aws-sdk-wafregional 1.3.0 → 1.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: 2c900ea537ae6013975b336d2a785039647ca4d2
4
- data.tar.gz: 95ad53f3593d761fdc7b1b78414e013f1f321001
3
+ metadata.gz: 1637619953cc419f037e0a39cb6be554a6bec4b7
4
+ data.tar.gz: db7d1fc010726ec81ff3b81498adfa38b2f558a2
5
5
  SHA512:
6
- metadata.gz: 866390100efbe5e51161bfd7656dcadc261776c17418fadc155f100ed8f84c72332bb53cefbe5a55c0d74f2c057b582f1fb6cfdb463807d26799c5c9bbee85e1
7
- data.tar.gz: bf6bec3414533b9cb9217ffa2aed3b67ea643766b9e8e0db5d207634ad22a16b09013d62028ac503da3ccc8faa6db3558db3d4fd7772a0a50d9597166f15902c
6
+ metadata.gz: c2c7783a91ac3a670683998d9b420f58a7619a6fa130daea9438da8c4b3ef930533c2b175f1c1e4f18b7c82232f6de1f6496a79a550acf5aecbb6d3814304a8b
7
+ data.tar.gz: d5da3c0937cbb824fb97fb31d9c488729cf3cb385fdd23b1c310f3bec3e6ad487c5d72fd9974743e5a8588ba573109487f7b3ad821b050475eb8457646f0a0ea
@@ -42,6 +42,6 @@ require_relative 'aws-sdk-wafregional/customizations'
42
42
  # @service
43
43
  module Aws::WAFRegional
44
44
 
45
- GEM_VERSION = '1.3.0'
45
+ GEM_VERSION = '1.4.0'
46
46
 
47
47
  end
@@ -1442,6 +1442,33 @@ module Aws::WAFRegional
1442
1442
  req.send_request(options)
1443
1443
  end
1444
1444
 
1445
+ # Permanently deletes an IAM policy from the specified RuleGroup.
1446
+ #
1447
+ # The user making the request must be the owner of the RuleGroup.
1448
+ #
1449
+ # @option params [required, String] :resource_arn
1450
+ # The Amazon Resource Name (ARN) of the RuleGroup from which you want to
1451
+ # delete the policy.
1452
+ #
1453
+ # The user making the request must be the owner of the RuleGroup.
1454
+ #
1455
+ # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
1456
+ #
1457
+ # @example Request syntax with placeholder values
1458
+ #
1459
+ # resp = client.delete_permission_policy({
1460
+ # resource_arn: "ResourceArn", # required
1461
+ # })
1462
+ #
1463
+ # @see http://docs.aws.amazon.com/goto/WebAPI/waf-regional-2016-11-28/DeletePermissionPolicy AWS API Documentation
1464
+ #
1465
+ # @overload delete_permission_policy(params = {})
1466
+ # @param [Hash] params ({})
1467
+ def delete_permission_policy(params = {}, options = {})
1468
+ req = build_request(:delete_permission_policy, params)
1469
+ req.send_request(options)
1470
+ end
1471
+
1445
1472
  # Permanently deletes a RateBasedRule. You can't delete a rule if it's
1446
1473
  # still used in any `WebACL` objects or if it still includes any
1447
1474
  # predicates, such as `ByteMatchSet` objects.
@@ -2218,6 +2245,35 @@ module Aws::WAFRegional
2218
2245
  req.send_request(options)
2219
2246
  end
2220
2247
 
