aws-sdk-lightsail 1.140.0 → 1.142.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8e806df52786d1b3fe79389a8b2079dc68b3af1bea14cbbe1f193e41c0fd76ad
-  data.tar.gz: 6040587f88b4ecc8f5f25daf61bb967999c94e98419d258848152300c1591fc4
+  metadata.gz: 3f818dad8b10e8b931c3dd8710354bc41fca15d4ec7392bac1d06edbc01b0ade
+  data.tar.gz: 4aca56e28cf4e7d5facd63357c7cc8c6d4ef0582f5dff89bc3aa3274c1202d78
 SHA512:
-  metadata.gz: 8514e9e1e28f47799de4f27a9ebc044ec88eb151bbcb232960b0e44ee927ecbc87d9a8176bc41de233bc1075e2fe55318837fea2f7ee43d88d9efd610a0c2085
-  data.tar.gz: 2f79ad2efd2d96ffbda6bfd2f20f10e2b2ba29257b2ca65679915d1c86c20f7973af19c104fd54142dc36347d9e1e4222e092ee69256b0cea596ae694f7a1afb
+  metadata.gz: 0f9fafbc758c47af5dd6cf1797262acfc0bb9a72503e73c929cd0e2efb803d979bda648a11c2194ba234d7fb1895956e4635f5ed453085044d7d53ba39b91337
+  data.tar.gz: 8427615b412f471f759dee29f9dea6164fe72ee625ff19b54bd41db31208d3faa9c8a9ef474f023e2c71cd63aa4ee3464314b52dab3d1bfab9aba6aee4f32556

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.142.0 (2026-10-27)
+------------------
+
+* Feature - Added the attributeUpdates parameter to the Lightsail StartInstance API, which allows customers to update the attributes of a stopped instance when starting it.
+
+1.141.0 (2026-10-26)
+------------------
+
+* Feature - This release adds Web Application Firewall (WAF) support for Lightsail distribution.
+
 1.140.0 (2026-10-21)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.140.0
+1.142.0

