aws-sdk-wafv2 1.20.0 → 1.21.0

Sign up to get free protection for your applications and to get access to all the features.
@@ -542,9 +542,10 @@ module Aws::WAFV2
542
542
  GetRegexPatternSetResponse.add_member(:lock_token, Shapes::ShapeRef.new(shape: LockToken, location_name: "LockToken"))
543
543
  GetRegexPatternSetResponse.struct_class = Types::GetRegexPatternSetResponse
544
544
 
545
- GetRuleGroupRequest.add_member(:name, Shapes::ShapeRef.new(shape: EntityName, required: true, location_name: "Name"))
546
- GetRuleGroupRequest.add_member(:scope, Shapes::ShapeRef.new(shape: Scope, required: true, location_name: "Scope"))
547
- GetRuleGroupRequest.add_member(:id, Shapes::ShapeRef.new(shape: EntityId, required: true, location_name: "Id"))
545
+ GetRuleGroupRequest.add_member(:name, Shapes::ShapeRef.new(shape: EntityName, location_name: "Name"))
546
+ GetRuleGroupRequest.add_member(:scope, Shapes::ShapeRef.new(shape: Scope, location_name: "Scope"))
547
+ GetRuleGroupRequest.add_member(:id, Shapes::ShapeRef.new(shape: EntityId, location_name: "Id"))
548
+ GetRuleGroupRequest.add_member(:arn, Shapes::ShapeRef.new(shape: ResourceArn, location_name: "ARN"))
548
549
  GetRuleGroupRequest.struct_class = Types::GetRuleGroupRequest
549
550
 
550
551
  GetRuleGroupResponse.add_member(:rule_group, Shapes::ShapeRef.new(shape: RuleGroup, location_name: "RuleGroup"))
@@ -32,11 +32,11 @@ module Aws::WAFV2
32
32
  include Aws::Structure
33
33
  end
34
34
 
35
- # Inspect all of the elements that AWS WAF has parsed and extracted from
36
- # the web request JSON body that are within the JsonBody `MatchScope`.
37
- # This is used with the FieldToMatch option `JsonBody`.
35
+ # Inspect all of the elements that WAF has parsed and extracted from the
36
+ # web request JSON body that are within the JsonBody `MatchScope`. This
37
+ # is used with the FieldToMatch option `JsonBody`.
38
38
  #
39
- # This is used only to indicate the web request component for AWS WAF to
39
+ # This is used only to indicate the web request component for WAF to
40
40
  # inspect, in the FieldToMatch specification.
41
41
  #
42
42
  # @api private
@@ -47,7 +47,7 @@ module Aws::WAFV2
47
47
 
48
48
  # All query arguments of a web request.
49
49
  #
50
- # This is used only to indicate the web request component for AWS WAF to
50
+ # This is used only to indicate the web request component for WAF to
51
51
  # inspect, in the FieldToMatch specification.
52
52
  #
53
53
  # @api private
@@ -56,7 +56,7 @@ module Aws::WAFV2
56
56
  #
57
57
  class AllQueryArguments < Aws::EmptyStructure; end
58
58
 
59
- # Specifies that AWS WAF should allow the request and optionally defines
59
+ # Specifies that WAF should allow the request and optionally defines
60
60
  # additional custom handling for the request.
61
61
  #
62
62
  # This is used in the context of other settings, for example to specify
@@ -80,8 +80,8 @@ module Aws::WAFV2
80
80
  # Defines custom handling for the web request.
81
81
  #
82
82
  # For information about customizing web requests and responses, see
83
- # [Customizing web requests and responses in AWS WAF][1] in the [AWS
84
- # WAF Developer Guide][2].
83
+ # [Customizing web requests and responses in WAF][1] in the [WAF
84
+ # Developer Guide][2].
85
85
  #
86
86
  #
87
87
  #
@@ -139,7 +139,7 @@ module Aws::WAFV2
139
139
  # text_transformations: [ # required
140
140
  # {
141
141
  # priority: 1, # required
142
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
142
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
143
143
  # },
144
144
  # ],
145
145
  # positional_constraint: "EXACTLY", # required, accepts EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD
@@ -175,7 +175,7 @@ module Aws::WAFV2
175
175
  # text_transformations: [ # required
176
176
  # {
177
177
  # priority: 1, # required
178
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
178
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
179
179
  # },
180
180
  # ],
181
181
  # },
@@ -210,7 +210,7 @@ module Aws::WAFV2
210
210
  # text_transformations: [ # required
211
211
  # {
212
212
  # priority: 1, # required
213
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
213
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
214
214
  # },
215
215
  # ],
216
216
  # },
@@ -247,7 +247,7 @@ module Aws::WAFV2
247
247
  # text_transformations: [ # required
248
248
  # {
249
249
  # priority: 1, # required
250
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
250
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
251
251
  # },
252
252
  # ],
253
253
  # },
@@ -306,7 +306,7 @@ module Aws::WAFV2
306
306
  # text_transformations: [ # required
307
307
  # {
308
308
  # priority: 1, # required
309
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
309
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
310
310
  # },
311
311
  # ],
312
312
  # },
@@ -378,7 +378,7 @@ module Aws::WAFV2
378
378
  # }
379
379
  #
380
380
  # @!attribute [rw] web_acl_arn
381
- # The Amazon Resource Name (ARN) of the Web ACL that you want to
381
+ # The Amazon Resource Name (ARN) of the web ACL that you want to
382
382
  # associate with the resource.
383
383
  # @return [String]
384
384
  #
@@ -392,7 +392,7 @@ module Aws::WAFV2
392
392
  # `arn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
393
393
  # `
394
394
  #
395
- # * For an API Gateway REST API:
395
+ # * For an Amazon API Gateway REST API:
396
396
  # `arn:aws:apigateway:region::/restapis/api-id/stages/stage-name `
397
397
  #
398
398
  # * For an AppSync GraphQL API:
@@ -412,7 +412,7 @@ module Aws::WAFV2
412
412
  #
413
413
  class AssociateWebACLResponse < Aws::EmptyStructure; end
414
414
 
415
- # Specifies that AWS WAF should block the request and optionally defines
415
+ # Specifies that WAF should block the request and optionally defines
416
416
  # additional custom handling for the response to the web request.
417
417
  #
418
418
  # This is used in the context of other settings, for example to specify
@@ -438,8 +438,8 @@ module Aws::WAFV2
438
438
  # Defines a custom response for the web request.
439
439
  #
440
440
  # For information about customizing web requests and responses, see
441
- # [Customizing web requests and responses in AWS WAF][1] in the [AWS
442
- # WAF Developer Guide][2].
441
+ # [Customizing web requests and responses in WAF][1] in the [WAF
442
+ # Developer Guide][2].
443
443
  #
444
444
  #
445
445
  #
@@ -458,7 +458,7 @@ module Aws::WAFV2
458
458
  # The body of a web request. This immediately follows the request
459
459
  # headers.
460
460
  #
461
- # This is used only to indicate the web request component for AWS WAF to
461
+ # This is used only to indicate the web request component for WAF to
462
462
  # inspect, in the FieldToMatch specification.
463
463
  #
464
464
  # @api private
@@ -467,11 +467,11 @@ module Aws::WAFV2
467
467
  #
468
468
  class Body < Aws::EmptyStructure; end
469
469
 
470
- # A rule statement that defines a string match search for AWS WAF to
471
- # apply to web requests. The byte match statement provides the bytes to
472
- # search for, the location in requests that you want AWS WAF to search,
473
- # and other settings. The bytes to search for are typically a string
474
- # that corresponds with ASCII characters. In the AWS WAF console and the
470
+ # A rule statement that defines a string match search for WAF to apply
471
+ # to web requests. The byte match statement provides the bytes to search
472
+ # for, the location in requests that you want WAF to search, and other
473
+ # settings. The bytes to search for are typically a string that
474
+ # corresponds with ASCII characters. In the WAF console and the
475
475
  # developer guide, this is refered to as a string match statement.
476
476
  #
477
477
  # @note When making an API call, you may pass ByteMatchStatement
@@ -509,30 +509,30 @@ module Aws::WAFV2
509
509
  # text_transformations: [ # required
510
510
  # {
511
511
  # priority: 1, # required
512
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
512
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
513
513
  # },
514
514
  # ],
515
515
  # positional_constraint: "EXACTLY", # required, accepts EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD
516
516
  # }
517
517
  #
518
518
  # @!attribute [rw] search_string
519
- # A string value that you want AWS WAF to search for. AWS WAF searches
520
- # only in the part of web requests that you designate for inspection
521
- # in FieldToMatch. The maximum length of the value is 50 bytes.
519
+ # A string value that you want WAF to search for. WAF searches only in
520
+ # the part of web requests that you designate for inspection in
521
+ # FieldToMatch. The maximum length of the value is 50 bytes.
522
522
  #
523
523
  # Valid values depend on the component that you specify for inspection
524
524
  # in `FieldToMatch`\:
525
525
  #
526
- # * `Method`\: The HTTP method that you want AWS WAF to search for.
527
- # This indicates the type of operation specified in the request.
526
+ # * `Method`\: The HTTP method that you want WAF to search for. This
527
+ # indicates the type of operation specified in the request.
528
528
  #
529
- # * `UriPath`\: The value that you want AWS WAF to search for in the
530
- # URI path, for example, `/images/daily-ad.jpg`.
529
+ # * `UriPath`\: The value that you want WAF to search for in the URI
530
+ # path, for example, `/images/daily-ad.jpg`.
531
531
  #
532
532
  # If `SearchString` includes alphabetic characters A-Z and a-z, note
533
533
  # that the value is case sensitive.
534
534
  #
535
- # **If you're using the AWS WAF API**
535
+ # **If you're using the WAF API**
536
536
  #
537
537
  # Specify a base64-encoded version of the value. The maximum length of
538
538
  # the value before you base64-encode it is 50 bytes.
@@ -543,29 +543,29 @@ module Aws::WAFV2
543
543
  # base64-encoding and include the resulting value, `QmFkQm90`, in the
544
544
  # value of `SearchString`.
545
545
  #
546
- # **If you're using the AWS CLI or one of the AWS SDKs**
546
+ # **If you're using the CLI or one of the Amazon Web Services SDKs**
547
547
  #
548
- # The value that you want AWS WAF to search for. The SDK automatically
548
+ # The value that you want WAF to search for. The SDK automatically
549
549
  # base64 encodes the value.
550
550
  # @return [String]
551
551
  #
552
552
  # @!attribute [rw] field_to_match
553
- # The part of a web request that you want AWS WAF to inspect. For more
553
+ # The part of a web request that you want WAF to inspect. For more
554
554
  # information, see FieldToMatch.
555
555
  # @return [Types::FieldToMatch]
556
556
  #
557
557
  # @!attribute [rw] text_transformations
558
558
  # Text transformations eliminate some of the unusual formatting that
559
559
  # attackers use in web requests in an effort to bypass detection. If
560
- # you specify one or more transformations in a rule statement, AWS WAF
560
+ # you specify one or more transformations in a rule statement, WAF
561
561
  # performs all transformations on the content of the request component
562
562
  # identified by `FieldToMatch`, starting from the lowest priority
563
563
  # setting, before inspecting the content for a match.
564
564
  # @return [Array<Types::TextTransformation>]
565
565
  #
566
566
  # @!attribute [rw] positional_constraint
567
- # The area within the portion of a web request that you want AWS WAF
568
- # to search for `SearchString`. Valid values include the following:
567
+ # The area within the portion of a web request that you want WAF to
568
+ # search for `SearchString`. Valid values include the following:
569
569
  #
570
570
  # **CONTAINS**
571
571
  #
@@ -659,7 +659,7 @@ module Aws::WAFV2
659
659
  # text_transformations: [ # required
660
660
  # {
661
661
  # priority: 1, # required
662
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
662
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
663
663
  # },
664
664
  # ],
665
665
  # positional_constraint: "EXACTLY", # required, accepts EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD
@@ -695,7 +695,7 @@ module Aws::WAFV2
695
695
  # text_transformations: [ # required
696
696
  # {
697
697
  # priority: 1, # required
698
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
698
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
699
699
  # },
700
700
  # ],
701
701
  # },
@@ -730,7 +730,7 @@ module Aws::WAFV2
730
730
  # text_transformations: [ # required
731
731
  # {
732
732
  # priority: 1, # required
733
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
733
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
734
734
  # },
735
735
  # ],
736
736
  # },
@@ -767,7 +767,7 @@ module Aws::WAFV2
767
767
  # text_transformations: [ # required
768
768
  # {
769
769
  # priority: 1, # required
770
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
770
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
771
771
  # },
772
772
  # ],
773
773
  # },
@@ -826,7 +826,7 @@ module Aws::WAFV2
826
826
  # text_transformations: [ # required
827
827
  # {
828
828
  # priority: 1, # required
829
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
829
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
830
830
  # },
831
831
  # ],
832
832
  # },
@@ -940,10 +940,10 @@ module Aws::WAFV2
940
940
  # }
941
941
  #
942
942
  # @!attribute [rw] scope
943
- # Specifies whether this is for an AWS CloudFront distribution or for
944
- # a regional application. A regional application can be an Application
945
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
946
- # API.
943
+ # Specifies whether this is for an Amazon CloudFront distribution or
944
+ # for a regional application. A regional application can be an
945
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
946
+ # an AppSync GraphQL API.
947
947
  #
948
948
  # To work with CloudFront, you must also specify the Region US East
949
949
  # (N. Virginia) as follows:
@@ -1011,7 +1011,7 @@ module Aws::WAFV2
1011
1011
  include Aws::Structure
1012
1012
  end
1013
1013
 
1014
- # Specifies that AWS WAF should count the request. Optionally defines
1014
+ # Specifies that WAF should count the request. Optionally defines
1015
1015
  # additional custom handling for the request.
1016
1016
  #
1017
1017
  # This is used in the context of other settings, for example to specify
@@ -1035,8 +1035,8 @@ module Aws::WAFV2
1035
1035
  # Defines custom handling for the web request.
1036
1036
  #
1037
1037
  # For information about customizing web requests and responses, see
1038
- # [Customizing web requests and responses in AWS WAF][1] in the [AWS
1039
- # WAF Developer Guide][2].
1038
+ # [Customizing web requests and responses in WAF][1] in the [WAF
1039
+ # Developer Guide][2].
1040
1040
  #
1041
1041
  #
1042
1042
  #
@@ -1075,10 +1075,10 @@ module Aws::WAFV2
1075
1075
  # @return [String]
1076
1076
  #
1077
1077
  # @!attribute [rw] scope
1078
- # Specifies whether this is for an AWS CloudFront distribution or for
1079
- # a regional application. A regional application can be an Application
1080
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
1081
- # API.
1078
+ # Specifies whether this is for an Amazon CloudFront distribution or
1079
+ # for a regional application. A regional application can be an
1080
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
1081
+ # an AppSync GraphQL API.
1082
1082
  #
1083
1083
  # To work with CloudFront, you must also specify the Region US East
1084
1084
  # (N. Virginia) as follows:
@@ -1100,25 +1100,24 @@ module Aws::WAFV2
1100
1100
  # @!attribute [rw] addresses
1101
1101
  # Contains an array of strings that specify one or more IP addresses
1102
1102
  # or blocks of IP addresses in Classless Inter-Domain Routing (CIDR)
1103
- # notation. AWS WAF supports all IPv4 and IPv6 CIDR ranges except for
1104
- # /0.
1103
+ # notation. WAF supports all IPv4 and IPv6 CIDR ranges except for /0.
1105
1104
  #
1106
1105
  # Examples:
1107
1106
  #
1108
- # * To configure AWS WAF to allow, block, or count requests that
1107
+ # * To configure WAF to allow, block, or count requests that
1109
1108
  # originated from the IP address 192.0.2.44, specify
1110
1109
  # `192.0.2.44/32`.
1111
1110
  #
1112
- # * To configure AWS WAF to allow, block, or count requests that
1111
+ # * To configure WAF to allow, block, or count requests that
1113
1112
  # originated from IP addresses from 192.0.2.0 to 192.0.2.255,
1114
1113
  # specify `192.0.2.0/24`.
1115
1114
  #
1116
- # * To configure AWS WAF to allow, block, or count requests that
1115
+ # * To configure WAF to allow, block, or count requests that
1117
1116
  # originated from the IP address
1118
1117
  # 1111:0000:0000:0000:0000:0000:0000:0111, specify
1119
1118
  # `1111:0000:0000:0000:0000:0000:0000:0111/128`.
1120
1119
  #
1121
- # * To configure AWS WAF to allow, block, or count requests that
1120
+ # * To configure WAF to allow, block, or count requests that
1122
1121
  # originated from IP addresses
1123
1122
  # 1111:0000:0000:0000:0000:0000:0000:0000 to
1124
1123
  # 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify
@@ -1190,10 +1189,10 @@ module Aws::WAFV2
1190
1189
  # @return [String]
1191
1190
  #
1192
1191
  # @!attribute [rw] scope
1193
- # Specifies whether this is for an AWS CloudFront distribution or for
1194
- # a regional application. A regional application can be an Application
1195
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
1196
- # API.
1192
+ # Specifies whether this is for an Amazon CloudFront distribution or
1193
+ # for a regional application. A regional application can be an
1194
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
1195
+ # an AppSync GraphQL API.
1197
1196
  #
1198
1197
  # To work with CloudFront, you must also specify the Region US East
1199
1198
  # (N. Virginia) as follows:
@@ -1289,7 +1288,7 @@ module Aws::WAFV2
1289
1288
  # text_transformations: [ # required
1290
1289
  # {
1291
1290
  # priority: 1, # required
1292
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
1291
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
1293
1292
  # },
1294
1293
  # ],
1295
1294
  # positional_constraint: "EXACTLY", # required, accepts EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD
@@ -1325,7 +1324,7 @@ module Aws::WAFV2
1325
1324
  # text_transformations: [ # required
1326
1325
  # {
1327
1326
  # priority: 1, # required
1328
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
1327
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
1329
1328
  # },
1330
1329
  # ],
1331
1330
  # },
@@ -1360,7 +1359,7 @@ module Aws::WAFV2
1360
1359
  # text_transformations: [ # required
1361
1360
  # {
1362
1361
  # priority: 1, # required
1363
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
1362
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
1364
1363
  # },
1365
1364
  # ],
1366
1365
  # },
@@ -1397,7 +1396,7 @@ module Aws::WAFV2
1397
1396
  # text_transformations: [ # required
1398
1397
  # {
1399
1398
  # priority: 1, # required
1400
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
1399
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
1401
1400
  # },
1402
1401
  # ],
1403
1402
  # },
@@ -1456,7 +1455,7 @@ module Aws::WAFV2
1456
1455
  # text_transformations: [ # required
1457
1456
  # {
1458
1457
  # priority: 1, # required
1459
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
1458
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
1460
1459
  # },
1461
1460
  # ],
1462
1461
  # },
@@ -1592,10 +1591,10 @@ module Aws::WAFV2
1592
1591
  # @return [String]
1593
1592
  #
1594
1593
  # @!attribute [rw] scope
1595
- # Specifies whether this is for an AWS CloudFront distribution or for
1596
- # a regional application. A regional application can be an Application
1597
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
1598
- # API.
1594
+ # Specifies whether this is for an Amazon CloudFront distribution or
1595
+ # for a regional application. A regional application can be an
1596
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
1597
+ # an AppSync GraphQL API.
1599
1598
  #
1600
1599
  # To work with CloudFront, you must also specify the Region US East
1601
1600
  # (N. Virginia) as follows:
@@ -1611,11 +1610,11 @@ module Aws::WAFV2
1611
1610
  #
1612
1611
  # When you create your own rule group, you define this, and you cannot
1613
1612
  # change it after creation. When you add or modify the rules in a rule
1614
- # group, AWS WAF enforces this limit. You can check the capacity for a
1615
- # set of rules using CheckCapacity.
1613
+ # group, WAF enforces this limit. You can check the capacity for a set
1614
+ # of rules using CheckCapacity.
1616
1615
  #
1617
- # AWS WAF uses WCUs to calculate and control the operating resources
1618
- # that are used to run your rules, rule groups, and web ACLs. AWS WAF
1616
+ # WAF uses WCUs to calculate and control the operating resources that
1617
+ # are used to run your rules, rule groups, and web ACLs. WAF
1619
1618
  # calculates capacity differently for each rule type, to reflect the
1620
1619
  # relative cost of each rule. Simple rules that cost little to run use
1621
1620
  # fewer WCUs than more complex rules that use more processing power.
@@ -1631,8 +1630,8 @@ module Aws::WAFV2
1631
1630
  # @!attribute [rw] rules
1632
1631
  # The Rule statements used to identify the web requests that you want
1633
1632
  # to allow, block, or count. Each rule includes one top-level
1634
- # statement that AWS WAF uses to identify matching web requests, and
1635
- # parameters that govern how AWS WAF handles them.
1633
+ # statement that WAF uses to identify matching web requests, and
1634
+ # parameters that govern how WAF handles them.
1636
1635
  # @return [Array<Types::Rule>]
1637
1636
  #
1638
1637
  # @!attribute [rw] visibility_config
@@ -1651,12 +1650,12 @@ module Aws::WAFV2
1651
1650
  # the rules that you define in the rule group.
1652
1651
  #
1653
1652
  # For information about customizing web requests and responses, see
1654
- # [Customizing web requests and responses in AWS WAF][1] in the [AWS
1655
- # WAF Developer Guide][2].
1653
+ # [Customizing web requests and responses in WAF][1] in the [WAF
1654
+ # Developer Guide][2].
1656
1655
  #
1657
1656
  # For information about the limits on count and size for custom
1658
- # request and response settings, see [AWS WAF quotas][3] in the [AWS
1659
- # WAF Developer Guide][2].
1657
+ # request and response settings, see [WAF quotas][3] in the [WAF
1658
+ # Developer Guide][2].
1660
1659
  #
1661
1660
  #
1662
1661
  #
@@ -1764,7 +1763,7 @@ module Aws::WAFV2
1764
1763
  # text_transformations: [ # required
1765
1764
  # {
1766
1765
  # priority: 1, # required
1767
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
1766
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
1768
1767
  # },
1769
1768
  # ],
1770
1769
  # positional_constraint: "EXACTLY", # required, accepts EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD
@@ -1800,7 +1799,7 @@ module Aws::WAFV2
1800
1799
  # text_transformations: [ # required
1801
1800
  # {
1802
1801
  # priority: 1, # required
1803
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
1802
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
1804
1803
  # },
1805
1804
  # ],
1806
1805
  # },
@@ -1835,7 +1834,7 @@ module Aws::WAFV2
1835
1834
  # text_transformations: [ # required
1836
1835
  # {
1837
1836
  # priority: 1, # required
1838
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
1837
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
1839
1838
  # },
1840
1839
  # ],
1841
1840
  # },
@@ -1872,7 +1871,7 @@ module Aws::WAFV2
1872
1871
  # text_transformations: [ # required
1873
1872
  # {
1874
1873
  # priority: 1, # required
1875
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
1874
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
1876
1875
  # },
1877
1876
  # ],
1878
1877
  # },
@@ -1931,7 +1930,7 @@ module Aws::WAFV2
1931
1930
  # text_transformations: [ # required
1932
1931
  # {
1933
1932
  # priority: 1, # required
1934
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
1933
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
1935
1934
  # },
1936
1935
  # ],
1937
1936
  # },
@@ -2062,15 +2061,15 @@ module Aws::WAFV2
2062
2061
  # }
2063
2062
  #
2064
2063
  # @!attribute [rw] name
2065
- # The name of the Web ACL. You cannot change the name of a Web ACL
2064
+ # The name of the web ACL. You cannot change the name of a web ACL
2066
2065
  # after you create it.
2067
2066
  # @return [String]
2068
2067
  #
2069
2068
  # @!attribute [rw] scope
2070
- # Specifies whether this is for an AWS CloudFront distribution or for
2071
- # a regional application. A regional application can be an Application
2072
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
2073
- # API.
2069
+ # Specifies whether this is for an Amazon CloudFront distribution or
2070
+ # for a regional application. A regional application can be an
2071
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
2072
+ # an AppSync GraphQL API.
2074
2073
  #
2075
2074
  # To work with CloudFront, you must also specify the Region US East
2076
2075
  # (N. Virginia) as follows:
@@ -2087,14 +2086,14 @@ module Aws::WAFV2
2087
2086
  # @return [Types::DefaultAction]
2088
2087
  #
2089
2088
  # @!attribute [rw] description
2090
- # A description of the Web ACL that helps with identification.
2089
+ # A description of the web ACL that helps with identification.
2091
2090
  # @return [String]
2092
2091
  #
2093
2092
  # @!attribute [rw] rules
2094
2093
  # The Rule statements used to identify the web requests that you want
2095
2094
  # to allow, block, or count. Each rule includes one top-level
2096
- # statement that AWS WAF uses to identify matching web requests, and
2097
- # parameters that govern how AWS WAF handles them.
2095
+ # statement that WAF uses to identify matching web requests, and
2096
+ # parameters that govern how WAF handles them.
2098
2097
  # @return [Array<Types::Rule>]
2099
2098
  #
2100
2099
  # @!attribute [rw] visibility_config
@@ -2113,12 +2112,12 @@ module Aws::WAFV2
2113
2112
  # rules and default actions that you define in the web ACL.
2114
2113
  #
2115
2114
  # For information about customizing web requests and responses, see
2116
- # [Customizing web requests and responses in AWS WAF][1] in the [AWS
2117
- # WAF Developer Guide][2].
2115
+ # [Customizing web requests and responses in WAF][1] in the [WAF
2116
+ # Developer Guide][2].
2118
2117
  #
2119
2118
  # For information about the limits on count and size for custom
2120
- # request and response settings, see [AWS WAF quotas][3] in the [AWS
2121
- # WAF Developer Guide][2].
2119
+ # request and response settings, see [WAF quotas][3] in the [WAF
2120
+ # Developer Guide][2].
2122
2121
  #
2123
2122
  #
2124
2123
  #
@@ -2171,10 +2170,10 @@ module Aws::WAFV2
2171
2170
  # @!attribute [rw] name
2172
2171
  # The name of the custom header.
2173
2172
  #
2174
- # For custom request header insertion, when AWS WAF inserts the header
2173
+ # For custom request header insertion, when WAF inserts the header
2175
2174
  # into the request, it prefixes this name `x-amzn-waf-`, to avoid
2176
2175
  # confusion with the headers that are already in the request. For
2177
- # example, for the header name `sample`, AWS WAF inserts the header
2176
+ # example, for the header name `sample`, WAF inserts the header
2178
2177
  # `x-amzn-waf-sample`.
2179
2178
  # @return [String]
2180
2179
  #
@@ -2196,7 +2195,7 @@ module Aws::WAFV2
2196
2195
  # allow and count.
2197
2196
  #
2198
2197
  # For information about customizing web requests and responses, see
2199
- # [Customizing web requests and responses in AWS WAF][1] in the [AWS WAF
2198
+ # [Customizing web requests and responses in WAF][1] in the [WAF
2200
2199
  # Developer Guide][2].
2201
2200
  #
2202
2201
  #
@@ -2221,8 +2220,8 @@ module Aws::WAFV2
2221
2220
  # are not allowed.
2222
2221
  #
2223
2222
  # For information about the limits on count and size for custom
2224
- # request and response settings, see [AWS WAF quotas][1] in the [AWS
2225
- # WAF Developer Guide][2].
2223
+ # request and response settings, see [WAF quotas][1] in the [WAF
2224
+ # Developer Guide][2].
2226
2225
  #
2227
2226
  #
2228
2227
  #
@@ -2243,7 +2242,7 @@ module Aws::WAFV2
2243
2242
  # BlockAction.
2244
2243
  #
2245
2244
  # For information about customizing web requests and responses, see
2246
- # [Customizing web requests and responses in AWS WAF][1] in the [AWS WAF
2245
+ # [Customizing web requests and responses in WAF][1] in the [WAF
2247
2246
  # Developer Guide][2].
2248
2247
  #
2249
2248
  #
@@ -2270,7 +2269,7 @@ module Aws::WAFV2
2270
2269
  #
2271
2270
  # For a list of status codes that you can use in your custom
2272
2271
  # reqponses, see [Supported status codes for custom response][1] in
2273
- # the [AWS WAF Developer Guide][2].
2272
+ # the [WAF Developer Guide][2].
2274
2273
  #
2275
2274
  #
2276
2275
  #
@@ -2279,10 +2278,10 @@ module Aws::WAFV2
2279
2278
  # @return [Integer]
2280
2279
  #
2281
2280
  # @!attribute [rw] custom_response_body_key
2282
- # References the response body that you want AWS WAF to return to the
2283
- # web request client. You can define a custom response for a rule
2284
- # action or a default web ACL action that is set to block. To do this,
2285
- # you first define the response body key and value in the
2281
+ # References the response body that you want WAF to return to the web
2282
+ # request client. You can define a custom response for a rule action
2283
+ # or a default web ACL action that is set to block. To do this, you
2284
+ # first define the response body key and value in the
2286
2285
  # `CustomResponseBodies` setting for the WebACL or RuleGroup where you
2287
2286
  # want to use it. Then, in the rule action or web ACL default action
2288
2287
  # `BlockAction` setting, you reference the response body using this
@@ -2294,8 +2293,8 @@ module Aws::WAFV2
2294
2293
  # not allowed.
2295
2294
  #
2296
2295
  # For information about the limits on count and size for custom
2297
- # request and response settings, see [AWS WAF quotas][1] in the [AWS
2298
- # WAF Developer Guide][2].
2296
+ # request and response settings, see [WAF quotas][1] in the [WAF
2297
+ # Developer Guide][2].
2299
2298
  #
2300
2299
  #
2301
2300
  #
@@ -2336,8 +2335,8 @@ module Aws::WAFV2
2336
2335
  # must specify JSON content in the `ContentType` setting.
2337
2336
  #
2338
2337
  # For information about the limits on count and size for custom
2339
- # request and response settings, see [AWS WAF quotas][1] in the [AWS
2340
- # WAF Developer Guide][2].
2338
+ # request and response settings, see [WAF quotas][1] in the [WAF
2339
+ # Developer Guide][2].
2341
2340
  #
2342
2341
  #
2343
2342
  #
@@ -2354,8 +2353,8 @@ module Aws::WAFV2
2354
2353
  include Aws::Structure
2355
2354
  end
2356
2355
 
