aws-sdk-wafv2 1.109.0 → 1.111.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8326752753afb84dfdb818720a241be433da10d1041ac21556264813366e075e
-  data.tar.gz: 1693b99587d3963be3d233c9c058c6164507c355a87be8a42b2ee98ffbd561ab
+  metadata.gz: 16c4a613a2811c0ef62664488a672cdf019d94c82e0c78c3296f66509d18373d
+  data.tar.gz: '09450619c095fb4dfedd5e4b7a67bb93f17570abc3885ef348e7cd1822f07032'
 SHA512:
-  metadata.gz: 4274929dcecbc4406206d5b6b5fbc34c1823ae2769e709c282337d33ea99c1c931157e198302e86caeda479fa7938d361db823299aa9041fbf1e6c2d5030cda3
-  data.tar.gz: b16943feaa940f9fe433d36fb7523e1274ec1130d62cd9cfac60ad241b770551dffc33f3fbac6d80a9d0659d371b76a446930b302832c4f8bb7caf337315fe39
+  metadata.gz: 3a6b7c59627c5c228a54d884acb476829057cfd9777e5778fead4d1e690ac32727014a238545636f59645c9936590cbe4980d5114b2c969d6f8b76683ee445ee
+  data.tar.gz: 6d5a464ff5b9f0ef250b98bfa65e67e36cacae276c73ebfb6f38cb33416f2f8eeac0b43233328a0fd044d55b736e596c4ea30f8dc892134dc769d4687c33f84a

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.111.0 (2025-06-11)
+------------------
+
+* Feature - WAF now provides two DDoS protection options: resource-level monitoring for Application Load Balancers and the AWSManagedRulesAntiDDoSRuleSet managed rule group for CloudFront distributions.
+
+1.110.0 (2025-06-05)
+------------------
+
+* Feature - AWS WAF adds support for ASN-based traffic filtering and support for ASN-based rate limiting.
+
 1.109.0 (2025-06-02)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.109.0
+1.111.0

