aws-sdk-wafv2 1.101.0 → 1.102.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -477,17 +477,13 @@ module Aws::WAFV2
477
477
 
478
478
  # @!group API Operations
479
479
 
480
- # Associates a web ACL with a regional application resource, to protect
481
- # the resource. A regional application can be an Application Load
482
- # Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL
483
- # API, an Amazon Cognito user pool, an App Runner service, or an Amazon
484
- # Web Services Verified Access instance.
485
- #
486
- # For Amazon CloudFront, don't use this call. Instead, use your
487
- # CloudFront distribution configuration. To associate a web ACL, in the
488
- # CloudFront call `UpdateDistribution`, set the web ACL ID to the Amazon
489
- # Resource Name (ARN) of the web ACL. For information, see
490
- # [UpdateDistribution][1] in the *Amazon CloudFront Developer Guide*.
480
+ # Associates a web ACL with a resource, to protect the resource.
481
+ #
482
+ # Use this for all resource types except for Amazon CloudFront
483
+ # distributions. For Amazon CloudFront, call `UpdateDistribution` for
484
+ # the distribution and provide the Amazon Resource Name (ARN) of the web
485
+ # ACL in the web ACL ID. For information, see [UpdateDistribution][1] in
486
+ # the *Amazon CloudFront Developer Guide*.
491
487
  #
492
488
  # **Required permissions for customer-managed IAM policies**
493
489
  #
@@ -593,11 +589,8 @@ module Aws::WAFV2
593
589
  # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/aws-waf-capacity-units.html
594
590
  #
595
591
  # @option params [required, String] :scope
596
- # Specifies whether this is for an Amazon CloudFront distribution or for
597
- # a regional application. A regional application can be an Application
598
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
599
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
600
- # Amazon Web Services Verified Access instance.
592
+ # Specifies whether this is for a global resource type, such as a Amazon
593
+ # CloudFront distribution.
601
594
  #
602
595
  # To work with CloudFront, you must also specify the Region US East (N.
603
596
  # Virginia) as follows:
@@ -1473,11 +1466,8 @@ module Aws::WAFV2
1473
1466
  # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-application-integration.html
1474
1467
  #
1475
1468
  # @option params [required, String] :scope
1476
- # Specifies whether this is for an Amazon CloudFront distribution or for
1477
- # a regional application. A regional application can be an Application
1478
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1479
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
1480
- # Amazon Web Services Verified Access instance.
1469
+ # Specifies whether this is for a global resource type, such as a Amazon
1470
+ # CloudFront distribution.
1481
1471
  #
1482
1472
  # To work with CloudFront, you must also specify the Region US East (N.
1483
1473
  # Virginia) as follows:
@@ -1530,11 +1520,8 @@ module Aws::WAFV2
1530
1520
  # you create it.
1531
1521
  #
1532
1522
  # @option params [required, String] :scope
1533
- # Specifies whether this is for an Amazon CloudFront distribution or for
1534
- # a regional application. A regional application can be an Application
1535
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1536
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
1537
- # Amazon Web Services Verified Access instance.
1523
+ # Specifies whether this is for a global resource type, such as a Amazon
1524
+ # CloudFront distribution.
1538
1525
  #
1539
1526
  # To work with CloudFront, you must also specify the Region US East (N.
1540
1527
  # Virginia) as follows:
@@ -1641,11 +1628,8 @@ module Aws::WAFV2
1641
1628
  # set.
1642
1629
  #
1643
1630
  # @option params [required, String] :scope
1644
- # Specifies whether this is for an Amazon CloudFront distribution or for
1645
- # a regional application. A regional application can be an Application
1646
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1647
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
1648
- # Amazon Web Services Verified Access instance.
1631
+ # Specifies whether this is for a global resource type, such as a Amazon
1632
+ # CloudFront distribution.
1649
1633
  #
1650
1634
  # To work with CloudFront, you must also specify the Region US East (N.
1651
1635
  # Virginia) as follows:
@@ -1717,11 +1701,8 @@ module Aws::WAFV2
1717
1701
  # after you create it.
1718
1702
  #
1719
1703
  # @option params [required, String] :scope
1720
- # Specifies whether this is for an Amazon CloudFront distribution or for
1721
- # a regional application. A regional application can be an Application
1722
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1723
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
1724
- # Amazon Web Services Verified Access instance.
1704
+ # Specifies whether this is for a global resource type, such as a Amazon
1705
+ # CloudFront distribution.