2357
- # In a WebACL, this is the action that you want AWS WAF to perform when
2358
- # a web request doesn't match any of the rules in the `WebACL`. The
2356
+ # In a WebACL, this is the action that you want WAF to perform when a
2357
+ # web request doesn't match any of the rules in the `WebACL`. The
2359
2358
  # default action must be a terminating action, so you can't use count.
2360
2359
  #
2361
2360
  # @note When making an API call, you may pass DefaultAction
@@ -2387,11 +2386,11 @@ module Aws::WAFV2
2387
2386
  # }
2388
2387
  #
2389
2388
  # @!attribute [rw] block
2390
- # Specifies that AWS WAF should block requests by default.
2389
+ # Specifies that WAF should block requests by default.
2391
2390
  # @return [Types::BlockAction]
2392
2391
  #
2393
2392
  # @!attribute [rw] allow
2394
- # Specifies that AWS WAF should allow requests by default.
2393
+ # Specifies that WAF should allow requests by default.
2395
2394
  # @return [Types::AllowAction]
2396
2395
  #
2397
2396
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/DefaultAction AWS API Documentation
@@ -2416,14 +2415,14 @@ module Aws::WAFV2
2416
2415
  # @return [String]
2417
2416
  #
2418
2417
  # @!attribute [rw] web_acl_lock_token
2419
- # A token used for optimistic locking. AWS WAF returns a token to your
2420
- # get and list requests, to mark the state of the entity at the time
2421
- # of the request. To make changes to the entity associated with the
2418
+ # A token used for optimistic locking. WAF returns a token to your get
2419
+ # and list requests, to mark the state of the entity at the time of
2420
+ # the request. To make changes to the entity associated with the
2422
2421
  # token, you provide the token to operations like update and delete.
2423
- # AWS WAF uses the token to ensure that no changes have been made to
2424
- # the entity since you last retrieved it. If a change has been made,
2425
- # the update fails with a `WAFOptimisticLockException`. If this
2426
- # happens, perform another get, and use the new token returned by that
2422
+ # WAF uses the token to ensure that no changes have been made to the
2423
+ # entity since you last retrieved it. If a change has been made, the
2424
+ # update fails with a `WAFOptimisticLockException`. If this happens,
2425
+ # perform another get, and use the new token returned by that
2427
2426
  # operation.
2428
2427
  # @return [String]
2429
2428
  #
@@ -2437,14 +2436,14 @@ module Aws::WAFV2
2437
2436
  end
2438
2437
 
2439
2438
  # @!attribute [rw] next_web_acl_lock_token
2440
- # A token used for optimistic locking. AWS WAF returns a token to your
2441
- # get and list requests, to mark the state of the entity at the time
2442
- # of the request. To make changes to the entity associated with the
2439
+ # A token used for optimistic locking. WAF returns a token to your get
2440
+ # and list requests, to mark the state of the entity at the time of
2441
+ # the request. To make changes to the entity associated with the
2443
2442
  # token, you provide the token to operations like update and delete.
2444
- # AWS WAF uses the token to ensure that no changes have been made to
2445
- # the entity since you last retrieved it. If a change has been made,
2446
- # the update fails with a `WAFOptimisticLockException`. If this
2447
- # happens, perform another get, and use the new token returned by that
2443
+ # WAF uses the token to ensure that no changes have been made to the
2444
+ # entity since you last retrieved it. If a change has been made, the
2445
+ # update fails with a `WAFOptimisticLockException`. If this happens,
2446
+ # perform another get, and use the new token returned by that
2448
2447
  # operation.
2449
2448
  # @return [String]
2450
2449
  #
@@ -2472,10 +2471,10 @@ module Aws::WAFV2
2472
2471
  # @return [String]
2473
2472
  #
2474
2473
  # @!attribute [rw] scope
2475
- # Specifies whether this is for an AWS CloudFront distribution or for
2476
- # a regional application. A regional application can be an Application
2477
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
2478
- # API.
2474
+ # Specifies whether this is for an Amazon CloudFront distribution or
2475
+ # for a regional application. A regional application can be an
2476
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
2477
+ # an AppSync GraphQL API.
2479
2478
  #
2480
2479
  # To work with CloudFront, you must also specify the Region US East
2481
2480
  # (N. Virginia) as follows:
@@ -2493,14 +2492,14 @@ module Aws::WAFV2
2493
2492
  # @return [String]
2494
2493
  #
2495
2494
  # @!attribute [rw] lock_token
2496
- # A token used for optimistic locking. AWS WAF returns a token to your
2497
- # get and list requests, to mark the state of the entity at the time
2498
- # of the request. To make changes to the entity associated with the
2495
+ # A token used for optimistic locking. WAF returns a token to your get
2496
+ # and list requests, to mark the state of the entity at the time of
2497
+ # the request. To make changes to the entity associated with the
2499
2498
  # token, you provide the token to operations like update and delete.
2500
- # AWS WAF uses the token to ensure that no changes have been made to
2501
- # the entity since you last retrieved it. If a change has been made,
2502
- # the update fails with a `WAFOptimisticLockException`. If this
2503
- # happens, perform another get, and use the new token returned by that
2499
+ # WAF uses the token to ensure that no changes have been made to the
2500
+ # entity since you last retrieved it. If a change has been made, the
2501
+ # update fails with a `WAFOptimisticLockException`. If this happens,
2502
+ # perform another get, and use the new token returned by that
2504
2503
  # operation.
2505
2504
  # @return [String]
2506
2505
  #
@@ -2585,10 +2584,10 @@ module Aws::WAFV2
2585
2584
  # @return [String]
2586
2585
  #
2587
2586
  # @!attribute [rw] scope
2588
- # Specifies whether this is for an AWS CloudFront distribution or for
2589
- # a regional application. A regional application can be an Application
2590
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
2591
- # API.
2587
+ # Specifies whether this is for an Amazon CloudFront distribution or
2588
+ # for a regional application. A regional application can be an
2589
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
2590
+ # an AppSync GraphQL API.
2592
2591
  #
2593
2592
  # To work with CloudFront, you must also specify the Region US East
2594
2593
  # (N. Virginia) as follows:
@@ -2606,14 +2605,14 @@ module Aws::WAFV2
2606
2605
  # @return [String]
2607
2606
  #
2608
2607
  # @!attribute [rw] lock_token
2609
- # A token used for optimistic locking. AWS WAF returns a token to your
2610
- # get and list requests, to mark the state of the entity at the time
2611
- # of the request. To make changes to the entity associated with the
2608
+ # A token used for optimistic locking. WAF returns a token to your get
2609
+ # and list requests, to mark the state of the entity at the time of
2610
+ # the request. To make changes to the entity associated with the
2612
2611
  # token, you provide the token to operations like update and delete.
2613
- # AWS WAF uses the token to ensure that no changes have been made to
2614
- # the entity since you last retrieved it. If a change has been made,
2615
- # the update fails with a `WAFOptimisticLockException`. If this
2616
- # happens, perform another get, and use the new token returned by that
2612
+ # WAF uses the token to ensure that no changes have been made to the
2613
+ # entity since you last retrieved it. If a change has been made, the
2614
+ # update fails with a `WAFOptimisticLockException`. If this happens,
2615
+ # perform another get, and use the new token returned by that
2617
2616
  # operation.
2618
2617
  # @return [String]
2619
2618
  #
@@ -2648,10 +2647,10 @@ module Aws::WAFV2
2648
2647
  # @return [String]
2649
2648
  #
2650
2649
  # @!attribute [rw] scope
2651
- # Specifies whether this is for an AWS CloudFront distribution or for
2652
- # a regional application. A regional application can be an Application
2653
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
2654
- # API.
2650
+ # Specifies whether this is for an Amazon CloudFront distribution or
2651
+ # for a regional application. A regional application can be an
2652
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
2653
+ # an AppSync GraphQL API.
2655
2654
  #
2656
2655
  # To work with CloudFront, you must also specify the Region US East
2657
2656
  # (N. Virginia) as follows:
@@ -2669,14 +2668,14 @@ module Aws::WAFV2
2669
2668
  # @return [String]
2670
2669
  #
2671
2670
  # @!attribute [rw] lock_token
2672
- # A token used for optimistic locking. AWS WAF returns a token to your
2673
- # get and list requests, to mark the state of the entity at the time
2674
- # of the request. To make changes to the entity associated with the
2671
+ # A token used for optimistic locking. WAF returns a token to your get
2672
+ # and list requests, to mark the state of the entity at the time of
2673
+ # the request. To make changes to the entity associated with the
2675
2674
  # token, you provide the token to operations like update and delete.
2676
- # AWS WAF uses the token to ensure that no changes have been made to
2677
- # the entity since you last retrieved it. If a change has been made,
2678
- # the update fails with a `WAFOptimisticLockException`. If this
2679
- # happens, perform another get, and use the new token returned by that
2675
+ # WAF uses the token to ensure that no changes have been made to the
2676
+ # entity since you last retrieved it. If a change has been made, the
2677
+ # update fails with a `WAFOptimisticLockException`. If this happens,
2678
+ # perform another get, and use the new token returned by that
2680
2679
  # operation.
2681
2680
  # @return [String]
2682
2681
  #
@@ -2706,15 +2705,15 @@ module Aws::WAFV2
2706
2705
  # }
2707
2706
  #
2708
2707
  # @!attribute [rw] name
2709
- # The name of the Web ACL. You cannot change the name of a Web ACL
2708
+ # The name of the web ACL. You cannot change the name of a web ACL
2710
2709
  # after you create it.
2711
2710
  # @return [String]
2712
2711
  #
2713
2712
  # @!attribute [rw] scope
2714
- # Specifies whether this is for an AWS CloudFront distribution or for
2715
- # a regional application. A regional application can be an Application
2716
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
2717
- # API.
2713
+ # Specifies whether this is for an Amazon CloudFront distribution or
2714
+ # for a regional application. A regional application can be an
2715
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
2716
+ # an AppSync GraphQL API.
2718
2717
  #
2719
2718
  # To work with CloudFront, you must also specify the Region US East
2720
2719
  # (N. Virginia) as follows:
@@ -2726,20 +2725,20 @@ module Aws::WAFV2
2726
2725
  # @return [String]
2727
2726
  #
2728
2727
  # @!attribute [rw] id
2729
- # The unique identifier for the Web ACL. This ID is returned in the
2728
+ # The unique identifier for the web ACL. This ID is returned in the
2730
2729
  # responses to create and list commands. You provide it to operations
2731
2730
  # like update and delete.
2732
2731
  # @return [String]
2733
2732
  #
2734
2733
  # @!attribute [rw] lock_token
2735
- # A token used for optimistic locking. AWS WAF returns a token to your
2736
- # get and list requests, to mark the state of the entity at the time
2737
- # of the request. To make changes to the entity associated with the
2734
+ # A token used for optimistic locking. WAF returns a token to your get
2735
+ # and list requests, to mark the state of the entity at the time of
2736
+ # the request. To make changes to the entity associated with the
2738
2737
  # token, you provide the token to operations like update and delete.
2739
- # AWS WAF uses the token to ensure that no changes have been made to
2740
- # the entity since you last retrieved it. If a change has been made,
2741
- # the update fails with a `WAFOptimisticLockException`. If this
2742
- # happens, perform another get, and use the new token returned by that
2738
+ # WAF uses the token to ensure that no changes have been made to the
2739
+ # entity since you last retrieved it. If a change has been made, the
2740
+ # update fails with a `WAFOptimisticLockException`. If this happens,
2741
+ # perform another get, and use the new token returned by that
2743
2742
  # operation.
2744
2743
  # @return [String]
2745
2744
  #
@@ -2778,10 +2777,10 @@ module Aws::WAFV2
2778
2777
  # @return [String]
2779
2778
  #
2780
2779
  # @!attribute [rw] scope
2781
- # Specifies whether this is for an AWS CloudFront distribution or for
2782
- # a regional application. A regional application can be an Application
2783
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
2784
- # API.
2780
+ # Specifies whether this is for an Amazon CloudFront distribution or
2781
+ # for a regional application. A regional application can be an
2782
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
2783
+ # an AppSync GraphQL API.
2785
2784
  #
2786
2785
  # To work with CloudFront, you must also specify the Region US East
2787
2786
  # (N. Virginia) as follows:
@@ -2803,10 +2802,10 @@ module Aws::WAFV2
2803
2802
  end
2804
2803
 
2805
2804
  # @!attribute [rw] capacity
2806
- # The web ACL capacity units (WCUs) required for this rule group. AWS
2807
- # WAF uses web ACL capacity units (WCU) to calculate and control the
2805
+ # The web ACL capacity units (WCUs) required for this rule group. WAF
2806
+ # uses web ACL capacity units (WCU) to calculate and control the
2808
2807
  # operating resources that are used to run your rules, rule groups,
2809
- # and web ACLs. AWS WAF calculates capacity differently for each rule
2808
+ # and web ACLs. WAF calculates capacity differently for each rule
2810
2809
  # type, to reflect each rule's relative cost. Rule group capacity is
2811
2810
  # fixed at creation, so users can plan their web ACL WCU usage when
2812
2811
  # they use a rule group. The WCU limit for web ACLs is 1,500.
@@ -2824,18 +2823,18 @@ module Aws::WAFV2
2824
2823
  #
2825
2824
  # `awswaf:managed:<vendor>:<rule group name>`\:
2826
2825
  #
2827
- # * When a rule with a label matches a web request, AWS WAF adds the
2828
- # fully qualified label to the request. A fully qualified label is
2829
- # made up of the label namespace from the rule group or web ACL
2830
- # where the rule is defined and the label from the rule, separated
2831
- # by a colon:
2826
+ # * When a rule with a label matches a web request, WAF adds the fully
2827
+ # qualified label to the request. A fully qualified label is made up
2828
+ # of the label namespace from the rule group or web ACL where the
2829
+ # rule is defined and the label from the rule, separated by a colon:
2832
2830
  #
2833
2831
  # `<label namespace>:<label from rule>`
2834
2832
  # @return [String]
2835
2833
  #
2836
2834
  # @!attribute [rw] available_labels
2837
2835
  # The labels that one or more rules in this rule group add to matching
2838
- # web ACLs. These labels are defined in the `RuleLabels` for a Rule.
2836
+ # web requests. These labels are defined in the `RuleLabels` for a
2837
+ # Rule.
2839
2838
  # @return [Array<Types::LabelSummary>]
2840
2839
  #
2841
2840
  # @!attribute [rw] consumed_labels
@@ -2874,7 +2873,7 @@ module Aws::WAFV2
2874
2873
  # `arn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
2875
2874
  # `
2876
2875
  #
2877
- # * For an API Gateway REST API:
2876
+ # * For an Amazon API Gateway REST API:
2878
2877
  # `arn:aws:apigateway:region::/restapis/api-id/stages/stage-name `
2879
2878
  #
2880
2879
  # * For an AppSync GraphQL API:
@@ -2917,12 +2916,12 @@ module Aws::WAFV2
2917
2916
  include Aws::Structure
2918
2917
  end
2919
2918
 
2920
- # The part of a web request that you want AWS WAF to inspect. Include
2921
- # the single `FieldToMatch` type that you want to inspect, with
2922
- # additional specifications as needed, according to the type. You
2923
- # specify a single request component in `FieldToMatch` for each rule
2924
- # statement that requires it. To inspect more than one component of a
2925
- # web request, create a separate rule statement for each component.
2919
+ # The part of a web request that you want WAF to inspect. Include the
2920
+ # single `FieldToMatch` type that you want to inspect, with additional
2921
+ # specifications as needed, according to the type. You specify a single
2922
+ # request component in `FieldToMatch` for each rule statement that
2923
+ # requires it. To inspect more than one component of a web request,
2924
+ # create a separate rule statement for each component.
2926
2925
  #
2927
2926
  # @note When making an API call, you may pass FieldToMatch
2928
2927
  # data as a hash:
@@ -2968,8 +2967,8 @@ module Aws::WAFV2
2968
2967
  # argument to inspect, such as *UserName* or *SalesRegion*. The name
2969
2968
  # can be up to 30 characters long and isn't case sensitive.
2970
2969
  #
2971
- # This is used only to indicate the web request component for AWS WAF
2972
- # to inspect, in the FieldToMatch specification.
2970
+ # This is used only to indicate the web request component for WAF to
2971
+ # inspect, in the FieldToMatch specification.
2973
2972
  #
2974
2973
  # Example JSON: `"SingleQueryArgument": \{ "Name": "myArgument" \}`
2975
2974
  # @return [Types::SingleQueryArgument]
@@ -2995,12 +2994,12 @@ module Aws::WAFV2
2995
2994
  # server as the HTTP request body, such as data from a form.
2996
2995
  #
2997
2996
  # Note that only the first 8 KB (8192 bytes) of the request body are
2998
- # forwarded to AWS WAF for inspection by the underlying host service.
2999
- # If you don't need to inspect more than 8 KB, you can guarantee that
2997
+ # forwarded to WAF for inspection by the underlying host service. If
2998
+ # you don't need to inspect more than 8 KB, you can guarantee that
3000
2999
  # you don't allow additional bytes in by combining a statement that
3001
3000
  # inspects the body of the web request, such as ByteMatchStatement or
3002
3001
  # RegexPatternSetReferenceStatement, with a SizeConstraintStatement
3003
- # that enforces an 8 KB size limit on the body of the request. AWS WAF
3002
+ # that enforces an 8 KB size limit on the body of the request. WAF
3004
3003
  # doesn't support inspecting the entire contents of web requests
3005
3004
  # whose bodies exceed the 8 KB limit.
3006
3005
  # @return [Types::Body]
@@ -3017,12 +3016,12 @@ module Aws::WAFV2
3017
3016
  # server as the HTTP request body, such as data from a form.
3018
3017
  #
3019
3018
  # Note that only the first 8 KB (8192 bytes) of the request body are
3020
- # forwarded to AWS WAF for inspection by the underlying host service.
3021
- # If you don't need to inspect more than 8 KB, you can guarantee that
3019
+ # forwarded to WAF for inspection by the underlying host service. If
3020
+ # you don't need to inspect more than 8 KB, you can guarantee that
3022
3021
  # you don't allow additional bytes in by combining a statement that
3023
3022
  # inspects the body of the web request, such as ByteMatchStatement or
3024
3023
  # RegexPatternSetReferenceStatement, with a SizeConstraintStatement
3025
- # that enforces an 8 KB size limit on the body of the request. AWS WAF
3024
+ # that enforces an 8 KB size limit on the body of the request. WAF
3026
3025
  # doesn't support inspecting the entire contents of web requests
3027
3026
  # whose bodies exceed the 8 KB limit.
3028
3027
  # @return [Types::JsonBody]
@@ -3087,7 +3086,7 @@ module Aws::WAFV2
3087
3086
  include Aws::Structure
3088
3087
  end
3089
3088
 