data/lib/aws-sdk-wafv2/client.rb

@@ -1123,6 +1123,8 @@ module Aws::WAFV2
     #                 ja4_fingerprint: {
     #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
     #                 },
+    #                 asn: {
+    #                 },
     #               },
     #             ],
     #           },
@@ -1251,6 +1253,20 @@ module Aws::WAFV2
     #                   },
     #                   enable_regex_in_path: false,
     #                 },
+    #                 aws_managed_rules_anti_d_do_s_rule_set: {
+    #                   client_side_action_config: { # required
+    #                     challenge: { # required
+    #                       usage_of_action: "ENABLED", # required, accepts ENABLED, DISABLED
+    #                       sensitivity: "LOW", # accepts LOW, MEDIUM, HIGH
+    #                       exempt_uri_regular_expressions: [
+    #                         {
+    #                           regex_string: "RegexPatternString",
+    #                         },
+    #                       ],
+    #                     },
+    #                   },
+    #                   sensitivity_to_block: "LOW", # accepts LOW, MEDIUM, HIGH
+    #                 },
     #               },
     #             ],
     #             rule_action_overrides: [
@@ -1387,6 +1403,13 @@ module Aws::WAFV2
     #               },
     #             ],
     #           },
+    #           asn_match_statement: {
+    #             asn_list: [1], # required
+    #             forwarded_ip_config: {
+    #               header_name: "ForwardedIPHeaderName", # required
+    #               fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #             },
+    #           },
     #         },
     #         action: {
     #           block: {
@@ -2332,6 +2355,8 @@ module Aws::WAFV2
     #                 ja4_fingerprint: {
     #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
     #                 },
+    #                 asn: {
+    #                 },
     #               },
     #             ],
     #           },
@@ -2460,6 +2485,20 @@ module Aws::WAFV2
     #                   },
     #                   enable_regex_in_path: false,
     #                 },
+    #                 aws_managed_rules_anti_d_do_s_rule_set: {
+    #                   client_side_action_config: { # required
+    #                     challenge: { # required
+    #                       usage_of_action: "ENABLED", # required, accepts ENABLED, DISABLED
+    #                       sensitivity: "LOW", # accepts LOW, MEDIUM, HIGH
+    #                       exempt_uri_regular_expressions: [
+    #                         {
+    #                           regex_string: "RegexPatternString",
+    #                         },
+    #                       ],
+    #                     },
+    #                   },
+    #                   sensitivity_to_block: "LOW", # accepts LOW, MEDIUM, HIGH
+    #                 },
     #               },
     #             ],
     #             rule_action_overrides: [
@@ -2596,6 +2635,13 @@ module Aws::WAFV2
     #               },
     #             ],
     #           },
+    #           asn_match_statement: {
+    #             asn_list: [1], # required
+    #             forwarded_ip_config: {
+    #               header_name: "ForwardedIPHeaderName", # required
+    #               fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #             },
+    #           },
     #         },
     #         action: {
     #           block: {
@@ -2853,6 +2899,14 @@ module Aws::WAFV2
     #
     #   [1]: http://aws.amazon.com/waf/pricing/
     #
+    # @option params [Types::OnSourceDDoSProtectionConfig] :on_source_d_do_s_protection_config
+    #   Specifies the type of DDoS protection to apply to web request data for
+    #   a web ACL. For most scenarios, it is recommended to use the default
+    #   protection level, `ACTIVE_UNDER_DDOS`. If a web ACL is associated with
+    #   multiple Application Load Balancers, the changes you make to DDoS
+    #   protection in that web ACL will apply to all associated Application
+    #   Load Balancers.
+    #
     # @return [Types::CreateWebACLResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateWebACLResponse#summary #summary} => Types::WebACLSummary
@@ -3396,6 +3450,8 @@ module Aws::WAFV2
     #                 ja4_fingerprint: {
     #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
     #                 },
+    #                 asn: {
+    #                 },
     #               },
     #             ],
     #           },
@@ -3524,6 +3580,20 @@ module Aws::WAFV2
     #                   },
     #                   enable_regex_in_path: false,
     #                 },
+    #                 aws_managed_rules_anti_d_do_s_rule_set: {