1725
1706
  #
1726
1707
  # To work with CloudFront, you must also specify the Region US East (N.
1727
1708
  # Virginia) as follows:
@@ -2665,22 +2646,19 @@ module Aws::WAFV2
2665
2646
  # (allow, block) for any request that does not match any of the rules.
2666
2647
  # The rules in a web ACL can be a combination of the types Rule,
2667
2648
  # RuleGroup, and managed rule group. You can associate a web ACL with
2668
- # one or more Amazon Web Services resources to protect. The resources
2669
- # can be an Amazon CloudFront distribution, an Amazon API Gateway REST
2670
- # API, an Application Load Balancer, an AppSync GraphQL API, an Amazon
2671
- # Cognito user pool, an App Runner service, or an Amazon Web Services
2672
- # Verified Access instance.
2649
+ # one or more Amazon Web Services resources to protect. The resource
2650
+ # types include Amazon CloudFront distribution, Amazon API Gateway REST
2651
+ # API, Application Load Balancer, AppSync GraphQL API, Amazon Cognito
2652
+ # user pool, App Runner service, and Amazon Web Services Verified Access
2653
+ # instance.
2673
2654
  #
2674
2655
  # @option params [required, String] :name
2675
2656
  # The name of the web ACL. You cannot change the name of a web ACL after
2676
2657
  # you create it.
2677
2658
  #
2678
2659
  # @option params [required, String] :scope
2679
- # Specifies whether this is for an Amazon CloudFront distribution or for
2680
- # a regional application. A regional application can be an Application
2681
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
2682
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
2683
- # Amazon Web Services Verified Access instance.
2660
+ # Specifies whether this is for a global resource type, such as a Amazon
2661
+ # CloudFront distribution.
2684
2662
  #
2685
2663
  # To work with CloudFront, you must also specify the Region US East (N.
2686
2664
  # Virginia) as follows:
@@ -2707,6 +2685,18 @@ module Aws::WAFV2
2707
2685
  # Defines and enables Amazon CloudWatch metrics and web request sample
2708
2686
  # collection.
2709
2687
  #
2688
+ # @option params [Types::DataProtectionConfig] :data_protection_config
2689
+ # Specifies data protection to apply to the web request data that WAF
2690
+ # stores for the web ACL. This is a web ACL level data protection
2691
+ # option.
2692
+ #
2693
+ # The data protection that you configure for the web ACL alters the data
2694
+ # that's available for any other data collection activity, including
2695
+ # WAF logging, web ACL request sampling, Amazon Web Services Managed
2696
+ # Rules, and Amazon Security Lake data collection and management. Your
2697
+ # other option for data protection is in the logging configuration,
2698
+ # which only affects logging.
2699
+ #
2710
2700
  # @option params [Array<Types::Tag>] :tags
2711
2701
  # An array of key:value pairs to associate with the resource.
2712
2702
  #
@@ -3639,6 +3629,19 @@ module Aws::WAFV2
3639
3629
  # cloud_watch_metrics_enabled: false, # required
3640
3630
  # metric_name: "MetricName", # required
3641
3631
  # },
3632
+ # data_protection_config: {
3633
+ # data_protections: [ # required
3634
+ # {
3635
+ # field: { # required
3636
+ # field_type: "SINGLE_HEADER", # required, accepts SINGLE_HEADER, SINGLE_COOKIE, SINGLE_QUERY_ARGUMENT, QUERY_STRING, BODY
3637
+ # field_keys: ["FieldToProtectKeyName"],
3638
+ # },
3639
+ # action: "SUBSTITUTION", # required, accepts SUBSTITUTION, HASH
3640
+ # exclude_rule_match_details: false,
3641
+ # exclude_rate_based_details: false,
3642
+ # },
3643
+ # ],
3644
+ # },
3642
3645
  # tags: [
3643
3646
  # {
3644
3647
  # key: "TagKey", # required
@@ -3694,11 +3697,8 @@ module Aws::WAFV2
3694
3697
  # use of the key in all regions.
3695
3698
  #
3696
3699
  # @option params [required, String] :scope
3697
- # Specifies whether this is for an Amazon CloudFront distribution or for
3698
- # a regional application. A regional application can be an Application
3699
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3700
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
3701
- # Amazon Web Services Verified Access instance.
3700
+ # Specifies whether this is for a global resource type, such as a Amazon
3701
+ # CloudFront distribution.
3702
3702
  #
3703
3703
  # To work with CloudFront, you must also specify the Region US East (N.
3704
3704
  # Virginia) as follows:
@@ -3779,11 +3779,8 @@ module Aws::WAFV2
3779
3779
  # you create it.
3780
3780
  #
3781
3781
  # @option params [required, String] :scope
3782
- # Specifies whether this is for an Amazon CloudFront distribution or for
3783
- # a regional application. A regional application can be an Application
3784
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3785
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
3786
- # Amazon Web Services Verified Access instance.