3090
- # A rule group that's defined for an AWS Firewall Manager WAF policy.
3089
+ # A rule group that's defined for an Firewall Manager WAF policy.
3091
3090
  #
3092
3091
  # @!attribute [rw] name
3093
3092
  # The name of the rule group. You cannot change the name of a rule
@@ -3096,15 +3095,15 @@ module Aws::WAFV2
3096
3095
  #
3097
3096
  # @!attribute [rw] priority
3098
3097
  # If you define more than one rule group in the first or last Firewall
3099
- # Manager rule groups, AWS WAF evaluates each request against the rule
3098
+ # Manager rule groups, WAF evaluates each request against the rule
3100
3099
  # groups in order, starting from the lowest priority setting. The
3101
3100
  # priorities don't need to be consecutive, but they must all be
3102
3101
  # different.
3103
3102
  # @return [Integer]
3104
3103
  #
3105
3104
  # @!attribute [rw] firewall_manager_statement
3106
- # The processing guidance for an AWS Firewall Manager rule. This is
3107
- # like a regular rule Statement, but it can only contain a rule group
3105
+ # The processing guidance for an Firewall Manager rule. This is like a
3106
+ # regular rule Statement, but it can only contain a rule group
3108
3107
  # reference.
3109
3108
  # @return [Types::FirewallManagerStatement]
3110
3109
  #
@@ -3144,8 +3143,8 @@ module Aws::WAFV2
3144
3143
  include Aws::Structure
3145
3144
  end
3146
3145
 
3147
- # The processing guidance for an AWS Firewall Manager rule. This is like
3148
- # a regular rule Statement, but it can only contain a rule group
3146
+ # The processing guidance for an Firewall Manager rule. This is like a
3147
+ # regular rule Statement, but it can only contain a rule group
3149
3148
  # reference.
3150
3149
  #
3151
3150
  # @!attribute [rw] managed_rule_group_statement
@@ -3154,7 +3153,7 @@ module Aws::WAFV2
3154
3153
  # rule group in this statement. You can retrieve the required names by
3155
3154
  # calling ListAvailableManagedRuleGroups.
3156
3155
  #
3157
- # You can't nest a `ManagedRuleGroupStatement`, for example for use
3156
+ # You cannot nest a `ManagedRuleGroupStatement`, for example for use
3158
3157
  # inside a `NotStatement` or `OrStatement`. It can only be referenced
3159
3158
  # as a top-level statement within a rule.
3160
3159
  # @return [Types::ManagedRuleGroupStatement]
@@ -3183,8 +3182,8 @@ module Aws::WAFV2
3183
3182
  # web request origin. Commonly, this is the X-Forwarded-For (XFF)
3184
3183
  # header, but you can specify any header name.
3185
3184
  #
3186
- # <note markdown="1"> If the specified header isn't present in the request, AWS WAF
3187
- # doesn't apply the rule to the web request at all.
3185
+ # <note markdown="1"> If the specified header isn't present in the request, WAF doesn't
3186
+ # apply the rule to the web request at all.
3188
3187
  #
3189
3188
  # </note>
3190
3189
  #
@@ -3192,8 +3191,8 @@ module Aws::WAFV2
3192
3191
  # RateBasedStatement. For IPSetReferenceStatement, use
3193
3192
  # IPSetForwardedIPConfig instead.
3194
3193
  #
3195
- # AWS WAF only evaluates the first IP address found in the specified
3196
- # HTTP header.
3194
+ # WAF only evaluates the first IP address found in the specified HTTP
3195
+ # header.
3197
3196
  #
3198
3197
  # @note When making an API call, you may pass ForwardedIPConfig
3199
3198
  # data as a hash:
@@ -3208,8 +3207,8 @@ module Aws::WAFV2
3208
3207
  # to use the X-Forwarded-For (XFF) header, set this to
3209
3208
  # `X-Forwarded-For`.
3210
3209
  #
3211
- # <note markdown="1"> If the specified header isn't present in the request, AWS WAF
3212
- # doesn't apply the rule to the web request at all.
3210
+ # <note markdown="1"> If the specified header isn't present in the request, WAF doesn't
3211
+ # apply the rule to the web request at all.
3213
3212
  #
3214
3213
  # </note>
3215
3214
  # @return [String]
@@ -3218,15 +3217,15 @@ module Aws::WAFV2
3218
3217
  # The match status to assign to the web request if the request
3219
3218
  # doesn't have a valid IP address in the specified position.
3220
3219
  #
3221
- # <note markdown="1"> If the specified header isn't present in the request, AWS WAF
3222
- # doesn't apply the rule to the web request at all.
3220
+ # <note markdown="1"> If the specified header isn't present in the request, WAF doesn't
3221
+ # apply the rule to the web request at all.
3223
3222
  #
3224
3223
  # </note>
3225
3224
  #
3226
3225
  # You can specify the following fallback behaviors:
3227
3226
  #
3228
3227
  # * `MATCH` - Treat the web request as matching the rule statement.
3229
- # AWS WAF applies the rule action to the request.
3228
+ # WAF applies the rule action to the request.
3230
3229
  #
3231
3230
  # * `NO_MATCH` - Treat the web request as not matching the rule
3232
3231
  # statement.
@@ -3267,8 +3266,8 @@ module Aws::WAFV2
3267
3266
  # web request origin. Commonly, this is the X-Forwarded-For (XFF)
3268
3267
  # header, but you can specify any header name.
3269
3268
  #
3270
- # <note markdown="1"> If the specified header isn't present in the request, AWS WAF
3271
- # doesn't apply the rule to the web request at all.
3269
+ # <note markdown="1"> If the specified header isn't present in the request, WAF doesn't
3270
+ # apply the rule to the web request at all.
3272
3271
  #
3273
3272
  # </note>
3274
3273
  # @return [Types::ForwardedIPConfig]
@@ -3297,10 +3296,10 @@ module Aws::WAFV2
3297
3296
  # @return [String]
3298
3297
  #
3299
3298
  # @!attribute [rw] scope
3300
- # Specifies whether this is for an AWS CloudFront distribution or for
3301
- # a regional application. A regional application can be an Application
3302
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
3303
- # API.
3299
+ # Specifies whether this is for an Amazon CloudFront distribution or
3300
+ # for a regional application. A regional application can be an
3301
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
3302
+ # an AppSync GraphQL API.
3304
3303
  #
3305
3304
  # To work with CloudFront, you must also specify the Region US East
3306
3305
  # (N. Virginia) as follows:
@@ -3331,14 +3330,14 @@ module Aws::WAFV2
3331
3330
  # @return [Types::IPSet]
3332
3331
  #
3333
3332
  # @!attribute [rw] lock_token
3334
- # A token used for optimistic locking. AWS WAF returns a token to your
3335
- # get and list requests, to mark the state of the entity at the time
3336
- # of the request. To make changes to the entity associated with the
3333
+ # A token used for optimistic locking. WAF returns a token to your get
3334
+ # and list requests, to mark the state of the entity at the time of
3335
+ # the request. To make changes to the entity associated with the
3337
3336
  # token, you provide the token to operations like update and delete.
3338
- # AWS WAF uses the token to ensure that no changes have been made to
3339
- # the entity since you last retrieved it. If a change has been made,
3340
- # the update fails with a `WAFOptimisticLockException`. If this
3341
- # happens, perform another get, and use the new token returned by that
3337
+ # WAF uses the token to ensure that no changes have been made to the
3338
+ # entity since you last retrieved it. If a change has been made, the
3339
+ # update fails with a `WAFOptimisticLockException`. If this happens,
3340
+ # perform another get, and use the new token returned by that
3342
3341
  # operation.
3343
3342
  # @return [String]
3344
3343
  #
@@ -3426,10 +3425,10 @@ module Aws::WAFV2
3426
3425
  # }
3427
3426
  #
3428
3427
  # @!attribute [rw] scope
3429
- # Specifies whether this is for an AWS CloudFront distribution or for
3430
- # a regional application. A regional application can be an Application
3431
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
3432
- # API.
3428
+ # Specifies whether this is for an Amazon CloudFront distribution or
3429
+ # for a regional application. A regional application can be an
3430
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
3431
+ # an AppSync GraphQL API.
3433
3432
  #
3434
3433
  # To work with CloudFront, you must also specify the Region US East
3435
3434
  # (N. Virginia) as follows:
@@ -3441,12 +3440,12 @@ module Aws::WAFV2
3441
3440
  # @return [String]
3442
3441
  #
3443
3442
  # @!attribute [rw] web_acl_name
3444
- # The name of the Web ACL. You cannot change the name of a Web ACL
3443
+ # The name of the web ACL. You cannot change the name of a web ACL
3445
3444
  # after you create it.
3446
3445
  # @return [String]
3447
3446
  #
3448
3447
  # @!attribute [rw] web_acl_id
3449
- # The unique identifier for the Web ACL. This ID is returned in the
3448
+ # The unique identifier for the web ACL. This ID is returned in the
3450
3449
  # responses to create and list commands. You provide it to operations
3451
3450
  # like update and delete.
3452
3451
  # @return [String]
@@ -3498,10 +3497,10 @@ module Aws::WAFV2
3498
3497
  # @return [String]
3499
3498
  #
3500
3499
  # @!attribute [rw] scope
3501
- # Specifies whether this is for an AWS CloudFront distribution or for
3502
- # a regional application. A regional application can be an Application
3503
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
3504
- # API.
3500
+ # Specifies whether this is for an Amazon CloudFront distribution or
3501
+ # for a regional application. A regional application can be an
3502
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
3503
+ # an AppSync GraphQL API.
3505
3504
  #
3506
3505
  # To work with CloudFront, you must also specify the Region US East
3507
3506
  # (N. Virginia) as follows:
@@ -3532,14 +3531,14 @@ module Aws::WAFV2
3532
3531
  # @return [Types::RegexPatternSet]
3533
3532
  #
3534
3533
  # @!attribute [rw] lock_token
3535
- # A token used for optimistic locking. AWS WAF returns a token to your
3536
- # get and list requests, to mark the state of the entity at the time
3537
- # of the request. To make changes to the entity associated with the
3534
+ # A token used for optimistic locking. WAF returns a token to your get
3535
+ # and list requests, to mark the state of the entity at the time of
3536
+ # the request. To make changes to the entity associated with the
3538
3537
  # token, you provide the token to operations like update and delete.
3539
- # AWS WAF uses the token to ensure that no changes have been made to
3540
- # the entity since you last retrieved it. If a change has been made,
3541
- # the update fails with a `WAFOptimisticLockException`. If this
3542
- # happens, perform another get, and use the new token returned by that
3538
+ # WAF uses the token to ensure that no changes have been made to the
3539
+ # entity since you last retrieved it. If a change has been made, the
3540
+ # update fails with a `WAFOptimisticLockException`. If this happens,
3541
+ # perform another get, and use the new token returned by that
3543
3542
  # operation.
3544
3543
  # @return [String]
3545
3544
  #
@@ -3556,9 +3555,10 @@ module Aws::WAFV2
3556
3555
  # data as a hash:
3557
3556
  #
3558
3557
  # {
3559
- # name: "EntityName", # required
3560
- # scope: "CLOUDFRONT", # required, accepts CLOUDFRONT, REGIONAL
3561
- # id: "EntityId", # required
3558
+ # name: "EntityName",
3559
+ # scope: "CLOUDFRONT", # accepts CLOUDFRONT, REGIONAL
3560
+ # id: "EntityId",
3561
+ # arn: "ResourceArn",
3562
3562
  # }
3563
3563
  #
3564
3564
  # @!attribute [rw] name
@@ -3567,10 +3567,10 @@ module Aws::WAFV2
3567
3567
  # @return [String]
3568
3568
  #
3569
3569
  # @!attribute [rw] scope
3570
- # Specifies whether this is for an AWS CloudFront distribution or for
3571
- # a regional application. A regional application can be an Application
3572
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
3573
- # API.
3570
+ # Specifies whether this is for an Amazon CloudFront distribution or
3571
+ # for a regional application. A regional application can be an
3572
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
3573
+ # an AppSync GraphQL API.
3574
3574
  #
3575
3575
  # To work with CloudFront, you must also specify the Region US East
3576
3576
  # (N. Virginia) as follows:
@@ -3587,12 +3587,17 @@ module Aws::WAFV2
3587
3587
  # like update and delete.
3588
3588
  # @return [String]
3589
3589
  #
3590
+ # @!attribute [rw] arn
3591
+ # The Amazon Resource Name (ARN) of the entity.
3592
+ # @return [String]
3593
+ #
3590
3594
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/GetRuleGroupRequest AWS API Documentation
3591
3595
  #
3592
3596
  class GetRuleGroupRequest < Struct.new(
3593
3597
  :name,
3594
3598
  :scope,
3595
- :id)
3599
+ :id,
3600
+ :arn)
3596
3601
  SENSITIVE = []
3597
3602
  include Aws::Structure
3598
3603
  end
@@ -3601,14 +3606,14 @@ module Aws::WAFV2
3601
3606
  # @return [Types::RuleGroup]
3602
3607
  #
3603
3608
  # @!attribute [rw] lock_token
3604
- # A token used for optimistic locking. AWS WAF returns a token to your
3605
- # get and list requests, to mark the state of the entity at the time
3606
- # of the request. To make changes to the entity associated with the
3609
+ # A token used for optimistic locking. WAF returns a token to your get
3610
+ # and list requests, to mark the state of the entity at the time of
3611
+ # the request. To make changes to the entity associated with the
3607
3612
  # token, you provide the token to operations like update and delete.
3608
- # AWS WAF uses the token to ensure that no changes have been made to
3609
- # the entity since you last retrieved it. If a change has been made,
3610
- # the update fails with a `WAFOptimisticLockException`. If this
3611
- # happens, perform another get, and use the new token returned by that
3613
+ # WAF uses the token to ensure that no changes have been made to the
3614
+ # entity since you last retrieved it. If a change has been made, the
3615
+ # update fails with a `WAFOptimisticLockException`. If this happens,
3616
+ # perform another get, and use the new token returned by that
3612
3617
  # operation.
3613
3618
  # @return [String]
3614
3619
  #
@@ -3646,10 +3651,10 @@ module Aws::WAFV2
3646
3651
  # @return [String]
3647
3652
  #
3648
3653
  # @!attribute [rw] scope
3649
- # Specifies whether this is for an AWS CloudFront distribution or for
3650
- # a regional application. A regional application can be an Application
3651
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
3652
- # API.
3654
+ # Specifies whether this is for an Amazon CloudFront distribution or
3655
+ # for a regional application. A regional application can be an
3656
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
3657
+ # an AppSync GraphQL API.
3653
3658
  #
3654
3659
  # To work with CloudFront, you must also specify the Region US East
3655
3660
  # (N. Virginia) as follows:
@@ -3667,15 +3672,15 @@ module Aws::WAFV2
3667
3672
  # format. UTC format includes the special designator, `Z`. For
3668
3673
  # example, `"2016-09-27T14:50Z"`. You can specify any time range in
3669
3674
  # the previous three hours. If you specify a start time that's
3670
- # earlier than three hours ago, AWS WAF sets it to three hours ago.
3675
+ # earlier than three hours ago, WAF sets it to three hours ago.
3671
3676
  # @return [Types::TimeWindow]
3672
3677
  #
3673
3678
  # @!attribute [rw] max_items
3674
- # The number of requests that you want AWS WAF to return from among
3675
- # the first 5,000 requests that your AWS resource received during the
3676
- # time range. If your resource received fewer requests than the value
3677
- # of `MaxItems`, `GetSampledRequests` returns information about all of
3678
- # them.
3679
+ # The number of requests that you want WAF to return from among the
3680
+ # first 5,000 requests that your Amazon Web Services resource received
3681
+ # during the time range. If your resource received fewer requests than
3682
+ # the value of `MaxItems`, `GetSampledRequests` returns information
3683
+ # about all of them.
3679
3684
  # @return [Integer]
3680
3685
  #
3681
3686
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/GetSampledRequestsRequest AWS API Documentation
@@ -3698,17 +3703,17 @@ module Aws::WAFV2
3698
3703
  # @!attribute [rw] population_size
3699
3704
  # The total number of requests from which `GetSampledRequests` got a
3700
3705
  # sample of `MaxItems` requests. If `PopulationSize` is less than
3701
- # `MaxItems`, the sample includes every request that your AWS resource
3702
- # received during the specified time range.
3706
+ # `MaxItems`, the sample includes every request that your Amazon Web
3707
+ # Services resource received during the specified time range.
3703
3708
  # @return [Integer]
3704
3709
  #
3705
3710
  # @!attribute [rw] time_window
3706
3711
  # Usually, `TimeWindow` is the time range that you specified in the
3707
- # `GetSampledRequests` request. However, if your AWS resource received
3708
- # more than 5,000 requests during the time range that you specified in
3709
- # the request, `GetSampledRequests` returns the time range for the
3710
- # first 5,000 requests. Times are in Coordinated Universal Time (UTC)
3711
- # format.
3712
+ # `GetSampledRequests` request. However, if your Amazon Web Services
3713
+ # resource received more than 5,000 requests during the time range
3714
+ # that you specified in the request, `GetSampledRequests` returns the
3715
+ # time range for the first 5,000 requests. Times are in Coordinated
3716
+ # Universal Time (UTC) format.
3712
3717
  # @return [Types::TimeWindow]
3713
3718
  #
3714
3719
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/GetSampledRequestsResponse AWS API Documentation
@@ -3741,8 +3746,8 @@ module Aws::WAFV2
3741
3746
  end
3742
3747
 
3743
3748
  # @!attribute [rw] web_acl
3744
- # The Web ACL that is associated with the resource. If there is no
3745
- # associated resource, AWS WAF returns a null Web ACL.
3749
+ # The web ACL that is associated with the resource. If there is no
3750
+ # associated resource, WAF returns a null web ACL.
3746
3751
  # @return [Types::WebACL]
3747
3752
  #
3748
3753
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/GetWebACLForResourceResponse AWS API Documentation
@@ -3763,15 +3768,15 @@ module Aws::WAFV2
3763
3768
  # }
3764
3769
  #
3765
3770
  # @!attribute [rw] name
3766
- # The name of the Web ACL. You cannot change the name of a Web ACL
3771
+ # The name of the web ACL. You cannot change the name of a web ACL
3767
3772
  # after you create it.
3768
3773
  # @return [String]
3769
3774
  #
3770
3775
  # @!attribute [rw] scope
3771
- # Specifies whether this is for an AWS CloudFront distribution or for
3772
- # a regional application. A regional application can be an Application
3773
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
3774
- # API.
3776
+ # Specifies whether this is for an Amazon CloudFront distribution or
3777
+ # for a regional application. A regional application can be an
3778
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
3779
+ # an AppSync GraphQL API.
3775
3780
  #
3776
3781
  # To work with CloudFront, you must also specify the Region US East
3777
3782
  # (N. Virginia) as follows:
@@ -3783,7 +3788,7 @@ module Aws::WAFV2
3783
3788
  # @return [String]
3784
3789
  #
3785
3790
  # @!attribute [rw] id
3786
- # The unique identifier for the Web ACL. This ID is returned in the
3791
+ # The unique identifier for the web ACL. This ID is returned in the
3787
3792
  # responses to create and list commands. You provide it to operations
3788
3793
  # like update and delete.
3789
3794
  # @return [String]
@@ -3799,19 +3804,19 @@ module Aws::WAFV2
3799
3804
  end
3800
3805
 
3801
3806
  # @!attribute [rw] web_acl
3802
- # The Web ACL specification. You can modify the settings in this Web
3803
- # ACL and use it to update this Web ACL or create a new one.
3807
+ # The web ACL specification. You can modify the settings in this web
3808
+ # ACL and use it to update this web ACL or create a new one.
3804
3809
  # @return [Types::WebACL]
3805
3810
  #
3806
3811
  # @!attribute [rw] lock_token
3807
- # A token used for optimistic locking. AWS WAF returns a token to your
3808
- # get and list requests, to mark the state of the entity at the time
3809
- # of the request. To make changes to the entity associated with the
3812
+ # A token used for optimistic locking. WAF returns a token to your get
3813
+ # and list requests, to mark the state of the entity at the time of
3814
+ # the request. To make changes to the entity associated with the
3810
3815
  # token, you provide the token to operations like update and delete.
3811
- # AWS WAF uses the token to ensure that no changes have been made to
3812
- # the entity since you last retrieved it. If a change has been made,
3813
- # the update fails with a `WAFOptimisticLockException`. If this
3814
- # happens, perform another get, and use the new token returned by that
3816
+ # WAF uses the token to ensure that no changes have been made to the
3817
+ # entity since you last retrieved it. If a change has been made, the
3818
+ # update fails with a `WAFOptimisticLockException`. If this happens,
3819
+ # perform another get, and use the new token returned by that
3815
3820
  # operation.
3816
3821
  # @return [String]
3817
3822
  #
@@ -3905,13 +3910,12 @@ module Aws::WAFV2
3905
3910
  end
3906
3911
 