+    #                   client_side_action_config: { # required
+    #                     challenge: { # required
+    #                       usage_of_action: "ENABLED", # required, accepts ENABLED, DISABLED
+    #                       sensitivity: "LOW", # accepts LOW, MEDIUM, HIGH
+    #                       exempt_uri_regular_expressions: [
+    #                         {
+    #                           regex_string: "RegexPatternString",
+    #                         },
+    #                       ],
+    #                     },
+    #                   },
+    #                   sensitivity_to_block: "LOW", # accepts LOW, MEDIUM, HIGH
+    #                 },
     #               },
     #             ],
     #             rule_action_overrides: [
@@ -3660,6 +3730,13 @@ module Aws::WAFV2
     #               },
     #             ],
     #           },
+    #           asn_match_statement: {
+    #             asn_list: [1], # required
+    #             forwarded_ip_config: {
+    #               header_name: "ForwardedIPHeaderName", # required
+    #               fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #             },
+    #           },
     #         },
     #         action: {
     #           block: {
@@ -3799,6 +3876,9 @@ module Aws::WAFV2
     #         },
     #       },
     #     },
+    #     on_source_d_do_s_protection_config: {
+    #       alb_low_reputation_mode: "ACTIVE_UNDER_DDOS", # required, accepts ACTIVE_UNDER_DDOS, ALWAYS_ON
+    #     },
     #   })
     #
     # @example Response structure
@@ -5331,6 +5411,11 @@ module Aws::WAFV2
     #   resp.rule_group.rules[0].statement.managed_rule_group_statement.managed_rule_group_configs[0].aws_managed_rules_acfp_rule_set.response_inspection.json.failure_values #=> Array
     #   resp.rule_group.rules[0].statement.managed_rule_group_statement.managed_rule_group_configs[0].aws_managed_rules_acfp_rule_set.response_inspection.json.failure_values[0] #=> String
     #   resp.rule_group.rules[0].statement.managed_rule_group_statement.managed_rule_group_configs[0].aws_managed_rules_acfp_rule_set.enable_regex_in_path #=> Boolean
+    #   resp.rule_group.rules[0].statement.managed_rule_group_statement.managed_rule_group_configs[0].aws_managed_rules_anti_d_do_s_rule_set.client_side_action_config.challenge.usage_of_action #=> String, one of "ENABLED", "DISABLED"
+    #   resp.rule_group.rules[0].statement.managed_rule_group_statement.managed_rule_group_configs[0].aws_managed_rules_anti_d_do_s_rule_set.client_side_action_config.challenge.sensitivity #=> String, one of "LOW", "MEDIUM", "HIGH"
+    #   resp.rule_group.rules[0].statement.managed_rule_group_statement.managed_rule_group_configs[0].aws_managed_rules_anti_d_do_s_rule_set.client_side_action_config.challenge.exempt_uri_regular_expressions #=> Array
+    #   resp.rule_group.rules[0].statement.managed_rule_group_statement.managed_rule_group_configs[0].aws_managed_rules_anti_d_do_s_rule_set.client_side_action_config.challenge.exempt_uri_regular_expressions[0].regex_string #=> String
+    #   resp.rule_group.rules[0].statement.managed_rule_group_statement.managed_rule_group_configs[0].aws_managed_rules_anti_d_do_s_rule_set.sensitivity_to_block #=> String, one of "LOW", "MEDIUM", "HIGH"
     #   resp.rule_group.rules[0].statement.managed_rule_group_statement.rule_action_overrides #=> Array
     #   resp.rule_group.rules[0].statement.managed_rule_group_statement.rule_action_overrides[0].name #=> String
     #   resp.rule_group.rules[0].statement.managed_rule_group_statement.rule_action_overrides[0].action_to_use.block.custom_response.response_code #=> Integer
@@ -5380,6 +5465,10 @@ module Aws::WAFV2
     #   resp.rule_group.rules[0].statement.regex_match_statement.text_transformations #=> Array
     #   resp.rule_group.rules[0].statement.regex_match_statement.text_transformations[0].priority #=> Integer
     #   resp.rule_group.rules[0].statement.regex_match_statement.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
+    #   resp.rule_group.rules[0].statement.asn_match_statement.asn_list #=> Array
+    #   resp.rule_group.rules[0].statement.asn_match_statement.asn_list[0] #=> Integer
+    #   resp.rule_group.rules[0].statement.asn_match_statement.forwarded_ip_config.header_name #=> String
+    #   resp.rule_group.rules[0].statement.asn_match_statement.forwarded_ip_config.fallback_behavior #=> String, one of "MATCH", "NO_MATCH"
     #   resp.rule_group.rules[0].action.block.custom_response.response_code #=> Integer
     #   resp.rule_group.rules[0].action.block.custom_response.custom_response_body_key #=> String
     #   resp.rule_group.rules[0].action.block.custom_response.response_headers #=> Array
@@ -7892,6 +7981,8 @@ module Aws::WAFV2
     #                 ja4_fingerprint: {
     #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
     #                 },
+    #                 asn: {
+    #                 },
     #               },
     #             ],
     #           },
@@ -8020,6 +8111,20 @@ module Aws::WAFV2
     #                   },
     #                   enable_regex_in_path: false,
     #                 },
+    #                 aws_managed_rules_anti_d_do_s_rule_set: {
+    #                   client_side_action_config: { # required
+    #                     challenge: { # required
+    #                       usage_of_action: "ENABLED", # required, accepts ENABLED, DISABLED
+    #                       sensitivity: "LOW", # accepts LOW, MEDIUM, HIGH
+    #                       exempt_uri_regular_expressions: [
+    #                         {
+    #                           regex_string: "RegexPatternString",
+    #                         },
+    #                       ],
+    #                     },
+    #                   },
+    #                   sensitivity_to_block: "LOW", # accepts LOW, MEDIUM, HIGH
+    #                 },
     #               },
     #             ],
     #             rule_action_overrides: [
@@ -8156,6 +8261,13 @@ module Aws::WAFV2
     #               },
     #             ],
     #           },
+    #           asn_match_statement: {
+    #             asn_list: [1], # required
+    #             forwarded_ip_config: {
+    #               header_name: "ForwardedIPHeaderName", # required
+    #               fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #             },
+    #           },
     #         },
     #         action: {
     #           block: {
@@ -8457,6 +8569,14 @@ module Aws::WAFV2
     #
     #   [1]: http://aws.amazon.com/waf/pricing/
     #
+    # @option params [Types::OnSourceDDoSProtectionConfig] :on_source_d_do_s_protection_config
+    #   Specifies the type of DDoS protection to apply to web request data for
+    #   a web ACL. For most scenarios, it is recommended to use the default
+    #   protection level, `ACTIVE_UNDER_DDOS`. If a web ACL is associated with
+    #   multiple Application Load Balancers, the changes you make to DDoS
+    #   protection in that web ACL will apply to all associated Application
+    #   Load Balancers.
+    #
     # @return [Types::UpdateWebACLResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateWebACLResponse#next_lock_token #next_lock_token} => String
@@ -9001,6 +9121,8 @@ module Aws::WAFV2
     #                 ja4_fingerprint: {
     #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
     #                 },
+    #                 asn: {
+    #                 },
     #               },
     #             ],
     #           },
@@ -9129,6 +9251,20 @@ module Aws::WAFV2
     #                   },
     #                   enable_regex_in_path: false,
     #                 },
+    #                 aws_managed_rules_anti_d_do_s_rule_set: {
+    #                   client_side_action_config: { # required
+    #                     challenge: { # required
+    #                       usage_of_action: "ENABLED", # required, accepts ENABLED, DISABLED
+    #                       sensitivity: "LOW", # accepts LOW, MEDIUM, HIGH
+    #                       exempt_uri_regular_expressions: [
+    #                         {
+    #                           regex_string: "RegexPatternString",
+    #                         },
+    #                       ],
+    #                     },
+    #                   },
+    #                   sensitivity_to_block: "LOW", # accepts LOW, MEDIUM, HIGH
+    #                 },
     #               },
     #             ],
     #             rule_action_overrides: [
@@ -9265,6 +9401,13 @@ module Aws::WAFV2
     #               },
     #             ],
     #           },
+    #           asn_match_statement: {
+    #             asn_list: [1], # required
+    #             forwarded_ip_config: {
+    #               header_name: "ForwardedIPHeaderName", # required
+    #               fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #             },
+    #           },
     #         },
     #         action: {
     #           block: {
@@ -9399,6 +9542,9 @@ module Aws::WAFV2
     #         },
     #       },
     #     },
+    #     on_source_d_do_s_protection_config: {
+    #       alb_low_reputation_mode: "ACTIVE_UNDER_DDOS", # required, accepts ACTIVE_UNDER_DDOS, ALWAYS_ON
+    #     },
     #   })
     #
     # @example Response structure
@@ -9432,7 +9578,7 @@ module Aws::WAFV2
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-wafv2'
-      context[:gem_version] = '1.109.0'
+      context[:gem_version] = '1.111.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-wafv2/client_api.rb

@@ -19,8 +19,10 @@ module Aws::WAFV2
     APIKeySummary = Shapes::StructureShape.new(name: 'APIKeySummary')
     APIKeyTokenDomains = Shapes::ListShape.new(name: 'APIKeyTokenDomains')
     APIKeyVersion = Shapes::IntegerShape.new(name: 'APIKeyVersion')
+    ASN = Shapes::IntegerShape.new(name: 'ASN')
     AWSManagedRulesACFPRuleSet = Shapes::StructureShape.new(name: 'AWSManagedRulesACFPRuleSet')
     AWSManagedRulesATPRuleSet = Shapes::StructureShape.new(name: 'AWSManagedRulesATPRuleSet')
+    AWSManagedRulesAntiDDoSRuleSet = Shapes::StructureShape.new(name: 'AWSManagedRulesAntiDDoSRuleSet')
     AWSManagedRulesBotControlRuleSet = Shapes::StructureShape.new(name: 'AWSManagedRulesBotControlRuleSet')
     Action = Shapes::StringShape.new(name: 'Action')
     ActionCondition = Shapes::StructureShape.new(name: 'ActionCondition')
@@ -31,6 +33,8 @@ module Aws::WAFV2
     AllQueryArguments = Shapes::StructureShape.new(name: 'AllQueryArguments')
     AllowAction = Shapes::StructureShape.new(name: 'AllowAction')
     AndStatement = Shapes::StructureShape.new(name: 'AndStatement')
+    AsnList = Shapes::ListShape.new(name: 'AsnList')
+    AsnMatchStatement = Shapes::StructureShape.new(name: 'AsnMatchStatement')
     AssociateWebACLRequest = Shapes::StructureShape.new(name: 'AssociateWebACLRequest')
     AssociateWebACLResponse = Shapes::StructureShape.new(name: 'AssociateWebACLResponse')
     AssociatedResourceType = Shapes::StringShape.new(name: 'AssociatedResourceType')
@@ -49,6 +53,8 @@ module Aws::WAFV2
     ChallengeResponse = Shapes::StructureShape.new(name: 'ChallengeResponse')
     CheckCapacityRequest = Shapes::StructureShape.new(name: 'CheckCapacityRequest')
     CheckCapacityResponse = Shapes::StructureShape.new(name: 'CheckCapacityResponse')
+    ClientSideAction = Shapes::StructureShape.new(name: 'ClientSideAction')
+    ClientSideActionConfig = Shapes::StructureShape.new(name: 'ClientSideActionConfig')
     ComparisonOperator = Shapes::StringShape.new(name: 'ComparisonOperator')
     Condition = Shapes::StructureShape.new(name: 'Condition')
     Conditions = Shapes::ListShape.new(name: 'Conditions')
@@ -239,6 +245,7 @@ module Aws::WAFV2
     LoggingConfigurations = Shapes::ListShape.new(name: 'LoggingConfigurations')
     LoggingFilter = Shapes::StructureShape.new(name: 'LoggingFilter')
     LoginPathString = Shapes::StringShape.new(name: 'LoginPathString')
+    LowReputationMode = Shapes::StringShape.new(name: 'LowReputationMode')
     ManagedProductDescriptor = Shapes::StructureShape.new(name: 'ManagedProductDescriptor')
     ManagedProductDescriptors = Shapes::ListShape.new(name: 'ManagedProductDescriptors')
     ManagedRuleGroupConfig = Shapes::StructureShape.new(name: 'ManagedRuleGroupConfig')
@@ -259,6 +266,7 @@ module Aws::WAFV2
     NextMarker = Shapes::StringShape.new(name: 'NextMarker')
     NoneAction = Shapes::StructureShape.new(name: 'NoneAction')
     NotStatement = Shapes::StructureShape.new(name: 'NotStatement')
+    OnSourceDDoSProtectionConfig = Shapes::StructureShape.new(name: 'OnSourceDDoSProtectionConfig')
     OrStatement = Shapes::StructureShape.new(name: 'OrStatement')
     OutputUrl = Shapes::StringShape.new(name: 'OutputUrl')
     OverrideAction = Shapes::StructureShape.new(name: 'OverrideAction')
@@ -292,6 +300,7 @@ module Aws::WAFV2
     RateBasedStatementCustomKeys = Shapes::ListShape.new(name: 'RateBasedStatementCustomKeys')
     RateBasedStatementManagedKeysIPSet = Shapes::StructureShape.new(name: 'RateBasedStatementManagedKeysIPSet')
     RateLimit = Shapes::IntegerShape.new(name: 'RateLimit')
+    RateLimitAsn = Shapes::StructureShape.new(name: 'RateLimitAsn')
     RateLimitCookie = Shapes::StructureShape.new(name: 'RateLimitCookie')
     RateLimitForwardedIP = Shapes::StructureShape.new(name: 'RateLimitForwardedIP')
     RateLimitHTTPMethod = Shapes::StructureShape.new(name: 'RateLimitHTTPMethod')
@@ -359,6 +368,7 @@ module Aws::WAFV2
     Scope = Shapes::StringShape.new(name: 'Scope')
     SearchString = Shapes::BlobShape.new(name: 'SearchString')
     SensitivityLevel = Shapes::StringShape.new(name: 'SensitivityLevel')
+    SensitivityToAct = Shapes::StringShape.new(name: 'SensitivityToAct')
     SingleCookieName = Shapes::StringShape.new(name: 'SingleCookieName')
     SingleHeader = Shapes::StructureShape.new(name: 'SingleHeader')
     SingleQueryArgument = Shapes::StructureShape.new(name: 'SingleQueryArgument')
@@ -406,6 +416,7 @@ module Aws::WAFV2
     UpdateWebACLResponse = Shapes::StructureShape.new(name: 'UpdateWebACLResponse')
     UriFragment = Shapes::StructureShape.new(name: 'UriFragment')
     UriPath = Shapes::StructureShape.new(name: 'UriPath')
+    UsageOfAction = Shapes::StringShape.new(name: 'UsageOfAction')
     UsernameField = Shapes::StructureShape.new(name: 'UsernameField')
     VendorName = Shapes::StringShape.new(name: 'VendorName')
     VersionKeyString = Shapes::StringShape.new(name: 'VersionKeyString')
@@ -459,6 +470,10 @@ module Aws::WAFV2
     AWSManagedRulesATPRuleSet.add_member(:enable_regex_in_path, Shapes::ShapeRef.new(shape: Boolean, location_name: "EnableRegexInPath"))
     AWSManagedRulesATPRuleSet.struct_class = Types::AWSManagedRulesATPRuleSet
 
