "LessThanOrEqualToThreshold"),
                        threshold: ::Float,
@@ -2138,6 +2142,10 @@ module Aws
                                      response_page_path: ::String?,
                                      error_caching_min_ttl: ::Integer?
                                    }
+                                 ],
+                                 ?enable_waf: bool,
+                                 ?waf_rules: Array[
+                                   Params::waf_rule
                                  ]
                                ) -> _UpdateDistributionResponseSuccess
                              | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateDistributionResponseSuccess

data/sig/params.rbs

@@ -63,6 +63,36 @@ module Aws
       }?
     }
 
+      type waf_atp_config = {
+      login_path: ::String?,
+      payload_type: ("JSON" | "FORM_ENCODED")?,
+      username_field: ::String?,
+      password_field: ::String?,
+      response_inspection: {
+        success_codes: Array[::Integer]?,
+        failure_codes: Array[::Integer]?
+      }?
+    }
+
+      type waf_acfp_config = {
+      payload_type: ("JSON" | "FORM_ENCODED")?,
+      creation_path: ::String?,
+      registration_page_path: ::String?,
+      response_inspection: {
+        success_codes: Array[::Integer]?,
+        failure_codes: Array[::Integer]?
+      }?
+    }
+
+      type waf_rule = {
+      name: ::String,
+      atp_config: Params::waf_atp_config?,
+      acfp_config: Params::waf_acfp_config?,
+      bot_control_config: {
+        inspection_level: ("COMMON" | "TARGETED")?
+      }?
+    }
+
       type domain_entry = {
       id: ::String?,
       name: ::String?,

data/sig/types.rbs

@@ -86,7 +86,7 @@ module Aws::Lightsail
       attr_accessor datapoints_to_alarm: ::Integer
       attr_accessor treat_missing_data: ("breaching" | "notBreaching" | "ignore" | "missing")
       attr_accessor statistic: ("Minimum" | "Maximum" | "Sum" | "Average" | "SampleCount")
-      attr_accessor metric_name: ("CPUUtilization" | "NetworkIn" | "NetworkOut" | "StatusCheckFailed" | "StatusCheckFailed_Instance" | "StatusCheckFailed_System" | "ClientTLSNegotiationErrorCount" | "HealthyHostCount" | "UnhealthyHostCount" | "HTTPCode_LB_4XX_Count" | "HTTPCode_LB_5XX_Count" | "HTTPCode_Instance_2XX_Count" | "HTTPCode_Instance_3XX_Count" | "HTTPCode_Instance_4XX_Count" | "HTTPCode_Instance_5XX_Count" | "InstanceResponseTime" | "RejectedConnectionCount" | "RequestCount" | "DatabaseConnections" | "DiskQueueDepth" | "FreeStorageSpace" | "NetworkReceiveThroughput" | "NetworkTransmitThroughput" | "FreeableMemory" | "SwapUsage" | "BurstCapacityTime" | "BurstCapacityPercentage")
+      attr_accessor metric_name: ("CPUUtilization" | "NetworkIn" | "NetworkOut" | "StatusCheckFailed" | "StatusCheckFailed_Instance" | "StatusCheckFailed_System" | "ClientTLSNegotiationErrorCount" | "HealthyHostCount" | "UnhealthyHostCount" | "HTTPCode_LB_4XX_Count" | "HTTPCode_LB_5XX_Count" | "HTTPCode_Instance_2XX_Count" | "HTTPCode_Instance_3XX_Count" | "HTTPCode_Instance_4XX_Count" | "HTTPCode_Instance_5XX_Count" | "InstanceResponseTime" | "RejectedConnectionCount" | "RequestCount" | "DatabaseConnections" | "DiskQueueDepth" | "FreeStorageSpace" | "NetworkReceiveThroughput" | "NetworkTransmitThroughput" | "FreeableMemory" | "SwapUsage" | "BurstCapacityTime" | "BurstCapacityPercentage" | "DiskReadOps" | "DiskWriteOps" | "DiskReadBytes" | "DiskWriteBytes" | "DiskTotalReadTime" | "DiskTotalWriteTime" | "DiskQueueLength")
       attr_accessor state: ("OK" | "ALARM" | "INSUFFICIENT_DATA")
       attr_accessor unit: ("Seconds" | "Microseconds" | "Milliseconds" | "Bytes" | "Kilobytes" | "Megabytes" | "Gigabytes" | "Terabytes" | "Bits" | "Kilobits" | "Megabits" | "Gigabits" | "Terabits" | "Percent" | "Count" | "Bytes/Second" | "Kilobytes/Second" | "Megabytes/Second" | "Gigabytes/Second" | "Terabytes/Second" | "Bits/Second" | "Kilobits/Second" | "Megabits/Second" | "Gigabits/Second" | "Terabits/Second" | "Count/Second" | "None")
       attr_accessor contact_protocols: ::Array[("Email" | "SMS")]
@@ -681,6 +681,8 @@ module Aws::Lightsail
       attr_accessor enable_private_origin_access: bool
       attr_accessor default_root_object: ::String
       attr_accessor custom_error_responses: ::Array[Types::DistributionCustomErrorResponse]
+      attr_accessor enable_waf: bool
+      attr_accessor waf_rules: ::Array[Types::WafRule]
       SENSITIVE: []
     end
 