2248
+ # Returns the IAM policy attached to the RuleGroup.
2249
+ #
2250
+ # @option params [required, String] :resource_arn
2251
+ # The Amazon Resource Name (ARN) of the RuleGroup for which you want to
2252
+ # get the policy.
2253
+ #
2254
+ # @return [Types::GetPermissionPolicyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
2255
+ #
2256
+ # * {Types::GetPermissionPolicyResponse#policy #policy} => String
2257
+ #
2258
+ # @example Request syntax with placeholder values
2259
+ #
2260
+ # resp = client.get_permission_policy({
2261
+ # resource_arn: "ResourceArn", # required
2262
+ # })
2263
+ #
2264
+ # @example Response structure
2265
+ #
2266
+ # resp.policy #=> String
2267
+ #
2268
+ # @see http://docs.aws.amazon.com/goto/WebAPI/waf-regional-2016-11-28/GetPermissionPolicy AWS API Documentation
2269
+ #
2270
+ # @overload get_permission_policy(params = {})
2271
+ # @param [Hash] params ({})
2272
+ def get_permission_policy(params = {}, options = {})
2273
+ req = build_request(:get_permission_policy, params)
2274
+ req.send_request(options)
2275
+ end
2276
+
2221
2277
  # Returns the RateBasedRule that is specified by the `RuleId` that you
2222
2278
  # included in the `GetRateBasedRule` request.
2223
2279
  #
@@ -3661,6 +3717,65 @@ module Aws::WAFRegional
3661
3717
  req.send_request(options)
3662
3718
  end
3663
3719
 
3720
+ # Attaches a IAM policy to the specified resource. The only supported
3721
+ # use for this action is to share a RuleGroup across accounts.
3722
+ #
3723
+ # The `PutPermissionPolicy` is subject to the following restrictions:
3724
+ #
3725
+ # * You can attach only one policy with each `PutPermissionPolicy`
3726
+ # request.
3727
+ #
3728
+ # * The policy must include an `Effect`, `Action` and `Principal`.
3729
+ #
3730
+ # * `Effect` must specify `Allow`.
3731
+ #
3732
+ # * The `Action` in the policy must be `waf:UpdateWebACL` and
3733
+ # `waf-regional:UpdateWebACL`. Any extra or wildcard actions in the
3734
+ # policy will be rejected.
3735
+ #
3736
+ # * The policy cannot include a `Resource` parameter.
3737
+ #
3738
+ # * The ARN in the request must be a valid WAF RuleGroup ARN and the
3739
+ # RuleGroup must exist in the same region.
3740
+ #
3741
+ # * The user making the request must be the owner of the RuleGroup.
3742
+ #
3743
+ # * Your policy must be composed using IAM Policy version 2012-10-17.
3744
+ #
3745
+ # For more information, see [IAM Policies][1].
3746
+ #
3747
+ # An example of a valid policy parameter is shown in the Examples
3748
+ # section below.
3749
+ #
3750
+ #
3751
+ #
3752
+ # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html
3753
+ #
3754
+ # @option params [required, String] :resource_arn
3755
+ # The Amazon Resource Name (ARN) of the RuleGroup to which you want to
3756
+ # attach the policy.
3757
+ #
3758
+ # @option params [required, String] :policy
3759
+ # The policy to attach to the specified RuleGroup.
3760
+ #