3782
+ # Specifies whether this is for a global resource type, such as a Amazon
3783
+ # CloudFront distribution.
3787
3784
  #
3788
3785
  # To work with CloudFront, you must also specify the Region US East (N.
3789
3786
  # Virginia) as follows:
@@ -3910,11 +3907,8 @@ module Aws::WAFV2
3910
3907
  # set.
3911
3908
  #
3912
3909
  # @option params [required, String] :scope
3913
- # Specifies whether this is for an Amazon CloudFront distribution or for
3914
- # a regional application. A regional application can be an Application
3915
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3916
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
3917
- # Amazon Web Services Verified Access instance.
3910
+ # Specifies whether this is for a global resource type, such as a Amazon
3911
+ # CloudFront distribution.
3918
3912
  #
3919
3913
  # To work with CloudFront, you must also specify the Region US East (N.
3920
3914
  # Virginia) as follows:
@@ -3966,11 +3960,8 @@ module Aws::WAFV2
3966
3960
  # after you create it.
3967
3961
  #
3968
3962
  # @option params [required, String] :scope
3969
- # Specifies whether this is for an Amazon CloudFront distribution or for
3970
- # a regional application. A regional application can be an Application
3971
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3972
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
3973
- # Amazon Web Services Verified Access instance.
3963
+ # Specifies whether this is for a global resource type, such as a Amazon
3964
+ # CloudFront distribution.
3974
3965
  #
3975
3966
  # To work with CloudFront, you must also specify the Region US East (N.
3976
3967
  # Virginia) as follows:
@@ -4025,20 +4016,20 @@ module Aws::WAFV2
4025
4016
  # * To retrieve a list of the resources that are associated with a web
4026
4017
  # ACL, use the following calls:
4027
4018
  #
4028
- # * For regional resources, call ListResourcesForWebACL.
4029
- #
4030
4019
  # * For Amazon CloudFront distributions, use the CloudFront call
4031
4020
  # `ListDistributionsByWebACLId`. For information, see
4032
4021
  # [ListDistributionsByWebACLId][1] in the *Amazon CloudFront API
4033
4022
  # Reference*.
4034
- # * To disassociate a resource from a web ACL, use the following calls:
4035
4023
  #
4036
- # * For regional resources, call DisassociateWebACL.
4024
+ # * For all other resources, call ListResourcesForWebACL.
4025
+ # * To disassociate a resource from a web ACL, use the following calls:
4037
4026
  #
4038
4027
  # * For Amazon CloudFront distributions, provide an empty web ACL ID
4039
4028
  # in the CloudFront call `UpdateDistribution`. For information, see
4040
4029
  # [UpdateDistribution][2] in the *Amazon CloudFront API Reference*.
4041
4030
  #
4031
+ # * For all other resources, call DisassociateWebACL.
4032
+ #
4042
4033
  # </note>
4043
4034
  #
4044
4035
  #
@@ -4051,11 +4042,8 @@ module Aws::WAFV2
4051
4042
  # you create it.
4052
4043
  #
4053
4044
  # @option params [required, String] :scope
4054
- # Specifies whether this is for an Amazon CloudFront distribution or for
4055
- # a regional application. A regional application can be an Application
4056
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4057
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4058
- # Amazon Web Services Verified Access instance.
4045
+ # Specifies whether this is for a global resource type, such as a Amazon
4046
+ # CloudFront distribution.
4059
4047
  #
4060
4048
  # To work with CloudFront, you must also specify the Region US East (N.
4061
4049
  # Virginia) as follows:
@@ -4105,11 +4093,8 @@ module Aws::WAFV2
4105
4093
  # groups.
4106
4094
  #
4107
4095
  # @option params [required, String] :scope
4108
- # Specifies whether this is for an Amazon CloudFront distribution or for
4109
- # a regional application. A regional application can be an Application
4110
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4111
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4112
- # Amazon Web Services Verified Access instance.
4096
+ # Specifies whether this is for a global resource type, such as a Amazon
4097
+ # CloudFront distribution.
4113
4098
  #
4114
4099
  # To work with CloudFront, you must also specify the Region US East (N.
4115
4100
  # Virginia) as follows:
@@ -4159,11 +4144,8 @@ module Aws::WAFV2
4159
4144
  # the rule group name, to identify a rule group.
4160
4145
  #
4161
4146
  # @option params [required, String] :scope
4162
- # Specifies whether this is for an Amazon CloudFront distribution or for
4163
- # a regional application. A regional application can be an Application
4164
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4165
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4166
- # Amazon Web Services Verified Access instance.
4147
+ # Specifies whether this is for a global resource type, such as a Amazon
4148
+ # CloudFront distribution.