@@ -1633,7 +1635,7 @@ module Aws::Lightsail
 
     class GetDistributionMetricDataRequest
       attr_accessor distribution_name: ::String
-      attr_accessor metric_name: ("Requests" | "BytesDownloaded" | "BytesUploaded" | "TotalErrorRate" | "Http4xxErrorRate" | "Http5xxErrorRate")
+      attr_accessor metric_name: ("Requests" | "BytesDownloaded" | "BytesUploaded" | "TotalErrorRate" | "Http4xxErrorRate" | "Http5xxErrorRate" | "WafAllowedRequests" | "WafBlockedRequests")
       attr_accessor start_time: ::Time
       attr_accessor end_time: ::Time
       attr_accessor period: ::Integer
@@ -1643,7 +1645,7 @@ module Aws::Lightsail
     end
 
     class GetDistributionMetricDataResult
-      attr_accessor metric_name: ("Requests" | "BytesDownloaded" | "BytesUploaded" | "TotalErrorRate" | "Http4xxErrorRate" | "Http5xxErrorRate")
+      attr_accessor metric_name: ("Requests" | "BytesDownloaded" | "BytesUploaded" | "TotalErrorRate" | "Http4xxErrorRate" | "Http5xxErrorRate" | "WafAllowedRequests" | "WafBlockedRequests")
       attr_accessor metric_data: ::Array[Types::MetricDatapoint]
       SENSITIVE: []
     end
@@ -1705,7 +1707,7 @@ module Aws::Lightsail
 
     class GetInstanceMetricDataRequest
       attr_accessor instance_name: ::String
-      attr_accessor metric_name: ("CPUUtilization" | "NetworkIn" | "NetworkOut" | "StatusCheckFailed" | "StatusCheckFailed_Instance" | "StatusCheckFailed_System" | "BurstCapacityTime" | "BurstCapacityPercentage" | "MetadataNoToken")
+      attr_accessor metric_name: ("CPUUtilization" | "NetworkIn" | "NetworkOut" | "StatusCheckFailed" | "StatusCheckFailed_Instance" | "StatusCheckFailed_System" | "BurstCapacityTime" | "BurstCapacityPercentage" | "MetadataNoToken" | "DiskReadOps" | "DiskWriteOps" | "DiskReadBytes" | "DiskWriteBytes" | "DiskTotalReadTime" | "DiskTotalWriteTime" | "DiskQueueLength")
       attr_accessor period: ::Integer
       attr_accessor start_time: ::Time
       attr_accessor end_time: ::Time
@@ -1715,7 +1717,7 @@ module Aws::Lightsail
     end
 
     class GetInstanceMetricDataResult
-      attr_accessor metric_name: ("CPUUtilization" | "NetworkIn" | "NetworkOut" | "StatusCheckFailed" | "StatusCheckFailed_Instance" | "StatusCheckFailed_System" | "BurstCapacityTime" | "BurstCapacityPercentage" | "MetadataNoToken")
+      attr_accessor metric_name: ("CPUUtilization" | "NetworkIn" | "NetworkOut" | "StatusCheckFailed" | "StatusCheckFailed_Instance" | "StatusCheckFailed_System" | "BurstCapacityTime" | "BurstCapacityPercentage" | "MetadataNoToken" | "DiskReadOps" | "DiskWriteOps" | "DiskReadBytes" | "DiskWriteBytes" | "DiskTotalReadTime" | "DiskTotalWriteTime" | "DiskQueueLength")
       attr_accessor metric_data: ::Array[Types::MetricDatapoint]
       SENSITIVE: []
     end
@@ -2322,6 +2324,7 @@ module Aws::Lightsail
       attr_accessor viewer_minimum_tls_protocol_version: ::String
       attr_accessor default_root_object: ::String
       attr_accessor custom_error_responses: ::Array[Types::DistributionCustomErrorResponse]
+      attr_accessor waf: Types::WafConfig
       SENSITIVE: []
     end
 