3907
3912
  # Contains one or more IP addresses or blocks of IP addresses specified
3908
- # in Classless Inter-Domain Routing (CIDR) notation. AWS WAF supports
3909
- # all IPv4 and IPv6 CIDR ranges except for /0. For information about
3910
- # CIDR notation, see the Wikipedia entry [Classless Inter-Domain
3911
- # Routing][1].
3913
+ # in Classless Inter-Domain Routing (CIDR) notation. WAF supports all
3914
+ # IPv4 and IPv6 CIDR ranges except for /0. For information about CIDR
3915
+ # notation, see the Wikipedia entry [Classless Inter-Domain Routing][1].
3912
3916
  #
3913
- # AWS WAF assigns an ARN to each `IPSet` that you create. To use an IP
3914
- # set in a rule, you provide the ARN to the Rule statement
3917
+ # WAF assigns an ARN to each `IPSet` that you create. To use an IP set
3918
+ # in a rule, you provide the ARN to the Rule statement
3915
3919
  # IPSetReferenceStatement.
3916
3920
  #
3917
3921
  #
@@ -3944,25 +3948,24 @@ module Aws::WAFV2
3944
3948
  # @!attribute [rw] addresses
3945
3949
  # Contains an array of strings that specify one or more IP addresses
3946
3950
  # or blocks of IP addresses in Classless Inter-Domain Routing (CIDR)
3947
- # notation. AWS WAF supports all IPv4 and IPv6 CIDR ranges except for
3948
- # /0.
3951
+ # notation. WAF supports all IPv4 and IPv6 CIDR ranges except for /0.
3949
3952
  #
3950
3953
  # Examples:
3951
3954
  #
3952
- # * To configure AWS WAF to allow, block, or count requests that
3955
+ # * To configure WAF to allow, block, or count requests that
3953
3956
  # originated from the IP address 192.0.2.44, specify
3954
3957
  # `192.0.2.44/32`.
3955
3958
  #
3956
- # * To configure AWS WAF to allow, block, or count requests that
3959
+ # * To configure WAF to allow, block, or count requests that
3957
3960
  # originated from IP addresses from 192.0.2.0 to 192.0.2.255,
3958
3961
  # specify `192.0.2.0/24`.
3959
3962
  #
3960
- # * To configure AWS WAF to allow, block, or count requests that
3963
+ # * To configure WAF to allow, block, or count requests that
3961
3964
  # originated from the IP address
3962
3965
  # 1111:0000:0000:0000:0000:0000:0000:0111, specify
3963
3966
  # `1111:0000:0000:0000:0000:0000:0000:0111/128`.
3964
3967
  #
3965
- # * To configure AWS WAF to allow, block, or count requests that
3968
+ # * To configure WAF to allow, block, or count requests that
3966
3969
  # originated from IP addresses
3967
3970
  # 1111:0000:0000:0000:0000:0000:0000:0000 to
3968
3971
  # 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify
@@ -3994,8 +3997,8 @@ module Aws::WAFV2
3994
3997
  # web request origin. Commonly, this is the X-Forwarded-For (XFF)
3995
3998
  # header, but you can specify any header name.
3996
3999
  #
3997
- # <note markdown="1"> If the specified header isn't present in the request, AWS WAF
3998
- # doesn't apply the rule to the web request at all.
4000
+ # <note markdown="1"> If the specified header isn't present in the request, WAF doesn't
4001
+ # apply the rule to the web request at all.
3999
4002
  #
4000
4003
  # </note>
4001
4004
  #
@@ -4017,8 +4020,8 @@ module Aws::WAFV2
4017
4020
  # to use the X-Forwarded-For (XFF) header, set this to
4018
4021
  # `X-Forwarded-For`.
4019
4022
  #
4020
- # <note markdown="1"> If the specified header isn't present in the request, AWS WAF
4021
- # doesn't apply the rule to the web request at all.
4023
+ # <note markdown="1"> If the specified header isn't present in the request, WAF doesn't
4024
+ # apply the rule to the web request at all.
4022
4025
  #
4023
4026
  # </note>
4024
4027
  # @return [String]
@@ -4027,15 +4030,15 @@ module Aws::WAFV2
4027
4030
  # The match status to assign to the web request if the request
4028
4031
  # doesn't have a valid IP address in the specified position.
4029
4032
  #
4030
- # <note markdown="1"> If the specified header isn't present in the request, AWS WAF
4031
- # doesn't apply the rule to the web request at all.
4033
+ # <note markdown="1"> If the specified header isn't present in the request, WAF doesn't
4034
+ # apply the rule to the web request at all.
4032
4035
  #
4033
4036
  # </note>
4034
4037
  #
4035
4038
  # You can specify the following fallback behaviors:
4036
4039
  #
4037
4040
  # * `MATCH` - Treat the web request as matching the rule statement.
4038
- # AWS WAF applies the rule action to the request.
4041
+ # WAF applies the rule action to the request.
4039
4042
  #
4040
4043
  # * `NO_MATCH` - Treat the web request as not matching the rule
4041
4044
  # statement.
@@ -4057,8 +4060,8 @@ module Aws::WAFV2
4057
4060
  # the header.
4058
4061
  #
4059
4062
  # * ANY - Inspect all IP addresses in the header for a match. If the
4060
- # header contains more than 10 IP addresses, AWS WAF inspects the
4061
- # last 10.
4063
+ # header contains more than 10 IP addresses, WAF inspects the last
4064
+ # 10.
4062
4065
  # @return [String]
4063
4066
  #
4064
4067
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/IPSetForwardedIPConfig AWS API Documentation
@@ -4078,8 +4081,8 @@ module Aws::WAFV2
4078
4081
  #
4079
4082
  # Each IP set rule statement references an IP set. You create and
4080
4083
  # maintain the set independent of your rules. This allows you to use the
4081
- # single set in multiple rules. When you update the referenced set, AWS
4082
- # WAF automatically updates all rules that reference it.
4084
+ # single set in multiple rules. When you update the referenced set, WAF
4085
+ # automatically updates all rules that reference it.
4083
4086
  #
4084
4087
  # @note When making an API call, you may pass IPSetReferenceStatement
4085
4088
  # data as a hash:
@@ -4104,8 +4107,8 @@ module Aws::WAFV2
4104
4107
  # web request origin. Commonly, this is the X-Forwarded-For (XFF)
4105
4108
  # header, but you can specify any header name.
4106
4109
  #
4107
- # <note markdown="1"> If the specified header isn't present in the request, AWS WAF
4108
- # doesn't apply the rule to the web request at all.
4110
+ # <note markdown="1"> If the specified header isn't present in the request, WAF doesn't
4111
+ # apply the rule to the web request at all.
4109
4112
  #
4110
4113
  # </note>
4111
4114
  # @return [Types::IPSetForwardedIPConfig]
@@ -4140,14 +4143,14 @@ module Aws::WAFV2
4140
4143
  # @return [String]
4141
4144
  #
4142
4145
  # @!attribute [rw] lock_token
4143
- # A token used for optimistic locking. AWS WAF returns a token to your
4144
- # get and list requests, to mark the state of the entity at the time
4145
- # of the request. To make changes to the entity associated with the
4146
+ # A token used for optimistic locking. WAF returns a token to your get
4147
+ # and list requests, to mark the state of the entity at the time of
4148
+ # the request. To make changes to the entity associated with the
4146
4149
  # token, you provide the token to operations like update and delete.
4147
- # AWS WAF uses the token to ensure that no changes have been made to
4148
- # the entity since you last retrieved it. If a change has been made,
4149
- # the update fails with a `WAFOptimisticLockException`. If this
4150
- # happens, perform another get, and use the new token returned by that
4150
+ # WAF uses the token to ensure that no changes have been made to the
4151
+ # entity since you last retrieved it. If a change has been made, the
4152
+ # update fails with a `WAFOptimisticLockException`. If this happens,
4153
+ # perform another get, and use the new token returned by that
4151
4154
  # operation.
4152
4155
  # @return [String]
4153
4156
  #
@@ -4172,7 +4175,7 @@ module Aws::WAFV2
4172
4175
  # specification.
4173
4176
  #
4174
4177
  # Use the specifications in this object to indicate which parts of the
4175
- # JSON body to inspect using the rule's inspection criteria. AWS WAF
4178
+ # JSON body to inspect using the rule's inspection criteria. WAF
4176
4179
  # inspects only the parts of the JSON that result from the matches that
4177
4180
  # you indicate.
4178
4181
  #
@@ -4190,39 +4193,38 @@ module Aws::WAFV2
4190
4193
  # }
4191
4194
  #
4192
4195
  # @!attribute [rw] match_pattern
4193
- # The patterns to look for in the JSON body. AWS WAF inspects the
4194
- # results of these pattern matches against the rule inspection
4195
- # criteria.
4196
+ # The patterns to look for in the JSON body. WAF inspects the results
4197
+ # of these pattern matches against the rule inspection criteria.
4196
4198
  # @return [Types::JsonMatchPattern]
4197
4199
  #
4198
4200
  # @!attribute [rw] match_scope
4199
4201
  # The parts of the JSON to match against using the `MatchPattern`. If
4200
- # you specify `All`, AWS WAF matches against keys and values.
4202
+ # you specify `All`, WAF matches against keys and values.
4201
4203
  # @return [String]
4202
4204
  #
4203
4205
  # @!attribute [rw] invalid_fallback_behavior
4204
- # What AWS WAF should do if it fails to completely parse the JSON
4205
- # body. The options are the following:
4206
+ # What WAF should do if it fails to completely parse the JSON body.
4207
+ # The options are the following:
4206
4208
  #
4207
- # * `EVALUATE_AS_STRING` - Inspect the body as plain text. AWS WAF
4208
- # applies the text transformations and inspection criteria that you
4209
- # defined for the JSON inspection to the body text string.
4209
+ # * `EVALUATE_AS_STRING` - Inspect the body as plain text. WAF applies
4210
+ # the text transformations and inspection criteria that you defined
4211
+ # for the JSON inspection to the body text string.
4210
4212
  #
4211
4213
  # * `MATCH` - Treat the web request as matching the rule statement.
4212
- # AWS WAF applies the rule action to the request.
4214
+ # WAF applies the rule action to the request.
4213
4215
  #
4214
4216
  # * `NO_MATCH` - Treat the web request as not matching the rule
4215
4217
  # statement.
4216
4218
  #
4217
- # If you don't provide this setting, AWS WAF parses and evaluates the
4219
+ # If you don't provide this setting, WAF parses and evaluates the
4218
4220
  # content only up to the first parsing failure that it encounters.
4219
4221
  #
4220
- # AWS WAF does its best to parse the entire JSON body, but might be
4221
- # forced to stop for reasons such as invalid characters, duplicate
4222
+ # WAF does its best to parse the entire JSON body, but might be forced
4223
+ # to stop for reasons such as characters that aren't valid, duplicate
4222
4224
  # keys, truncation, and any content whose root node isn't an object
4223
4225
  # or an array.
4224
4226
  #
4225
- # AWS WAF parses the JSON in the following examples as two valid key,
4227
+ # WAF parses the JSON in the following examples as two valid key,
4226
4228
  # value pairs:
4227
4229
  #
4228
4230
  # * Missing comma: `\{"key1":"value1""key2":"value2"\}`
@@ -4242,9 +4244,9 @@ module Aws::WAFV2
4242
4244
  include Aws::Structure
4243
4245
  end
4244
4246
 
4245
- # The patterns to look for in the JSON body. AWS WAF inspects the
4246
- # results of these pattern matches against the rule inspection criteria.
4247
- # This is used with the FieldToMatch option `JsonBody`.
4247
+ # The patterns to look for in the JSON body. WAF inspects the results of
4248
+ # these pattern matches against the rule inspection criteria. This is
4249
+ # used with the FieldToMatch option `JsonBody`.
4248
4250
  #
4249
4251
  # @note When making an API call, you may pass JsonMatchPattern
4250
4252
  # data as a hash:
@@ -4326,8 +4328,8 @@ module Aws::WAFV2
4326
4328
  # qualified labels have a prefix, optional namespaces, and label name.
4327
4329
  # The prefix identifies the rule group or web ACL context of the rule
4328
4330
  # that added the label. If you do not provide the fully qualified name
4329
- # in your label match string, AWS WAF performs the search for labels
4330
- # that were added in the same context as the label match statement.
4331
+ # in your label match string, WAF performs the search for labels that
4332
+ # were added in the same context as the label match statement.
4331
4333
  #
4332
4334
  # @note When making an API call, you may pass LabelMatchStatement
4333
4335
  # data as a hash:
@@ -4344,7 +4346,7 @@ module Aws::WAFV2
4344
4346
  #
4345
4347
  # @!attribute [rw] key
4346
4348
  # The string to match against. The setting you provide for this
4347
- # depends on the match statement's `Scope` settings:
4349
+ # depends on the match statement's `Scope` setting:
4348
4350
  #
4349
4351
  # * If the `Scope` indicates `LABEL`, then this specification must
4350
4352
  # include the name and can include any number of preceding namespace
@@ -4426,10 +4428,10 @@ module Aws::WAFV2
4426
4428
  # }
4427
4429
  #
4428
4430
  # @!attribute [rw] scope
4429
- # Specifies whether this is for an AWS CloudFront distribution or for
4430
- # a regional application. A regional application can be an Application
4431
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
4432
- # API.
4431
+ # Specifies whether this is for an Amazon CloudFront distribution or
4432
+ # for a regional application. A regional application can be an
4433
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
4434
+ # an AppSync GraphQL API.
4433
4435
  #
4434
4436
  # To work with CloudFront, you must also specify the Region US East
4435
4437
  # (N. Virginia) as follows:
@@ -4443,16 +4445,16 @@ module Aws::WAFV2
4443
4445
  # @!attribute [rw] next_marker
4444
4446
  # When you request a list of objects with a `Limit` setting, if the
4445
4447
  # number of objects that are still available for retrieval exceeds the
4446
- # limit, AWS WAF returns a `NextMarker` value in the response. To
4447
- # retrieve the next batch of objects, provide the marker from the
4448
- # prior call in your next request.
4448
+ # limit, WAF returns a `NextMarker` value in the response. To retrieve
4449
+ # the next batch of objects, provide the marker from the prior call in
4450
+ # your next request.
4449
4451
  # @return [String]
4450
4452
  #
4451
4453
  # @!attribute [rw] limit
4452
- # The maximum number of objects that you want AWS WAF to return for
4453
- # this request. If more objects are available, in the response, AWS
4454
- # WAF provides a `NextMarker` value that you can use in a subsequent
4455
- # call to get the next batch of objects.
4454
+ # The maximum number of objects that you want WAF to return for this
4455
+ # request. If more objects are available, in the response, WAF
4456
+ # provides a `NextMarker` value that you can use in a subsequent call
4457
+ # to get the next batch of objects.
4456
4458
  # @return [Integer]
4457
4459
  #
4458
4460
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/ListAvailableManagedRuleGroupsRequest AWS API Documentation
@@ -4468,9 +4470,9 @@ module Aws::WAFV2
4468
4470
  # @!attribute [rw] next_marker
4469
4471
  # When you request a list of objects with a `Limit` setting, if the
4470
4472
  # number of objects that are still available for retrieval exceeds the
4471
- # limit, AWS WAF returns a `NextMarker` value in the response. To
4472
- # retrieve the next batch of objects, provide the marker from the
4473
- # prior call in your next request.
4473
+ # limit, WAF returns a `NextMarker` value in the response. To retrieve
4474
+ # the next batch of objects, provide the marker from the prior call in
4475
+ # your next request.
4474
4476
  # @return [String]
4475
4477
  #
4476
4478
  # @!attribute [rw] managed_rule_groups
@@ -4495,10 +4497,10 @@ module Aws::WAFV2
4495
4497
  # }
4496
4498
  #
4497
4499
  # @!attribute [rw] scope
4498
- # Specifies whether this is for an AWS CloudFront distribution or for
4499
- # a regional application. A regional application can be an Application
4500
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
4501
- # API.
4500
+ # Specifies whether this is for an Amazon CloudFront distribution or
4501
+ # for a regional application. A regional application can be an
4502
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
4503
+ # an AppSync GraphQL API.
4502
4504
  #
4503
4505
  # To work with CloudFront, you must also specify the Region US East
4504
4506
  # (N. Virginia) as follows:
@@ -4512,16 +4514,16 @@ module Aws::WAFV2
4512
4514
  # @!attribute [rw] next_marker
4513
4515
  # When you request a list of objects with a `Limit` setting, if the
4514
4516
  # number of objects that are still available for retrieval exceeds the
4515
- # limit, AWS WAF returns a `NextMarker` value in the response. To
4516
- # retrieve the next batch of objects, provide the marker from the
4517
- # prior call in your next request.
4517
+ # limit, WAF returns a `NextMarker` value in the response. To retrieve
4518
+ # the next batch of objects, provide the marker from the prior call in
4519
+ # your next request.
4518
4520
  # @return [String]
4519
4521
  #
4520
4522
  # @!attribute [rw] limit
4521
- # The maximum number of objects that you want AWS WAF to return for
4522
- # this request. If more objects are available, in the response, AWS
4523
- # WAF provides a `NextMarker` value that you can use in a subsequent
4524
- # call to get the next batch of objects.
4523
+ # The maximum number of objects that you want WAF to return for this
4524
+ # request. If more objects are available, in the response, WAF
4525
+ # provides a `NextMarker` value that you can use in a subsequent call
4526
+ # to get the next batch of objects.
4525
4527
  # @return [Integer]
4526
4528
  #
4527
4529
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/ListIPSetsRequest AWS API Documentation
@@ -4537,9 +4539,9 @@ module Aws::WAFV2
4537
4539
  # @!attribute [rw] next_marker
4538
4540
  # When you request a list of objects with a `Limit` setting, if the
4539
4541
  # number of objects that are still available for retrieval exceeds the
4540
- # limit, AWS WAF returns a `NextMarker` value in the response. To
4541
- # retrieve the next batch of objects, provide the marker from the
4542
- # prior call in your next request.
4542
+ # limit, WAF returns a `NextMarker` value in the response. To retrieve
4543
+ # the next batch of objects, provide the marker from the prior call in
4544
+ # your next request.
4543
4545
  # @return [String]
4544
4546
  #
4545
4547
  # @!attribute [rw] ip_sets
@@ -4566,10 +4568,10 @@ module Aws::WAFV2
4566
4568
  # }
4567
4569
  #
4568
4570
  # @!attribute [rw] scope
4569
- # Specifies whether this is for an AWS CloudFront distribution or for
4570
- # a regional application. A regional application can be an Application
4571
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
4572
- # API.
4571
+ # Specifies whether this is for an Amazon CloudFront distribution or
4572
+ # for a regional application. A regional application can be an
4573
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
4574
+ # an AppSync GraphQL API.
4573
4575
  #
4574
4576
  # To work with CloudFront, you must also specify the Region US East
4575
4577
  # (N. Virginia) as follows:
@@ -4583,16 +4585,16 @@ module Aws::WAFV2
4583
4585
  # @!attribute [rw] next_marker
4584
4586
  # When you request a list of objects with a `Limit` setting, if the
4585
4587
  # number of objects that are still available for retrieval exceeds the
4586
- # limit, AWS WAF returns a `NextMarker` value in the response. To
4587
- # retrieve the next batch of objects, provide the marker from the
4588
- # prior call in your next request.
4588
+ # limit, WAF returns a `NextMarker` value in the response. To retrieve
4589
+ # the next batch of objects, provide the marker from the prior call in
4590
+ # your next request.
4589
4591
  # @return [String]
4590
4592
  #
4591
4593
  # @!attribute [rw] limit
4592
- # The maximum number of objects that you want AWS WAF to return for
4593
- # this request. If more objects are available, in the response, AWS
4594
- # WAF provides a `NextMarker` value that you can use in a subsequent
4595
- # call to get the next batch of objects.
4594
+ # The maximum number of objects that you want WAF to return for this
4595
+ # request. If more objects are available, in the response, WAF
4596
+ # provides a `NextMarker` value that you can use in a subsequent call
4597
+ # to get the next batch of objects.
4596
4598
  # @return [Integer]
4597
4599
  #
4598
4600
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/ListLoggingConfigurationsRequest AWS API Documentation
@@ -4611,9 +4613,9 @@ module Aws::WAFV2
4611
4613
  # @!attribute [rw] next_marker
4612
4614
  # When you request a list of objects with a `Limit` setting, if the
4613
4615
  # number of objects that are still available for retrieval exceeds the
4614
- # limit, AWS WAF returns a `NextMarker` value in the response. To
4615
- # retrieve the next batch of objects, provide the marker from the
4616
- # prior call in your next request.
4616
+ # limit, WAF returns a `NextMarker` value in the response. To retrieve
4617
+ # the next batch of objects, provide the marker from the prior call in
4618
+ # your next request.
4617
4619
  # @return [String]
4618
4620
  #
4619
4621
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/ListLoggingConfigurationsResponse AWS API Documentation
@@ -4635,10 +4637,10 @@ module Aws::WAFV2
4635
4637
  # }
4636
4638
  #
4637
4639
  # @!attribute [rw] scope
4638
- # Specifies whether this is for an AWS CloudFront distribution or for
4639
- # a regional application. A regional application can be an Application
4640
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
4641
- # API.
4640
+ # Specifies whether this is for an Amazon CloudFront distribution or
4641
+ # for a regional application. A regional application can be an
4642
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
4643
+ # an AppSync GraphQL API.
4642
4644
  #
4643
4645
  # To work with CloudFront, you must also specify the Region US East
4644
4646
  # (N. Virginia) as follows:
@@ -4652,16 +4654,16 @@ module Aws::WAFV2
4652
4654
  # @!attribute [rw] next_marker
4653
4655
  # When you request a list of objects with a `Limit` setting, if the
4654
4656
  # number of objects that are still available for retrieval exceeds the
4655
- # limit, AWS WAF returns a `NextMarker` value in the response. To
4656
- # retrieve the next batch of objects, provide the marker from the
4657
- # prior call in your next request.
4657
+ # limit, WAF returns a `NextMarker` value in the response. To retrieve
4658
+ # the next batch of objects, provide the marker from the prior call in
4659
+ # your next request.
4658
4660
  # @return [String]
4659
4661
  #
4660
4662
  # @!attribute [rw] limit
4661
- # The maximum number of objects that you want AWS WAF to return for
4662
- # this request. If more objects are available, in the response, AWS
4663
- # WAF provides a `NextMarker` value that you can use in a subsequent
4664
- # call to get the next batch of objects.
4663
+ # The maximum number of objects that you want WAF to return for this
4664
+ # request. If more objects are available, in the response, WAF
4665
+ # provides a `NextMarker` value that you can use in a subsequent call
4666
+ # to get the next batch of objects.
4665
4667
  # @return [Integer]
4666
4668
  #
4667
4669
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/ListRegexPatternSetsRequest AWS API Documentation
@@ -4677,9 +4679,9 @@ module Aws::WAFV2
4677
4679
  # @!attribute [rw] next_marker
4678
4680
  # When you request a list of objects with a `Limit` setting, if the
4679
4681
  # number of objects that are still available for retrieval exceeds the
4680
- # limit, AWS WAF returns a `NextMarker` value in the response. To
4681
- # retrieve the next batch of objects, provide the marker from the
4682
- # prior call in your next request.
4682
+ # limit, WAF returns a `NextMarker` value in the response. To retrieve
4683
+ # the next batch of objects, provide the marker from the prior call in
4684
+ # your next request.
4683
4685
  # @return [String]
4684
4686
  #
4685
4687
  # @!attribute [rw] regex_pattern_sets
@@ -4703,13 +4705,13 @@ module Aws::WAFV2
4703
4705
  # }
4704
4706
  #
4705
4707
  # @!attribute [rw] web_acl_arn
4706
- # The Amazon Resource Name (ARN) of the Web ACL.
4708
+ # The Amazon Resource Name (ARN) of the web ACL.
4707
4709
  # @return [String]
4708
4710
  #
4709
4711
  # @!attribute [rw] resource_type
4710
4712
  # Used for web ACLs that are scoped for regional applications. A
4711
4713
  # regional application can be an Application Load Balancer (ALB), an
4712
- # API Gateway REST API, or an AppSync GraphQL API.
4714
+ # Amazon API Gateway REST API, or an AppSync GraphQL API.
4713
4715
  # @return [String]
4714
4716
  #
4715
4717
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/ListResourcesForWebACLRequest AWS API Documentation
@@ -4744,10 +4746,10 @@ module Aws::WAFV2
4744
4746
  # }
4745
4747
  #
4746
4748
  # @!attribute [rw] scope
4747
- # Specifies whether this is for an AWS CloudFront distribution or for
4748
- # a regional application. A regional application can be an Application
4749
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
4750
- # API.
4749
+ # Specifies whether this is for an Amazon CloudFront distribution or
4750
+ # for a regional application. A regional application can be an
4751
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
4752
+ # an AppSync GraphQL API.
4751
4753
  #
4752
4754
  # To work with CloudFront, you must also specify the Region US East
4753
4755
  # (N. Virginia) as follows:
@@ -4761,16 +4763,16 @@ module Aws::WAFV2
4761
4763
  # @!attribute [rw] next_marker
4762
4764
  # When you request a list of objects with a `Limit` setting, if the
4763
4765
  # number of objects that are still available for retrieval exceeds the
4764
- # limit, AWS WAF returns a `NextMarker` value in the response. To
4765
- # retrieve the next batch of objects, provide the marker from the
4766
- # prior call in your next request.
4766
+ # limit, WAF returns a `NextMarker` value in the response. To retrieve
4767
+ # the next batch of objects, provide the marker from the prior call in
4768
+ # your next request.
4767
4769
  # @return [String]
4768
4770
  #
4769
4771
  # @!attribute [rw] limit
4770
- # The maximum number of objects that you want AWS WAF to return for
4771
- # this request. If more objects are available, in the response, AWS
4772
- # WAF provides a `NextMarker` value that you can use in a subsequent
4773
- # call to get the next batch of objects.
4772
+ # The maximum number of objects that you want WAF to return for this
4773
+ # request. If more objects are available, in the response, WAF
4774
+ # provides a `NextMarker` value that you can use in a subsequent call
4775
+ # to get the next batch of objects.
4774
4776
  # @return [Integer]
4775
4777
  #
4776
4778
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/ListRuleGroupsRequest AWS API Documentation
@@ -4786,9 +4788,9 @@ module Aws::WAFV2
4786
4788
  # @!attribute [rw] next_marker
4787
4789
  # When you request a list of objects with a `Limit` setting, if the
4788
4790
  # number of objects that are still available for retrieval exceeds the
4789
- # limit, AWS WAF returns a `NextMarker` value in the response. To
4790
- # retrieve the next batch of objects, provide the marker from the
4791
- # prior call in your next request.
4791
+ # limit, WAF returns a `NextMarker` value in the response. To retrieve
4792
+ # the next batch of objects, provide the marker from the prior call in
4793
+ # your next request.
4792
4794
  # @return [String]
4793
4795
  #
4794
4796
  # @!attribute [rw] rule_groups
@@ -4815,16 +4817,16 @@ module Aws::WAFV2
4815
4817
  # @!attribute [rw] next_marker
4816
4818
  # When you request a list of objects with a `Limit` setting, if the
4817
4819
  # number of objects that are still available for retrieval exceeds the
4818
- # limit, AWS WAF returns a `NextMarker` value in the response. To
4819
- # retrieve the next batch of objects, provide the marker from the
4820
- # prior call in your next request.
4820
+ # limit, WAF returns a `NextMarker` value in the response. To retrieve
4821
+ # the next batch of objects, provide the marker from the prior call in
4822
+ # your next request.
4821
4823
  # @return [String]
4822
4824
  #
4823
4825
  # @!attribute [rw] limit
4824
- # The maximum number of objects that you want AWS WAF to return for
4825
- # this request. If more objects are available, in the response, AWS
4826
- # WAF provides a `NextMarker` value that you can use in a subsequent
4827
- # call to get the next batch of objects.
4826
+ # The maximum number of objects that you want WAF to return for this
4827
+ # request. If more objects are available, in the response, WAF
4828
+ # provides a `NextMarker` value that you can use in a subsequent call
4829
+ # to get the next batch of objects.
4828
4830
  # @return [Integer]
4829
4831
  #
4830
4832
  # @!attribute [rw] resource_arn
@@ -4844,9 +4846,9 @@ module Aws::WAFV2
4844
4846
  # @!attribute [rw] next_marker
4845
4847
  # When you request a list of objects with a `Limit` setting, if the
4846
4848
  # number of objects that are still available for retrieval exceeds the
4847
- # limit, AWS WAF returns a `NextMarker` value in the response. To
4848
- # retrieve the next batch of objects, provide the marker from the
4849
- # prior call in your next request.
4849
+ # limit, WAF returns a `NextMarker` value in the response. To retrieve
4850
+ # the next batch of objects, provide the marker from the prior call in
4851
+ # your next request.
4850
4852
  # @return [String]
4851
4853
  #
4852
4854
  # @!attribute [rw] tag_info_for_resource
@@ -4872,10 +4874,10 @@ module Aws::WAFV2
4872
4874
  # }
4873
4875
  #
4874
4876
  # @!attribute [rw] scope
4875
- # Specifies whether this is for an AWS CloudFront distribution or for
4876
- # a regional application. A regional application can be an Application
4877
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
4878
- # API.
4877
+ # Specifies whether this is for an Amazon CloudFront distribution or
4878
+ # for a regional application. A regional application can be an
4879
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
4880
+ # an AppSync GraphQL API.
4879
4881
  #
4880
4882
  # To work with CloudFront, you must also specify the Region US East
4881
4883
  # (N. Virginia) as follows:
@@ -4889,16 +4891,16 @@ module Aws::WAFV2
4889
4891
  # @!attribute [rw] next_marker
4890
4892
  # When you request a list of objects with a `Limit` setting, if the
4891
4893
  # number of objects that are still available for retrieval exceeds the
4892
- # limit, AWS WAF returns a `NextMarker` value in the response. To
4893
- # retrieve the next batch of objects, provide the marker from the
4894
- # prior call in your next request.
4894
+ # limit, WAF returns a `NextMarker` value in the response. To retrieve
4895
+ # the next batch of objects, provide the marker from the prior call in
4896
+ # your next request.
4895
4897
  # @return [String]
4896
4898
  #
4897
4899
  # @!attribute [rw] limit
4898
- # The maximum number of objects that you want AWS WAF to return for
4899
- # this request. If more objects are available, in the response, AWS
4900
- # WAF provides a `NextMarker` value that you can use in a subsequent
4901
- # call to get the next batch of objects.
4900
+ # The maximum number of objects that you want WAF to return for this
4901
+ # request. If more objects are available, in the response, WAF
4902
+ # provides a `NextMarker` value that you can use in a subsequent call
4903
+ # to get the next batch of objects.
4902
4904
  # @return [Integer]
4903
4905
  #
4904
4906
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/ListWebACLsRequest AWS API Documentation
@@ -4914,9 +4916,9 @@ module Aws::WAFV2
4914
4916
  # @!attribute [rw] next_marker
4915
4917
  # When you request a list of objects with a `Limit` setting, if the
4916
4918
  # number of objects that are still available for retrieval exceeds the
4917
- # limit, AWS WAF returns a `NextMarker` value in the response. To
4918
- # retrieve the next batch of objects, provide the marker from the
4919
- # prior call in your next request.
4919
+ # limit, WAF returns a `NextMarker` value in the response. To retrieve
4920
+ # the next batch of objects, provide the marker from the prior call in
4921
+ # your next request.
4920
4922
  # @return [String]
4921
4923
  #
4922
4924
  # @!attribute [rw] web_acls
@@ -4932,10 +4934,10 @@ module Aws::WAFV2
4932
4934
  end
4933
4935
 
4934
4936
  # Defines an association between Amazon Kinesis Data Firehose
4935
- # destinations and a web ACL resource, for logging from AWS WAF. As part
4936
- # of the association, you can specify parts of the standard logging
4937
- # fields to keep out of the logs and you can specify filters so that you
4938
- # log only a subset of the logging records.
4937
+ # destinations and a web ACL resource, for logging from WAF. As part of
4938
+ # the association, you can specify parts of the standard logging fields
4939
+ # to keep out of the logs and you can specify filters so that you log
4940
+ # only a subset of the logging records.
4939
4941
  #
4940
4942
  # @note When making an API call, you may pass LoggingConfiguration
4941
4943
  # data as a hash:
@@ -5016,9 +5018,9 @@ module Aws::WAFV2
5016
5018
  # @return [Array<Types::FieldToMatch>]
5017
5019
  #
5018
5020
  # @!attribute [rw] managed_by_firewall_manager
5019
- # Indicates whether the logging configuration was created by AWS
5020
- # Firewall Manager, as part of an AWS WAF policy configuration. If
5021
- # true, only Firewall Manager can modify or delete the configuration.
5021
+ # Indicates whether the logging configuration was created by Firewall
5022
+ # Manager, as part of an WAF policy configuration. If true, only
5023
+ # Firewall Manager can modify or delete the configuration.
5022
5024
  # @return [Boolean]
5023
5025
  #
5024
5026
  # @!attribute [rw] logging_filter
@@ -5092,7 +5094,7 @@ module Aws::WAFV2
5092
5094
  # rule group in this statement. You can retrieve the required names by
5093
5095
  # calling ListAvailableManagedRuleGroups.
5094
5096
  #
5095
- # You can't nest a `ManagedRuleGroupStatement`, for example for use
5097
+ # You cannot nest a `ManagedRuleGroupStatement`, for example for use
5096
5098
  # inside a `NotStatement` or `OrStatement`. It can only be referenced as
5097
5099
  # a top-level statement within a rule.
5098
5100
  #
@@ -5140,7 +5142,7 @@ module Aws::WAFV2
5140
5142
  # text_transformations: [ # required
5141
5143
  # {
5142
5144
  # priority: 1, # required
5143
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
5145
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
5144
5146
  # },
5145
5147
  # ],
5146
5148
  # positional_constraint: "EXACTLY", # required, accepts EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD
@@ -5176,7 +5178,7 @@ module Aws::WAFV2
5176
5178
  # text_transformations: [ # required
5177
5179
  # {
5178
5180
  # priority: 1, # required
5179
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
5181
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
5180
5182
  # },
5181
5183
  # ],
5182
5184
  # },
@@ -5211,7 +5213,7 @@ module Aws::WAFV2
5211
5213
  # text_transformations: [ # required
5212
5214
  # {
5213
5215
  # priority: 1, # required
5214
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
5216
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
5215
5217
  # },
5216
5218
  # ],
5217
5219
  # },
@@ -5248,7 +5250,7 @@ module Aws::WAFV2
5248
5250
  # text_transformations: [ # required
5249
5251
  # {
5250
5252
  # priority: 1, # required
5251
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
5253
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
5252
5254
  # },
5253
5255
  # ],
5254
5256
  # },
@@ -5307,7 +5309,7 @@ module Aws::WAFV2
5307
5309
  # text_transformations: [ # required
5308
5310
  # {
5309
5311
  # priority: 1, # required
5310
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
5312
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
5311
5313
  # },
5312
5314
  # ],
5313
5315
  # },
@@ -5377,8 +5379,12 @@ module Aws::WAFV2
5377
5379
  # @return [Array<Types::ExcludedRule>]
5378
5380
  #
5379
5381
  # @!attribute [rw] scope_down_statement
5380
- # The processing guidance for a Rule, used by AWS WAF to determine
5381
- # whether a web request matches the rule.
5382
+ # An optional nested statement that narrows the scope of the web
5383
+ # requests that are evaluated by the managed rule group. Requests are
5384
+ # only evaluated by the rule group if they match the scope-down
5385
+ # statement. You can use any nestable Statement in the scope-down
5386
+ # statement, and you can nest statements at any level, the same as you
5387
+ # can for a rule statement.
5382
5388
  # @return [Types::Statement]
5383
5389
  #
5384
5390
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/ManagedRuleGroupStatement AWS API Documentation
@@ -5396,9 +5402,9 @@ module Aws::WAFV2
5396
5402
  # ListAvailableManagedRuleGroups. This provides information like the
5397
5403
  # name and vendor name, that you provide when you add a
5398
5404
  # ManagedRuleGroupStatement to a web ACL. Managed rule groups include
5399
- # AWS Managed Rules rule groups, which are free of charge to AWS WAF
5400
- # customers, and AWS Marketplace managed rule groups, which you can
5401
- # subscribe to through AWS Marketplace.
5405
+ # Amazon Web Services Managed Rules rule groups, which are free of
5406
+ # charge to WAF customers, and Marketplace managed rule groups, which
5407
+ # you can subscribe to through Marketplace.
5402
5408
  #
5403
5409
  # @!attribute [rw] vendor_name
5404
5410
  # The name of the managed rule group vendor. You use this, along with
@@ -5411,8 +5417,8 @@ module Aws::WAFV2
5411
5417
  # @return [String]
5412
5418
  #
5413
5419
  # @!attribute [rw] description
5414
- # The description of the managed rule group, provided by AWS Managed
5415
- # Rules or the AWS Marketplace seller who manages it.
5420
+ # The description of the managed rule group, provided by Amazon Web
5421
+ # Services Managed Rules or the Marketplace seller who manages it.
5416
5422
  # @return [String]
5417
5423
  #
5418
5424
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/ManagedRuleGroupSummary AWS API Documentation
@@ -5428,7 +5434,7 @@ module Aws::WAFV2
5428
5434
  # The HTTP method of a web request. The method indicates the type of
5429
5435
  # operation that the request is asking the origin to perform.
5430
5436
  #
5431
- # This is used only to indicate the web request component for AWS WAF to
5437
+ # This is used only to indicate the web request component for WAF to
5432
5438
  # inspect, in the FieldToMatch specification.
5433
5439
  #
5434
5440
  # @api private
@@ -5437,8 +5443,8 @@ module Aws::WAFV2
5437
5443
  #
5438
5444
  class Method < Aws::EmptyStructure; end
5439
5445
 
5440
- # Specifies that AWS WAF should do nothing. This is generally used to
5441
- # try out a rule without performing any actions. You set the
5446
+ # Specifies that WAF should do nothing. This is generally used to try
5447
+ # out a rule without performing any actions. You set the
5442
5448
  # `OverrideAction` on the Rule.
5443
5449
  #
5444
5450
  # This is used in the context of other settings, for example to specify
@@ -5490,7 +5496,7 @@ module Aws::WAFV2
5490
5496
  # text_transformations: [ # required
5491
5497
  # {
5492
5498
  # priority: 1, # required
5493
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
5499
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
5494
5500
  # },
5495
5501
  # ],
5496
5502
  # positional_constraint: "EXACTLY", # required, accepts EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD
@@ -5526,7 +5532,7 @@ module Aws::WAFV2
5526
5532
  # text_transformations: [ # required
5527
5533
  # {
5528
5534
  # priority: 1, # required
5529
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
5535
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
5530
5536
  # },
5531
5537
  # ],
5532
5538
  # },
@@ -5561,7 +5567,7 @@ module Aws::WAFV2
5561
5567
  # text_transformations: [ # required
5562
5568
  # {
5563
5569
  # priority: 1, # required
5564
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
5570
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
5565
5571
  # },
5566
5572
  # ],
5567
5573
  # },
@@ -5598,7 +5604,7 @@ module Aws::WAFV2
5598
5604
  # text_transformations: [ # required
5599
5605
  # {
5600
5606
  # priority: 1, # required
5601
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
5607
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
5602
5608
  # },
5603
5609
  # ],
5604
5610
  # },
@@ -5657,7 +5663,7 @@ module Aws::WAFV2
5657
5663
  # text_transformations: [ # required
5658
5664
  # {
5659
5665
  # priority: 1, # required
5660
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
5666
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
5661
5667
  # },
5662
5668
  # ],
5663
5669
  # },
@@ -5764,7 +5770,7 @@ module Aws::WAFV2
5764
5770
  # text_transformations: [ # required
5765
5771
  # {
5766
5772
  # priority: 1, # required
5767
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
5773
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
5768
5774
  # },
5769
5775
  # ],
5770
5776
  # positional_constraint: "EXACTLY", # required, accepts EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD
@@ -5800,7 +5806,7 @@ module Aws::WAFV2
5800
5806
  # text_transformations: [ # required
5801
5807
  # {
5802
5808
  # priority: 1, # required
5803
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
5809
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
5804
5810
  # },
5805
5811
  # ],
5806
5812
  # },
@@ -5835,7 +5841,7 @@ module Aws::WAFV2
5835
5841
  # text_transformations: [ # required
5836
5842
  # {
5837
5843
  # priority: 1, # required
5838
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
5844
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
5839
5845
  # },
5840
5846
  # ],
5841
5847
  # },
@@ -5872,7 +5878,7 @@ module Aws::WAFV2
5872
5878
  # text_transformations: [ # required
5873
5879
  # {
5874
5880
  # priority: 1, # required
5875
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
5881
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
5876
5882
  # },
5877
5883
  # ],
5878
5884
  # },
@@ -5931,7 +5937,7 @@ module Aws::WAFV2
5931
5937
  # text_transformations: [ # required
5932
5938
  # {
5933
5939
  # priority: 1, # required
5934
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
5940
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
5935
5941
  # },
5936
5942
  # ],
5937
5943
  # },
@@ -6154,8 +6160,8 @@ module Aws::WAFV2
6154
6160
  # * `Effect` must specify `Allow`.
6155
6161
  #
6156
6162
  # * `Action` must specify `wafv2:CreateWebACL`, `wafv2:UpdateWebACL`,
6157
- # and `wafv2:PutFirewallManagerRuleGroups`. AWS WAF rejects any
6158
- # extra actions or wildcard actions in the policy.
6163
+ # and `wafv2:PutFirewallManagerRuleGroups`. WAF rejects any extra
6164
+ # actions or wildcard actions in the policy.
6159
6165
  #
6160
6166
  # * The policy must not include a `Resource` parameter.
6161
6167
  #
@@ -6182,7 +6188,7 @@ module Aws::WAFV2
6182
6188
  # The query string of a web request. This is the part of a URL that
6183
6189
  # appears after a `?` character, if any.
6184
6190
  #
6185
- # This is used only to indicate the web request component for AWS WAF to
6191
+ # This is used only to indicate the web request component for WAF to
6186
6192
  # inspect, in the FieldToMatch specification.
6187
6193
  #
6188
6194
  # @api private
@@ -6197,8 +6203,8 @@ module Aws::WAFV2
6197
6203
  # You can use this to put a temporary block on requests from an IP
6198
6204
  # address that is sending excessive requests.
6199
6205
  #
6200
- # When the rule action triggers, AWS WAF blocks additional requests from
6201
- # the IP address until the request rate falls below the limit.
6206
+ # When the rule action triggers, WAF blocks additional requests from the
6207
+ # IP address until the request rate falls below the limit.
6202
6208
  #
6203
6209
  # You can optionally nest another statement inside the rate-based
6204
6210
  # statement, to narrow the scope of the rule so that it only counts
@@ -6263,7 +6269,7 @@ module Aws::WAFV2
6263
6269
  # text_transformations: [ # required
6264
6270
  # {
6265
6271
  # priority: 1, # required
6266
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
6272
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
6267
6273
  # },
6268
6274
  # ],
6269
6275
  # positional_constraint: "EXACTLY", # required, accepts EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD
@@ -6299,7 +6305,7 @@ module Aws::WAFV2
6299
6305
  # text_transformations: [ # required
6300
6306
  # {
6301
6307
  # priority: 1, # required
6302
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
6308
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
6303
6309
  # },
6304
6310
  # ],
6305
6311
  # },
@@ -6334,7 +6340,7 @@ module Aws::WAFV2
6334
6340
  # text_transformations: [ # required
6335
6341
  # {
6336
6342
  # priority: 1, # required
6337
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
6343
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
6338
6344
  # },
6339
6345
  # ],
6340
6346
  # },
@@ -6371,7 +6377,7 @@ module Aws::WAFV2
6371
6377
  # text_transformations: [ # required
6372
6378
  # {
6373
6379
  # priority: 1, # required
6374
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
6380
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
6375
6381
  # },
6376
6382
  # ],
6377
6383
  # },
@@ -6430,7 +6436,7 @@ module Aws::WAFV2
6430
6436
  # text_transformations: [ # required
6431
6437
  # {
6432
6438
  # priority: 1, # required
6433
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
6439
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
6434
6440
  # },
6435
6441
  # ],
6436
6442
  # },
@@ -6506,10 +6512,12 @@ module Aws::WAFV2
6506
6512
  # @return [String]
6507
6513
  #
6508
6514
  # @!attribute [rw] scope_down_statement
6509
- # An optional nested statement that narrows the scope of the
6510
- # rate-based statement to matching web requests. This can be any
6511
- # nestable statement, and you can nest statements at any level below
6512
- # this scope-down statement.
6515
+ # An optional nested statement that narrows the scope of the web
6516
+ # requests that are evaluated by the rate-based statement. Requests
6517
+ # are only tracked by the rate-based statement if they match the
6518
+ # scope-down statement. You can use any nestable Statement in the
6519
+ # scope-down statement, and you can nest statements at any level, the
6520
+ # same as you can for a rule statement.
6513
6521
  # @return [Types::Statement]
6514
6522
  #
6515
6523
  # @!attribute [rw] forwarded_ip_config
@@ -6518,8 +6526,8 @@ module Aws::WAFV2
6518
6526
  # web request origin. Commonly, this is the X-Forwarded-For (XFF)
6519
6527
  # header, but you can specify any header name.
6520
6528
  #
6521
- # <note markdown="1"> If the specified header isn't present in the request, AWS WAF
6522
- # doesn't apply the rule to the web request at all.
6529
+ # <note markdown="1"> If the specified header isn't present in the request, WAF doesn't
6530
+ # apply the rule to the web request at all.
6523
6531
  #
6524
6532
  # </note>
6525
6533
  #
@@ -6579,8 +6587,8 @@ module Aws::WAFV2
6579
6587
 
6580
6588
  # Contains one or more regular expressions.
6581
6589
  #
6582
- # AWS WAF assigns an ARN to each `RegexPatternSet` that you create. To
6583
- # use a set in a rule, you provide the ARN to the Rule statement
6590
+ # WAF assigns an ARN to each `RegexPatternSet` that you create. To use a
6591
+ # set in a rule, you provide the ARN to the Rule statement
6584
6592
  # RegexPatternSetReferenceStatement.
6585
6593
  #
6586
6594
  # @!attribute [rw] name
@@ -6628,8 +6636,7 @@ module Aws::WAFV2
6628
6636
  # Each regex pattern set rule statement references a regex pattern set.
6629
6637
  # You create and maintain the set independent of your rules. This allows
6630
6638
  # you to use the single set in multiple rules. When you update the
6631
- # referenced set, AWS WAF automatically updates all rules that reference
6632
- # it.
6639
+ # referenced set, WAF automatically updates all rules that reference it.
6633
6640
  #
6634
6641
  # @note When making an API call, you may pass RegexPatternSetReferenceStatement
6635
6642
  # data as a hash:
@@ -6666,7 +6673,7 @@ module Aws::WAFV2
6666
6673
  # text_transformations: [ # required
6667
6674
  # {
6668
6675
  # priority: 1, # required
6669
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
6676
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
6670
6677
  # },
6671
6678
  # ],
6672
6679
  # }
@@ -6677,14 +6684,14 @@ module Aws::WAFV2
6677
6684
  # @return [String]
6678
6685
  #
6679
6686
  # @!attribute [rw] field_to_match
6680
- # The part of a web request that you want AWS WAF to inspect. For more
6687
+ # The part of a web request that you want WAF to inspect. For more
6681
6688
  # information, see FieldToMatch.
6682
6689
  # @return [Types::FieldToMatch]
6683
6690
  #
6684
6691
  # @!attribute [rw] text_transformations
6685
6692
  # Text transformations eliminate some of the unusual formatting that
6686
6693
  # attackers use in web requests in an effort to bypass detection. If
6687
- # you specify one or more transformations in a rule statement, AWS WAF
6694
+ # you specify one or more transformations in a rule statement, WAF
6688
6695
  # performs all transformations on the content of the request component
6689
6696
  # identified by `FieldToMatch`, starting from the lowest priority
6690
6697
  # setting, before inspecting the content for a match.
@@ -6722,14 +6729,14 @@ module Aws::WAFV2
6722
6729
  # @return [String]
6723
6730
  #
6724
6731
  # @!attribute [rw] lock_token
6725
- # A token used for optimistic locking. AWS WAF returns a token to your
6726
- # get and list requests, to mark the state of the entity at the time
6727
- # of the request. To make changes to the entity associated with the
6732
+ # A token used for optimistic locking. WAF returns a token to your get
6733
+ # and list requests, to mark the state of the entity at the time of
6734
+ # the request. To make changes to the entity associated with the
6728
6735
  # token, you provide the token to operations like update and delete.
6729
- # AWS WAF uses the token to ensure that no changes have been made to
6730
- # the entity since you last retrieved it. If a change has been made,
6731
- # the update fails with a `WAFOptimisticLockException`. If this
6732
- # happens, perform another get, and use the new token returned by that
6736
+ # WAF uses the token to ensure that no changes have been made to the
6737
+ # entity since you last retrieved it. If a change has been made, the
6738
+ # update fails with a `WAFOptimisticLockException`. If this happens,
6739
+ # perform another get, and use the new token returned by that
6733
6740
  # operation.
6734
6741
  # @return [String]
6735
6742
  #
@@ -6751,9 +6758,8 @@ module Aws::WAFV2
6751
6758
 