4167
4149
  #
4168
4150
  # To work with CloudFront, you must also specify the Region US East (N.
4169
4151
  # Virginia) as follows:
@@ -4218,11 +4200,8 @@ module Aws::WAFV2
4218
4200
  # vendor name, to identify the rule group.
4219
4201
  #
4220
4202
  # @option params [required, String] :scope
4221
- # Specifies whether this is for an Amazon CloudFront distribution or for
4222
- # a regional application. A regional application can be an Application
4223
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4224
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4225
- # Amazon Web Services Verified Access instance.
4203
+ # Specifies whether this is for a global resource type, such as a Amazon
4204
+ # CloudFront distribution.
4226
4205
  #
4227
4206
  # To work with CloudFront, you must also specify the Region US East (N.
4228
4207
  # Virginia) as follows:
@@ -4295,18 +4274,13 @@ module Aws::WAFV2
4295
4274
  req.send_request(options)
4296
4275
  end
4297
4276
 
4298
- # Disassociates the specified regional application resource from any
4299
- # existing web ACL association. A resource can have at most one web ACL
4300
- # association. A regional application can be an Application Load
4301
- # Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL
4302
- # API, an Amazon Cognito user pool, an App Runner service, or an Amazon
4303
- # Web Services Verified Access instance.
4304
- #
4305
- # For Amazon CloudFront, don't use this call. Instead, use your
4306
- # CloudFront distribution configuration. To disassociate a web ACL,
4307
- # provide an empty web ACL ID in the CloudFront call
4308
- # `UpdateDistribution`. For information, see [UpdateDistribution][1] in
4309
- # the *Amazon CloudFront API Reference*.
4277
+ # Disassociates the specified resource from its web ACL association, if
4278
+ # it has one.
4279
+ #
4280
+ # Use this for all resource types except for Amazon CloudFront
4281
+ # distributions. For Amazon CloudFront, call `UpdateDistribution` for
4282
+ # the distribution and provide an empty web ACL ID. For information, see
4283
+ # [UpdateDistribution][1] in the *Amazon CloudFront API Reference*.
4310
4284
  #
4311
4285
  # **Required permissions for customer-managed IAM policies**
4312
4286
  #
@@ -4423,11 +4397,8 @@ module Aws::WAFV2
4423
4397
  # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-application-integration.html
4424
4398
  #
4425
4399
  # @option params [required, String] :scope
4426
- # Specifies whether this is for an Amazon CloudFront distribution or for
4427
- # a regional application. A regional application can be an Application
4428
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4429
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4430
- # Amazon Web Services Verified Access instance.
4400
+ # Specifies whether this is for a global resource type, such as a Amazon
4401
+ # CloudFront distribution.
4431
4402
  #
4432
4403
  # To work with CloudFront, you must also specify the Region US East (N.
4433
4404
  # Virginia) as follows:
@@ -4474,11 +4445,8 @@ module Aws::WAFV2
4474
4445
  # you create it.
4475
4446
  #
4476
4447
  # @option params [required, String] :scope
4477
- # Specifies whether this is for an Amazon CloudFront distribution or for
4478
- # a regional application. A regional application can be an Application
4479
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4480
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4481
- # Amazon Web Services Verified Access instance.
4448
+ # Specifies whether this is for a global resource type, such as a Amazon
4449
+ # CloudFront distribution.
4482
4450
  #
4483
4451
  # To work with CloudFront, you must also specify the Region US East (N.
4484
4452
  # Virginia) as follows:
@@ -4636,11 +4604,8 @@ module Aws::WAFV2
4636
4604
  # your customers can access and use.
4637
4605
  #
4638
4606
  # @option params [required, String] :scope
4639
- # Specifies whether this is for an Amazon CloudFront distribution or for
4640
- # a regional application. A regional application can be an Application
4641
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4642
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4643
- # Amazon Web Services Verified Access instance.
4607
+ # Specifies whether this is for a global resource type, such as a Amazon
4608
+ # CloudFront distribution.
4644
4609
  #
4645
4610
  # To work with CloudFront, you must also specify the Region US East (N.
4646
4611
  # Virginia) as follows:
@@ -4796,11 +4761,8 @@ module Aws::WAFV2
4796
4761
  # for this second usage completely independent of your first.
4797
4762
  #
4798
4763
  # @option params [required, String] :scope
4799
- # Specifies whether this is for an Amazon CloudFront distribution or for
4800
- # a regional application. A regional application can be an Application
4801
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4802
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4803
- # Amazon Web Services Verified Access instance.
4764
+ # Specifies whether this is for a global resource type, such as a Amazon
4765
+ # CloudFront distribution.