3761
+ # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
3762
+ #
3763
+ # @example Request syntax with placeholder values
3764
+ #
3765
+ # resp = client.put_permission_policy({
3766
+ # resource_arn: "ResourceArn", # required
3767
+ # policy: "PolicyString", # required
3768
+ # })
3769
+ #
3770
+ # @see http://docs.aws.amazon.com/goto/WebAPI/waf-regional-2016-11-28/PutPermissionPolicy AWS API Documentation
3771
+ #
3772
+ # @overload put_permission_policy(params = {})
3773
+ # @param [Hash] params ({})
3774
+ def put_permission_policy(params = {}, options = {})
3775
+ req = build_request(:put_permission_policy, params)
3776
+ req.send_request(options)
3777
+ end
3778
+
3664
3779
  # Inserts or deletes ByteMatchTuple objects (filters) in a ByteMatchSet.
3665
3780
  # For each `ByteMatchTuple` object, you specify the following values:
3666
3781
  #
@@ -4444,9 +4559,11 @@ module Aws::WAFRegional
4444
4559
  #
4445
4560
  # You can only insert `REGULAR` rules into a rule group.
4446
4561
  #
4447
- # The `Action` data type within `ActivatedRule` is used only when
4448
- # submitting an `UpdateWebACL` request. `ActivatedRule|Action` is not
4449
- # applicable and therefore not available for `UpdateRuleGroup`.
4562
+ # `ActivatedRule|OverrideAction` applies only when updating or adding a
4563
+ # `RuleGroup` to a `WebACL`. In this case you do not use
4564
+ # `ActivatedRule|Action`. For all other update requests,
4565
+ # `ActivatedRule|Action` is used instead of
4566
+ # `ActivatedRule|OverrideAction`.
4450
4567
  #
4451
4568
  # @option params [required, String] :change_token
4452
4569
  # The value returned by the most recent call to GetChangeToken.
@@ -4829,11 +4946,12 @@ module Aws::WAFRegional
4829
4946
  #
4830
4947
  # * WebACLUpdate: Contains `Action` and `ActivatedRule`
4831
4948
  #
4832
- # * ActivatedRule: Contains `Action`, `Priority`, `RuleId`, and `Type`.
4833
- # The `OverrideAction` data type within `ActivatedRule` is used only
4834
- # when submitting an `UpdateRuleGroup` request.
4835
- # `ActivatedRule|OverrideAction` is not applicable and therefore not
4836
- # available for `UpdateWebACL`.
4949
+ # * ActivatedRule: Contains `Action`, `OverrideAction`, `Priority`,
4950
+ # `RuleId`, and `Type`. `ActivatedRule|OverrideAction` applies only
4951
+ # when updating or adding a `RuleGroup` to a `WebACL`. In this case
4952
+ # you do not use `ActivatedRule|Action`. For all other update
4953
+ # requests, `ActivatedRule|Action` is used instead of
4954
+ # `ActivatedRule|OverrideAction`.
4837
4955
  #
4838
4956
  # * WafAction: Contains `Type`
4839
4957
  #
@@ -5050,7 +5168,7 @@ module Aws::WAFRegional
5050
5168
  params: params,
5051
5169
  config: config)
5052
5170
  context[:gem_name] = 'aws-sdk-wafregional'
5053
- context[:gem_version] = '1.3.0'
5171
+ context[:gem_version] = '1.4.0'
5054
5172
  Seahorse::Client::Request.new(handlers, context)
5055
5173
  end
5056
5174
 