6752
6759
  # A single rule, which you can use in a WebACL or RuleGroup to identify
6753
6760
  # web requests that you want to allow, block, or count. Each rule
6754
- # includes one top-level Statement that AWS WAF uses to identify
6755
- # matching web requests, and parameters that govern how AWS WAF handles
6756
- # them.
6761
+ # includes one top-level Statement that WAF uses to identify matching
6762
+ # web requests, and parameters that govern how WAF handles them.
6757
6763
  #
6758
6764
  # @note When making an API call, you may pass Rule
6759
6765
  # data as a hash:
@@ -6794,7 +6800,7 @@ module Aws::WAFV2
6794
6800
  # text_transformations: [ # required
6795
6801
  # {
6796
6802
  # priority: 1, # required
6797
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
6803
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
6798
6804
  # },
6799
6805
  # ],
6800
6806
  # positional_constraint: "EXACTLY", # required, accepts EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD
@@ -6830,7 +6836,7 @@ module Aws::WAFV2
6830
6836
  # text_transformations: [ # required
6831
6837
  # {
6832
6838
  # priority: 1, # required
6833
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
6839
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
6834
6840
  # },
6835
6841
  # ],
6836
6842
  # },
@@ -6865,7 +6871,7 @@ module Aws::WAFV2
6865
6871
  # text_transformations: [ # required
6866
6872
  # {
6867
6873
  # priority: 1, # required
6868
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
6874
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
6869
6875
  # },
6870
6876
  # ],
6871
6877
  # },
@@ -6902,7 +6908,7 @@ module Aws::WAFV2
6902
6908
  # text_transformations: [ # required
6903
6909
  # {
6904
6910
  # priority: 1, # required
6905
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
6911
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
6906
6912
  # },
6907
6913
  # ],
6908
6914
  # },
@@ -6961,7 +6967,7 @@ module Aws::WAFV2
6961
6967
  # text_transformations: [ # required
6962
6968
  # {
6963
6969
  # priority: 1, # required
6964
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
6970
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
6965
6971
  # },
6966
6972
  # ],
6967
6973
  # },
@@ -7078,22 +7084,22 @@ module Aws::WAFV2
7078
7084
  # @return [String]
7079
7085
  #
7080
7086
  # @!attribute [rw] priority
7081
- # If you define more than one `Rule` in a `WebACL`, AWS WAF evaluates
7082
- # each request against the `Rules` in order based on the value of
7083
- # `Priority`. AWS WAF processes rules with lower priority first. The
7087
+ # If you define more than one `Rule` in a `WebACL`, WAF evaluates each
7088
+ # request against the `Rules` in order based on the value of
7089
+ # `Priority`. WAF processes rules with lower priority first. The
7084
7090
  # priorities don't need to be consecutive, but they must all be
7085
7091
  # different.
7086
7092
  # @return [Integer]
7087
7093
  #
7088
7094
  # @!attribute [rw] statement
7089
- # The AWS WAF processing statement for the rule, for example
7095
+ # The WAF processing statement for the rule, for example
7090
7096
  # ByteMatchStatement or SizeConstraintStatement.
7091
7097
  # @return [Types::Statement]
7092
7098
  #
7093
7099
  # @!attribute [rw] action
7094
- # The action that AWS WAF should take on a web request when it matches
7095
- # the rule statement. Settings at the web ACL level can override the
7096
- # rule action setting.
7100
+ # The action that WAF should take on a web request when it matches the
7101
+ # rule statement. Settings at the web ACL level can override the rule
7102
+ # action setting.
7097
7103
  #
7098
7104
  # This is used only for rules whose statements do not reference a rule
7099
7105
  # group. Rule statements that reference a rule group include
@@ -7130,9 +7136,9 @@ module Aws::WAFV2
7130
7136
  #
7131
7137
  # @!attribute [rw] rule_labels
7132
7138
  # Labels to apply to web requests that match the rule match statement.
7133
- # AWS WAF applies fully qualified labels to matching web requests. A
7134
- # fully qualified label is the concatenation of a label namespace and
7135
- # a rule label. The rule's rule group or web ACL defines the label
7139
+ # WAF applies fully qualified labels to matching web requests. A fully
7140
+ # qualified label is the concatenation of a label namespace and a rule
7141
+ # label. The rule's rule group or web ACL defines the label
7136
7142
  # namespace.
7137
7143
  #
7138
7144
  # Rules that run after this rule in the web ACL can match against
@@ -7173,7 +7179,7 @@ module Aws::WAFV2
7173
7179
  include Aws::Structure
7174
7180
  end
7175
7181
 
7176
- # The action that AWS WAF should take on a web request when it matches a
7182
+ # The action that WAF should take on a web request when it matches a
7177
7183
  # rule's statement. Settings at the web ACL level can override the rule
7178
7184
  # action setting.
7179
7185
  #
@@ -7216,15 +7222,15 @@ module Aws::WAFV2
7216
7222
  # }
7217
7223
  #
7218
7224
  # @!attribute [rw] block
7219
- # Instructs AWS WAF to block the web request.
7225
+ # Instructs WAF to block the web request.
7220
7226
  # @return [Types::BlockAction]
7221
7227
  #
7222
7228
  # @!attribute [rw] allow
7223
- # Instructs AWS WAF to allow the web request.
7229
+ # Instructs WAF to allow the web request.
7224
7230
  # @return [Types::AllowAction]
7225
7231
  #
7226
7232
  # @!attribute [rw] count
7227
- # Instructs AWS WAF to count the web request and allow it.
7233
+ # Instructs WAF to count the web request and allow it.
7228
7234
  # @return [Types::CountAction]
7229
7235
  #
7230
7236
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/RuleAction AWS API Documentation
@@ -7259,11 +7265,11 @@ module Aws::WAFV2
7259
7265
  #
7260
7266
  # When you create your own rule group, you define this, and you cannot
7261
7267
  # change it after creation. When you add or modify the rules in a rule
7262
- # group, AWS WAF enforces this limit. You can check the capacity for a
7263
- # set of rules using CheckCapacity.
7268
+ # group, WAF enforces this limit. You can check the capacity for a set
7269
+ # of rules using CheckCapacity.
7264
7270
  #
7265
- # AWS WAF uses WCUs to calculate and control the operating resources
7266
- # that are used to run your rules, rule groups, and web ACLs. AWS WAF
7271
+ # WAF uses WCUs to calculate and control the operating resources that
7272
+ # are used to run your rules, rule groups, and web ACLs. WAF
7267
7273
  # calculates capacity differently for each rule type, to reflect the
7268
7274
  # relative cost of each rule. Simple rules that cost little to run use
7269
7275
  # fewer WCUs than more complex rules that use more processing power.
@@ -7283,8 +7289,8 @@ module Aws::WAFV2
7283
7289
  # @!attribute [rw] rules
7284
7290
  # The Rule statements used to identify the web requests that you want
7285
7291
  # to allow, block, or count. Each rule includes one top-level
7286
- # statement that AWS WAF uses to identify matching web requests, and
7287
- # parameters that govern how AWS WAF handles them.
7292
+ # statement that WAF uses to identify matching web requests, and
7293
+ # parameters that govern how WAF handles them.
7288
7294
  # @return [Array<Types::Rule>]
7289
7295
  #
7290
7296
  # @!attribute [rw] visibility_config
@@ -7301,11 +7307,10 @@ module Aws::WAFV2
7301
7307
  #
7302
7308
  # `awswaf:<account ID>:rulegroup:<rule group name>:`
7303
7309
  #
7304
- # * When a rule with a label matches a web request, AWS WAF adds the
7305
- # fully qualified label to the request. A fully qualified label is
7306
- # made up of the label namespace from the rule group or web ACL
7307
- # where the rule is defined and the label from the rule, separated
7308
- # by a colon:
7310
+ # * When a rule with a label matches a web request, WAF adds the fully
7311
+ # qualified label to the request. A fully qualified label is made up
7312
+ # of the label namespace from the rule group or web ACL where the
7313
+ # rule is defined and the label from the rule, separated by a colon:
7309
7314
  #
7310
7315
  # `<label namespace>:<label from rule>`
7311
7316
  # @return [String]
@@ -7317,12 +7322,12 @@ module Aws::WAFV2
7317
7322
  # the rules that you define in the rule group.
7318
7323
  #
7319
7324
  # For information about customizing web requests and responses, see
7320
- # [Customizing web requests and responses in AWS WAF][1] in the [AWS
7321
- # WAF Developer Guide][2].
7325
+ # [Customizing web requests and responses in WAF][1] in the [WAF
7326
+ # Developer Guide][2].
7322
7327
  #
7323
7328
  # For information about the limits on count and size for custom
7324
- # request and response settings, see [AWS WAF quotas][3] in the [AWS
7325
- # WAF Developer Guide][2].
7329
+ # request and response settings, see [WAF quotas][3] in the [WAF
7330
+ # Developer Guide][2].
7326
7331
  #
7327
7332
  #
7328
7333
  #
@@ -7333,7 +7338,8 @@ module Aws::WAFV2
7333
7338
  #
7334
7339
  # @!attribute [rw] available_labels
7335
7340
  # The labels that one or more rules in this rule group add to matching
7336
- # web ACLs. These labels are defined in the `RuleLabels` for a Rule.
7341
+ # web requests. These labels are defined in the `RuleLabels` for a
7342
+ # Rule.
7337
7343
  # @return [Array<Types::LabelSummary>]
7338
7344
  #
7339
7345
  # @!attribute [rw] consumed_labels
@@ -7387,7 +7393,7 @@ module Aws::WAFV2
7387
7393
  #
7388
7394
  # @!attribute [rw] excluded_rules
7389
7395
  # The names of rules that are in the referenced rule group, but that
7390
- # you want AWS WAF to exclude from processing for this rule statement.
7396
+ # you want WAF to exclude from processing for this rule statement.
7391
7397
  # @return [Array<Types::ExcludedRule>]
7392
7398
  #
7393
7399
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/RuleGroupReferenceStatement AWS API Documentation
@@ -7421,14 +7427,14 @@ module Aws::WAFV2
7421
7427
  # @return [String]
7422
7428
  #
7423
7429
  # @!attribute [rw] lock_token
7424
- # A token used for optimistic locking. AWS WAF returns a token to your
7425
- # get and list requests, to mark the state of the entity at the time
7426
- # of the request. To make changes to the entity associated with the
7430
+ # A token used for optimistic locking. WAF returns a token to your get
7431
+ # and list requests, to mark the state of the entity at the time of
7432
+ # the request. To make changes to the entity associated with the
7427
7433
  # token, you provide the token to operations like update and delete.
7428
- # AWS WAF uses the token to ensure that no changes have been made to
7429
- # the entity since you last retrieved it. If a change has been made,
7430
- # the update fails with a `WAFOptimisticLockException`. If this
7431
- # happens, perform another get, and use the new token returned by that
7434
+ # WAF uses the token to ensure that no changes have been made to the
7435
+ # entity since you last retrieved it. If a change has been made, the
7436
+ # update fails with a `WAFOptimisticLockException`. If this happens,
7437
+ # perform another get, and use the new token returned by that
7432
7438
  # operation.
7433
7439
  # @return [String]
7434
7440
  #
@@ -7459,8 +7465,8 @@ module Aws::WAFV2
7459
7465
  # @return [String]
7460
7466
  #
7461
7467
  # @!attribute [rw] action
7462
- # The action that AWS WAF should take on a web request when it matches
7463
- # a rule's statement. Settings at the web ACL level can override the
7468
+ # The action that WAF should take on a web request when it matches a
7469
+ # rule's statement. Settings at the web ACL level can override the
7464
7470
  # rule action setting.
7465
7471
  # @return [Types::RuleAction]
7466
7472
  #
@@ -7491,8 +7497,8 @@ module Aws::WAFV2
7491
7497
  # @return [Integer]
7492
7498
  #
7493
7499
  # @!attribute [rw] timestamp
7494
- # The time at which AWS WAF received the request from your AWS
7495
- # resource, in Unix time format (in seconds).
7500
+ # The time at which WAF received the request from your Amazon Web
7501
+ # Services resource, in Unix time format (in seconds).
7496
7502
  # @return [Time]
7497
7503
  #
7498
7504
  # @!attribute [rw] action
@@ -7509,9 +7515,8 @@ module Aws::WAFV2
7509
7515
  # @return [String]
7510
7516
  #
7511
7517
  # @!attribute [rw] request_headers_inserted
7512
- # Custom request headers inserted by AWS WAF into the request,
7513
- # according to the custom request configuration for the matching rule
7514
- # action.
7518
+ # Custom request headers inserted by WAF into the request, according
7519
+ # to the custom request configuration for the matching rule action.
7515
7520
  # @return [Array<Types::HTTPHeader>]
7516
7521
  #
7517
7522
  # @!attribute [rw] response_code_sent
@@ -7519,7 +7524,7 @@ module Aws::WAFV2
7519
7524
  # @return [Integer]
7520
7525
  #
7521
7526
  # @!attribute [rw] labels
7522
- # Labels applied to the web request by matching rules. AWS WAF applies
7527
+ # Labels applied to the web request by matching rules. WAF applies
7523
7528
  # fully qualified labels to matching web requests. A fully qualified
7524
7529
  # label is the concatenation of a label namespace and a rule label.
7525
7530
  # The rule's rule group or web ACL defines the label namespace.
@@ -7547,7 +7552,7 @@ module Aws::WAFV2
7547
7552
  # One of the headers in a web request, identified by name, for example,
7548
7553
  # `User-Agent` or `Referer`. This setting isn't case sensitive.
7549
7554
  #
7550
- # This is used only to indicate the web request component for AWS WAF to
7555
+ # This is used only to indicate the web request component for WAF to
7551
7556
  # inspect, in the FieldToMatch specification.
7552
7557
  #
7553
7558
  # @note When making an API call, you may pass SingleHeader
@@ -7597,11 +7602,10 @@ module Aws::WAFV2
7597
7602
  # (&gt;) or less than (&lt;). For example, you can use a size constraint
7598
7603
  # statement to look for query strings that are longer than 100 bytes.
7599
7604
  #
7600
- # If you configure AWS WAF to inspect the request body, AWS WAF inspects
7601
- # only the first 8192 bytes (8 KB). If the request body for your web
7602
- # requests never exceeds 8192 bytes, you can create a size constraint
7603
- # condition and block requests that have a request body greater than
7604
- # 8192 bytes.
7605
+ # If you configure WAF to inspect the request body, WAF inspects only
7606
+ # the first 8192 bytes (8 KB). If the request body for your web requests
7607
+ # never exceeds 8192 bytes, you can create a size constraint condition
7608
+ # and block requests that have a request body greater than 8192 bytes.
7605
7609
  #
7606
7610
  # If you choose URI for the value of Part of the request to filter on,
7607
7611
  # the slash (/) in the URI counts as one character. For example, the URI
@@ -7643,13 +7647,13 @@ module Aws::WAFV2
7643
7647
  # text_transformations: [ # required
7644
7648
  # {
7645
7649
  # priority: 1, # required
7646
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
7650
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
7647
7651
  # },
7648
7652
  # ],
7649
7653
  # }
7650
7654
  #
7651
7655
  # @!attribute [rw] field_to_match
7652
- # The part of a web request that you want AWS WAF to inspect. For more
7656
+ # The part of a web request that you want WAF to inspect. For more
7653
7657
  # information, see FieldToMatch.
7654
7658
  # @return [Types::FieldToMatch]
7655
7659
  #
@@ -7665,7 +7669,7 @@ module Aws::WAFV2
7665
7669
  # @!attribute [rw] text_transformations
7666
7670
  # Text transformations eliminate some of the unusual formatting that
7667
7671
  # attackers use in web requests in an effort to bypass detection. If
7668
- # you specify one or more transformations in a rule statement, AWS WAF
7672
+ # you specify one or more transformations in a rule statement, WAF
7669
7673
  # performs all transformations on the content of the request component
7670
7674
  # identified by `FieldToMatch`, starting from the lowest priority
7671
7675
  # setting, before inspecting the content for a match.
@@ -7687,9 +7691,9 @@ module Aws::WAFV2
7687
7691
  # requests that appear to contain malicious SQL code, create one or more
7688
7692
  # SQL injection match conditions. An SQL injection match condition
7689
7693
  # identifies the part of web requests, such as the URI or the query
7690
- # string, that you want AWS WAF to inspect. Later in the process, when
7691
- # you create a web ACL, you specify whether to allow or block requests
7692
- # that appear to contain malicious SQL code.
7694
+ # string, that you want WAF to inspect. Later in the process, when you
7695
+ # create a web ACL, you specify whether to allow or block requests that
7696
+ # appear to contain malicious SQL code.
7693
7697
  #
7694
7698
  # @note When making an API call, you may pass SqliMatchStatement
7695
7699
  # data as a hash:
@@ -7725,20 +7729,20 @@ module Aws::WAFV2
7725
7729
  # text_transformations: [ # required
7726
7730
  # {
7727
7731
  # priority: 1, # required
7728
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
7732
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
7729
7733
  # },
7730
7734
  # ],
7731
7735
  # }
7732
7736
  #
7733
7737
  # @!attribute [rw] field_to_match
7734
- # The part of a web request that you want AWS WAF to inspect. For more
7738
+ # The part of a web request that you want WAF to inspect. For more
7735
7739
  # information, see FieldToMatch.
7736
7740
  # @return [Types::FieldToMatch]
7737
7741
  #
7738
7742
  # @!attribute [rw] text_transformations
7739
7743
  # Text transformations eliminate some of the unusual formatting that
7740
7744
  # attackers use in web requests in an effort to bypass detection. If
7741
- # you specify one or more transformations in a rule statement, AWS WAF
7745
+ # you specify one or more transformations in a rule statement, WAF
7742
7746
  # performs all transformations on the content of the request component
7743
7747
  # identified by `FieldToMatch`, starting from the lowest priority
7744
7748
  # setting, before inspecting the content for a match.
@@ -7753,8 +7757,8 @@ module Aws::WAFV2
7753
7757
  include Aws::Structure
7754
7758
  end
7755
7759
 