data/lib/aws-sdk-lightsail/client.rb

@@ -2438,6 +2438,40 @@ module Aws::Lightsail
     #   to return when the origin responds with a given HTTP error code. You
     #   can also specify the HTTP status code to send to the viewer.
     #
+    # @option params [Boolean] :enable_waf
+    #   Specifies whether to enable Web Application Firewall (WAF) for the
+    #   distribution. WAF inspects viewer requests and blocks requests that
+    #   match the WAF rule groups that you enable.
+    #
+    #   When you enable WAF without specifying the `wafRules` parameter, the
+    #   distribution has no WAF rule groups enabled and doesn't block any
+    #   requests.
+    #
+    #   <note markdown="1"> WAF is available only for distributions that use the `medium_1_0` or
+    #   `large_1_0` bundle.
+    #
+    #    </note>
+    #
+    # @option params [Array<Types::WafRule>] :waf_rules
+    #   An array of objects that describe the WAF rule groups to enable for
+    #   the distribution.
+    #
+    #   The WAF rule groups that you can specify depend on the bundle of the
+    #   distribution:
+    #
+    #   * `medium_1_0` – Supports the `AWSManagedRulesCommonRuleSet`,
+    #     `AWSManagedRulesKnownBadInputsRuleSet`, and
+    #     `AWSManagedRulesAnonymousIpList` rule groups.
+    #
+    #   * `large_1_0` – Supports the rule groups for `medium_1_0`, plus
+    #     `AWSManagedRulesAdminProtectionRuleSet`,
+    #     `AWSManagedRulesSQLiRuleSet`, `AWSManagedRulesLinuxRuleSet`,
+    #     `AWSManagedRulesUnixRuleSet`, `AWSManagedRulesWindowsRuleSet`,
+    #     `AWSManagedRulesPHPRuleSet`, `AWSManagedRulesWordPressRuleSet`,
+    #     `AWSManagedRulesAmazonIpReputationList`,
+    #     `AWSManagedRulesATPRuleSet`, `AWSManagedRulesACFPRuleSet`, and
+    #     `AWSManagedRulesBotControlRuleSet` rule groups.
+    #
     # @return [Types::CreateDistributionResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateDistributionResult#distribution #distribution} => Types::LightsailDistribution
@@ -2502,6 +2536,34 @@ module Aws::Lightsail
     #         error_caching_min_ttl: 1,
     #       },
     #     ],
+    #     enable_waf: false,
+    #     waf_rules: [
+    #       {
+    #         name: "string", # required
+    #         atp_config: {
+    #           login_path: "string",
+    #           payload_type: "JSON", # accepts JSON, FORM_ENCODED
+    #           username_field: "string",
+    #           password_field: "string",
+    #           response_inspection: {
+    #             success_codes: [1],
+    #             failure_codes: [1],
+    #           },
+    #         },
+    #         acfp_config: {
+    #           payload_type: "JSON", # accepts JSON, FORM_ENCODED
+    #           creation_path: "string",
+    #           registration_page_path: "string",
+    #           response_inspection: {
+    #             success_codes: [1],
+    #             failure_codes: [1],
+    #           },
+    #         },
+    #         bot_control_config: {
+    #           inspection_level: "COMMON", # accepts COMMON, TARGETED
+    #         },
+    #       },
+    #     ],
     #   })
     #
     # @example Response structure
@@ -2558,6 +2620,25 @@ module Aws::Lightsail
     #   resp.distribution.custom_error_responses[0].response_code #=> String
     #   resp.distribution.custom_error_responses[0].response_page_path #=> String
     #   resp.distribution.custom_error_responses[0].error_caching_min_ttl #=> Integer
+    #   resp.distribution.waf.is_waf_enabled #=> Boolean
+    #   resp.distribution.waf.waf_rules #=> Array
+    #   resp.distribution.waf.waf_rules[0].name #=> String
+    #   resp.distribution.waf.waf_rules[0].atp_config.login_path #=> String
+    #   resp.distribution.waf.waf_rules[0].atp_config.payload_type #=> String, one of "JSON", "FORM_ENCODED"
+    #   resp.distribution.waf.waf_rules[0].atp_config.username_field #=> String
+    #   resp.distribution.waf.waf_rules[0].atp_config.password_field #=> String
+    #   resp.distribution.waf.waf_rules[0].atp_config.response_inspection.success_codes #=> Array
+    #   resp.distribution.waf.waf_rules[0].atp_config.response_inspection.success_codes[0] #=> Integer
+    #   resp.distribution.waf.waf_rules[0].atp_config.response_inspection.failure_codes #=> Array
+    #   resp.distribution.waf.waf_rules[0].atp_config.response_inspection.failure_codes[0] #=> Integer
+    #   resp.distribution.waf.waf_rules[0].acfp_config.payload_type #=> String, one of "JSON", "FORM_ENCODED"
+    #   resp.distribution.waf.waf_rules[0].acfp_config.creation_path #=> String
+    #   resp.distribution.waf.waf_rules[0].acfp_config.registration_page_path #=> String
+    #   resp.distribution.waf.waf_rules[0].acfp_config.response_inspection.success_codes #=> Array
+    #   resp.distribution.waf.waf_rules[0].acfp_config.response_inspection.success_codes[0] #=> Integer
+    #   resp.distribution.waf.waf_rules[0].acfp_config.response_inspection.failure_codes #=> Array
+    #   resp.distribution.waf.waf_rules[0].acfp_config.response_inspection.failure_codes[0] #=> Integer
+    #   resp.distribution.waf.waf_rules[0].bot_control_config.inspection_level #=> String, one of "COMMON", "TARGETED"
     #   resp.operation.id #=> String
     #   resp.operation.resource_name #=> String
     #   resp.operation.resource_type #=> String, one of "ContainerService", "Instance", "StaticIp", "KeyPair", "InstanceSnapshot", "Domain", "PeeredVpc", "LoadBalancer", "LoadBalancerTlsCertificate", "Disk", "DiskSnapshot", "RelationalDatabase", "RelationalDatabaseSnapshot", "ExportSnapshotRecord", "CloudFormationStackRecord", "Alarm", "ContactMethod", "Distribution", "Certificate", "Bucket"
@@ -7286,6 +7367,22 @@ module Aws::Lightsail
     #
     #     `Unit`: The published unit is `Percent`.
     #
+    #   * <b> <code>WafAllowedRequests</code> </b> - The number of viewer
+    #     requests that Web Application Firewall (WAF) allowed. This metric is
+    #     available only when WAF is enabled for the distribution.
+    #
+    #     `Statistics`: The most useful statistic is `Sum`.
+    #
+    #     `Unit`: The published unit is `None`.
+    #
+    #   * <b> <code>WafBlockedRequests</code> </b> - The number of viewer
+    #     requests that WAF blocked. This metric is available only when WAF is
+    #     enabled for the distribution.
+    #
+    #     `Statistics`: The most useful statistic is `Sum`.
+    #
+    #     `Unit`: The published unit is `None`.
+    #
     # @option params [required, Time,DateTime,Date,Integer,String] :start_time
     #   The start of the time interval for which to get metric data.
     #
@@ -7370,7 +7467,7 @@ module Aws::Lightsail
     #
     #   resp = client.get_distribution_metric_data({
     #     distribution_name: "ResourceName", # required
-    #     metric_name: "Requests", # required, accepts Requests, BytesDownloaded, BytesUploaded, TotalErrorRate, Http4xxErrorRate, Http5xxErrorRate
+    #     metric_name: "Requests", # required, accepts Requests, BytesDownloaded, BytesUploaded, TotalErrorRate, Http4xxErrorRate, Http5xxErrorRate, WafAllowedRequests, WafBlockedRequests
     #     start_time: Time.now, # required
     #     end_time: Time.now, # required
     #     period: 1, # required
@@ -7380,7 +7477,7 @@ module Aws::Lightsail
     #
     # @example Response structure
     #
-    #   resp.metric_name #=> String, one of "Requests", "BytesDownloaded", "BytesUploaded", "TotalErrorRate", "Http4xxErrorRate", "Http5xxErrorRate"
+    #   resp.metric_name #=> String, one of "Requests", "BytesDownloaded", "BytesUploaded", "TotalErrorRate", "Http4xxErrorRate", "Http5xxErrorRate", "WafAllowedRequests", "WafBlockedRequests"
     #   resp.metric_data #=> Array
     #   resp.metric_data[0].average #=> Float
     #   resp.metric_data[0].maximum #=> Float
@@ -7482,6 +7579,25 @@ module Aws::Lightsail
     #   resp.distributions[0].custom_error_responses[0].response_code #=> String
     #   resp.distributions[0].custom_error_responses[0].response_page_path #=> String
     #   resp.distributions[0].custom_error_responses[0].error_caching_min_ttl #=> Integer
+    #   resp.distributions[0].waf.is_waf_enabled #=> Boolean
+    #   resp.distributions[0].waf.waf_rules #=> Array
+    #   resp.distributions[0].waf.waf_rules[0].name #=> String
+    #   resp.distributions[0].waf.waf_rules[0].atp_config.login_path #=> String
+    #   resp.distributions[0].waf.waf_rules[0].atp_config.payload_type #=> String, one of "JSON", "FORM_ENCODED"
+    #   resp.distributions[0].waf.waf_rules[0].atp_config.username_field #=> String
+    #   resp.distributions[0].waf.waf_rules[0].atp_config.password_field #=> String
+    #   resp.distributions[0].waf.waf_rules[0].atp_config.response_inspection.success_codes #=> Array
+    #   resp.distributions[0].waf.waf_rules[0].atp_config.response_inspection.success_codes[0] #=> Integer
+    #   resp.distributions[0].waf.waf_rules[0].atp_config.response_inspection.failure_codes #=> Array
+    #   resp.distributions[0].waf.waf_rules[0].atp_config.response_inspection.failure_codes[0] #=> Integer
+    #   resp.distributions[0].waf.waf_rules[0].acfp_config.payload_type #=> String, one of "JSON", "FORM_ENCODED"
+    #   resp.distributions[0].waf.waf_rules[0].acfp_config.creation_path #=> String
+    #   resp.distributions[0].waf.waf_rules[0].acfp_config.registration_page_path #=> String
+    #   resp.distributions[0].waf.waf_rules[0].acfp_config.response_inspection.success_codes #=> Array
+    #   resp.distributions[0].waf.waf_rules[0].acfp_config.response_inspection.success_codes[0] #=> Integer
+    #   resp.distributions[0].waf.waf_rules[0].acfp_config.response_inspection.failure_codes #=> Array
+    #   resp.distributions[0].waf.waf_rules[0].acfp_config.response_inspection.failure_codes[0] #=> Integer
+    #   resp.distributions[0].waf.waf_rules[0].bot_control_config.inspection_level #=> String, one of "COMMON", "TARGETED"
     #   resp.next_page_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/GetDistributions AWS API Documentation
@@ -11179,6 +11295,10 @@ module Aws::Lightsail
     # @option params [required, String] :instance_name
     #   The name of the instance (a virtual private server) to start.
     #
+    # @option params [Types::InstanceAttributeUpdates] :attribute_updates
+    #   An object that describes the attributes to update on the instance
+    #   before it starts.
+    #
     # @return [Types::StartInstanceResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::StartInstanceResult#operations #operations} => Array&lt;Types::Operation&gt;
@@ -11187,6 +11307,9 @@ module Aws::Lightsail
     #
     #   resp = client.start_instance({
     #     instance_name: "ResourceName", # required
+    #     attribute_updates: {
+    #       bundle_id: "NonEmptyString",
+    #     },
     #   })
     #
     # @example Response structure
@@ -12141,6 +12264,51 @@ module Aws::Lightsail
     #   to return when the origin responds with a given HTTP error code. You
     #   can also specify the HTTP status code to send to the viewer.
     #
+    # @option params [Boolean] :enable_waf
+    #   Specifies whether to enable Web Application Firewall (WAF) for the
+    #   distribution. WAF inspects viewer requests and blocks requests that
+    #   match the WAF rule groups that you enable.
+    #
+    #   When you enable WAF without specifying the `wafRules` parameter, the
+    #   distribution has no WAF rule groups enabled and doesn't block any
+    #   requests.
+    #
+    #   <note markdown="1"> WAF is available only for distributions that use the `medium_1_0` or
+    #   `large_1_0` bundle.
+    #
+    #    Setting this parameter to `false` disables WAF for the distribution
+    #   and removes its WAF rule groups. You must enable the WAF rule groups
+    #   again if you enable WAF again.
+    #
+    #    </note>
+    #
+    # @option params [Array<Types::WafRule>] :waf_rules
+    #   An array of objects that describe the WAF rule groups to enable for
+    #   the distribution.
+    #
+    #   The array that you specify replaces the existing WAF rule groups of
+    #   the distribution. To keep a WAF rule group enabled, include it in the
+    #   array. To disable all WAF rule groups, specify an empty array.
+    #
+    #   You can specify this parameter only when WAF is enabled for the
+    #   distribution.
+    #
+    #   The WAF rule groups that you can specify depend on the bundle of the
+    #   distribution:
+    #
+    #   * `medium_1_0` – Supports the `AWSManagedRulesCommonRuleSet`,
+    #     `AWSManagedRulesKnownBadInputsRuleSet`, and
+    #     `AWSManagedRulesAnonymousIpList` rule groups.
+    #
+    #   * `large_1_0` – Supports the rule groups for `medium_1_0`, plus
+    #     `AWSManagedRulesAdminProtectionRuleSet`,
+    #     `AWSManagedRulesSQLiRuleSet`, `AWSManagedRulesLinuxRuleSet`,
+    #     `AWSManagedRulesUnixRuleSet`, `AWSManagedRulesWindowsRuleSet`,
+    #     `AWSManagedRulesPHPRuleSet`, `AWSManagedRulesWordPressRuleSet`,
+    #     `AWSManagedRulesAmazonIpReputationList`,
+    #     `AWSManagedRulesATPRuleSet`, `AWSManagedRulesACFPRuleSet`, and
+    #     `AWSManagedRulesBotControlRuleSet` rule groups.
+    #
     # @return [Types::UpdateDistributionResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateDistributionResult#operation #operation} => Types::Operation
@@ -12198,6 +12366,34 @@ module Aws::Lightsail
     #         error_caching_min_ttl: 1,
     #       },
     #     ],
+    #     enable_waf: false,
+    #     waf_rules: [
+    #       {
+    #         name: "string", # required
+    #         atp_config: {
+    #           login_path: "string",
+    #           payload_type: "JSON", # accepts JSON, FORM_ENCODED
+    #           username_field: "string",
+    #           password_field: "string",
+    #           response_inspection: {
+    #             success_codes: [1],
+    #             failure_codes: [1],
+    #           },
+    #         },
+    #         acfp_config: {
+    #           payload_type: "JSON", # accepts JSON, FORM_ENCODED
+    #           creation_path: "string",
+    #           registration_page_path: "string",
+    #           response_inspection: {
+    #             success_codes: [1],
+    #             failure_codes: [1],
+    #           },
+    #         },
+    #         bot_control_config: {
+    #           inspection_level: "COMMON", # accepts COMMON, TARGETED
+    #         },
+    #       },
+    #     ],
     #   })
     #
     # @example Response structure
@@ -12797,7 +12993,7 @@ module Aws::Lightsail
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-lightsail'
-      context[:gem_version] = '1.140.0'
+      context[:gem_version] = '1.142.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-lightsail/client_api.rb