4804
4766
  #
4805
4767
  # To work with CloudFront, you must also specify the Region US East (N.
4806
4768
  # Virginia) as follows:
@@ -4870,11 +4832,8 @@ module Aws::WAFV2
4870
4832
  # set.
4871
4833
  #
4872
4834
  # @option params [required, String] :scope
4873
- # Specifies whether this is for an Amazon CloudFront distribution or for
4874
- # a regional application. A regional application can be an Application
4875
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4876
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4877
- # Amazon Web Services Verified Access instance.
4835
+ # Specifies whether this is for a global resource type, such as a Amazon
4836
+ # CloudFront distribution.
4878
4837
  #
4879
4838
  # To work with CloudFront, you must also specify the Region US East (N.
4880
4839
  # Virginia) as follows:
@@ -4928,11 +4887,8 @@ module Aws::WAFV2
4928
4887
  # after you create it.
4929
4888
  #
4930
4889
  # @option params [String] :scope
4931
- # Specifies whether this is for an Amazon CloudFront distribution or for
4932
- # a regional application. A regional application can be an Application
4933
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4934
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4935
- # Amazon Web Services Verified Access instance.
4890
+ # Specifies whether this is for a global resource type, such as a Amazon
4891
+ # CloudFront distribution.
4936
4892
  #
4937
4893
  # To work with CloudFront, you must also specify the Region US East (N.
4938
4894
  # Virginia) as follows:
@@ -5349,11 +5305,8 @@ module Aws::WAFV2
5349
5305
  # which you want a sample of requests.
5350
5306
  #
5351
5307
  # @option params [required, String] :scope
5352
- # Specifies whether this is for an Amazon CloudFront distribution or for
5353
- # a regional application. A regional application can be an Application
5354
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
5355
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
5356
- # Amazon Web Services Verified Access instance.
5308
+ # Specifies whether this is for a global resource type, such as a Amazon
5309
+ # CloudFront distribution.
5357
5310
  #
5358
5311
  # To work with CloudFront, you must also specify the Region US East (N.
5359
5312
  # Virginia) as follows:
@@ -5446,11 +5399,8 @@ module Aws::WAFV2
5446
5399
  # you create it.
5447
5400
  #
5448
5401
  # @option params [required, String] :scope
5449
- # Specifies whether this is for an Amazon CloudFront distribution or for
5450
- # a regional application. A regional application can be an Application
5451
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
5452
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
5453
- # Amazon Web Services Verified Access instance.
5402
+ # Specifies whether this is for a global resource type, such as a Amazon
5403
+ # CloudFront distribution.
5454
5404
  #
5455
5405
  # To work with CloudFront, you must also specify the Region US East (N.
5456
5406
  # Virginia) as follows:
@@ -5573,11 +5523,8 @@ module Aws::WAFV2
5573
5523
  # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-application-integration.html
5574
5524
  #
5575
5525
  # @option params [required, String] :scope
5576
- # Specifies whether this is for an Amazon CloudFront distribution or for
5577
- # a regional application. A regional application can be an Application
5578
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
5579
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
5580
- # Amazon Web Services Verified Access instance.
5526
+ # Specifies whether this is for a global resource type, such as a Amazon
5527
+ # CloudFront distribution.
5581
5528
  #
5582
5529
  # To work with CloudFront, you must also specify the Region US East (N.
5583
5530
  # Virginia) as follows:
@@ -5646,11 +5593,8 @@ module Aws::WAFV2
5646
5593
  # vendor name, to identify the rule group.
5647
5594
  #
5648
5595
  # @option params [required, String] :scope
5649
- # Specifies whether this is for an Amazon CloudFront distribution or for
5650
- # a regional application. A regional application can be an Application
5651
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
5652
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
5653
- # Amazon Web Services Verified Access instance.
5596
+ # Specifies whether this is for a global resource type, such as a Amazon
5597
+ # CloudFront distribution.
5654
5598
  #
5655
5599
  # To work with CloudFront, you must also specify the Region US East (N.
5656
5600
  # Virginia) as follows:
@@ -5712,11 +5656,8 @@ module Aws::WAFV2
5712
5656
  # groups that you're subscribed to.
5713
5657
  #
5714
5658
  # @option params [required, String] :scope
5715
- # Specifies whether this is for an Amazon CloudFront distribution or for
5716
- # a regional application. A regional application can be an Application
5717
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
5718
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
5719
- # Amazon Web Services Verified Access instance.
5659
+ # Specifies whether this is for a global resource type, such as a Amazon
5660
+ # CloudFront distribution.