@@ -2566,7 +2569,7 @@ module Aws::Lightsail
 
     class PutAlarmRequest
       attr_accessor alarm_name: ::String
-      attr_accessor metric_name: ("CPUUtilization" | "NetworkIn" | "NetworkOut" | "StatusCheckFailed" | "StatusCheckFailed_Instance" | "StatusCheckFailed_System" | "ClientTLSNegotiationErrorCount" | "HealthyHostCount" | "UnhealthyHostCount" | "HTTPCode_LB_4XX_Count" | "HTTPCode_LB_5XX_Count" | "HTTPCode_Instance_2XX_Count" | "HTTPCode_Instance_3XX_Count" | "HTTPCode_Instance_4XX_Count" | "HTTPCode_Instance_5XX_Count" | "InstanceResponseTime" | "RejectedConnectionCount" | "RequestCount" | "DatabaseConnections" | "DiskQueueDepth" | "FreeStorageSpace" | "NetworkReceiveThroughput" | "NetworkTransmitThroughput" | "FreeableMemory" | "SwapUsage" | "BurstCapacityTime" | "BurstCapacityPercentage")
+      attr_accessor metric_name: ("CPUUtilization" | "NetworkIn" | "NetworkOut" | "StatusCheckFailed" | "StatusCheckFailed_Instance" | "StatusCheckFailed_System" | "ClientTLSNegotiationErrorCount" | "HealthyHostCount" | "UnhealthyHostCount" | "HTTPCode_LB_4XX_Count" | "HTTPCode_LB_5XX_Count" | "HTTPCode_Instance_2XX_Count" | "HTTPCode_Instance_3XX_Count" | "HTTPCode_Instance_4XX_Count" | "HTTPCode_Instance_5XX_Count" | "InstanceResponseTime" | "RejectedConnectionCount" | "RequestCount" | "DatabaseConnections" | "DiskQueueDepth" | "FreeStorageSpace" | "NetworkReceiveThroughput" | "NetworkTransmitThroughput" | "FreeableMemory" | "SwapUsage" | "BurstCapacityTime" | "BurstCapacityPercentage" | "DiskReadOps" | "DiskWriteOps" | "DiskReadBytes" | "DiskWriteBytes" | "DiskTotalReadTime" | "DiskTotalWriteTime" | "DiskQueueLength")
       attr_accessor monitored_resource_name: ::String
       attr_accessor comparison_operator: ("GreaterThanOrEqualToThreshold" | "GreaterThanThreshold" | "LessThanThreshold" | "LessThanOrEqualToThreshold")
       attr_accessor threshold: ::Float
@@ -3136,6 +3139,8 @@ module Aws::Lightsail
       attr_accessor enable_private_origin_access: bool
       attr_accessor default_root_object: ::String
       attr_accessor custom_error_responses: ::Array[Types::DistributionCustomErrorResponse]
+      attr_accessor enable_waf: bool
+      attr_accessor waf_rules: ::Array[Types::WafRule]
       SENSITIVE: []
     end
 
@@ -3211,5 +3216,47 @@ module Aws::Lightsail
       attr_accessor operations: ::Array[Types::Operation]
       SENSITIVE: []
     end
+
+    class WafAcfpConfig
+      attr_accessor payload_type: ("JSON" | "FORM_ENCODED")
+      attr_accessor creation_path: ::String
+      attr_accessor registration_page_path: ::String
+      attr_accessor response_inspection: Types::WafResponseInspection
+      SENSITIVE: []
+    end
+
+    class WafAtpConfig
+      attr_accessor login_path: ::String
+      attr_accessor payload_type: ("JSON" | "FORM_ENCODED")
+      attr_accessor username_field: ::String
+      attr_accessor password_field: ::String
+      attr_accessor response_inspection: Types::WafResponseInspection
+      SENSITIVE: []
+    end
+
+    class WafBotControlConfig
+      attr_accessor inspection_level: ("COMMON" | "TARGETED")
+      SENSITIVE: []
+    end
+
+    class WafConfig
+      attr_accessor is_waf_enabled: bool
+      attr_accessor waf_rules: ::Array[Types::WafRule]
+      SENSITIVE: []
+    end
+
+    class WafResponseInspection
+      attr_accessor success_codes: ::Array[::Integer]
+      attr_accessor failure_codes: ::Array[::Integer]
+      SENSITIVE: []
+    end
+
+    class WafRule
+      attr_accessor name: ::String
+      attr_accessor atp_config: Types::WafAtpConfig
+      attr_accessor acfp_config: Types::WafAcfpConfig
+      attr_accessor bot_control_config: Types::WafBotControlConfig
+      SENSITIVE: []
+    end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-lightsail
 version: !ruby/object:Gem::Version
-  version: 1.139.0
+  version: 1.141.0
 platform: ruby
 authors:
 - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.258.0
+        version: 3.260.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.258.0
+        version: 3.260.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement