aws-sdk-wafv2 1.109.0 → 1.110.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8326752753afb84dfdb818720a241be433da10d1041ac21556264813366e075e
-  data.tar.gz: 1693b99587d3963be3d233c9c058c6164507c355a87be8a42b2ee98ffbd561ab
+  metadata.gz: d61c6e32e94cd2c77641590f482910cf9f137f89ead4c05d974e7da90cadaca1
+  data.tar.gz: '087e9860fb0c5b059d3e0243cede2fe0ccee2a854d0274ee8647f7de8e74c242'
 SHA512:
-  metadata.gz: 4274929dcecbc4406206d5b6b5fbc34c1823ae2769e709c282337d33ea99c1c931157e198302e86caeda479fa7938d361db823299aa9041fbf1e6c2d5030cda3
-  data.tar.gz: b16943feaa940f9fe433d36fb7523e1274ec1130d62cd9cfac60ad241b770551dffc33f3fbac6d80a9d0659d371b76a446930b302832c4f8bb7caf337315fe39
+  metadata.gz: '08a23432bd5de93e8ceb76c0954c5e5dfb99829357cc4a8ea06782f8664b46fbc32756f20833617e052acd613f1c9266d67117c325f0afc2db066722ddb1b7f3'
+  data.tar.gz: 6cab48d82d9dec6708dfe3222ec48e92a25ae3a49bf6b22de77880741f4a94577980e4493db712fa5d0539e4fec673c7a65931170040cc25798d28ea2298b2fb

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.110.0 (2025-06-05)
+------------------
+
+* Feature - AWS WAF adds support for ASN-based traffic filtering and support for ASN-based rate limiting.
+
 1.109.0 (2025-06-02)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.109.0
+1.110.0

data/lib/aws-sdk-wafv2/client.rb

@@ -1123,6 +1123,8 @@ module Aws::WAFV2
     #                 ja4_fingerprint: {
     #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
     #                 },
+    #                 asn: {
+    #                 },
     #               },
     #             ],
     #           },
@@ -1387,6 +1389,13 @@ module Aws::WAFV2
     #               },
     #             ],
     #           },
+    #           asn_match_statement: {
+    #             asn_list: [1], # required
+    #             forwarded_ip_config: {
+    #               header_name: "ForwardedIPHeaderName", # required
+    #               fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #             },
+    #           },
     #         },
     #         action: {
     #           block: {
@@ -2332,6 +2341,8 @@ module Aws::WAFV2
     #                 ja4_fingerprint: {
     #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
     #                 },
+    #                 asn: {
+    #                 },
     #               },
     #             ],
     #           },
@@ -2596,6 +2607,13 @@ module Aws::WAFV2
     #               },
     #             ],
     #           },
+    #           asn_match_statement: {
+    #             asn_list: [1], # required
+    #             forwarded_ip_config: {
+    #               header_name: "ForwardedIPHeaderName", # required
+    #               fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #             },
+    #           },
     #         },
     #         action: {
     #           block: {
@@ -3396,6 +3414,8 @@ module Aws::WAFV2
     #                 ja4_fingerprint: {
     #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
     #                 },
+    #                 asn: {
+    #                 },
     #               },
     #             ],
     #           },
@@ -3660,6 +3680,13 @@ module Aws::WAFV2
     #               },
     #             ],
     #           },
+    #           asn_match_statement: {
+    #             asn_list: [1], # required
+    #             forwarded_ip_config: {
+    #               header_name: "ForwardedIPHeaderName", # required
+    #               fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #             },
+    #           },
     #         },
     #         action: {
     #           block: {
@@ -5380,6 +5407,10 @@ module Aws::WAFV2
     #   resp.rule_group.rules[0].statement.regex_match_statement.text_transformations #=> Array
     #   resp.rule_group.rules[0].statement.regex_match_statement.text_transformations[0].priority #=> Integer
     #   resp.rule_group.rules[0].statement.regex_match_statement.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
+    #   resp.rule_group.rules[0].statement.asn_match_statement.asn_list #=> Array
+    #   resp.rule_group.rules[0].statement.asn_match_statement.asn_list[0] #=> Integer
+    #   resp.rule_group.rules[0].statement.asn_match_statement.forwarded_ip_config.header_name #=> String
+    #   resp.rule_group.rules[0].statement.asn_match_statement.forwarded_ip_config.fallback_behavior #=> String, one of "MATCH", "NO_MATCH"
     #   resp.rule_group.rules[0].action.block.custom_response.response_code #=> Integer
     #   resp.rule_group.rules[0].action.block.custom_response.custom_response_body_key #=> String
     #   resp.rule_group.rules[0].action.block.custom_response.response_headers #=> Array
@@ -7892,6 +7923,8 @@ module Aws::WAFV2
     #                 ja4_fingerprint: {
     #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
     #                 },
+    #                 asn: {
+    #                 },
     #               },
     #             ],
     #           },
@@ -8156,6 +8189,13 @@ module Aws::WAFV2
     #               },
     #             ],
     #           },
+    #           asn_match_statement: {
+    #             asn_list: [1], # required
+    #             forwarded_ip_config: {
+    #               header_name: "ForwardedIPHeaderName", # required
+    #               fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #             },
+    #           },
     #         },
     #         action: {
     #           block: {
@@ -9001,6 +9041,8 @@ module Aws::WAFV2
     #                 ja4_fingerprint: {
     #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
     #                 },
+    #                 asn: {
+    #                 },
     #               },
     #             ],
     #           },
@@ -9265,6 +9307,13 @@ module Aws::WAFV2
     #               },
     #             ],
     #           },
+    #           asn_match_statement: {
+    #             asn_list: [1], # required
+    #             forwarded_ip_config: {
+    #               header_name: "ForwardedIPHeaderName", # required
+    #               fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #             },
+    #           },
     #         },
     #         action: {
     #           block: {
@@ -9432,7 +9481,7 @@ module Aws::WAFV2
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-wafv2'
-      context[:gem_version] = '1.109.0'
+      context[:gem_version] = '1.110.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-wafv2/client_api.rb

@@ -19,6 +19,7 @@ module Aws::WAFV2
     APIKeySummary = Shapes::StructureShape.new(name: 'APIKeySummary')
     APIKeyTokenDomains = Shapes::ListShape.new(name: 'APIKeyTokenDomains')
     APIKeyVersion = Shapes::IntegerShape.new(name: 'APIKeyVersion')
+    ASN = Shapes::IntegerShape.new(name: 'ASN')
     AWSManagedRulesACFPRuleSet = Shapes::StructureShape.new(name: 'AWSManagedRulesACFPRuleSet')
     AWSManagedRulesATPRuleSet = Shapes::StructureShape.new(name: 'AWSManagedRulesATPRuleSet')
     AWSManagedRulesBotControlRuleSet = Shapes::StructureShape.new(name: 'AWSManagedRulesBotControlRuleSet')
@@ -31,6 +32,8 @@ module Aws::WAFV2
     AllQueryArguments = Shapes::StructureShape.new(name: 'AllQueryArguments')
     AllowAction = Shapes::StructureShape.new(name: 'AllowAction')
     AndStatement = Shapes::StructureShape.new(name: 'AndStatement')
+    AsnList = Shapes::ListShape.new(name: 'AsnList')
+    AsnMatchStatement = Shapes::StructureShape.new(name: 'AsnMatchStatement')
     AssociateWebACLRequest = Shapes::StructureShape.new(name: 'AssociateWebACLRequest')
     AssociateWebACLResponse = Shapes::StructureShape.new(name: 'AssociateWebACLResponse')
     AssociatedResourceType = Shapes::StringShape.new(name: 'AssociatedResourceType')
@@ -292,6 +295,7 @@ module Aws::WAFV2
     RateBasedStatementCustomKeys = Shapes::ListShape.new(name: 'RateBasedStatementCustomKeys')
     RateBasedStatementManagedKeysIPSet = Shapes::StructureShape.new(name: 'RateBasedStatementManagedKeysIPSet')
     RateLimit = Shapes::IntegerShape.new(name: 'RateLimit')
+    RateLimitAsn = Shapes::StructureShape.new(name: 'RateLimitAsn')
     RateLimitCookie = Shapes::StructureShape.new(name: 'RateLimitCookie')
     RateLimitForwardedIP = Shapes::StructureShape.new(name: 'RateLimitForwardedIP')
     RateLimitHTTPMethod = Shapes::StructureShape.new(name: 'RateLimitHTTPMethod')
@@ -481,6 +485,12 @@ module Aws::WAFV2
     AndStatement.add_member(:statements, Shapes::ShapeRef.new(shape: Statements, required: true, location_name: "Statements"))
     AndStatement.struct_class = Types::AndStatement
 