5720
5661
  #
5721
5662
  # To work with CloudFront, you must also specify the Region US East (N.
5722
5663
  # Virginia) as follows:
@@ -5774,11 +5715,8 @@ module Aws::WAFV2
5774
5715
  # manage.
5775
5716
  #
5776
5717
  # @option params [required, String] :scope
5777
- # Specifies whether this is for an Amazon CloudFront distribution or for
5778
- # a regional application. A regional application can be an Application
5779
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
5780
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
5781
- # Amazon Web Services Verified Access instance.
5718
+ # Specifies whether this is for a global resource type, such as a Amazon
5719
+ # CloudFront distribution.
5782
5720
  #
5783
5721
  # To work with CloudFront, you must also specify the Region US East (N.
5784
5722
  # Virginia) as follows:
@@ -5836,11 +5774,8 @@ module Aws::WAFV2
5836
5774
  # Retrieves an array of your LoggingConfiguration objects.
5837
5775
  #
5838
5776
  # @option params [required, String] :scope
5839
- # Specifies whether this is for an Amazon CloudFront distribution or for
5840
- # a regional application. A regional application can be an Application
5841
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
5842
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
5843
- # Amazon Web Services Verified Access instance.
5777
+ # Specifies whether this is for a global resource type, such as a Amazon
5778
+ # CloudFront distribution.
5844
5779
  #
5845
5780
  # To work with CloudFront, you must also specify the Region US East (N.
5846
5781
  # Virginia) as follows:
@@ -5958,11 +5893,8 @@ module Aws::WAFV2
5958
5893
  # </note>
5959
5894
  #
5960
5895
  # @option params [required, String] :scope
5961
- # Specifies whether this is for an Amazon CloudFront distribution or for
5962
- # a regional application. A regional application can be an Application
5963
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
5964
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
5965
- # Amazon Web Services Verified Access instance.
5896
+ # Specifies whether this is for a global resource type, such as a Amazon
5897
+ # CloudFront distribution.
5966
5898
  #
5967
5899
  # To work with CloudFront, you must also specify the Region US East (N.
5968
5900
  # Virginia) as follows:
@@ -6080,11 +6012,8 @@ module Aws::WAFV2
6080
6012
  # pattern sets that you manage.
6081
6013
  #
6082
6014
  # @option params [required, String] :scope
6083
- # Specifies whether this is for an Amazon CloudFront distribution or for
6084
- # a regional application. A regional application can be an Application
6085
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6086
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
6087
- # Amazon Web Services Verified Access instance.
6015
+ # Specifies whether this is for a global resource type, such as a Amazon
6016
+ # CloudFront distribution.
6088
6017
  #
6089
6018
  # To work with CloudFront, you must also specify the Region US East (N.
6090
6019
  # Virginia) as follows:
@@ -6140,7 +6069,7 @@ module Aws::WAFV2
6140
6069
  end
6141
6070
 
6142
6071
  # Retrieves an array of the Amazon Resource Names (ARNs) for the
6143
- # regional resources that are associated with the specified web ACL.
6072
+ # resources that are associated with the specified web ACL.
6144
6073
  #
6145
6074
  # For Amazon CloudFront, don't use this call. Instead, use the
6146
6075
  # CloudFront call `ListDistributionsByWebACLId`. For information, see
@@ -6162,11 +6091,12 @@ module Aws::WAFV2
6162
6091
  # The Amazon Resource Name (ARN) of the web ACL.
6163
6092
  #
6164
6093
  # @option params [String] :resource_type
6165
- # Used for web ACLs that are scoped for regional applications. A
6166
- # regional application can be an Application Load Balancer (ALB), an
6167
- # Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito
6168
- # user pool, an App Runner service, or an Amazon Web Services Verified
6169
- # Access instance.
6094
+ # Retrieves the web ACLs that are used by the specified resource type.
6095
+ #
6096
+ # For Amazon CloudFront, don't use this call. Instead, use the
6097
+ # CloudFront call `ListDistributionsByWebACLId`. For information, see
6098
+ # [ListDistributionsByWebACLId][1] in the *Amazon CloudFront API
6099
+ # Reference*.
6170
6100
  #
6171
6101
  # <note markdown="1"> If you don't provide a resource type, the call uses the resource type
6172
6102
  # `APPLICATION_LOAD_BALANCER`.
@@ -6175,6 +6105,10 @@ module Aws::WAFV2
6175
6105
  #
6176
6106
  # Default: `APPLICATION_LOAD_BALANCER`
6177
6107
  #
6108
+ #
6109
+ #
6110
+ # [1]: https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByWebACLId.html
6111
+ #
6178
6112
  # @return [Types::ListResourcesForWebACLResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
6179
6113
  #
6180
6114
  # * {Types::ListResourcesForWebACLResponse#resource_arns #resource_arns} => Array&lt;String&gt;
@@ -6204,11 +6138,8 @@ module Aws::WAFV2
6204
6138
  # that you manage.
6205
6139
  #
6206
6140
  # @option params [required, String] :scope
6207
- # Specifies whether this is for an Amazon CloudFront distribution or for
6208
- # a regional application. A regional application can be an Application
6209
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6210
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
6211
- # Amazon Web Services Verified Access instance.