@@ -446,6 +446,7 @@ module Aws::Lightsail
     Instance = Shapes::StructureShape.new(name: 'Instance')
     InstanceAccessDetails = Shapes::StructureShape.new(name: 'InstanceAccessDetails')
     InstanceAccessProtocol = Shapes::StringShape.new(name: 'InstanceAccessProtocol')
+    InstanceAttributeUpdates = Shapes::StructureShape.new(name: 'InstanceAttributeUpdates')
     InstanceEntry = Shapes::StructureShape.new(name: 'InstanceEntry')
     InstanceEntryList = Shapes::ListShape.new(name: 'InstanceEntryList')
     InstanceHardware = Shapes::StructureShape.new(name: 'InstanceHardware')
@@ -692,6 +693,16 @@ module Aws::Lightsail
     UpdateRelationalDatabaseRequest = Shapes::StructureShape.new(name: 'UpdateRelationalDatabaseRequest')
     UpdateRelationalDatabaseResult = Shapes::StructureShape.new(name: 'UpdateRelationalDatabaseResult')
     ViewerMinimumTlsProtocolVersionEnum = Shapes::StringShape.new(name: 'ViewerMinimumTlsProtocolVersionEnum')
+    WafAcfpConfig = Shapes::StructureShape.new(name: 'WafAcfpConfig')
+    WafAtpConfig = Shapes::StructureShape.new(name: 'WafAtpConfig')
+    WafBotControlConfig = Shapes::StructureShape.new(name: 'WafBotControlConfig')
+    WafConfig = Shapes::StructureShape.new(name: 'WafConfig')
+    WafInspectionLevelEnum = Shapes::StringShape.new(name: 'WafInspectionLevelEnum')
+    WafPayloadTypeEnum = Shapes::StringShape.new(name: 'WafPayloadTypeEnum')
+    WafResponseInspection = Shapes::StructureShape.new(name: 'WafResponseInspection')
+    WafRule = Shapes::StructureShape.new(name: 'WafRule')
+    WafRuleList = Shapes::ListShape.new(name: 'WafRuleList')
+    WafStatusCodeList = Shapes::ListShape.new(name: 'WafStatusCodeList')
     boolean = Shapes::BooleanShape.new(name: 'boolean')
     double = Shapes::FloatShape.new(name: 'double')
     float = Shapes::FloatShape.new(name: 'float')
@@ -1286,6 +1297,8 @@ module Aws::Lightsail
     CreateDistributionRequest.add_member(:enable_private_origin_access, Shapes::ShapeRef.new(shape: boolean, location_name: "enablePrivateOriginAccess"))
     CreateDistributionRequest.add_member(:default_root_object, Shapes::ShapeRef.new(shape: string, location_name: "defaultRootObject"))
     CreateDistributionRequest.add_member(:custom_error_responses, Shapes::ShapeRef.new(shape: DistributionCustomErrorResponseList, location_name: "customErrorResponses"))
+    CreateDistributionRequest.add_member(:enable_waf, Shapes::ShapeRef.new(shape: boolean, location_name: "enableWaf"))
+    CreateDistributionRequest.add_member(:waf_rules, Shapes::ShapeRef.new(shape: WafRuleList, location_name: "wafRules"))
     CreateDistributionRequest.struct_class = Types::CreateDistributionRequest
 