@@ -59,6 +59,8 @@ module Aws::WAFRegional
59
59
  DeleteGeoMatchSetResponse = Shapes::StructureShape.new(name: 'DeleteGeoMatchSetResponse')
60
60
  DeleteIPSetRequest = Shapes::StructureShape.new(name: 'DeleteIPSetRequest')
61
61
  DeleteIPSetResponse = Shapes::StructureShape.new(name: 'DeleteIPSetResponse')
62
+ DeletePermissionPolicyRequest = Shapes::StructureShape.new(name: 'DeletePermissionPolicyRequest')
63
+ DeletePermissionPolicyResponse = Shapes::StructureShape.new(name: 'DeletePermissionPolicyResponse')
62
64
  DeleteRateBasedRuleRequest = Shapes::StructureShape.new(name: 'DeleteRateBasedRuleRequest')
63
65
  DeleteRateBasedRuleResponse = Shapes::StructureShape.new(name: 'DeleteRateBasedRuleResponse')
64
66
  DeleteRegexMatchSetRequest = Shapes::StructureShape.new(name: 'DeleteRegexMatchSetRequest')
@@ -99,6 +101,8 @@ module Aws::WAFRegional
99
101
  GetGeoMatchSetResponse = Shapes::StructureShape.new(name: 'GetGeoMatchSetResponse')
100
102
  GetIPSetRequest = Shapes::StructureShape.new(name: 'GetIPSetRequest')
101
103
  GetIPSetResponse = Shapes::StructureShape.new(name: 'GetIPSetResponse')
104
+ GetPermissionPolicyRequest = Shapes::StructureShape.new(name: 'GetPermissionPolicyRequest')
105
+ GetPermissionPolicyResponse = Shapes::StructureShape.new(name: 'GetPermissionPolicyResponse')
102
106
  GetRateBasedRuleManagedKeysRequest = Shapes::StructureShape.new(name: 'GetRateBasedRuleManagedKeysRequest')
103
107
  GetRateBasedRuleManagedKeysResponse = Shapes::StructureShape.new(name: 'GetRateBasedRuleManagedKeysResponse')
104
108
  GetRateBasedRuleRequest = Shapes::StructureShape.new(name: 'GetRateBasedRuleRequest')
@@ -182,11 +186,14 @@ module Aws::WAFRegional
182
186
  ParameterExceptionField = Shapes::StringShape.new(name: 'ParameterExceptionField')
183
187
  ParameterExceptionParameter = Shapes::StringShape.new(name: 'ParameterExceptionParameter')
184
188
  ParameterExceptionReason = Shapes::StringShape.new(name: 'ParameterExceptionReason')
189
+ PolicyString = Shapes::StringShape.new(name: 'PolicyString')
185
190
  PopulationSize = Shapes::IntegerShape.new(name: 'PopulationSize')
186
191
  PositionalConstraint = Shapes::StringShape.new(name: 'PositionalConstraint')
187
192
  Predicate = Shapes::StructureShape.new(name: 'Predicate')
188
193
  PredicateType = Shapes::StringShape.new(name: 'PredicateType')
189
194
  Predicates = Shapes::ListShape.new(name: 'Predicates')
195
+ PutPermissionPolicyRequest = Shapes::StructureShape.new(name: 'PutPermissionPolicyRequest')
196
+ PutPermissionPolicyResponse = Shapes::StructureShape.new(name: 'PutPermissionPolicyResponse')
190
197
  RateBasedRule = Shapes::StructureShape.new(name: 'RateBasedRule')
191
198
  RateKey = Shapes::StringShape.new(name: 'RateKey')
192
199
  RateLimit = Shapes::IntegerShape.new(name: 'RateLimit')
@@ -272,6 +279,7 @@ module Aws::WAFRegional
272
279
  WAFInvalidAccountException = Shapes::StructureShape.new(name: 'WAFInvalidAccountException')
273
280
  WAFInvalidOperationException = Shapes::StructureShape.new(name: 'WAFInvalidOperationException')
274
281
  WAFInvalidParameterException = Shapes::StructureShape.new(name: 'WAFInvalidParameterException')
282
+ WAFInvalidPermissionPolicyException = Shapes::StructureShape.new(name: 'WAFInvalidPermissionPolicyException')
275
283
  WAFInvalidRegexPatternException = Shapes::StructureShape.new(name: 'WAFInvalidRegexPatternException')
276
284
  WAFLimitsExceededException = Shapes::StructureShape.new(name: 'WAFLimitsExceededException')
277
285
  WAFNonEmptyEntityException = Shapes::StructureShape.new(name: 'WAFNonEmptyEntityException')
@@ -464,6 +472,11 @@ module Aws::WAFRegional
464
472
  DeleteIPSetResponse.add_member(:change_token, Shapes::ShapeRef.new(shape: ChangeToken, location_name: "ChangeToken"))
465
473
  DeleteIPSetResponse.struct_class = Types::DeleteIPSetResponse
466
474
 