6141
+ # Specifies whether this is for a global resource type, such as a Amazon
6142
+ # CloudFront distribution.
6212
6143
  #
6213
6144
  # To work with CloudFront, you must also specify the Region US East (N.
6214
6145
  # Virginia) as follows:
@@ -6324,11 +6255,8 @@ module Aws::WAFV2
6324
6255
  # manage.
6325
6256
  #
6326
6257
  # @option params [required, String] :scope
6327
- # Specifies whether this is for an Amazon CloudFront distribution or for
6328
- # a regional application. A regional application can be an Application
6329
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6330
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
6331
- # Amazon Web Services Verified Access instance.
6258
+ # Specifies whether this is for a global resource type, such as a Amazon
6259
+ # CloudFront distribution.
6332
6260
  #
6333
6261
  # To work with CloudFront, you must also specify the Region US East (N.
6334
6262
  # Virginia) as follows:
@@ -6386,6 +6314,9 @@ module Aws::WAFV2
6386
6314
  # Enables the specified LoggingConfiguration, to start logging from a
6387
6315
  # web ACL, according to the configuration provided.
6388
6316
  #
6317
+ # If you configure data protection for the web ACL, the protection
6318
+ # applies to the data that WAF sends to the logs.
6319
+ #
6389
6320
  # <note markdown="1"> This operation completely replaces any mutable specifications that you
6390
6321
  # already have for a logging configuration with the ones that you
6391
6322
  # provide to this call.
@@ -6614,11 +6545,8 @@ module Aws::WAFV2
6614
6545
  # your customers can access and use.
6615
6546
  #
6616
6547
  # @option params [required, String] :scope
6617
- # Specifies whether this is for an Amazon CloudFront distribution or for
6618
- # a regional application. A regional application can be an Application
6619
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6620
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
6621
- # Amazon Web Services Verified Access instance.
6548
+ # Specifies whether this is for a global resource type, such as a Amazon
6549
+ # CloudFront distribution.
6622
6550
  #
6623
6551
  # To work with CloudFront, you must also specify the Region US East (N.
6624
6552
  # Virginia) as follows:
@@ -6869,11 +6797,8 @@ module Aws::WAFV2
6869
6797
  # you create it.
6870
6798
  #
6871
6799
  # @option params [required, String] :scope
6872
- # Specifies whether this is for an Amazon CloudFront distribution or for
6873
- # a regional application. A regional application can be an Application
6874
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6875
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
6876
- # Amazon Web Services Verified Access instance.
6800
+ # Specifies whether this is for a global resource type, such as a Amazon
6801
+ # CloudFront distribution.
6877
6802
  #
6878
6803
  # To work with CloudFront, you must also specify the Region US East (N.
6879
6804
  # Virginia) as follows:
@@ -6995,11 +6920,8 @@ module Aws::WAFV2
6995
6920
  # your customers can access and use.
6996
6921
  #
6997
6922
  # @option params [required, String] :scope
6998
- # Specifies whether this is for an Amazon CloudFront distribution or for
6999
- # a regional application. A regional application can be an Application
7000
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7001
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
7002
- # Amazon Web Services Verified Access instance.
6923
+ # Specifies whether this is for a global resource type, such as a Amazon
6924
+ # CloudFront distribution.
7003
6925
  #
7004
6926
  # To work with CloudFront, you must also specify the Region US East (N.
7005
6927
  # Virginia) as follows:
@@ -7113,11 +7035,8 @@ module Aws::WAFV2
7113
7035
  # set.
7114
7036
  #
7115
7037
  # @option params [required, String] :scope
7116
- # Specifies whether this is for an Amazon CloudFront distribution or for
7117
- # a regional application. A regional application can be an Application
7118
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7119
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
7120
- # Amazon Web Services Verified Access instance.
7038
+ # Specifies whether this is for a global resource type, such as a Amazon
7039
+ # CloudFront distribution.
7121
7040
  #
7122
7041
  # To work with CloudFront, you must also specify the Region US East (N.
7123
7042
  # Virginia) as follows:
@@ -7231,11 +7150,8 @@ module Aws::WAFV2
7231
7150
  # after you create it.
7232
7151
  #
7233
7152
  # @option params [required, String] :scope
7234
- # Specifies whether this is for an Amazon CloudFront distribution or for
7235
- # a regional application. A regional application can be an Application
7236
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7237
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
7238
- # Amazon Web Services Verified Access instance.