     CreateDistributionResult.add_member(:distribution, Shapes::ShapeRef.new(shape: LightsailDistribution, location_name: "distribution"))
@@ -2347,6 +2360,9 @@ module Aws::Lightsail
     InstanceAccessDetails.add_member(:host_keys, Shapes::ShapeRef.new(shape: HostKeysList, location_name: "hostKeys"))
     InstanceAccessDetails.struct_class = Types::InstanceAccessDetails
 
+    InstanceAttributeUpdates.add_member(:bundle_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "bundleId"))
+    InstanceAttributeUpdates.struct_class = Types::InstanceAttributeUpdates
+
     InstanceEntry.add_member(:source_name, Shapes::ShapeRef.new(shape: ResourceName, required: true, location_name: "sourceName"))
     InstanceEntry.add_member(:instance_type, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "instanceType"))
     InstanceEntry.add_member(:port_info_source, Shapes::ShapeRef.new(shape: PortInfoSourceType, required: true, location_name: "portInfoSource"))
@@ -2485,6 +2501,7 @@ module Aws::Lightsail
     LightsailDistribution.add_member(:viewer_minimum_tls_protocol_version, Shapes::ShapeRef.new(shape: string, location_name: "viewerMinimumTlsProtocolVersion"))
     LightsailDistribution.add_member(:default_root_object, Shapes::ShapeRef.new(shape: string, location_name: "defaultRootObject"))
     LightsailDistribution.add_member(:custom_error_responses, Shapes::ShapeRef.new(shape: DistributionCustomErrorResponseList, location_name: "customErrorResponses"))
+    LightsailDistribution.add_member(:waf, Shapes::ShapeRef.new(shape: WafConfig, location_name: "waf"))
     LightsailDistribution.struct_class = Types::LightsailDistribution
 
     LoadBalancer.add_member(:name, Shapes::ShapeRef.new(shape: ResourceName, location_name: "name"))
@@ -3008,6 +3025,7 @@ module Aws::Lightsail
     StartGUISessionResult.struct_class = Types::StartGUISessionResult
 
     StartInstanceRequest.add_member(:instance_name, Shapes::ShapeRef.new(shape: ResourceName, required: true, location_name: "instanceName"))
+    StartInstanceRequest.add_member(:attribute_updates, Shapes::ShapeRef.new(shape: InstanceAttributeUpdates, location_name: "attributeUpdates"))
     StartInstanceRequest.struct_class = Types::StartInstanceRequest
 
     StartInstanceResult.add_member(:operations, Shapes::ShapeRef.new(shape: OperationList, location_name: "operations"))
@@ -3155,6 +3173,8 @@ module Aws::Lightsail
     UpdateDistributionRequest.add_member(:enable_private_origin_access, Shapes::ShapeRef.new(shape: boolean, location_name: "enablePrivateOriginAccess"))
     UpdateDistributionRequest.add_member(:default_root_object, Shapes::ShapeRef.new(shape: string, location_name: "defaultRootObject"))
     UpdateDistributionRequest.add_member(:custom_error_responses, Shapes::ShapeRef.new(shape: DistributionCustomErrorResponseList, location_name: "customErrorResponses"))
+    UpdateDistributionRequest.add_member(:enable_waf, Shapes::ShapeRef.new(shape: boolean, location_name: "enableWaf"))
+    UpdateDistributionRequest.add_member(:waf_rules, Shapes::ShapeRef.new(shape: WafRuleList, location_name: "wafRules"))
     UpdateDistributionRequest.struct_class = Types::UpdateDistributionRequest
 
     UpdateDistributionResult.add_member(:operation, Shapes::ShapeRef.new(shape: Operation, location_name: "operation"))
@@ -3208,6 +3228,40 @@ module Aws::Lightsail
     UpdateRelationalDatabaseResult.add_member(:operations, Shapes::ShapeRef.new(shape: OperationList, location_name: "operations"))
     UpdateRelationalDatabaseResult.struct_class = Types::UpdateRelationalDatabaseResult
 
+    WafAcfpConfig.add_member(:payload_type, Shapes::ShapeRef.new(shape: WafPayloadTypeEnum, location_name: "payloadType"))
+    WafAcfpConfig.add_member(:creation_path, Shapes::ShapeRef.new(shape: string, location_name: "creationPath"))
+    WafAcfpConfig.add_member(:registration_page_path, Shapes::ShapeRef.new(shape: string, location_name: "registrationPagePath"))
+    WafAcfpConfig.add_member(:response_inspection, Shapes::ShapeRef.new(shape: WafResponseInspection, location_name: "responseInspection"))
+    WafAcfpConfig.struct_class = Types::WafAcfpConfig
+
+    WafAtpConfig.add_member(:login_path, Shapes::ShapeRef.new(shape: string, location_name: "loginPath"))
+    WafAtpConfig.add_member(:payload_type, Shapes::ShapeRef.new(shape: WafPayloadTypeEnum, location_name: "payloadType"))
+    WafAtpConfig.add_member(:username_field, Shapes::ShapeRef.new(shape: string, location_name: "usernameField"))
+    WafAtpConfig.add_member(:password_field, Shapes::ShapeRef.new(shape: string, location_name: "passwordField"))
+    WafAtpConfig.add_member(:response_inspection, Shapes::ShapeRef.new(shape: WafResponseInspection, location_name: "responseInspection"))
+    WafAtpConfig.struct_class = Types::WafAtpConfig
+
+    WafBotControlConfig.add_member(:inspection_level, Shapes::ShapeRef.new(shape: WafInspectionLevelEnum, location_name: "inspectionLevel"))
+    WafBotControlConfig.struct_class = Types::WafBotControlConfig
+
+    WafConfig.add_member(:is_waf_enabled, Shapes::ShapeRef.new(shape: boolean, location_name: "isWafEnabled"))
+    WafConfig.add_member(:waf_rules, Shapes::ShapeRef.new(shape: WafRuleList, location_name: "wafRules"))
+    WafConfig.struct_class = Types::WafConfig
+
+    WafResponseInspection.add_member(:success_codes, Shapes::ShapeRef.new(shape: WafStatusCodeList, location_name: "successCodes"))
+    WafResponseInspection.add_member(:failure_codes, Shapes::ShapeRef.new(shape: WafStatusCodeList, location_name: "failureCodes"))
+    WafResponseInspection.struct_class = Types::WafResponseInspection
+
+    WafRule.add_member(:name, Shapes::ShapeRef.new(shape: string, required: true, location_name: "name"))
+    WafRule.add_member(:atp_config, Shapes::ShapeRef.new(shape: WafAtpConfig, location_name: "atpConfig"))
+    WafRule.add_member(:acfp_config, Shapes::ShapeRef.new(shape: WafAcfpConfig, location_name: "acfpConfig"))
+    WafRule.add_member(:bot_control_config, Shapes::ShapeRef.new(shape: WafBotControlConfig, location_name: "botControlConfig"))
+    WafRule.struct_class = Types::WafRule
+
+    WafRuleList.member = Shapes::ShapeRef.new(shape: WafRule)
+
+    WafStatusCodeList.member = Shapes::ShapeRef.new(shape: integer)
+
     setupHistoryList.member = Shapes::ShapeRef.new(shape: SetupHistory)
 