+    AWSManagedRulesAntiDDoSRuleSet.add_member(:client_side_action_config, Shapes::ShapeRef.new(shape: ClientSideActionConfig, required: true, location_name: "ClientSideActionConfig"))
+    AWSManagedRulesAntiDDoSRuleSet.add_member(:sensitivity_to_block, Shapes::ShapeRef.new(shape: SensitivityToAct, location_name: "SensitivityToBlock"))
+    AWSManagedRulesAntiDDoSRuleSet.struct_class = Types::AWSManagedRulesAntiDDoSRuleSet
+
     AWSManagedRulesBotControlRuleSet.add_member(:inspection_level, Shapes::ShapeRef.new(shape: InspectionLevel, required: true, location_name: "InspectionLevel"))
     AWSManagedRulesBotControlRuleSet.add_member(:enable_machine_learning, Shapes::ShapeRef.new(shape: EnableMachineLearning, location_name: "EnableMachineLearning"))
     AWSManagedRulesBotControlRuleSet.struct_class = Types::AWSManagedRulesBotControlRuleSet
@@ -481,6 +496,12 @@ module Aws::WAFV2
     AndStatement.add_member(:statements, Shapes::ShapeRef.new(shape: Statements, required: true, location_name: "Statements"))
     AndStatement.struct_class = Types::AndStatement
 