7756
- # The processing guidance for a Rule, used by AWS WAF to determine
7757
- # whether a web request matches the rule.
7760
+ # The processing guidance for a Rule, used by WAF to determine whether a
7761
+ # web request matches the rule.
7758
7762
  #
7759
7763
  # @note When making an API call, you may pass Statement
7760
7764
  # data as a hash:
@@ -7792,7 +7796,7 @@ module Aws::WAFV2
7792
7796
  # text_transformations: [ # required
7793
7797
  # {
7794
7798
  # priority: 1, # required
7795
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
7799
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
7796
7800
  # },
7797
7801
  # ],
7798
7802
  # positional_constraint: "EXACTLY", # required, accepts EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD
@@ -7828,7 +7832,7 @@ module Aws::WAFV2
7828
7832
  # text_transformations: [ # required
7829
7833
  # {
7830
7834
  # priority: 1, # required
7831
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
7835
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
7832
7836
  # },
7833
7837
  # ],
7834
7838
  # },
@@ -7863,7 +7867,7 @@ module Aws::WAFV2
7863
7867
  # text_transformations: [ # required
7864
7868
  # {
7865
7869
  # priority: 1, # required
7866
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
7870
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
7867
7871
  # },
7868
7872
  # ],
7869
7873
  # },
@@ -7900,7 +7904,7 @@ module Aws::WAFV2
7900
7904
  # text_transformations: [ # required
7901
7905
  # {
7902
7906
  # priority: 1, # required
7903
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
7907
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
7904
7908
  # },
7905
7909
  # ],
7906
7910
  # },
@@ -7959,7 +7963,7 @@ module Aws::WAFV2
7959
7963
  # text_transformations: [ # required
7960
7964
  # {
7961
7965
  # priority: 1, # required
7962
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
7966
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
7963
7967
  # },
7964
7968
  # ],
7965
7969
  # },
@@ -7999,7 +8003,7 @@ module Aws::WAFV2
7999
8003
  # text_transformations: [ # required
8000
8004
  # {
8001
8005
  # priority: 1, # required
8002
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8006
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8003
8007
  # },
8004
8008
  # ],
8005
8009
  # positional_constraint: "EXACTLY", # required, accepts EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD
@@ -8035,7 +8039,7 @@ module Aws::WAFV2
8035
8039
  # text_transformations: [ # required
8036
8040
  # {
8037
8041
  # priority: 1, # required
8038
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8042
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8039
8043
  # },
8040
8044
  # ],
8041
8045
  # },
@@ -8070,7 +8074,7 @@ module Aws::WAFV2
8070
8074
  # text_transformations: [ # required
8071
8075
  # {
8072
8076
  # priority: 1, # required
8073
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8077
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8074
8078
  # },
8075
8079
  # ],
8076
8080
  # },
@@ -8107,7 +8111,7 @@ module Aws::WAFV2
8107
8111
  # text_transformations: [ # required
8108
8112
  # {
8109
8113
  # priority: 1, # required
8110
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8114
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8111
8115
  # },
8112
8116
  # ],
8113
8117
  # },
@@ -8166,7 +8170,7 @@ module Aws::WAFV2
8166
8170
  # text_transformations: [ # required
8167
8171
  # {
8168
8172
  # priority: 1, # required
8169
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8173
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8170
8174
  # },
8171
8175
  # ],
8172
8176
  # },
@@ -8249,7 +8253,7 @@ module Aws::WAFV2
8249
8253
  # text_transformations: [ # required
8250
8254
  # {
8251
8255
  # priority: 1, # required
8252
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8256
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8253
8257
  # },
8254
8258
  # ],
8255
8259
  # positional_constraint: "EXACTLY", # required, accepts EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD
@@ -8285,7 +8289,7 @@ module Aws::WAFV2
8285
8289
  # text_transformations: [ # required
8286
8290
  # {
8287
8291
  # priority: 1, # required
8288
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8292
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8289
8293
  # },
8290
8294
  # ],
8291
8295
  # },
@@ -8320,7 +8324,7 @@ module Aws::WAFV2
8320
8324
  # text_transformations: [ # required
8321
8325
  # {
8322
8326
  # priority: 1, # required
8323
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8327
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8324
8328
  # },
8325
8329
  # ],
8326
8330
  # },
@@ -8357,7 +8361,7 @@ module Aws::WAFV2
8357
8361
  # text_transformations: [ # required
8358
8362
  # {
8359
8363
  # priority: 1, # required
8360
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8364
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8361
8365
  # },
8362
8366
  # ],
8363
8367
  # },
@@ -8416,7 +8420,7 @@ module Aws::WAFV2
8416
8420
  # text_transformations: [ # required
8417
8421
  # {
8418
8422
  # priority: 1, # required
8419
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8423
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8420
8424
  # },
8421
8425
  # ],
8422
8426
  # },
@@ -8498,7 +8502,7 @@ module Aws::WAFV2
8498
8502
  # text_transformations: [ # required
8499
8503
  # {
8500
8504
  # priority: 1, # required
8501
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8505
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8502
8506
  # },
8503
8507
  # ],
8504
8508
  # positional_constraint: "EXACTLY", # required, accepts EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD
@@ -8534,7 +8538,7 @@ module Aws::WAFV2
8534
8538
  # text_transformations: [ # required
8535
8539
  # {
8536
8540
  # priority: 1, # required
8537
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8541
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8538
8542
  # },
8539
8543
  # ],
8540
8544
  # },
@@ -8569,7 +8573,7 @@ module Aws::WAFV2
8569
8573
  # text_transformations: [ # required
8570
8574
  # {
8571
8575
  # priority: 1, # required
8572
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8576
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8573
8577
  # },
8574
8578
  # ],
8575
8579
  # },
@@ -8606,7 +8610,7 @@ module Aws::WAFV2
8606
8610
  # text_transformations: [ # required
8607
8611
  # {
8608
8612
  # priority: 1, # required
8609
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8613
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8610
8614
  # },
8611
8615
  # ],
8612
8616
  # },
@@ -8665,7 +8669,7 @@ module Aws::WAFV2
8665
8669
  # text_transformations: [ # required
8666
8670
  # {
8667
8671
  # priority: 1, # required
8668
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8672
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8669
8673
  # },
8670
8674
  # ],
8671
8675
  # },
@@ -8746,7 +8750,7 @@ module Aws::WAFV2
8746
8750
  # text_transformations: [ # required
8747
8751
  # {
8748
8752
  # priority: 1, # required
8749
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8753
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8750
8754
  # },
8751
8755
  # ],
8752
8756
  # positional_constraint: "EXACTLY", # required, accepts EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD
@@ -8782,7 +8786,7 @@ module Aws::WAFV2
8782
8786
  # text_transformations: [ # required
8783
8787
  # {
8784
8788
  # priority: 1, # required
8785
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8789
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8786
8790
  # },
8787
8791
  # ],
8788
8792
  # },
@@ -8817,7 +8821,7 @@ module Aws::WAFV2
8817
8821
  # text_transformations: [ # required
8818
8822
  # {
8819
8823
  # priority: 1, # required
8820
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8824
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8821
8825
  # },
8822
8826
  # ],
8823
8827
  # },
@@ -8854,7 +8858,7 @@ module Aws::WAFV2
8854
8858
  # text_transformations: [ # required
8855
8859
  # {
8856
8860
  # priority: 1, # required
8857
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8861
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8858
8862
  # },
8859
8863
  # ],
8860
8864
  # },
@@ -8913,7 +8917,7 @@ module Aws::WAFV2
8913
8917
  # text_transformations: [ # required
8914
8918
  # {
8915
8919
  # priority: 1, # required
8916
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
8920
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8917
8921
  # },
8918
8922
  # ],
8919
8923
  # },
@@ -9004,7 +9008,7 @@ module Aws::WAFV2
9004
9008
  # text_transformations: [ # required
9005
9009
  # {
9006
9010
  # priority: 1, # required
9007
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
9011
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
9008
9012
  # },
9009
9013
  # ],
9010
9014
  # positional_constraint: "EXACTLY", # required, accepts EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD
@@ -9040,7 +9044,7 @@ module Aws::WAFV2
9040
9044
  # text_transformations: [ # required
9041
9045
  # {
9042
9046
  # priority: 1, # required
9043
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
9047
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
9044
9048
  # },
9045
9049
  # ],
9046
9050
  # },
@@ -9075,7 +9079,7 @@ module Aws::WAFV2
9075
9079
  # text_transformations: [ # required
9076
9080
  # {
9077
9081
  # priority: 1, # required
9078
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
9082
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
9079
9083
  # },
9080
9084
  # ],
9081
9085
  # },
@@ -9112,7 +9116,7 @@ module Aws::WAFV2
9112
9116
  # text_transformations: [ # required
9113
9117
  # {
9114
9118
  # priority: 1, # required
9115
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
9119
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
9116
9120
  # },
9117
9121
  # ],
9118
9122
  # },
@@ -9171,7 +9175,7 @@ module Aws::WAFV2
9171
9175
  # text_transformations: [ # required
9172
9176
  # {
9173
9177
  # priority: 1, # required
9174
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
9178
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
9175
9179
  # },
9176
9180
  # ],
9177
9181
  # },
@@ -9221,13 +9225,12 @@ module Aws::WAFV2
9221
9225
  # }
9222
9226
  #
9223
9227
  # @!attribute [rw] byte_match_statement
9224
- # A rule statement that defines a string match search for AWS WAF to
9225
- # apply to web requests. The byte match statement provides the bytes
9226
- # to search for, the location in requests that you want AWS WAF to
9227
- # search, and other settings. The bytes to search for are typically a
9228
- # string that corresponds with ASCII characters. In the AWS WAF
9229
- # console and the developer guide, this is refered to as a string
9230
- # match statement.
9228
+ # A rule statement that defines a string match search for WAF to apply
9229
+ # to web requests. The byte match statement provides the bytes to
9230
+ # search for, the location in requests that you want WAF to search,
9231
+ # and other settings. The bytes to search for are typically a string
9232
+ # that corresponds with ASCII characters. In the WAF console and the
9233
+ # developer guide, this is refered to as a string match statement.
9231
9234
  # @return [Types::ByteMatchStatement]
9232
9235
  #
9233
9236
  # @!attribute [rw] sqli_match_statement
@@ -9236,20 +9239,20 @@ module Aws::WAFV2
9236
9239
  # requests that appear to contain malicious SQL code, create one or
9237
9240
  # more SQL injection match conditions. An SQL injection match
9238
9241
  # condition identifies the part of web requests, such as the URI or
9239
- # the query string, that you want AWS WAF to inspect. Later in the
9242
+ # the query string, that you want WAF to inspect. Later in the
9240
9243
  # process, when you create a web ACL, you specify whether to allow or
9241
9244
  # block requests that appear to contain malicious SQL code.
9242
9245
  # @return [Types::SqliMatchStatement]
9243
9246
  #
9244
9247
  # @!attribute [rw] xss_match_statement
9245
9248
  # A rule statement that defines a cross-site scripting (XSS) match
9246
- # search for AWS WAF to apply to web requests. XSS attacks are those
9247
- # where the attacker uses vulnerabilities in a benign website as a
9248
- # vehicle to inject malicious client-site scripts into other
9249
- # legitimate web browsers. The XSS match statement provides the
9250
- # location in requests that you want AWS WAF to search and text
9251
- # transformations to use on the search area before AWS WAF searches
9252
- # for character sequences that are likely to be malicious strings.
9249
+ # search for WAF to apply to web requests. XSS attacks are those where
9250
+ # the attacker uses vulnerabilities in a benign website as a vehicle
9251
+ # to inject malicious client-site scripts into other legitimate web
9252
+ # browsers. The XSS match statement provides the location in requests
9253
+ # that you want WAF to search and text transformations to use on the
9254
+ # search area before WAF searches for character sequences that are
9255
+ # likely to be malicious strings.
9253
9256
  # @return [Types::XssMatchStatement]
9254
9257
  #
9255
9258
  # @!attribute [rw] size_constraint_statement
@@ -9259,11 +9262,11 @@ module Aws::WAFV2
9259
9262
  # constraint statement to look for query strings that are longer than
9260
9263
  # 100 bytes.
9261
9264
  #
9262
- # If you configure AWS WAF to inspect the request body, AWS WAF
9263
- # inspects only the first 8192 bytes (8 KB). If the request body for
9264
- # your web requests never exceeds 8192 bytes, you can create a size
9265
- # constraint condition and block requests that have a request body
9266
- # greater than 8192 bytes.
9265
+ # If you configure WAF to inspect the request body, WAF inspects only
9266
+ # the first 8192 bytes (8 KB). If the request body for your web
9267
+ # requests never exceeds 8192 bytes, you can create a size constraint
9268
+ # condition and block requests that have a request body greater than
9269
+ # 8192 bytes.
9267
9270
  #
9268
9271
  # If you choose URI for the value of Part of the request to filter on,
9269
9272
  # the slash (/) in the URI counts as one character. For example, the
@@ -9294,7 +9297,7 @@ module Aws::WAFV2
9294
9297
  # Each IP set rule statement references an IP set. You create and
9295
9298
  # maintain the set independent of your rules. This allows you to use
9296
9299
  # the single set in multiple rules. When you update the referenced
9297
- # set, AWS WAF automatically updates all rules that reference it.
9300
+ # set, WAF automatically updates all rules that reference it.
9298
9301
  # @return [Types::IPSetReferenceStatement]
9299
9302
  #
9300
9303
  # @!attribute [rw] regex_pattern_set_reference_statement
@@ -9309,7 +9312,7 @@ module Aws::WAFV2
9309
9312
  # Each regex pattern set rule statement references a regex pattern
9310
9313
  # set. You create and maintain the set independent of your rules. This
9311
9314
  # allows you to use the single set in multiple rules. When you update
9312
- # the referenced set, AWS WAF automatically updates all rules that
9315
+ # the referenced set, WAF automatically updates all rules that
9313
9316
  # reference it.
9314
9317
  # @return [Types::RegexPatternSetReferenceStatement]
9315
9318
  #
@@ -9320,8 +9323,8 @@ module Aws::WAFV2
9320
9323
  # time span. You can use this to put a temporary block on requests
9321
9324
  # from an IP address that is sending excessive requests.
9322
9325
  #
9323
- # When the rule action triggers, AWS WAF blocks additional requests
9324
- # from the IP address until the request rate falls below the limit.
9326
+ # When the rule action triggers, WAF blocks additional requests from
9327
+ # the IP address until the request rate falls below the limit.
9325
9328
  #
9326
9329
  # You can optionally nest another statement inside the rate-based
9327
9330
  # statement, to narrow the scope of the rule so that it only counts
@@ -9371,7 +9374,7 @@ module Aws::WAFV2
9371
9374
  # rule group in this statement. You can retrieve the required names by
9372
9375
  # calling ListAvailableManagedRuleGroups.
9373
9376
  #
9374
- # You can't nest a `ManagedRuleGroupStatement`, for example for use
9377
+ # You cannot nest a `ManagedRuleGroupStatement`, for example for use
9375
9378
  # inside a `NotStatement` or `OrStatement`. It can only be referenced
9376
9379
  # as a top-level statement within a rule.
9377
9380
  # @return [Types::ManagedRuleGroupStatement]
@@ -9387,9 +9390,8 @@ module Aws::WAFV2
9387
9390
  # Fully qualified labels have a prefix, optional namespaces, and label
9388
9391
  # name. The prefix identifies the rule group or web ACL context of the
9389
9392
  # rule that added the label. If you do not provide the fully qualified
9390
- # name in your label match string, AWS WAF performs the search for
9391
- # labels that were added in the same context as the label match
9392
- # statement.
9393
+ # name in your label match string, WAF performs the search for labels
9394
+ # that were added in the same context as the label match statement.
9393
9395
  # @return [Types::LabelMatchStatement]
9394
9396
  #
9395
9397
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/Statement AWS API Documentation
@@ -9413,19 +9415,19 @@ module Aws::WAFV2
9413
9415
  include Aws::Structure
9414
9416
  end
9415
9417
 
9416
- # A tag associated with an AWS resource. Tags are key:value pairs that
9417
- # you can use to categorize and manage your resources, for purposes like
9418
- # billing or other management. Typically, the tag key represents a
9419
- # category, such as "environment", and the tag value represents a
9420
- # specific value within that category, such as "test,"
9421
- # "development," or "production". Or you might set the tag key to
9422
- # "customer" and the value to the customer name or ID. You can specify
9423
- # one or more tags to add to each AWS resource, up to 50 tags for a
9424
- # resource.
9418
+ # A tag associated with an Amazon Web Services resource. Tags are
9419
+ # key:value pairs that you can use to categorize and manage your
9420
+ # resources, for purposes like billing or other management. Typically,
9421
+ # the tag key represents a category, such as "environment", and the
9422
+ # tag value represents a specific value within that category, such as
9423
+ # "test," "development," or "production". Or you might set the tag
9424
+ # key to "customer" and the value to the customer name or ID. You can
9425
+ # specify one or more tags to add to each Amazon Web Services resource,
9426
+ # up to 50 tags for a resource.
9425
9427
  #
9426
- # You can tag the AWS resources that you manage through AWS WAF: web
9427
- # ACLs, rule groups, IP sets, and regex pattern sets. You can't manage
9428
- # or view tags through the AWS WAF console.
9428
+ # You can tag the Amazon Web Services resources that you manage through
9429
+ # WAF: web ACLs, rule groups, IP sets, and regex pattern sets. You
9430
+ # can't manage or view tags through the WAF console.
9429
9431
  #
9430
9432
  # @note When making an API call, you may pass Tag
9431
9433
  # data as a hash:
@@ -9456,19 +9458,19 @@ module Aws::WAFV2
9456
9458
  include Aws::Structure
9457
9459
  end
9458
9460
 
9459
- # The collection of tagging definitions for an AWS resource. Tags are
9460
- # key:value pairs that you can use to categorize and manage your
9461
- # resources, for purposes like billing or other management. Typically,
9462
- # the tag key represents a category, such as "environment", and the
9463
- # tag value represents a specific value within that category, such as
9464
- # "test," "development," or "production". Or you might set the tag
9465
- # key to "customer" and the value to the customer name or ID. You can
9466
- # specify one or more tags to add to each AWS resource, up to 50 tags
9467
- # for a resource.
9461
+ # The collection of tagging definitions for an Amazon Web Services
9462
+ # resource. Tags are key:value pairs that you can use to categorize and
9463
+ # manage your resources, for purposes like billing or other management.
9464
+ # Typically, the tag key represents a category, such as "environment",
9465
+ # and the tag value represents a specific value within that category,
9466
+ # such as "test," "development," or "production". Or you might set
9467
+ # the tag key to "customer" and the value to the customer name or ID.
9468
+ # You can specify one or more tags to add to each Amazon Web Services
9469
+ # resource, up to 50 tags for a resource.
9468
9470
  #
9469
- # You can tag the AWS resources that you manage through AWS WAF: web
9470
- # ACLs, rule groups, IP sets, and regex pattern sets. You can't manage
9471
- # or view tags through the AWS WAF console.
9471
+ # You can tag the Amazon Web Services resources that you manage through
9472
+ # WAF: web ACLs, rule groups, IP sets, and regex pattern sets. You
9473
+ # can't manage or view tags through the WAF console.
9472
9474
  #
9473
9475
  # @!attribute [rw] resource_arn
9474
9476
  # The Amazon Resource Name (ARN) of the resource.
@@ -9529,60 +9531,77 @@ module Aws::WAFV2
9529
9531
  #
9530
9532
  # {
9531
9533
  # priority: 1, # required
9532
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
9534
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
9533
9535
  # }
9534
9536
  #
9535
9537
  # @!attribute [rw] priority
9536
9538
  # Sets the relative processing order for multiple transformations that
9537
- # are defined for a rule statement. AWS WAF processes all
9538
- # transformations, from lowest priority to highest, before inspecting
9539
- # the transformed content. The priorities don't need to be
9540
- # consecutive, but they must all be different.
9539
+ # are defined for a rule statement. WAF processes all transformations,
9540
+ # from lowest priority to highest, before inspecting the transformed
9541
+ # content. The priorities don't need to be consecutive, but they must
9542
+ # all be different.
9541
9543
  # @return [Integer]
9542
9544
  #
9543
9545
  # @!attribute [rw] type
9544
9546
  # You can specify the following transformation types:
9545
9547
  #
9546
- # **CMD\_LINE**
9548
+ # **BASE64\_DECODE** - Decode a `Base64`-encoded string.
9547
9549
  #
9548
- # When you're concerned that attackers are injecting an operating
9549
- # system command line command and using unusual formatting to disguise
9550
- # some or all of the command, use this option to perform the following
9551
- # transformations:
9550
+ # **BASE64\_DECODE\_EXT** - Decode a `Base64`-encoded string, but use
9551
+ # a forgiving implementation that ignores characters that aren't
9552
+ # valid.
9552
9553
  #
9553
- # * Delete the following characters: \\ " ' ^
9554
+ # **CMD\_LINE** - Command-line transformations. These are helpful in
9555
+ # reducing effectiveness of attackers who inject an operating system
9556
+ # command-line command and use unusual formatting to disguise some or
9557
+ # all of the command.
9554
9558
  #
9555
- # * Delete spaces before the following characters: / (
9559
+ # * Delete the following characters: `\ " ' ^`
9556
9560
  #
9557
- # * Replace the following characters with a space: , ;
9561
+ # * Delete spaces before the following characters: `/ (`
9562
+ #
9563
+ # * Replace the following characters with a space: `, ;`
9558
9564
  #
9559
9565
  # * Replace multiple spaces with one space
9560
9566
  #
9561
9567
  # * Convert uppercase letters (A-Z) to lowercase (a-z)
9562
9568
  #
9563
- # **COMPRESS\_WHITE\_SPACE**
9564
- #
9565
- # Use this option to replace the following characters with a space
9569
+ # **COMPRESS\_WHITE\_SPACE** - Replace these characters with a space
9566
9570
  # character (decimal 32):
9567
9571
  #
9568
- # * \\f, formfeed, decimal 12
9572
+ # * `\f`, formfeed, decimal 12
9569
9573
  #
9570
- # * \\t, tab, decimal 9
9574
+ # * `\t`, tab, decimal 9
9571
9575
  #
9572
- # * \\n, newline, decimal 10
9576
+ # * `\n`, newline, decimal 10
9573
9577
  #
9574
- # * \\r, carriage return, decimal 13
9578
+ # * `\r`, carriage return, decimal 13
9575
9579
  #
9576
- # * \\v, vertical tab, decimal 11
9580
+ # * `\v`, vertical tab, decimal 11
9577
9581
  #
9578
- # * non-breaking space, decimal 160
9582
+ # * Non-breaking space, decimal 160
9579
9583
  #
9580
9584
  # `COMPRESS_WHITE_SPACE` also replaces multiple spaces with one space.
9581
9585
  #
9582
- # **HTML\_ENTITY\_DECODE**
9586
+ # **CSS\_DECODE** - Decode characters that were encoded using CSS 2.x
9587
+ # escape rules `syndata.html#characters`. This function uses up to two
9588
+ # bytes in the decoding process, so it can help to uncover ASCII
9589
+ # characters that were encoded using CSS encoding that wouldn’t
9590
+ # typically be encoded. It's also useful in countering evasion, which
9591
+ # is a combination of a backslash and non-hexadecimal characters. For
9592
+ # example, `ja\vascript` for javascript.
9583
9593
  #
9584
- # Use this option to replace HTML-encoded characters with unencoded
9585
- # characters. `HTML_ENTITY_DECODE` performs the following operations:
9594
+ # **ESCAPE\_SEQ\_DECODE** - Decode the following ANSI C escape
9595
+ # sequences: `\a`, `\b`, `\f`, `\n`, `\r`, `\t`, `\v`, `\`, `\?`,
9596
+ # `'`, `"`, `\xHH` (hexadecimal), `\0OOO` (octal). Encodings that
9597
+ # aren't valid remain in the output.
9598
+ #
9599
+ # **HEX\_DECODE** - Decode a string of hexadecimal characters into a
9600
+ # binary.
9601
+ #
9602
+ # **HTML\_ENTITY\_DECODE** - Replace HTML-encoded characters with
9603
+ # unencoded characters. `HTML_ENTITY_DECODE` performs these
9604
+ # operations:
9586
9605
  #
9587
9606
  # * Replaces `(ampersand)quot;` with `"`
9588
9607
  #
@@ -9598,18 +9617,54 @@ module Aws::WAFV2
9598
9617
  # * Replaces characters that are represented in decimal format,
9599
9618
  # `(ampersand)#nnnn;`, with the corresponding characters
9600
9619
  #
9601
- # **LOWERCASE**
9620
+ # **JS\_DECODE** - Decode JavaScript escape sequences. If a `` `u`
9621
+ # `HHHH` code is in the full-width ASCII code range of `FF01-FF5E`,
9622
+ # then the higher byte is used to detect and adjust the lower byte. If
9623
+ # not, only the lower byte is used and the higher byte is zeroed,
9624
+ # causing a possible loss of information.
9625
+ #
9626
+ # **LOWERCASE** - Convert uppercase letters (A-Z) to lowercase (a-z).
9627
+ #
9628
+ # **MD5** - Calculate an MD5 hash from the data in the input. The
9629
+ # computed hash is in a raw binary form.
9630
+ #
9631
+ # **NONE** - Specify `NONE` if you don't want any text
9632
+ # transformations.
9633
+ #
9634
+ # **NORMALIZE\_PATH** - Remove multiple slashes, directory
9635
+ # self-references, and directory back-references that are not at the
9636
+ # beginning of the input from an input string.
9637
+ #
9638
+ # **NORMALIZE\_PATH\_WIN** - This is the same as `NORMALIZE_PATH`, but
9639
+ # first converts backslash characters to forward slashes.
9640
+ #
9641
+ # **REMOVE\_NULLS** - Remove all `NULL` bytes from the input.
9602
9642
  #
9603
- # Use this option to convert uppercase letters (A-Z) to lowercase
9604
- # (a-z).
9643
+ # **REPLACE\_COMMENTS** - Replace each occurrence of a C-style comment
9644
+ # (`/* ... */`) with a single space. Multiple consecutive occurrences
9645
+ # are not compressed. Unterminated comments are also replaced with a
9646
+ # space (ASCII 0x20). However, a standalone termination of a comment
9647
+ # (`*/`) is not acted upon.
9605
9648
  #
9606
- # **URL\_DECODE**
9649
+ # **REPLACE\_NULLS** - Replace NULL bytes in the input with space
9650
+ # characters (ASCII `0x20`).
9607
9651
  #
9608
- # Use this option to decode a URL-encoded value.
9652
+ # **SQL\_HEX\_DECODE** - Decode the following ANSI C escape sequences:
9653
+ # `\a`, `\b`, `\f`, `\n`, `\r`, `\t`, `\v`, `\`, `\?`, `'`, `"`,
9654
+ # `\xHH` (hexadecimal), `\0OOO` (octal). Encodings that aren't valid
9655
+ # remain in the output.
9609
9656
  #
9610
- # **NONE**
9657
+ # **URL\_DECODE** - Decode a URL-encoded value.
9611
9658
  #
9612
- # Specify `NONE` if you don't want any text transformations.
9659
+ # **URL\_DECODE\_UNI** - Like `URL_DECODE`, but with support for
9660
+ # Microsoft-specific `%u` encoding. If the code is in the full-width
9661
+ # ASCII code range of `FF01-FF5E`, the higher byte is used to detect
9662
+ # and adjust the lower byte. Otherwise, only the lower byte is used
9663
+ # and the higher byte is zeroed.
9664
+ #
9665
+ # **UTF8\_TO\_UNICODE** - Convert all UTF-8 character sequences to
9666
+ # Unicode. This helps input normalization, and minimizing
9667
+ # false-positives and false-negatives for non-English languages.
9613
9668
  # @return [String]
9614
9669
  #
9615
9670
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/TextTransformation AWS API Documentation
@@ -9622,8 +9677,8 @@ module Aws::WAFV2
9622
9677
  end
9623
9678
 