+    AsnList.member = Shapes::ShapeRef.new(shape: ASN)
+
+    AsnMatchStatement.add_member(:asn_list, Shapes::ShapeRef.new(shape: AsnList, required: true, location_name: "AsnList"))
+    AsnMatchStatement.add_member(:forwarded_ip_config, Shapes::ShapeRef.new(shape: ForwardedIPConfig, location_name: "ForwardedIPConfig"))
+    AsnMatchStatement.struct_class = Types::AsnMatchStatement
+
     AssociateWebACLRequest.add_member(:web_acl_arn, Shapes::ShapeRef.new(shape: ResourceArn, required: true, location_name: "WebACLArn"))
     AssociateWebACLRequest.add_member(:resource_arn, Shapes::ShapeRef.new(shape: ResourceArn, required: true, location_name: "ResourceArn"))
     AssociateWebACLRequest.struct_class = Types::AssociateWebACLRequest
@@ -1282,6 +1292,7 @@ module Aws::WAFV2
     RateBasedStatementCustomKey.add_member(:uri_path, Shapes::ShapeRef.new(shape: RateLimitUriPath, location_name: "UriPath"))
     RateBasedStatementCustomKey.add_member(:ja3_fingerprint, Shapes::ShapeRef.new(shape: RateLimitJA3Fingerprint, location_name: "JA3Fingerprint"))
     RateBasedStatementCustomKey.add_member(:ja4_fingerprint, Shapes::ShapeRef.new(shape: RateLimitJA4Fingerprint, location_name: "JA4Fingerprint"))
+    RateBasedStatementCustomKey.add_member(:asn, Shapes::ShapeRef.new(shape: RateLimitAsn, location_name: "ASN"))
     RateBasedStatementCustomKey.struct_class = Types::RateBasedStatementCustomKey
 
     RateBasedStatementCustomKeys.member = Shapes::ShapeRef.new(shape: RateBasedStatementCustomKey)
@@ -1290,6 +1301,8 @@ module Aws::WAFV2
     RateBasedStatementManagedKeysIPSet.add_member(:addresses, Shapes::ShapeRef.new(shape: IPAddresses, location_name: "Addresses"))
     RateBasedStatementManagedKeysIPSet.struct_class = Types::RateBasedStatementManagedKeysIPSet
 
+    RateLimitAsn.struct_class = Types::RateLimitAsn
+
     RateLimitCookie.add_member(:name, Shapes::ShapeRef.new(shape: FieldToMatchData, required: true, location_name: "Name"))
     RateLimitCookie.add_member(:text_transformations, Shapes::ShapeRef.new(shape: TextTransformations, required: true, location_name: "TextTransformations"))
     RateLimitCookie.struct_class = Types::RateLimitCookie
@@ -1529,6 +1542,7 @@ module Aws::WAFV2
     Statement.add_member(:managed_rule_group_statement, Shapes::ShapeRef.new(shape: ManagedRuleGroupStatement, location_name: "ManagedRuleGroupStatement"))
     Statement.add_member(:label_match_statement, Shapes::ShapeRef.new(shape: LabelMatchStatement, location_name: "LabelMatchStatement"))
     Statement.add_member(:regex_match_statement, Shapes::ShapeRef.new(shape: RegexMatchStatement, location_name: "RegexMatchStatement"))
+    Statement.add_member(:asn_match_statement, Shapes::ShapeRef.new(shape: AsnMatchStatement, location_name: "AsnMatchStatement"))
     Statement.struct_class = Types::Statement
 
     Statements.member = Shapes::ShapeRef.new(shape: Statement)

data/lib/aws-sdk-wafv2/types.rb

@@ -361,6 +361,41 @@ module Aws::WAFV2
       include Aws::Structure
     end
 
+    # A rule statement that inspects web traffic based on the Autonomous
+    # System Number (ASN) associated with the request's IP address.
+    #
+    # For additional details, see [ASN match rule statement][1] in the [WAF
+    # Developer Guide][2].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-asn-match.html
+    # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html
+    #
+    # @!attribute [rw] asn_list
+    #   Contains one or more Autonomous System Numbers (ASNs). ASNs are
+    #   unique identifiers assigned to large internet networks managed by
+    #   organizations such as internet service providers, enterprises,
+    #   universities, or government agencies.
+    #   @return [Array<Integer>]
+    #
+    # @!attribute [rw] forwarded_ip_config
+    #   The configuration for inspecting IP addresses to match against an
+    #   ASN in an HTTP header that you specify, instead of using the IP
+    #   address that's reported by the web request origin. Commonly, this
+    #   is the X-Forwarded-For (XFF) header, but you can specify any header
+    #   name.
+    #   @return [Types::ForwardedIPConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/AsnMatchStatement AWS API Documentation
+    #
+    class AsnMatchStatement < Struct.new(
+      :asn_list,
+      :forwarded_ip_config)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] web_acl_arn
     #   The Amazon Resource Name (ARN) of the web ACL that you want to
     #   associate with the resource.
@@ -2849,8 +2884,8 @@ module Aws::WAFV2
     #
     #  </note>
     #
-    # This configuration is used for GeoMatchStatement and
-    # RateBasedStatement. For IPSetReferenceStatement, use
+    # This configuration is used for GeoMatchStatement, AsnMatchStatement,
+    # and RateBasedStatement. For IPSetReferenceStatement, use
     # IPSetForwardedIPConfig instead.
     #
     # WAF only evaluates the first IP address found in the specified HTTP
@@ -3803,11 +3838,12 @@ module Aws::WAFV2
     # `host:user-agent:accept:authorization:referer`.
     #
     # @!attribute [rw] oversize_handling
-    #   What WAF should do if the headers of the request are more numerous
-    #   or larger than WAF can inspect. WAF does not support inspecting the
-    #   entire contents of request headers when they exceed 8 KB (8192
-    #   bytes) or 200 total headers. The underlying host service forwards a
-    #   maximum of 200 headers and at most 8 KB of header contents to WAF.
+    #   What WAF should do if the headers determined by your match scope are
+    #   more numerous or larger than WAF can inspect. WAF does not support
+    #   inspecting the entire contents of request headers when they exceed 8
+    #   KB (8192 bytes) or 200 total headers. The underlying host service
+    #   forwards a maximum of 200 headers and at most 8 KB of header
+    #   contents to WAF.
     #
     #   The options for oversize handling are the following:
     #
@@ -3866,11 +3902,12 @@ module Aws::WAFV2
     #   @return [String]
     #
     # @!attribute [rw] oversize_handling
-    #   What WAF should do if the headers of the request are more numerous
-    #   or larger than WAF can inspect. WAF does not support inspecting the
-    #   entire contents of request headers when they exceed 8 KB (8192
-    #   bytes) or 200 total headers. The underlying host service forwards a
-    #   maximum of 200 headers and at most 8 KB of header contents to WAF.
+    #   What WAF should do if the headers determined by your match scope are
+    #   more numerous or larger than WAF can inspect. WAF does not support
+    #   inspecting the entire contents of request headers when they exceed 8
+    #   KB (8192 bytes) or 200 total headers. The underlying host service
+    #   forwards a maximum of 200 headers and at most 8 KB of header
+    #   contents to WAF.
     #
     #   The options for oversize handling are the following:
     #
@@ -6747,6 +6784,12 @@ module Aws::WAFV2
     #   defines an aggregation instance.
     #   @return [Types::RateLimitJA4Fingerprint]
     #
+    # @!attribute [rw] asn
+    #   Use an Autonomous System Number (ASN) derived from the request's
+    #   originating or forwarded IP address as an aggregate key. Each
+    #   distinct ASN contributes to the aggregation instance.
+    #   @return [Types::RateLimitAsn]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/RateBasedStatementCustomKey AWS API Documentation
     #
     class RateBasedStatementCustomKey < Struct.new(
@@ -6760,7 +6803,8 @@ module Aws::WAFV2
       :label_namespace,
       :uri_path,
       :ja3_fingerprint,
-      :ja4_fingerprint)
+      :ja4_fingerprint,
+      :asn)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -6800,6 +6844,18 @@ module Aws::WAFV2
       include Aws::Structure
     end
 