+    AsnList.member = Shapes::ShapeRef.new(shape: ASN)
+
+    AsnMatchStatement.add_member(:asn_list, Shapes::ShapeRef.new(shape: AsnList, required: true, location_name: "AsnList"))
+    AsnMatchStatement.add_member(:forwarded_ip_config, Shapes::ShapeRef.new(shape: ForwardedIPConfig, location_name: "ForwardedIPConfig"))
+    AsnMatchStatement.struct_class = Types::AsnMatchStatement
+
     AssociateWebACLRequest.add_member(:web_acl_arn, Shapes::ShapeRef.new(shape: ResourceArn, required: true, location_name: "WebACLArn"))
     AssociateWebACLRequest.add_member(:resource_arn, Shapes::ShapeRef.new(shape: ResourceArn, required: true, location_name: "ResourceArn"))
     AssociateWebACLRequest.struct_class = Types::AssociateWebACLRequest
@@ -531,6 +552,14 @@ module Aws::WAFV2
     CheckCapacityResponse.add_member(:capacity, Shapes::ShapeRef.new(shape: ConsumedCapacity, location_name: "Capacity"))
     CheckCapacityResponse.struct_class = Types::CheckCapacityResponse
 
+    ClientSideAction.add_member(:usage_of_action, Shapes::ShapeRef.new(shape: UsageOfAction, required: true, location_name: "UsageOfAction"))
+    ClientSideAction.add_member(:sensitivity, Shapes::ShapeRef.new(shape: SensitivityToAct, location_name: "Sensitivity"))
+    ClientSideAction.add_member(:exempt_uri_regular_expressions, Shapes::ShapeRef.new(shape: RegularExpressionList, location_name: "ExemptUriRegularExpressions"))
+    ClientSideAction.struct_class = Types::ClientSideAction
+
+    ClientSideActionConfig.add_member(:challenge, Shapes::ShapeRef.new(shape: ClientSideAction, required: true, location_name: "Challenge"))
+    ClientSideActionConfig.struct_class = Types::ClientSideActionConfig
+
     Condition.add_member(:action_condition, Shapes::ShapeRef.new(shape: ActionCondition, location_name: "ActionCondition"))
     Condition.add_member(:label_name_condition, Shapes::ShapeRef.new(shape: LabelNameCondition, location_name: "LabelNameCondition"))
     Condition.struct_class = Types::Condition
@@ -608,6 +637,7 @@ module Aws::WAFV2
     CreateWebACLRequest.add_member(:challenge_config, Shapes::ShapeRef.new(shape: ChallengeConfig, location_name: "ChallengeConfig"))
     CreateWebACLRequest.add_member(:token_domains, Shapes::ShapeRef.new(shape: TokenDomains, location_name: "TokenDomains"))
     CreateWebACLRequest.add_member(:association_config, Shapes::ShapeRef.new(shape: AssociationConfig, location_name: "AssociationConfig"))
+    CreateWebACLRequest.add_member(:on_source_d_do_s_protection_config, Shapes::ShapeRef.new(shape: OnSourceDDoSProtectionConfig, location_name: "OnSourceDDoSProtectionConfig"))
     CreateWebACLRequest.struct_class = Types::CreateWebACLRequest
 
     CreateWebACLResponse.add_member(:summary, Shapes::ShapeRef.new(shape: WebACLSummary, location_name: "Summary"))
@@ -1153,6 +1183,7 @@ module Aws::WAFV2
     ManagedRuleGroupConfig.add_member(:aws_managed_rules_bot_control_rule_set, Shapes::ShapeRef.new(shape: AWSManagedRulesBotControlRuleSet, location_name: "AWSManagedRulesBotControlRuleSet"))
     ManagedRuleGroupConfig.add_member(:aws_managed_rules_atp_rule_set, Shapes::ShapeRef.new(shape: AWSManagedRulesATPRuleSet, location_name: "AWSManagedRulesATPRuleSet"))
     ManagedRuleGroupConfig.add_member(:aws_managed_rules_acfp_rule_set, Shapes::ShapeRef.new(shape: AWSManagedRulesACFPRuleSet, location_name: "AWSManagedRulesACFPRuleSet"))
+    ManagedRuleGroupConfig.add_member(:aws_managed_rules_anti_d_do_s_rule_set, Shapes::ShapeRef.new(shape: AWSManagedRulesAntiDDoSRuleSet, location_name: "AWSManagedRulesAntiDDoSRuleSet"))
     ManagedRuleGroupConfig.struct_class = Types::ManagedRuleGroupConfig
 
     ManagedRuleGroupConfigs.member = Shapes::ShapeRef.new(shape: ManagedRuleGroupConfig)
@@ -1220,6 +1251,9 @@ module Aws::WAFV2
     NotStatement.add_member(:statement, Shapes::ShapeRef.new(shape: Statement, required: true, location_name: "Statement"))
     NotStatement.struct_class = Types::NotStatement
 
+    OnSourceDDoSProtectionConfig.add_member(:alb_low_reputation_mode, Shapes::ShapeRef.new(shape: LowReputationMode, required: true, location_name: "ALBLowReputationMode"))
+    OnSourceDDoSProtectionConfig.struct_class = Types::OnSourceDDoSProtectionConfig
+
     OrStatement.add_member(:statements, Shapes::ShapeRef.new(shape: Statements, required: true, location_name: "Statements"))
     OrStatement.struct_class = Types::OrStatement
 