475
+ DeletePermissionPolicyRequest.add_member(:resource_arn, Shapes::ShapeRef.new(shape: ResourceArn, required: true, location_name: "ResourceArn"))
476
+ DeletePermissionPolicyRequest.struct_class = Types::DeletePermissionPolicyRequest
477
+
478
+ DeletePermissionPolicyResponse.struct_class = Types::DeletePermissionPolicyResponse
479
+
467
480
  DeleteRateBasedRuleRequest.add_member(:rule_id, Shapes::ShapeRef.new(shape: ResourceId, required: true, location_name: "RuleId"))
468
481
  DeleteRateBasedRuleRequest.add_member(:change_token, Shapes::ShapeRef.new(shape: ChangeToken, required: true, location_name: "ChangeToken"))
469
482
  DeleteRateBasedRuleRequest.struct_class = Types::DeleteRateBasedRuleRequest
@@ -588,6 +601,12 @@ module Aws::WAFRegional
588
601
  GetIPSetResponse.add_member(:ip_set, Shapes::ShapeRef.new(shape: IPSet, location_name: "IPSet"))
589
602
  GetIPSetResponse.struct_class = Types::GetIPSetResponse
590
603
 
604
+ GetPermissionPolicyRequest.add_member(:resource_arn, Shapes::ShapeRef.new(shape: ResourceArn, required: true, location_name: "ResourceArn"))
605
+ GetPermissionPolicyRequest.struct_class = Types::GetPermissionPolicyRequest
606
+
607
+ GetPermissionPolicyResponse.add_member(:policy, Shapes::ShapeRef.new(shape: PolicyString, location_name: "Policy"))
608
+ GetPermissionPolicyResponse.struct_class = Types::GetPermissionPolicyResponse
609
+
591
610
  GetRateBasedRuleManagedKeysRequest.add_member(:rule_id, Shapes::ShapeRef.new(shape: ResourceId, required: true, location_name: "RuleId"))
592
611
  GetRateBasedRuleManagedKeysRequest.add_member(:next_marker, Shapes::ShapeRef.new(shape: NextMarker, location_name: "NextMarker"))
593
612
  GetRateBasedRuleManagedKeysRequest.struct_class = Types::GetRateBasedRuleManagedKeysRequest
@@ -832,6 +851,12 @@ module Aws::WAFRegional
832
851
 
833
852
  Predicates.member = Shapes::ShapeRef.new(shape: Predicate)
834
853
 
854
+ PutPermissionPolicyRequest.add_member(:resource_arn, Shapes::ShapeRef.new(shape: ResourceArn, required: true, location_name: "ResourceArn"))
855
+ PutPermissionPolicyRequest.add_member(:policy, Shapes::ShapeRef.new(shape: PolicyString, required: true, location_name: "Policy"))
856
+ PutPermissionPolicyRequest.struct_class = Types::PutPermissionPolicyRequest
857
+
858
+ PutPermissionPolicyResponse.struct_class = Types::PutPermissionPolicyResponse
859
+
835
860
  RateBasedRule.add_member(:rule_id, Shapes::ShapeRef.new(shape: ResourceId, required: true, location_name: "RuleId"))
836
861
  RateBasedRule.add_member(:name, Shapes::ShapeRef.new(shape: ResourceName, location_name: "Name"))
837
862
  RateBasedRule.add_member(:metric_name, Shapes::ShapeRef.new(shape: MetricName, location_name: "MetricName"))
@@ -1364,6 +1389,17 @@ module Aws::WAFRegional
1364
1389
  o.errors << Shapes::ShapeRef.new(shape: WAFNonEmptyEntityException)
1365
1390
  end)
1366
1391
 
1392
+ api.add_operation(:delete_permission_policy, Seahorse::Model::Operation.new.tap do |o|
1393
+ o.name = "DeletePermissionPolicy"
1394
+ o.http_method = "POST"
1395
+ o.http_request_uri = "/"
1396
+ o.input = Shapes::ShapeRef.new(shape: DeletePermissionPolicyRequest)
1397
+ o.output = Shapes::ShapeRef.new(shape: DeletePermissionPolicyResponse)
1398
+ o.errors << Shapes::ShapeRef.new(shape: WAFInternalErrorException)
1399
+ o.errors << Shapes::ShapeRef.new(shape: WAFStaleDataException)
1400
+ o.errors << Shapes::ShapeRef.new(shape: WAFNonexistentItemException)
1401
+ end)
1402
+
1367
1403
  api.add_operation(:delete_rate_based_rule, Seahorse::Model::Operation.new.tap do |o|
1368
1404
  o.name = "DeleteRateBasedRule"
1369
1405
  o.http_method = "POST"
@@ -1553,6 +1589,16 @@ module Aws::WAFRegional
1553
1589
  o.errors << Shapes::ShapeRef.new(shape: WAFNonexistentItemException)
1554
1590
  end)
1555
1591
 