7153
+ # Specifies whether this is for a global resource type, such as a Amazon
7154
+ # CloudFront distribution.
7239
7155
  #
7240
7156
  # To work with CloudFront, you must also specify the Region US East (N.
7241
7157
  # Virginia) as follows:
@@ -8177,11 +8093,11 @@ module Aws::WAFV2
8177
8093
  # (allow, block) for any request that does not match any of the rules.
8178
8094
  # The rules in a web ACL can be a combination of the types Rule,
8179
8095
  # RuleGroup, and managed rule group. You can associate a web ACL with
8180
- # one or more Amazon Web Services resources to protect. The resources
8181
- # can be an Amazon CloudFront distribution, an Amazon API Gateway REST
8182
- # API, an Application Load Balancer, an AppSync GraphQL API, an Amazon
8183
- # Cognito user pool, an App Runner service, or an Amazon Web Services
8184
- # Verified Access instance.
8096
+ # one or more Amazon Web Services resources to protect. The resource
8097
+ # types include Amazon CloudFront distribution, Amazon API Gateway REST
8098
+ # API, Application Load Balancer, AppSync GraphQL API, Amazon Cognito
8099
+ # user pool, App Runner service, and Amazon Web Services Verified Access
8100
+ # instance.
8185
8101
  #
8186
8102
  # **Temporary inconsistencies during updates**
8187
8103
  #
@@ -8213,11 +8129,8 @@ module Aws::WAFV2
8213
8129
  # you create it.
8214
8130
  #
8215
8131
  # @option params [required, String] :scope
8216
- # Specifies whether this is for an Amazon CloudFront distribution or for
8217
- # a regional application. A regional application can be an Application
8218
- # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
8219
- # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
8220
- # Amazon Web Services Verified Access instance.
8132
+ # Specifies whether this is for a global resource type, such as a Amazon
8133
+ # CloudFront distribution.
8221
8134
  #
8222
8135
  # To work with CloudFront, you must also specify the Region US East (N.
8223
8136
  # Virginia) as follows:
@@ -8249,6 +8162,18 @@ module Aws::WAFV2
8249
8162
  # Defines and enables Amazon CloudWatch metrics and web request sample
8250
8163
  # collection.
8251
8164
  #
8165
+ # @option params [Types::DataProtectionConfig] :data_protection_config
8166
+ # Specifies data protection to apply to the web request data that WAF
8167
+ # stores for the web ACL. This is a web ACL level data protection
8168
+ # option.
8169
+ #
8170
+ # The data protection that you configure for the web ACL alters the data
8171
+ # that's available for any other data collection activity, including
8172
+ # WAF logging, web ACL request sampling, Amazon Web Services Managed
8173
+ # Rules, and Amazon Security Lake data collection and management. Your
8174
+ # other option for data protection is in the logging configuration,
8175
+ # which only affects logging.
8176
+ #
8252
8177
  # @option params [required, String] :lock_token
8253
8178
  # A token used for optimistic locking. WAF returns a token to your `get`
8254
8179
  # and `list` requests, to mark the state of the entity at the time of
@@ -9189,6 +9114,19 @@ module Aws::WAFV2
9189
9114
  # cloud_watch_metrics_enabled: false, # required
9190
9115
  # metric_name: "MetricName", # required
9191
9116
  # },
9117
+ # data_protection_config: {
9118
+ # data_protections: [ # required
9119
+ # {
9120
+ # field: { # required
9121
+ # field_type: "SINGLE_HEADER", # required, accepts SINGLE_HEADER, SINGLE_COOKIE, SINGLE_QUERY_ARGUMENT, QUERY_STRING, BODY
9122
+ # field_keys: ["FieldToProtectKeyName"],
9123
+ # },
9124
+ # action: "SUBSTITUTION", # required, accepts SUBSTITUTION, HASH
9125
+ # exclude_rule_match_details: false,
9126
+ # exclude_rate_based_details: false,
9127
+ # },
9128
+ # ],
9129
+ # },
9192
9130
  # lock_token: "LockToken", # required
9193
9131
  # custom_response_bodies: {
9194
9132
  # "EntityName" => {
@@ -9247,7 +9185,7 @@ module Aws::WAFV2
9247
9185
  tracer: tracer
9248
9186
  )
9249
9187
  context[:gem_name] = 'aws-sdk-wafv2'
9250
- context[:gem_version] = '1.101.0'
9188
+ context[:gem_version] = '1.102.0'
9251
9189
  Seahorse::Client::Request.new(handlers, context)
9252
9190
  end
9253
9191