+    # Specifies an Autonomous System Number (ASN) derived from the
+    # request's originating or forwarded IP address as an aggregate key for
+    # a rate-based rule. Each distinct ASN contributes to the aggregation
+    # instance. If you use a single ASN as your custom key, then each ASN
+    # fully defines an aggregation instance.
+    #
+    # @api private
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/RateLimitAsn AWS API Documentation
+    #
+    class RateLimitAsn < Aws::EmptyStructure; end
+
     # Specifies a cookie as an aggregate key for a rate-based rule. Each
     # distinct value in the cookie contributes to the aggregation instance.
     # If you use a single cookie as your custom key, then each value fully
@@ -8786,6 +8842,19 @@ module Aws::WAFV2
     #   against a single regular expression.
     #   @return [Types::RegexMatchStatement]
     #
+    # @!attribute [rw] asn_match_statement
+    #   A rule statement that inspects web traffic based on the Autonomous
+    #   System Number (ASN) associated with the request's IP address.
+    #
+    #   For additional details, see [ASN match rule statement][1] in the
+    #   [WAF Developer Guide][2].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-asn-match.html
+    #   [2]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html
+    #   @return [Types::AsnMatchStatement]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/Statement AWS API Documentation
     #
     class Statement < Struct.new(
@@ -8803,7 +8872,8 @@ module Aws::WAFV2
       :not_statement,
       :managed_rule_group_statement,
       :label_match_statement,
-      :regex_match_statement)
+      :regex_match_statement,
+      :asn_match_statement)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-wafv2.rb

@@ -54,7 +54,7 @@ module Aws::WAFV2
   autoload :EndpointProvider, 'aws-sdk-wafv2/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-wafv2/endpoints'
 
-  GEM_VERSION = '1.109.0'
+  GEM_VERSION = '1.110.0'
 