1592
+ api.add_operation(:get_permission_policy, Seahorse::Model::Operation.new.tap do |o|
1593
+ o.name = "GetPermissionPolicy"
1594
+ o.http_method = "POST"
1595
+ o.http_request_uri = "/"
1596
+ o.input = Shapes::ShapeRef.new(shape: GetPermissionPolicyRequest)
1597
+ o.output = Shapes::ShapeRef.new(shape: GetPermissionPolicyResponse)
1598
+ o.errors << Shapes::ShapeRef.new(shape: WAFInternalErrorException)
1599
+ o.errors << Shapes::ShapeRef.new(shape: WAFNonexistentItemException)
1600
+ end)
1601
+
1556
1602
  api.add_operation(:get_rate_based_rule, Seahorse::Model::Operation.new.tap do |o|
1557
1603
  o.name = "GetRateBasedRule"
1558
1604
  o.http_method = "POST"
@@ -1837,6 +1883,18 @@ module Aws::WAFRegional
1837
1883
  o.errors << Shapes::ShapeRef.new(shape: WAFInvalidAccountException)
1838
1884
  end)
1839
1885
 
1886
+ api.add_operation(:put_permission_policy, Seahorse::Model::Operation.new.tap do |o|
1887
+ o.name = "PutPermissionPolicy"
1888
+ o.http_method = "POST"
1889
+ o.http_request_uri = "/"
1890
+ o.input = Shapes::ShapeRef.new(shape: PutPermissionPolicyRequest)
1891
+ o.output = Shapes::ShapeRef.new(shape: PutPermissionPolicyResponse)
1892
+ o.errors << Shapes::ShapeRef.new(shape: WAFInternalErrorException)
1893
+ o.errors << Shapes::ShapeRef.new(shape: WAFStaleDataException)
1894
+ o.errors << Shapes::ShapeRef.new(shape: WAFNonexistentItemException)
1895
+ o.errors << Shapes::ShapeRef.new(shape: WAFInvalidPermissionPolicyException)
1896
+ end)
1897
+
1840
1898
  api.add_operation(:update_byte_match_set, Seahorse::Model::Operation.new.tap do |o|
1841
1899
  o.name = "UpdateByteMatchSet"
1842
1900
  o.http_method = "POST"
@@ -62,9 +62,11 @@ module Aws::WAFRegional
62
62
  # conditions in the rule and then continues to inspect the web
63
63
  # request based on the remaining rules in the web ACL.
64
64
  #
65
- # The `Action` data type within `ActivatedRule` is used only when
66
- # submitting an `UpdateWebACL` request. `ActivatedRule|Action` is not
67
- # applicable and therefore not available for `UpdateRuleGroup`.
65
+ # `ActivatedRule|OverrideAction` applies only when updating or adding
66
+ # a `RuleGroup` to a `WebACL`. In this case you do not use
67
+ # `ActivatedRule|Action`. For all other update requests,
68
+ # `ActivatedRule|Action` is used instead of
69
+ # `ActivatedRule|OverrideAction`.
68
70
  # @return [Types::WafAction]
69
71
  #
70
72
  # @!attribute [rw] override_action
@@ -80,10 +82,11 @@ module Aws::WAFRegional
80
82
  # blocking matching requests, those requests will be counted. You can
81
83
  # view a record of counted requests using GetSampledRequests.
82
84
  #
83
- # The `OverrideAction` data type within `ActivatedRule` is used only
84
- # when submitting an `UpdateRuleGroup` request.
85
- # `ActivatedRule|OverrideAction` is not applicable and therefore not
86
- # available for `UpdateWebACL`.
85
+ # `ActivatedRule|OverrideAction` applies only when updating or adding
86
+ # a `RuleGroup` to a `WebACL`. In this case you do not use
87
+ # `ActivatedRule|Action`. For all other update requests,
88
+ # `ActivatedRule|Action` is used instead of
89
+ # `ActivatedRule|OverrideAction`.
87
90
  # @return [Types::WafOverrideAction]
88
91
  #
89
92
  # @!attribute [rw] type
@@ -1172,6 +1175,31 @@ module Aws::WAFRegional
1172
1175
  include Aws::Structure
1173
1176
  end
1174
1177
 