 

data/lib/aws-sdk-lightsail/types.rb

@@ -3795,6 +3795,42 @@ module Aws::Lightsail
     #   can also specify the HTTP status code to send to the viewer.
     #   @return [Array<Types::DistributionCustomErrorResponse>]
     #
+    # @!attribute [rw] enable_waf
+    #   Specifies whether to enable Web Application Firewall (WAF) for the
+    #   distribution. WAF inspects viewer requests and blocks requests that
+    #   match the WAF rule groups that you enable.
+    #
+    #   When you enable WAF without specifying the `wafRules` parameter, the
+    #   distribution has no WAF rule groups enabled and doesn't block any
+    #   requests.
+    #
+    #   <note markdown="1"> WAF is available only for distributions that use the `medium_1_0` or
+    #   `large_1_0` bundle.
+    #
+    #    </note>
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] waf_rules
+    #   An array of objects that describe the WAF rule groups to enable for
+    #   the distribution.
+    #
+    #   The WAF rule groups that you can specify depend on the bundle of the
+    #   distribution:
+    #
+    #   * `medium_1_0` – Supports the `AWSManagedRulesCommonRuleSet`,
+    #     `AWSManagedRulesKnownBadInputsRuleSet`, and
+    #     `AWSManagedRulesAnonymousIpList` rule groups.
+    #
+    #   * `large_1_0` – Supports the rule groups for `medium_1_0`, plus
+    #     `AWSManagedRulesAdminProtectionRuleSet`,
+    #     `AWSManagedRulesSQLiRuleSet`, `AWSManagedRulesLinuxRuleSet`,
+    #     `AWSManagedRulesUnixRuleSet`, `AWSManagedRulesWindowsRuleSet`,
+    #     `AWSManagedRulesPHPRuleSet`, `AWSManagedRulesWordPressRuleSet`,
+    #     `AWSManagedRulesAmazonIpReputationList`,
+    #     `AWSManagedRulesATPRuleSet`, `AWSManagedRulesACFPRuleSet`, and
+    #     `AWSManagedRulesBotControlRuleSet` rule groups.
+    #   @return [Array<Types::WafRule>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/CreateDistributionRequest AWS API Documentation
     #
     class CreateDistributionRequest < Struct.new(
@@ -3810,7 +3846,9 @@ module Aws::Lightsail
       :viewer_minimum_tls_protocol_version,
       :enable_private_origin_access,
       :default_root_object,
-      :custom_error_responses)
+      :custom_error_responses,
+      :enable_waf,
+      :waf_rules)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -7866,6 +7904,22 @@ module Aws::Lightsail
     #     `Statistics`: The most useful statistic is `Average`.
     #
     #     `Unit`: The published unit is `Percent`.
+    #
+    #   * <b> <code>WafAllowedRequests</code> </b> - The number of viewer
+    #     requests that Web Application Firewall (WAF) allowed. This metric
+    #     is available only when WAF is enabled for the distribution.
+    #
+    #     `Statistics`: The most useful statistic is `Sum`.
+    #
+    #     `Unit`: The published unit is `None`.
+    #
+    #   * <b> <code>WafBlockedRequests</code> </b> - The number of viewer
+    #     requests that WAF blocked. This metric is available only when WAF
+    #     is enabled for the distribution.
+    #
+    #     `Statistics`: The most useful statistic is `Sum`.
+    #
+    #     `Unit`: The published unit is `None`.
     #   @return [String]
     #
     # @!attribute [rw] start_time
@@ -10408,6 +10462,45 @@ module Aws::Lightsail
       include Aws::Structure
     end
 