 end
 

data/sig/client.rbs

@@ -601,6 +601,8 @@ module Aws
                                         }?,
                                         ja4_fingerprint: {
                                           fallback_behavior: ("MATCH" | "NO_MATCH")
+                                        }?,
+                                        asn: {
                                         }?
                                       },
                                     ]?
@@ -857,6 +859,13 @@ module Aws
                                         type: ("NONE" | "COMPRESS_WHITE_SPACE" | "HTML_ENTITY_DECODE" | "LOWERCASE" | "CMD_LINE" | "URL_DECODE" | "BASE64_DECODE" | "HEX_DECODE" | "MD5" | "REPLACE_COMMENTS" | "ESCAPE_SEQ_DECODE" | "SQL_HEX_DECODE" | "CSS_DECODE" | "JS_DECODE" | "NORMALIZE_PATH" | "NORMALIZE_PATH_WIN" | "REMOVE_NULLS" | "REPLACE_NULLS" | "BASE64_DECODE_EXT" | "URL_DECODE_UNI" | "UTF8_TO_UNICODE")
                                       },
                                     ]
+                                  }?,
+                                  asn_match_statement: {
+                                    asn_list: Array[::Integer],
+                                    forwarded_ip_config: {
+                                      header_name: ::String,
+                                      fallback_behavior: ("MATCH" | "NO_MATCH")
+                                    }?
                                   }?
                                 },
                                 action: {
@@ -1522,6 +1531,8 @@ module Aws
                                            }?,
                                            ja4_fingerprint: {
                                              fallback_behavior: ("MATCH" | "NO_MATCH")
+                                           }?,
+                                           asn: {
                                            }?
                                          },
                                        ]?
@@ -1778,6 +1789,13 @@ module Aws
                                            type: ("NONE" | "COMPRESS_WHITE_SPACE" | "HTML_ENTITY_DECODE" | "LOWERCASE" | "CMD_LINE" | "URL_DECODE" | "BASE64_DECODE" | "HEX_DECODE" | "MD5" | "REPLACE_COMMENTS" | "ESCAPE_SEQ_DECODE" | "SQL_HEX_DECODE" | "CSS_DECODE" | "JS_DECODE" | "NORMALIZE_PATH" | "NORMALIZE_PATH_WIN" | "REMOVE_NULLS" | "REPLACE_NULLS" | "BASE64_DECODE_EXT" | "URL_DECODE_UNI" | "UTF8_TO_UNICODE")
                                          },
                                        ]
+                                     }?,
+                                     asn_match_statement: {
+                                       asn_list: Array[::Integer],
+                                       forwarded_ip_config: {
+                                         header_name: ::String,
+                                         fallback_behavior: ("MATCH" | "NO_MATCH")
+                                       }?
                                      }?
                                    },
                                    action: {
@@ -2427,6 +2445,8 @@ module Aws
                                         }?,
                                         ja4_fingerprint: {
                                           fallback_behavior: ("MATCH" | "NO_MATCH")
+                                        }?,
+                                        asn: {
                                         }?
                                       },
                                     ]?
@@ -2683,6 +2703,13 @@ module Aws
                                         type: ("NONE" | "COMPRESS_WHITE_SPACE" | "HTML_ENTITY_DECODE" | "LOWERCASE" | "CMD_LINE" | "URL_DECODE" | "BASE64_DECODE" | "HEX_DECODE" | "MD5" | "REPLACE_COMMENTS" | "ESCAPE_SEQ_DECODE" | "SQL_HEX_DECODE" | "CSS_DECODE" | "JS_DECODE" | "NORMALIZE_PATH" | "NORMALIZE_PATH_WIN" | "REMOVE_NULLS" | "REPLACE_NULLS" | "BASE64_DECODE_EXT" | "URL_DECODE_UNI" | "UTF8_TO_UNICODE")
                                       },
                                     ]
+                                  }?,
+                                  asn_match_statement: {
+                                    asn_list: Array[::Integer],
+                                    forwarded_ip_config: {
+                                      header_name: ::String,
+                                      fallback_behavior: ("MATCH" | "NO_MATCH")
+                                    }?
                                   }?
                                 },
                                 action: {
@@ -4005,6 +4032,8 @@ module Aws
                                            }?,
                                            ja4_fingerprint: {
                                              fallback_behavior: ("MATCH" | "NO_MATCH")
+                                           }?,
+                                           asn: {
                                            }?
                                          },
                                        ]?
@@ -4261,6 +4290,13 @@ module Aws
                                            type: ("NONE" | "COMPRESS_WHITE_SPACE" | "HTML_ENTITY_DECODE" | "LOWERCASE" | "CMD_LINE" | "URL_DECODE" | "BASE64_DECODE" | "HEX_DECODE" | "MD5" | "REPLACE_COMMENTS" | "ESCAPE_SEQ_DECODE" | "SQL_HEX_DECODE" | "CSS_DECODE" | "JS_DECODE" | "NORMALIZE_PATH" | "NORMALIZE_PATH_WIN" | "REMOVE_NULLS" | "REPLACE_NULLS" | "BASE64_DECODE_EXT" | "URL_DECODE_UNI" | "UTF8_TO_UNICODE")
                                          },
                                        ]
+                                     }?,
+                                     asn_match_statement: {
+                                       asn_list: Array[::Integer],
+                                       forwarded_ip_config: {
+                                         header_name: ::String,
+                                         fallback_behavior: ("MATCH" | "NO_MATCH")
+                                       }?
                                      }?
                                    },
                                    action: {
@@ -4906,6 +4942,8 @@ module Aws
                                         }?,
                                         ja4_fingerprint: {
                                           fallback_behavior: ("MATCH" | "NO_MATCH")
+                                        }?,
+                                        asn: {
                                         }?
                                       },
                                     ]?
@@ -5162,6 +5200,13 @@ module Aws
                                         type: ("NONE" | "COMPRESS_WHITE_SPACE" | "HTML_ENTITY_DECODE" | "LOWERCASE" | "CMD_LINE" | "URL_DECODE" | "BASE64_DECODE" | "HEX_DECODE" | "MD5" | "REPLACE_COMMENTS" | "ESCAPE_SEQ_DECODE" | "SQL_HEX_DECODE" | "CSS_DECODE" | "JS_DECODE" | "NORMALIZE_PATH" | "NORMALIZE_PATH_WIN" | "REMOVE_NULLS" | "REPLACE_NULLS" | "BASE64_DECODE_EXT" | "URL_DECODE_UNI" | "UTF8_TO_UNICODE")
                                       },
                                     ]
+                                  }?,
+                                  asn_match_statement: {
+                                    asn_list: Array[::Integer],
+                                    forwarded_ip_config: {
+                                      header_name: ::String,
+                                      fallback_behavior: ("MATCH" | "NO_MATCH")
+                                    }?
                                   }?
                                 },
                                 action: {