@@ -1282,6 +1316,7 @@ module Aws::WAFV2
     RateBasedStatementCustomKey.add_member(:uri_path, Shapes::ShapeRef.new(shape: RateLimitUriPath, location_name: "UriPath"))
     RateBasedStatementCustomKey.add_member(:ja3_fingerprint, Shapes::ShapeRef.new(shape: RateLimitJA3Fingerprint, location_name: "JA3Fingerprint"))
     RateBasedStatementCustomKey.add_member(:ja4_fingerprint, Shapes::ShapeRef.new(shape: RateLimitJA4Fingerprint, location_name: "JA4Fingerprint"))
+    RateBasedStatementCustomKey.add_member(:asn, Shapes::ShapeRef.new(shape: RateLimitAsn, location_name: "ASN"))
     RateBasedStatementCustomKey.struct_class = Types::RateBasedStatementCustomKey
 
     RateBasedStatementCustomKeys.member = Shapes::ShapeRef.new(shape: RateBasedStatementCustomKey)
@@ -1290,6 +1325,8 @@ module Aws::WAFV2
     RateBasedStatementManagedKeysIPSet.add_member(:addresses, Shapes::ShapeRef.new(shape: IPAddresses, location_name: "Addresses"))
     RateBasedStatementManagedKeysIPSet.struct_class = Types::RateBasedStatementManagedKeysIPSet
 
+    RateLimitAsn.struct_class = Types::RateLimitAsn
+
     RateLimitCookie.add_member(:name, Shapes::ShapeRef.new(shape: FieldToMatchData, required: true, location_name: "Name"))
     RateLimitCookie.add_member(:text_transformations, Shapes::ShapeRef.new(shape: TextTransformations, required: true, location_name: "TextTransformations"))
     RateLimitCookie.struct_class = Types::RateLimitCookie
@@ -1529,6 +1566,7 @@ module Aws::WAFV2
     Statement.add_member(:managed_rule_group_statement, Shapes::ShapeRef.new(shape: ManagedRuleGroupStatement, location_name: "ManagedRuleGroupStatement"))
     Statement.add_member(:label_match_statement, Shapes::ShapeRef.new(shape: LabelMatchStatement, location_name: "LabelMatchStatement"))
     Statement.add_member(:regex_match_statement, Shapes::ShapeRef.new(shape: RegexMatchStatement, location_name: "RegexMatchStatement"))
+    Statement.add_member(:asn_match_statement, Shapes::ShapeRef.new(shape: AsnMatchStatement, location_name: "AsnMatchStatement"))
     Statement.struct_class = Types::Statement
 
     Statements.member = Shapes::ShapeRef.new(shape: Statement)
@@ -1631,6 +1669,7 @@ module Aws::WAFV2
     UpdateWebACLRequest.add_member(:challenge_config, Shapes::ShapeRef.new(shape: ChallengeConfig, location_name: "ChallengeConfig"))
     UpdateWebACLRequest.add_member(:token_domains, Shapes::ShapeRef.new(shape: TokenDomains, location_name: "TokenDomains"))
     UpdateWebACLRequest.add_member(:association_config, Shapes::ShapeRef.new(shape: AssociationConfig, location_name: "AssociationConfig"))
+    UpdateWebACLRequest.add_member(:on_source_d_do_s_protection_config, Shapes::ShapeRef.new(shape: OnSourceDDoSProtectionConfig, location_name: "OnSourceDDoSProtectionConfig"))
     UpdateWebACLRequest.struct_class = Types::UpdateWebACLRequest
 
     UpdateWebACLResponse.add_member(:next_lock_token, Shapes::ShapeRef.new(shape: LockToken, location_name: "NextLockToken"))
@@ -1736,6 +1775,7 @@ module Aws::WAFV2
     WebACL.add_member(:token_domains, Shapes::ShapeRef.new(shape: TokenDomains, location_name: "TokenDomains"))
     WebACL.add_member(:association_config, Shapes::ShapeRef.new(shape: AssociationConfig, location_name: "AssociationConfig"))
     WebACL.add_member(:retrofitted_by_firewall_manager, Shapes::ShapeRef.new(shape: Boolean, location_name: "RetrofittedByFirewallManager"))
+    WebACL.add_member(:on_source_d_do_s_protection_config, Shapes::ShapeRef.new(shape: OnSourceDDoSProtectionConfig, location_name: "OnSourceDDoSProtectionConfig"))
     WebACL.struct_class = Types::WebACL
 
     WebACLSummaries.member = Shapes::ShapeRef.new(shape: WebACLSummary)