+    # Describes the attributes to update on a Lightsail instance when it
+    # starts.
+    #
+    # @!attribute [rw] bundle_id
+    #   The ID of the bundle to update the instance to.
+    #
+    #   Specify one of the following values for the bundle ID:
+    #
+    #   * <b> <code>auto</code> </b> – Updates an instance that runs on a
+    #     previous-generation bundle to the newer-generation equivalent of
+    #     that bundle. For example, specify `auto` to update an instance
+    #     that runs on `small_2_0` to `small_3_0`.
+    #
+    #   * **Newer-generation bundle ID** – Updates an instance that runs on
+    #     a previous-generation bundle to the specified bundle. For example,
+    #     specify `small_3_0` to update an instance that runs on `small_2_0`
+    #     to `small_3_0`.
+    #
+    #   * **Original bundle ID** – Updates an instance to the
+    #     previous-generation bundle that it ran on before an earlier
+    #     update. For example, specify `small_2_0` to return an instance
+    #     that runs on `small_3_0` to `small_2_0`.
+    #
+    #   <note markdown="1"> The instance must be in the `stopped` state to update its bundle.
+    #
+    #    There is no additional cost to update an instance to a
+    #   newer-generation bundle.
+    #
+    #    </note>
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/InstanceAttributeUpdates AWS API Documentation
+    #
+    class InstanceAttributeUpdates < Struct.new(
+      :bundle_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Describes the Amazon Elastic Compute Cloud instance and related
     # resources to be created using the `create cloud formation stack`
     # operation.
@@ -11422,6 +11515,11 @@ module Aws::Lightsail
     #   configured for the distribution.
     #   @return [Array<Types::DistributionCustomErrorResponse>]
     #
+    # @!attribute [rw] waf
+    #   An object that describes the Web Application Firewall (WAF)
+    #   configuration of the distribution.
+    #   @return [Types::WafConfig]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/LightsailDistribution AWS API Documentation
     #
     class LightsailDistribution < Struct.new(
@@ -11447,7 +11545,8 @@ module Aws::Lightsail
       :tags,
       :viewer_minimum_tls_protocol_version,
       :default_root_object,
-      :custom_error_responses)
+      :custom_error_responses,
+      :waf)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -14407,10 +14506,16 @@ module Aws::Lightsail
     #   The name of the instance (a virtual private server) to start.
     #   @return [String]
     #
+    # @!attribute [rw] attribute_updates
+    #   An object that describes the attributes to update on the instance
+    #   before it starts.
+    #   @return [Types::InstanceAttributeUpdates]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/StartInstanceRequest AWS API Documentation
     #
     class StartInstanceRequest < Struct.new(
-      :instance_name)
+      :instance_name,
+      :attribute_updates)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -15207,6 +15312,53 @@ module Aws::Lightsail
     #   can also specify the HTTP status code to send to the viewer.
     #   @return [Array<Types::DistributionCustomErrorResponse>]
     #
+    # @!attribute [rw] enable_waf
+    #   Specifies whether to enable Web Application Firewall (WAF) for the
+    #   distribution. WAF inspects viewer requests and blocks requests that
+    #   match the WAF rule groups that you enable.
+    #
+    #   When you enable WAF without specifying the `wafRules` parameter, the
+    #   distribution has no WAF rule groups enabled and doesn't block any
+    #   requests.
+    #
+    #   <note markdown="1"> WAF is available only for distributions that use the `medium_1_0` or
+    #   `large_1_0` bundle.
+    #
+    #    Setting this parameter to `false` disables WAF for the distribution
+    #   and removes its WAF rule groups. You must enable the WAF rule groups
+    #   again if you enable WAF again.
+    #
+    #    </note>
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] waf_rules
+    #   An array of objects that describe the WAF rule groups to enable for
+    #   the distribution.
+    #
+    #   The array that you specify replaces the existing WAF rule groups of
+    #   the distribution. To keep a WAF rule group enabled, include it in
+    #   the array. To disable all WAF rule groups, specify an empty array.
+    #
+    #   You can specify this parameter only when WAF is enabled for the
+    #   distribution.
+    #
+    #   The WAF rule groups that you can specify depend on the bundle of the
+    #   distribution:
+    #
+    #   * `medium_1_0` – Supports the `AWSManagedRulesCommonRuleSet`,
+    #     `AWSManagedRulesKnownBadInputsRuleSet`, and
+    #     `AWSManagedRulesAnonymousIpList` rule groups.
+    #
+    #   * `large_1_0` – Supports the rule groups for `medium_1_0`, plus
+    #     `AWSManagedRulesAdminProtectionRuleSet`,
+    #     `AWSManagedRulesSQLiRuleSet`, `AWSManagedRulesLinuxRuleSet`,
+    #     `AWSManagedRulesUnixRuleSet`, `AWSManagedRulesWindowsRuleSet`,
+    #     `AWSManagedRulesPHPRuleSet`, `AWSManagedRulesWordPressRuleSet`,
+    #     `AWSManagedRulesAmazonIpReputationList`,
+    #     `AWSManagedRulesATPRuleSet`, `AWSManagedRulesACFPRuleSet`, and
+    #     `AWSManagedRulesBotControlRuleSet` rule groups.
+    #   @return [Array<Types::WafRule>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/UpdateDistributionRequest AWS API Documentation
     #
     class UpdateDistributionRequest < Struct.new(
@@ -15221,7 +15373,9 @@ module Aws::Lightsail
       :use_default_certificate,
       :enable_private_origin_access,
       :default_root_object,
-      :custom_error_responses)
+      :custom_error_responses,
+      :enable_waf,
+      :waf_rules)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -15595,6 +15749,276 @@ module Aws::Lightsail
       include Aws::Structure
     end
 