1178
+ # @note When making an API call, you may pass DeletePermissionPolicyRequest
1179
+ # data as a hash:
1180
+ #
1181
+ # {
1182
+ # resource_arn: "ResourceArn", # required
1183
+ # }
1184
+ #
1185
+ # @!attribute [rw] resource_arn
1186
+ # The Amazon Resource Name (ARN) of the RuleGroup from which you want
1187
+ # to delete the policy.
1188
+ #
1189
+ # The user making the request must be the owner of the RuleGroup.
1190
+ # @return [String]
1191
+ #
1192
+ # @see http://docs.aws.amazon.com/goto/WebAPI/waf-regional-2016-11-28/DeletePermissionPolicyRequest AWS API Documentation
1193
+ #
1194
+ class DeletePermissionPolicyRequest < Struct.new(
1195
+ :resource_arn)
1196
+ include Aws::Structure
1197
+ end
1198
+
1199
+ # @see http://docs.aws.amazon.com/goto/WebAPI/waf-regional-2016-11-28/DeletePermissionPolicyResponse AWS API Documentation
1200
+ #
1201
+ class DeletePermissionPolicyResponse < Aws::EmptyStructure; end
1202
+
1175
1203
  # @note When making an API call, you may pass DeleteRateBasedRuleRequest
1176
1204
  # data as a hash:
1177
1205
  #
@@ -1884,6 +1912,36 @@ module Aws::WAFRegional
1884
1912
  include Aws::Structure
1885
1913
  end
1886
1914
 
1915
+ # @note When making an API call, you may pass GetPermissionPolicyRequest
1916
+ # data as a hash:
1917
+ #
1918
+ # {
1919
+ # resource_arn: "ResourceArn", # required
1920
+ # }
1921
+ #
1922
+ # @!attribute [rw] resource_arn
1923
+ # The Amazon Resource Name (ARN) of the RuleGroup for which you want
1924
+ # to get the policy.
1925
+ # @return [String]
1926
+ #
1927
+ # @see http://docs.aws.amazon.com/goto/WebAPI/waf-regional-2016-11-28/GetPermissionPolicyRequest AWS API Documentation
1928
+ #
1929
+ class GetPermissionPolicyRequest < Struct.new(
1930
+ :resource_arn)
1931
+ include Aws::Structure
1932
+ end
1933
+
1934
+ # @!attribute [rw] policy
1935
+ # The IAM policy attached to the specified RuleGroup.
1936
+ # @return [String]
1937
+ #
1938
+ # @see http://docs.aws.amazon.com/goto/WebAPI/waf-regional-2016-11-28/GetPermissionPolicyResponse AWS API Documentation
1939
+ #
1940
+ class GetPermissionPolicyResponse < Struct.new(
1941
+ :policy)
1942
+ include Aws::Structure
1943
+ end
1944
+
1887
1945
  # @note When making an API call, you may pass GetRateBasedRuleManagedKeysRequest
1888
1946
  # data as a hash:
1889
1947
  #
@@ -3471,6 +3529,35 @@ module Aws::WAFRegional
3471
3529
  include Aws::Structure
3472
3530
  end
3473
3531
 