data/sig/types.rbs

@@ -65,6 +65,12 @@ module Aws::WAFV2
       SENSITIVE: []
     end
 
+    class AsnMatchStatement
+      attr_accessor asn_list: ::Array[::Integer]
+      attr_accessor forwarded_ip_config: Types::ForwardedIPConfig
+      SENSITIVE: []
+    end
+
     class AssociateWebACLRequest
       attr_accessor web_acl_arn: ::String
       attr_accessor resource_arn: ::String
@@ -1124,6 +1130,7 @@ module Aws::WAFV2
       attr_accessor uri_path: Types::RateLimitUriPath
       attr_accessor ja3_fingerprint: Types::RateLimitJA3Fingerprint
       attr_accessor ja4_fingerprint: Types::RateLimitJA4Fingerprint
+      attr_accessor asn: Types::RateLimitAsn
       SENSITIVE: []
     end
 
@@ -1133,6 +1140,9 @@ module Aws::WAFV2
       SENSITIVE: []
     end
 
+    class RateLimitAsn < Aws::EmptyStructure
+    end
+
     class RateLimitCookie
       attr_accessor name: ::String
       attr_accessor text_transformations: ::Array[Types::TextTransformation]
@@ -1405,6 +1415,7 @@ module Aws::WAFV2
       attr_accessor managed_rule_group_statement: Types::ManagedRuleGroupStatement
       attr_accessor label_match_statement: Types::LabelMatchStatement
       attr_accessor regex_match_statement: Types::RegexMatchStatement
+      attr_accessor asn_match_statement: Types::AsnMatchStatement
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-wafv2
 version: !ruby/object:Gem::Version
-  version: 1.109.0
+  version: 1.110.0
 platform: ruby
 authors:
 - Amazon Web Services