+    # Describes the configuration of the account creation fraud prevention
+    # Web Application Firewall (WAF) rule group. The rule group inspects
+    # account creation requests to your application.
+    #
+    # @!attribute [rw] payload_type
+    #   The content type of the request body of account creation requests.
+    #
+    #   The following content types are possible:
+    #
+    #   * `JSON` – The request body is in JSON format.
+    #
+    #   * `FORM_ENCODED` – The request body is form encoded.
+    #   @return [String]
+    #
+    # @!attribute [rw] creation_path
+    #   The path of the endpoint that accepts completed account creation
+    #   forms (for example, `/signup/submit`). This endpoint must accept
+    #   `POST` requests.
+    #
+    #   Constraints:
+    #
+    #   * Must start with a forward slash (`/`).
+    #
+    #   * Must contain from 1 to 256 characters.
+    #   @return [String]
+    #
+    # @!attribute [rw] registration_page_path
+    #   The path of the page that displays the account creation form (for
+    #   example, `/signup`).
+    #
+    #   Constraints:
+    #
+    #   * Must start with a forward slash (`/`).
+    #
+    #   * Must contain from 1 to 256 characters.
+    #   @return [String]
+    #
+    # @!attribute [rw] response_inspection
+    #   An object that describes the HTTP status codes that your application
+    #   returns for successful and failed account creation attempts.
+    #   @return [Types::WafResponseInspection]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/WafAcfpConfig AWS API Documentation
+    #
+    class WafAcfpConfig < Struct.new(
+      :payload_type,
+      :creation_path,
+      :registration_page_path,
+      :response_inspection)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes the configuration of the account takeover prevention Web
+    # Application Firewall (WAF) rule group. The rule group inspects login
+    # requests to the login path of your application.
+    #
+    # @!attribute [rw] login_path
+    #   The path of the login endpoint of your application (for example,
+    #   `/login`). Login paths that start with the path that you specify are
+    #   a match.
+    #
+    #   Constraints:
+    #
+    #   * Must start with a forward slash (`/`).
+    #
+    #   * Must contain from 1 to 256 characters.
+    #   @return [String]
+    #
+    # @!attribute [rw] payload_type
+    #   The content type of the request body of login requests.
+    #
+    #   The following content types are possible:
+    #
+    #   * `JSON` – The request body is in JSON format.
+    #
+    #   * `FORM_ENCODED` – The request body is form encoded.
+    #   @return [String]
+    #
+    # @!attribute [rw] username_field
+    #   The name of the field in the request body that contains the username
+    #   (for example, `/username` for `JSON` or `username` for
+    #   `FORM_ENCODED`).
+    #
+    #   Constraints:
+    #
+    #   * For a `JSON` payload, must be a JSON pointer that starts with a
+    #     forward slash (`/`).
+    #
+    #   * Must contain from 1 to 512 characters.
+    #   @return [String]
+    #
+    # @!attribute [rw] password_field
+    #   The name of the field in the request body that contains the password
+    #   (for example, `/password` for `JSON` or `password` for
+    #   `FORM_ENCODED`).
+    #
+    #   Constraints:
+    #
+    #   * For a `JSON` payload, must be a JSON pointer that starts with a
+    #     forward slash (`/`).
+    #
+    #   * Must contain from 1 to 512 characters.
+    #   @return [String]
+    #
+    # @!attribute [rw] response_inspection
+    #   An object that describes the HTTP status codes that your application
+    #   returns for successful and failed login attempts.
+    #   @return [Types::WafResponseInspection]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/WafAtpConfig AWS API Documentation
+    #
+    class WafAtpConfig < Struct.new(
+      :login_path,
+      :payload_type,
+      :username_field,
+      :password_field,
+      :response_inspection)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes the configuration of the bot control Web Application
+    # Firewall (WAF) rule group.
+    #
+    # @!attribute [rw] inspection_level
+    #   The inspection level of the bot control rule group.
+    #
+    #   The following inspection levels are possible:
+    #
+    #   * `COMMON` – Detects a variety of bots that identify themselves,
+    #     such as web scraping frameworks, search engines, and automated
+    #     browsers.
+    #
+    #   * `TARGETED` – Includes the `COMMON` protections, and adds detection
+    #     for sophisticated bots that don't identify themselves. This level
+    #     uses rate limiting, CAPTCHA, and background browser challenges.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/WafBotControlConfig AWS API Documentation
+    #
+    class WafBotControlConfig < Struct.new(
+      :inspection_level)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes the Web Application Firewall (WAF) configuration of a
+    # Lightsail distribution.
+    #
+    # @!attribute [rw] is_waf_enabled
+    #   Specifies whether WAF is enabled for the distribution.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] waf_rules
+    #   An array of objects that describe the WAF rule groups enabled for
+    #   the distribution.
+    #   @return [Array<Types::WafRule>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/WafConfig AWS API Documentation
+    #
+    class WafConfig < Struct.new(
+      :is_waf_enabled,
+      :waf_rules)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes the HTTP status codes that your application returns to
+    # indicate successful and failed attempts. The Web Application Firewall
+    # (WAF) rule group uses these status codes to track successful and
+    # failed attempts.
+    #
+    # @!attribute [rw] success_codes
+    #   The HTTP status codes that indicate a successful attempt (for
+    #   example, `200`).
+    #
+    #   Constraints:
+    #
+    #   * Must contain from 1 to 10 status codes.
+    #
+    #   * Each status code must be from `0` to `999`.
+    #
+    #   * Can't contain a status code that is also in `failureCodes`.
+    #   @return [Array<Integer>]
+    #
+    # @!attribute [rw] failure_codes
+    #   The HTTP status codes that indicate a failed attempt (for example,
+    #   `401`).
+    #
+    #   Constraints:
+    #
+    #   * Must contain from 1 to 10 status codes.
+    #
+    #   * Each status code must be from `0` to `999`.
+    #
+    #   * Can't contain a status code that is also in `successCodes`.
+    #   @return [Array<Integer>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/WafResponseInspection AWS API Documentation
+    #
+    class WafResponseInspection < Struct.new(
+      :success_codes,
+      :failure_codes)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes a Web Application Firewall (WAF) rule group for a Lightsail
+    # distribution. A WAF rule group is a set of rules managed by AWS. The
+    # rules inspect viewer requests and block requests that match them.
+    #
+    # @!attribute [rw] name
+    #   The name of the WAF rule group (for example,
+    #   `AWSManagedRulesCommonRuleSet`).
+    #
+    #   For the WAF rule groups that you can specify for each bundle, see
+    #   the `wafRules` parameter of the `CreateDistribution` action.
+    #   @return [String]
+    #
+    # @!attribute [rw] atp_config
+    #   An object that describes the configuration of the account takeover
+    #   prevention rule group.
+    #
+    #   Constraints:
+    #
+    #   * Define this parameter only when the `name` is
+    #     `AWSManagedRulesATPRuleSet`.
+    #
+    #   * This parameter is required when the `name` is
+    #     `AWSManagedRulesATPRuleSet`.
+    #   @return [Types::WafAtpConfig]
+    #
+    # @!attribute [rw] acfp_config
+    #   An object that describes the configuration of the account creation
+    #   fraud prevention rule group.
+    #
+    #   Constraints:
+    #
+    #   * Define this parameter only when the `name` is
+    #     `AWSManagedRulesACFPRuleSet`.
+    #
+    #   * This parameter is required when the `name` is
+    #     `AWSManagedRulesACFPRuleSet`.
+    #   @return [Types::WafAcfpConfig]
+    #
+    # @!attribute [rw] bot_control_config
+    #   An object that describes the configuration of the bot control rule
+    #   group.
+    #
+    #   Constraints:
+    #
+    #   * Define this parameter only when the `name` is
+    #     `AWSManagedRulesBotControlRuleSet`.
+    #
+    #   * This parameter is required when the `name` is
+    #     `AWSManagedRulesBotControlRuleSet`.
+    #   @return [Types::WafBotControlConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/WafRule AWS API Documentation
+    #
+    class WafRule < Struct.new(
+      :name,
+      :atp_config,
+      :acfp_config,
+      :bot_control_config)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
   end
 end
 

data/lib/aws-sdk-lightsail.rb

@@ -54,7 +54,7 @@ module Aws::Lightsail
   autoload :EndpointProvider, 'aws-sdk-lightsail/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-lightsail/endpoints'
 
-  GEM_VERSION = '1.140.0'
+  GEM_VERSION = '1.142.0'
 
 end
 

data/sig/client.rbs

@@ -424,6 +424,10 @@ module Aws
                                      response_page_path: ::String?,
                                      error_caching_min_ttl: ::Integer?
                                    }
+                                 ],
+                                 ?enable_waf: bool,
+                                 ?waf_rules: Array[
+                                   Params::waf_rule
                                  ]
                                ) -> _CreateDistributionResponseSuccess
                              | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateDistributionResponseSuccess
@@ -1281,13 +1285,13 @@ module Aws
 
       interface _GetDistributionMetricDataResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetDistributionMetricDataResult]
-        def metric_name: () -> ("Requests" | "BytesDownloaded" | "BytesUploaded" | "TotalErrorRate" | "Http4xxErrorRate" | "Http5xxErrorRate")
+        def metric_name: () -> ("Requests" | "BytesDownloaded" | "BytesUploaded" | "TotalErrorRate" | "Http4xxErrorRate" | "Http5xxErrorRate" | "WafAllowedRequests" | "WafBlockedRequests")
         def metric_data: () -> ::Array[Types::MetricDatapoint]
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/Lightsail/Client.html#get_distribution_metric_data-instance_method
       def get_distribution_metric_data: (
                                           distribution_name: ::String,
-                                          metric_name: ("Requests" | "BytesDownloaded" | "BytesUploaded" | "TotalErrorRate" | "Http4xxErrorRate" | "Http5xxErrorRate"),
+                                          metric_name: ("Requests" | "BytesDownloaded" | "BytesUploaded" | "TotalErrorRate" | "Http4xxErrorRate" | "Http5xxErrorRate" | "WafAllowedRequests" | "WafBlockedRequests"),
                                           start_time: ::Time,
                                           end_time: ::Time,
                                           period: ::Integer,
@@ -1942,7 +1946,10 @@ module Aws
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/Lightsail/Client.html#start_instance-instance_method
       def start_instance: (
-                            instance_name: ::String
+                            instance_name: ::String,
+                            ?attribute_updates: {
+                              bundle_id: ::String?
+                            }
                           ) -> _StartInstanceResponseSuccess
                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _StartInstanceResponseSuccess
 