3532
+ # @note When making an API call, you may pass PutPermissionPolicyRequest
3533
+ # data as a hash:
3534
+ #
3535
+ # {
3536
+ # resource_arn: "ResourceArn", # required
3537
+ # policy: "PolicyString", # required
3538
+ # }
3539
+ #
3540
+ # @!attribute [rw] resource_arn
3541
+ # The Amazon Resource Name (ARN) of the RuleGroup to which you want to
3542
+ # attach the policy.
3543
+ # @return [String]
3544
+ #
3545
+ # @!attribute [rw] policy
3546
+ # The policy to attach to the specified RuleGroup.
3547
+ # @return [String]
3548
+ #
3549
+ # @see http://docs.aws.amazon.com/goto/WebAPI/waf-regional-2016-11-28/PutPermissionPolicyRequest AWS API Documentation
3550
+ #
3551
+ class PutPermissionPolicyRequest < Struct.new(
3552
+ :resource_arn,
3553
+ :policy)
3554
+ include Aws::Structure
3555
+ end
3556
+
3557
+ # @see http://docs.aws.amazon.com/goto/WebAPI/waf-regional-2016-11-28/PutPermissionPolicyResponse AWS API Documentation
3558
+ #
3559
+ class PutPermissionPolicyResponse < Aws::EmptyStructure; end
3560
+
3474
3561
  # A `RateBasedRule` is identical to a regular Rule, with one addition: a
3475
3562
  # `RateBasedRule` counts the number of requests that arrive from a
3476
3563
  # specified IP address every five minutes. For example, based on recent
@@ -5080,9 +5167,11 @@ module Aws::WAFRegional
5080
5167
  #
5081
5168
  # You can only insert `REGULAR` rules into a rule group.
5082
5169
  #
5083
- # The `Action` data type within `ActivatedRule` is used only when
5084
- # submitting an `UpdateWebACL` request. `ActivatedRule|Action` is not
5085
- # applicable and therefore not available for `UpdateRuleGroup`.
5170
+ # `ActivatedRule|OverrideAction` applies only when updating or adding
5171
+ # a `RuleGroup` to a `WebACL`. In this case you do not use
5172
+ # `ActivatedRule|Action`. For all other update requests,
5173
+ # `ActivatedRule|Action` is used instead of
5174
+ # `ActivatedRule|OverrideAction`.
5086
5175
  # @return [Array<Types::RuleGroupUpdate>]
5087
5176
  #
5088
5177
  # @!attribute [rw] change_token
@@ -5356,11 +5445,12 @@ module Aws::WAFRegional
5356
5445
  #
5357
5446
  # * WebACLUpdate: Contains `Action` and `ActivatedRule`
5358
5447
  #
5359
- # * ActivatedRule: Contains `Action`, `Priority`, `RuleId`, and
5360
- # `Type`. The `OverrideAction` data type within `ActivatedRule` is
5361
- # used only when submitting an `UpdateRuleGroup` request.
5362
- # `ActivatedRule|OverrideAction` is not applicable and therefore not
5363
- # available for `UpdateWebACL`.
5448
+ # * ActivatedRule: Contains `Action`, `OverrideAction`, `Priority`,
5449
+ # `RuleId`, and `Type`. `ActivatedRule|OverrideAction` applies only
5450
+ # when updating or adding a `RuleGroup` to a `WebACL`. In this case
5451
+ # you do not use `ActivatedRule|Action`. For all other update
5452
+ # requests, `ActivatedRule|Action` is used instead of
5453
+ # `ActivatedRule|OverrideAction`.
5364
5454
  #
5365
5455
  # * WafAction: Contains `Type`
5366
5456
  # @return [Array<Types::WebACLUpdate>]
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-wafregional
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.3.0
4
+ version: 1.4.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2017-11-30 00:00:00.000000000 Z
11
+ date: 2018-02-20 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core