@@ -2138,6 +2145,10 @@ module Aws
                                      response_page_path: ::String?,
                                      error_caching_min_ttl: ::Integer?
                                    }
+                                 ],
+                                 ?enable_waf: bool,
+                                 ?waf_rules: Array[
+                                   Params::waf_rule
                                  ]
                                ) -> _UpdateDistributionResponseSuccess
                              | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateDistributionResponseSuccess

data/sig/params.rbs

@@ -63,6 +63,36 @@ module Aws
       }?
     }
 
+      type waf_atp_config = {
+      login_path: ::String?,
+      payload_type: ("JSON" | "FORM_ENCODED")?,
+      username_field: ::String?,
+      password_field: ::String?,
+      response_inspection: {
+        success_codes: Array[::Integer]?,
+        failure_codes: Array[::Integer]?
+      }?
+    }
+
+      type waf_acfp_config = {
+      payload_type: ("JSON" | "FORM_ENCODED")?,
+      creation_path: ::String?,
+      registration_page_path: ::String?,
+      response_inspection: {
+        success_codes: Array[::Integer]?,
+        failure_codes: Array[::Integer]?
+      }?
+    }
+
+      type waf_rule = {
+      name: ::String,
+      atp_config: Params::waf_atp_config?,
+      acfp_config: Params::waf_acfp_config?,
+      bot_control_config: {
+        inspection_level: ("COMMON" | "TARGETED")?
+      }?
+    }
+
       type domain_entry = {
       id: ::String?,
       name: ::String?,

data/sig/types.rbs

@@ -681,6 +681,8 @@ module Aws::Lightsail
       attr_accessor enable_private_origin_access: bool
       attr_accessor default_root_object: ::String
       attr_accessor custom_error_responses: ::Array[Types::DistributionCustomErrorResponse]
+      attr_accessor enable_waf: bool
+      attr_accessor waf_rules: ::Array[Types::WafRule]
       SENSITIVE: []
     end
 
@@ -1633,7 +1635,7 @@ module Aws::Lightsail
 
     class GetDistributionMetricDataRequest
       attr_accessor distribution_name: ::String
-      attr_accessor metric_name: ("Requests" | "BytesDownloaded" | "BytesUploaded" | "TotalErrorRate" | "Http4xxErrorRate" | "Http5xxErrorRate")
+      attr_accessor metric_name: ("Requests" | "BytesDownloaded" | "BytesUploaded" | "TotalErrorRate" | "Http4xxErrorRate" | "Http5xxErrorRate" | "WafAllowedRequests" | "WafBlockedRequests")
       attr_accessor start_time: ::Time
       attr_accessor end_time: ::Time
       attr_accessor period: ::Integer
@@ -1643,7 +1645,7 @@ module Aws::Lightsail
     end
 
     class GetDistributionMetricDataResult
-      attr_accessor metric_name: ("Requests" | "BytesDownloaded" | "BytesUploaded" | "TotalErrorRate" | "Http4xxErrorRate" | "Http5xxErrorRate")
+      attr_accessor metric_name: ("Requests" | "BytesDownloaded" | "BytesUploaded" | "TotalErrorRate" | "Http4xxErrorRate" | "Http5xxErrorRate" | "WafAllowedRequests" | "WafBlockedRequests")
       attr_accessor metric_data: ::Array[Types::MetricDatapoint]
       SENSITIVE: []
     end
@@ -2174,6 +2176,11 @@ module Aws::Lightsail
       SENSITIVE: []
     end
 
+    class InstanceAttributeUpdates
+      attr_accessor bundle_id: ::String
+      SENSITIVE: []
+    end
+
     class InstanceEntry
       attr_accessor source_name: ::String
       attr_accessor instance_type: ::String
@@ -2322,6 +2329,7 @@ module Aws::Lightsail
       attr_accessor viewer_minimum_tls_protocol_version: ::String
       attr_accessor default_root_object: ::String
       attr_accessor custom_error_responses: ::Array[Types::DistributionCustomErrorResponse]
+      attr_accessor waf: Types::WafConfig
       SENSITIVE: []
     end
 
@@ -2938,6 +2946,7 @@ module Aws::Lightsail
 
     class StartInstanceRequest
       attr_accessor instance_name: ::String
+      attr_accessor attribute_updates: Types::InstanceAttributeUpdates
       SENSITIVE: []
     end
 
@@ -3136,6 +3145,8 @@ module Aws::Lightsail
       attr_accessor enable_private_origin_access: bool
       attr_accessor default_root_object: ::String
       attr_accessor custom_error_responses: ::Array[Types::DistributionCustomErrorResponse]
+      attr_accessor enable_waf: bool
+      attr_accessor waf_rules: ::Array[Types::WafRule]
       SENSITIVE: []
     end
 
@@ -3211,5 +3222,47 @@ module Aws::Lightsail
       attr_accessor operations: ::Array[Types::Operation]
       SENSITIVE: []
     end
+
+    class WafAcfpConfig
+      attr_accessor payload_type: ("JSON" | "FORM_ENCODED")
+      attr_accessor creation_path: ::String
+      attr_accessor registration_page_path: ::String
+      attr_accessor response_inspection: Types::WafResponseInspection
+      SENSITIVE: []
+    end
+
+    class WafAtpConfig
+      attr_accessor login_path: ::String
+      attr_accessor payload_type: ("JSON" | "FORM_ENCODED")
+      attr_accessor username_field: ::String
+      attr_accessor password_field: ::String
+      attr_accessor response_inspection: Types::WafResponseInspection
+      SENSITIVE: []
+    end
+
+    class WafBotControlConfig
+      attr_accessor inspection_level: ("COMMON" | "TARGETED")
+      SENSITIVE: []
+    end
+
+    class WafConfig
+      attr_accessor is_waf_enabled: bool
+      attr_accessor waf_rules: ::Array[Types::WafRule]
+      SENSITIVE: []
+    end
+
+    class WafResponseInspection
+      attr_accessor success_codes: ::Array[::Integer]
+      attr_accessor failure_codes: ::Array[::Integer]
+      SENSITIVE: []
+    end
+
+    class WafRule
+      attr_accessor name: ::String
+      attr_accessor atp_config: Types::WafAtpConfig
+      attr_accessor acfp_config: Types::WafAcfpConfig
+      attr_accessor bot_control_config: Types::WafBotControlConfig
+      SENSITIVE: []
+    end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-lightsail
 version: !ruby/object:Gem::Version
-  version: 1.140.0
+  version: 1.142.0
 platform: ruby
 authors:
 - Amazon Web Services