9624
9679
  # In a GetSampledRequests request, the `StartTime` and `EndTime` objects
9625
- # specify the time range for which you want AWS WAF to return a sample
9626
- # of web requests.
9680
+ # specify the time range for which you want WAF to return a sample of
9681
+ # web requests.
9627
9682
  #
9628
9683
  # You must specify the times in Coordinated Universal Time (UTC) format.
9629
9684
  # UTC format includes the special designator, `Z`. For example,
@@ -9631,12 +9686,12 @@ module Aws::WAFV2
9631
9686
  # three hours.
9632
9687
  #
9633
9688
  # In a GetSampledRequests response, the `StartTime` and `EndTime`
9634
- # objects specify the time range for which AWS WAF actually returned a
9635
- # sample of web requests. AWS WAF gets the specified number of requests
9636
- # from among the first 5,000 requests that your AWS resource receives
9637
- # during the specified time period. If your resource receives more than
9638
- # 5,000 requests during that period, AWS WAF stops sampling after the
9639
- # 5,000th request. In that case, `EndTime` is the time that AWS WAF
9689
+ # objects specify the time range for which WAF actually returned a
9690
+ # sample of web requests. WAF gets the specified number of requests from
9691
+ # among the first 5,000 requests that your Amazon Web Services resource
9692
+ # receives during the specified time period. If your resource receives
9693
+ # more than 5,000 requests during that period, WAF stops sampling after
9694
+ # the 5,000th request. In that case, `EndTime` is the time that WAF
9640
9695
  # received the 5,000th request.
9641
9696
  #
9642
9697
  # @note When making an API call, you may pass TimeWindow
@@ -9650,19 +9705,19 @@ module Aws::WAFV2
9650
9705
  # @!attribute [rw] start_time
9651
9706
  # The beginning of the time range from which you want
9652
9707
  # `GetSampledRequests` to return a sample of the requests that your
9653
- # AWS resource received. You must specify the times in Coordinated
9654
- # Universal Time (UTC) format. UTC format includes the special
9655
- # designator, `Z`. For example, `"2016-09-27T14:50Z"`. You can specify
9656
- # any time range in the previous three hours.
9708
+ # Amazon Web Services resource received. You must specify the times in
9709
+ # Coordinated Universal Time (UTC) format. UTC format includes the
9710
+ # special designator, `Z`. For example, `"2016-09-27T14:50Z"`. You can
9711
+ # specify any time range in the previous three hours.
9657
9712
  # @return [Time]
9658
9713
  #
9659
9714
  # @!attribute [rw] end_time
9660
9715
  # The end of the time range from which you want `GetSampledRequests`
9661
- # to return a sample of the requests that your AWS resource received.
9662
- # You must specify the times in Coordinated Universal Time (UTC)
9663
- # format. UTC format includes the special designator, `Z`. For
9664
- # example, `"2016-09-27T14:50Z"`. You can specify any time range in
9665
- # the previous three hours.
9716
+ # to return a sample of the requests that your Amazon Web Services
9717
+ # resource received. You must specify the times in Coordinated
9718
+ # Universal Time (UTC) format. UTC format includes the special
9719
+ # designator, `Z`. For example, `"2016-09-27T14:50Z"`. You can specify
9720
+ # any time range in the previous three hours.
9666
9721
  # @return [Time]
9667
9722
  #
9668
9723
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/TimeWindow AWS API Documentation
@@ -9722,10 +9777,10 @@ module Aws::WAFV2
9722
9777
  # @return [String]
9723
9778
  #
9724
9779
  # @!attribute [rw] scope
9725
- # Specifies whether this is for an AWS CloudFront distribution or for
9726
- # a regional application. A regional application can be an Application
9727
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
9728
- # API.
9780
+ # Specifies whether this is for an Amazon CloudFront distribution or
9781
+ # for a regional application. A regional application can be an
9782
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
9783
+ # an AppSync GraphQL API.
9729
9784
  #
9730
9785
  # To work with CloudFront, you must also specify the Region US East
9731
9786
  # (N. Virginia) as follows:
@@ -9749,25 +9804,24 @@ module Aws::WAFV2
9749
9804
  # @!attribute [rw] addresses
9750
9805
  # Contains an array of strings that specify one or more IP addresses
9751
9806
  # or blocks of IP addresses in Classless Inter-Domain Routing (CIDR)
9752
- # notation. AWS WAF supports all IPv4 and IPv6 CIDR ranges except for
9753
- # /0.
9807
+ # notation. WAF supports all IPv4 and IPv6 CIDR ranges except for /0.
9754
9808
  #
9755
9809
  # Examples:
9756
9810
  #
9757
- # * To configure AWS WAF to allow, block, or count requests that
9811
+ # * To configure WAF to allow, block, or count requests that
9758
9812
  # originated from the IP address 192.0.2.44, specify
9759
9813
  # `192.0.2.44/32`.
9760
9814
  #
9761
- # * To configure AWS WAF to allow, block, or count requests that
9815
+ # * To configure WAF to allow, block, or count requests that
9762
9816
  # originated from IP addresses from 192.0.2.0 to 192.0.2.255,
9763
9817
  # specify `192.0.2.0/24`.
9764
9818
  #
9765
- # * To configure AWS WAF to allow, block, or count requests that
9819
+ # * To configure WAF to allow, block, or count requests that
9766
9820
  # originated from the IP address
9767
9821
  # 1111:0000:0000:0000:0000:0000:0000:0111, specify
9768
9822
  # `1111:0000:0000:0000:0000:0000:0000:0111/128`.
9769
9823
  #
9770
- # * To configure AWS WAF to allow, block, or count requests that
9824
+ # * To configure WAF to allow, block, or count requests that
9771
9825
  # originated from IP addresses
9772
9826
  # 1111:0000:0000:0000:0000:0000:0000:0000 to
9773
9827
  # 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify
@@ -9782,14 +9836,14 @@ module Aws::WAFV2
9782
9836
  # @return [Array<String>]
9783
9837
  #
9784
9838
  # @!attribute [rw] lock_token
9785
- # A token used for optimistic locking. AWS WAF returns a token to your
9786
- # get and list requests, to mark the state of the entity at the time
9787
- # of the request. To make changes to the entity associated with the
9839
+ # A token used for optimistic locking. WAF returns a token to your get
9840
+ # and list requests, to mark the state of the entity at the time of
9841
+ # the request. To make changes to the entity associated with the
9788
9842
  # token, you provide the token to operations like update and delete.
9789
- # AWS WAF uses the token to ensure that no changes have been made to
9790
- # the entity since you last retrieved it. If a change has been made,
9791
- # the update fails with a `WAFOptimisticLockException`. If this
9792
- # happens, perform another get, and use the new token returned by that
9843
+ # WAF uses the token to ensure that no changes have been made to the
9844
+ # entity since you last retrieved it. If a change has been made, the
9845
+ # update fails with a `WAFOptimisticLockException`. If this happens,
9846
+ # perform another get, and use the new token returned by that
9793
9847
  # operation.
9794
9848
  # @return [String]
9795
9849
  #
@@ -9807,9 +9861,9 @@ module Aws::WAFV2
9807
9861
  end
9808
9862
 
9809
9863
  # @!attribute [rw] next_lock_token
9810
- # A token used for optimistic locking. AWS WAF returns this token to
9811
- # your update requests. You use `NextLockToken` in the same manner as
9812
- # you use `LockToken`.
9864
+ # A token used for optimistic locking. WAF returns this token to your
9865
+ # update requests. You use `NextLockToken` in the same manner as you
9866
+ # use `LockToken`.
9813
9867
  # @return [String]
9814
9868
  #
9815
9869
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/UpdateIPSetResponse AWS API Documentation
@@ -9842,10 +9896,10 @@ module Aws::WAFV2
9842
9896
  # @return [String]
9843
9897
  #
9844
9898
  # @!attribute [rw] scope
9845
- # Specifies whether this is for an AWS CloudFront distribution or for
9846
- # a regional application. A regional application can be an Application
9847
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
9848
- # API.
9899
+ # Specifies whether this is for an Amazon CloudFront distribution or
9900
+ # for a regional application. A regional application can be an
9901
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
9902
+ # an AppSync GraphQL API.
9849
9903
  #
9850
9904
  # To work with CloudFront, you must also specify the Region US East
9851
9905
  # (N. Virginia) as follows:
@@ -9870,14 +9924,14 @@ module Aws::WAFV2
9870
9924
  # @return [Array<Types::Regex>]
9871
9925
  #
9872
9926
  # @!attribute [rw] lock_token
9873
- # A token used for optimistic locking. AWS WAF returns a token to your
9874
- # get and list requests, to mark the state of the entity at the time
9875
- # of the request. To make changes to the entity associated with the
9927
+ # A token used for optimistic locking. WAF returns a token to your get
9928
+ # and list requests, to mark the state of the entity at the time of
9929
+ # the request. To make changes to the entity associated with the
9876
9930
  # token, you provide the token to operations like update and delete.
9877
- # AWS WAF uses the token to ensure that no changes have been made to
9878
- # the entity since you last retrieved it. If a change has been made,
9879
- # the update fails with a `WAFOptimisticLockException`. If this
9880
- # happens, perform another get, and use the new token returned by that
9931
+ # WAF uses the token to ensure that no changes have been made to the
9932
+ # entity since you last retrieved it. If a change has been made, the
9933
+ # update fails with a `WAFOptimisticLockException`. If this happens,
9934
+ # perform another get, and use the new token returned by that
9881
9935
  # operation.
9882
9936
  # @return [String]
9883
9937
  #
@@ -9895,9 +9949,9 @@ module Aws::WAFV2
9895
9949
  end
9896
9950
 
9897
9951
  # @!attribute [rw] next_lock_token
9898
- # A token used for optimistic locking. AWS WAF returns this token to
9899
- # your update requests. You use `NextLockToken` in the same manner as
9900
- # you use `LockToken`.
9952
+ # A token used for optimistic locking. WAF returns this token to your
9953
+ # update requests. You use `NextLockToken` in the same manner as you
9954
+ # use `LockToken`.
9901
9955
  # @return [String]
9902
9956
  #
9903
9957
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/UpdateRegexPatternSetResponse AWS API Documentation
@@ -9953,7 +10007,7 @@ module Aws::WAFV2
9953
10007
  # text_transformations: [ # required
9954
10008
  # {
9955
10009
  # priority: 1, # required
9956
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
10010
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
9957
10011
  # },
9958
10012
  # ],
9959
10013
  # positional_constraint: "EXACTLY", # required, accepts EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD
@@ -9989,7 +10043,7 @@ module Aws::WAFV2
9989
10043
  # text_transformations: [ # required
9990
10044
  # {
9991
10045
  # priority: 1, # required
9992
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
10046
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
9993
10047
  # },
9994
10048
  # ],
9995
10049
  # },
@@ -10024,7 +10078,7 @@ module Aws::WAFV2
10024
10078
  # text_transformations: [ # required
10025
10079
  # {
10026
10080
  # priority: 1, # required
10027
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
10081
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
10028
10082
  # },
10029
10083
  # ],
10030
10084
  # },
@@ -10061,7 +10115,7 @@ module Aws::WAFV2
10061
10115
  # text_transformations: [ # required
10062
10116
  # {
10063
10117
  # priority: 1, # required
10064
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
10118
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
10065
10119
  # },
10066
10120
  # ],
10067
10121
  # },
@@ -10120,7 +10174,7 @@ module Aws::WAFV2
10120
10174
  # text_transformations: [ # required
10121
10175
  # {
10122
10176
  # priority: 1, # required
10123
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
10177
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
10124
10178
  # },
10125
10179
  # ],
10126
10180
  # },
@@ -10251,10 +10305,10 @@ module Aws::WAFV2
10251
10305
  # @return [String]
10252
10306
  #
10253
10307
  # @!attribute [rw] scope
10254
- # Specifies whether this is for an AWS CloudFront distribution or for
10255
- # a regional application. A regional application can be an Application
10256
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
10257
- # API.
10308
+ # Specifies whether this is for an Amazon CloudFront distribution or
10309
+ # for a regional application. A regional application can be an
10310
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
10311
+ # an AppSync GraphQL API.
10258
10312
  #
10259
10313
  # To work with CloudFront, you must also specify the Region US East
10260
10314
  # (N. Virginia) as follows:
@@ -10278,8 +10332,8 @@ module Aws::WAFV2
10278
10332
  # @!attribute [rw] rules
10279
10333
  # The Rule statements used to identify the web requests that you want
10280
10334
  # to allow, block, or count. Each rule includes one top-level
10281
- # statement that AWS WAF uses to identify matching web requests, and
10282
- # parameters that govern how AWS WAF handles them.
10335
+ # statement that WAF uses to identify matching web requests, and
10336
+ # parameters that govern how WAF handles them.
10283
10337
  # @return [Array<Types::Rule>]
10284
10338
  #
10285
10339
  # @!attribute [rw] visibility_config
@@ -10288,14 +10342,14 @@ module Aws::WAFV2
10288
10342
  # @return [Types::VisibilityConfig]
10289
10343
  #
10290
10344
  # @!attribute [rw] lock_token
10291
- # A token used for optimistic locking. AWS WAF returns a token to your
10292
- # get and list requests, to mark the state of the entity at the time
10293
- # of the request. To make changes to the entity associated with the
10345
+ # A token used for optimistic locking. WAF returns a token to your get
10346
+ # and list requests, to mark the state of the entity at the time of
10347
+ # the request. To make changes to the entity associated with the
10294
10348
  # token, you provide the token to operations like update and delete.
10295
- # AWS WAF uses the token to ensure that no changes have been made to
10296
- # the entity since you last retrieved it. If a change has been made,
10297
- # the update fails with a `WAFOptimisticLockException`. If this
10298
- # happens, perform another get, and use the new token returned by that
10349
+ # WAF uses the token to ensure that no changes have been made to the
10350
+ # entity since you last retrieved it. If a change has been made, the
10351
+ # update fails with a `WAFOptimisticLockException`. If this happens,
10352
+ # perform another get, and use the new token returned by that
10299
10353
  # operation.
10300
10354
  # @return [String]
10301
10355
  #
@@ -10306,12 +10360,12 @@ module Aws::WAFV2
10306
10360
  # the rules that you define in the rule group.
10307
10361
  #
10308
10362
  # For information about customizing web requests and responses, see
10309
- # [Customizing web requests and responses in AWS WAF][1] in the [AWS
10310
- # WAF Developer Guide][2].
10363
+ # [Customizing web requests and responses in WAF][1] in the [WAF
10364
+ # Developer Guide][2].
10311
10365
  #
10312
10366
  # For information about the limits on count and size for custom
10313
- # request and response settings, see [AWS WAF quotas][3] in the [AWS
10314
- # WAF Developer Guide][2].
10367
+ # request and response settings, see [WAF quotas][3] in the [WAF
10368
+ # Developer Guide][2].
10315
10369
  #
10316
10370
  #
10317
10371
  #
@@ -10336,9 +10390,9 @@ module Aws::WAFV2
10336
10390
  end
10337
10391
 
10338
10392
  # @!attribute [rw] next_lock_token
10339
- # A token used for optimistic locking. AWS WAF returns this token to
10340
- # your update requests. You use `NextLockToken` in the same manner as
10341
- # you use `LockToken`.
10393
+ # A token used for optimistic locking. WAF returns this token to your
10394
+ # update requests. You use `NextLockToken` in the same manner as you
10395
+ # use `LockToken`.
10342
10396
  # @return [String]
10343
10397
  #
10344
10398
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/UpdateRuleGroupResponse AWS API Documentation
@@ -10418,7 +10472,7 @@ module Aws::WAFV2
10418
10472
  # text_transformations: [ # required
10419
10473
  # {
10420
10474
  # priority: 1, # required
10421
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
10475
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
10422
10476
  # },
10423
10477
  # ],
10424
10478
  # positional_constraint: "EXACTLY", # required, accepts EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD
@@ -10454,7 +10508,7 @@ module Aws::WAFV2
10454
10508
  # text_transformations: [ # required
10455
10509
  # {
10456
10510
  # priority: 1, # required
10457
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
10511
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
10458
10512
  # },
10459
10513
  # ],
10460
10514
  # },
@@ -10489,7 +10543,7 @@ module Aws::WAFV2
10489
10543
  # text_transformations: [ # required
10490
10544
  # {
10491
10545
  # priority: 1, # required
10492
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
10546
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
10493
10547
  # },
10494
10548
  # ],
10495
10549
  # },
@@ -10526,7 +10580,7 @@ module Aws::WAFV2
10526
10580
  # text_transformations: [ # required
10527
10581
  # {
10528
10582
  # priority: 1, # required
10529
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
10583
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
10530
10584
  # },
10531
10585
  # ],
10532
10586
  # },
@@ -10585,7 +10639,7 @@ module Aws::WAFV2
10585
10639
  # text_transformations: [ # required
10586
10640
  # {
10587
10641
  # priority: 1, # required
10588
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
10642
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
10589
10643
  # },
10590
10644
  # ],
10591
10645
  # },
@@ -10711,15 +10765,15 @@ module Aws::WAFV2
10711
10765
  # }
10712
10766
  #
10713
10767
  # @!attribute [rw] name
10714
- # The name of the Web ACL. You cannot change the name of a Web ACL
10768
+ # The name of the web ACL. You cannot change the name of a web ACL
10715
10769
  # after you create it.
10716
10770
  # @return [String]
10717
10771
  #
10718
10772
  # @!attribute [rw] scope
10719
- # Specifies whether this is for an AWS CloudFront distribution or for
10720
- # a regional application. A regional application can be an Application
10721
- # Load Balancer (ALB), an API Gateway REST API, or an AppSync GraphQL
10722
- # API.
10773
+ # Specifies whether this is for an Amazon CloudFront distribution or
10774
+ # for a regional application. A regional application can be an
10775
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
10776
+ # an AppSync GraphQL API.
10723
10777
  #
10724
10778
  # To work with CloudFront, you must also specify the Region US East
10725
10779
  # (N. Virginia) as follows:
@@ -10731,7 +10785,7 @@ module Aws::WAFV2
10731
10785
  # @return [String]
10732
10786
  #
10733
10787
  # @!attribute [rw] id
10734
- # The unique identifier for the Web ACL. This ID is returned in the
10788
+ # The unique identifier for the web ACL. This ID is returned in the
10735
10789
  # responses to create and list commands. You provide it to operations
10736
10790
  # like update and delete.
10737
10791
  # @return [String]
@@ -10742,14 +10796,14 @@ module Aws::WAFV2
10742
10796
  # @return [Types::DefaultAction]
10743
10797
  #
10744
10798
  # @!attribute [rw] description
10745
- # A description of the Web ACL that helps with identification.
10799
+ # A description of the web ACL that helps with identification.
10746
10800
  # @return [String]
10747
10801
  #
10748
10802
  # @!attribute [rw] rules
10749
10803
  # The Rule statements used to identify the web requests that you want
10750
10804
  # to allow, block, or count. Each rule includes one top-level
10751
- # statement that AWS WAF uses to identify matching web requests, and
10752
- # parameters that govern how AWS WAF handles them.
10805
+ # statement that WAF uses to identify matching web requests, and
10806
+ # parameters that govern how WAF handles them.
10753
10807
  # @return [Array<Types::Rule>]
10754
10808
  #
10755
10809
  # @!attribute [rw] visibility_config
@@ -10758,14 +10812,14 @@ module Aws::WAFV2
10758
10812
  # @return [Types::VisibilityConfig]
10759
10813
  #
10760
10814
  # @!attribute [rw] lock_token
10761
- # A token used for optimistic locking. AWS WAF returns a token to your
10762
- # get and list requests, to mark the state of the entity at the time
10763
- # of the request. To make changes to the entity associated with the
10815
+ # A token used for optimistic locking. WAF returns a token to your get
10816
+ # and list requests, to mark the state of the entity at the time of
10817
+ # the request. To make changes to the entity associated with the
10764
10818
  # token, you provide the token to operations like update and delete.
10765
- # AWS WAF uses the token to ensure that no changes have been made to
10766
- # the entity since you last retrieved it. If a change has been made,
10767
- # the update fails with a `WAFOptimisticLockException`. If this
10768
- # happens, perform another get, and use the new token returned by that
10819
+ # WAF uses the token to ensure that no changes have been made to the
10820
+ # entity since you last retrieved it. If a change has been made, the
10821
+ # update fails with a `WAFOptimisticLockException`. If this happens,
10822
+ # perform another get, and use the new token returned by that
10769
10823
  # operation.
10770
10824
  # @return [String]
10771
10825
  #
@@ -10776,12 +10830,12 @@ module Aws::WAFV2
10776
10830
  # rules and default actions that you define in the web ACL.
10777
10831
  #
10778
10832
  # For information about customizing web requests and responses, see
10779
- # [Customizing web requests and responses in AWS WAF][1] in the [AWS
10780
- # WAF Developer Guide][2].
10833
+ # [Customizing web requests and responses in WAF][1] in the [WAF
10834
+ # Developer Guide][2].
10781
10835
  #
10782
10836
  # For information about the limits on count and size for custom
10783
- # request and response settings, see [AWS WAF quotas][3] in the [AWS
10784
- # WAF Developer Guide][2].
10837
+ # request and response settings, see [WAF quotas][3] in the [WAF
10838
+ # Developer Guide][2].
10785
10839
  #
10786
10840
  #
10787
10841
  #
@@ -10807,9 +10861,9 @@ module Aws::WAFV2
10807
10861
  end
10808
10862
 
10809
10863
  # @!attribute [rw] next_lock_token
10810
- # A token used for optimistic locking. AWS WAF returns this token to
10811
- # your update requests. You use `NextLockToken` in the same manner as
10812
- # you use `LockToken`.
10864
+ # A token used for optimistic locking. WAF returns this token to your
10865
+ # update requests. You use `NextLockToken` in the same manner as you
10866
+ # use `LockToken`.
10813
10867
  # @return [String]
10814
10868
  #
10815
10869
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/UpdateWebACLResponse AWS API Documentation
@@ -10821,10 +10875,10 @@ module Aws::WAFV2
10821
10875
  end
10822
10876
 
10823
10877
  # The path component of the URI of a web request. This is the part of a
10824
- # web request that identifies a resource, for example,
10878
+ # web request that identifies a resource. For example,
10825
10879
  # `/images/daily-ad.jpg`.
10826
10880
  #
10827
- # This is used only to indicate the web request component for AWS WAF to
10881
+ # This is used only to indicate the web request component for WAF to
10828
10882
  # inspect, in the FieldToMatch specification.
10829
10883
  #
10830
10884
  # @api private
@@ -10846,14 +10900,14 @@ module Aws::WAFV2
10846
10900
  # }
10847
10901
  #
10848
10902
  # @!attribute [rw] sampled_requests_enabled
10849
- # A boolean indicating whether AWS WAF should store a sampling of the
10850
- # web requests that match the rules. You can view the sampled requests
10851
- # through the AWS WAF console.
10903
+ # A boolean indicating whether WAF should store a sampling of the web
10904
+ # requests that match the rules. You can view the sampled requests
10905
+ # through the WAF console.
10852
10906
  # @return [Boolean]
10853
10907
  #
10854
10908
  # @!attribute [rw] cloud_watch_metrics_enabled
10855
10909
  # A boolean indicating whether the associated resource sends metrics
10856
- # to CloudWatch. For the list of available metrics, see [AWS WAF
10910
+ # to Amazon CloudWatch. For the list of available metrics, see [WAF
10857
10911
  # Metrics][1].
10858
10912
  #
10859
10913
  #
@@ -10862,10 +10916,10 @@ module Aws::WAFV2
10862
10916
  # @return [Boolean]
10863
10917
  #
10864
10918
  # @!attribute [rw] metric_name
10865
- # A name of the CloudWatch metric. The name can contain only the
10866
- # characters: A-Z, a-z, 0-9, - (hyphen), and \_ (underscore). The name
10867
- # can be from one to 128 characters long. It can't contain whitespace
10868
- # or metric names reserved for AWS WAF, for example "All" and
10919
+ # A name of the Amazon CloudWatch metric. The name can contain only
10920
+ # the characters: A-Z, a-z, 0-9, - (hyphen), and \_ (underscore). The
10921
+ # name can be from one to 128 characters long. It can't contain
10922
+ # whitespace or metric names reserved for WAF, for example "All" and
10869
10923
  # "Default\_Action."
10870
10924
  # @return [String]
10871
10925
  #
@@ -10879,8 +10933,8 @@ module Aws::WAFV2
10879
10933
  include Aws::Structure
10880
10934
  end
10881
10935
 
10882
- # AWS WAF couldn’t perform the operation because your resource is being
10883
- # used by another resource or it’s associated with another resource.
10936
+ # WAF couldn’t perform the operation because your resource is being used
10937
+ # by another resource or it’s associated with another resource.
10884
10938
  #
10885
10939
  # @!attribute [rw] message
10886
10940
  # @return [String]
@@ -10893,8 +10947,8 @@ module Aws::WAFV2
10893
10947
  include Aws::Structure
10894
10948
  end
10895
10949
 
10896
- # AWS WAF couldn’t perform the operation because the resource that you
10897
- # tried to save is a duplicate of an existing one.
10950
+ # WAF couldn’t perform the operation because the resource that you tried
10951
+ # to save is a duplicate of an existing one.
10898
10952
  #
10899
10953
  # @!attribute [rw] message
10900
10954
  # @return [String]
@@ -10907,8 +10961,8 @@ module Aws::WAFV2
10907
10961
  include Aws::Structure
10908
10962
  end
10909
10963
 
10910
- # Your request is valid, but AWS WAF couldn’t perform the operation
10911
- # because of a system problem. Retry your request.
10964
+ # Your request is valid, but WAF couldn’t perform the operation because
10965
+ # of a system problem. Retry your request.
10912
10966
  #
10913
10967
  # @!attribute [rw] message
10914
10968
  # @return [String]
@@ -10934,10 +10988,10 @@ module Aws::WAFV2
10934
10988
  include Aws::Structure
10935
10989
  end
10936
10990
 
10937
- # The operation failed because AWS WAF didn't recognize a parameter in
10938
- # the request. For example:
10991
+ # The operation failed because WAF didn't recognize a parameter in the
10992
+ # request. For example:
10939
10993
  #
10940
- # * You specified an invalid parameter name or value.
10994
+ # * You specified a parameter name or value that isn't valid.
10941
10995
  #
10942
10996
  # * Your nested statement isn't valid. You might have tried to nest a
10943
10997
  # statement that can’t be nested.
@@ -10946,7 +11000,7 @@ module Aws::WAFV2
10946
11000
  # among the types available at DefaultAction.
10947
11001
  #
10948
11002
  # * Your request references an ARN that is malformed, or corresponds to
10949
- # a resource with which a Web ACL cannot be associated.
11003
+ # a resource with which a web ACL can't be associated.
10950
11004
  #
10951
11005
  # @!attribute [rw] message
10952
11006
  # @return [String]
@@ -10985,7 +11039,7 @@ module Aws::WAFV2
10985
11039
  # * `Effect` must specify `Allow`.
10986
11040
  #
10987
11041
  # * `Action` must specify `wafv2:CreateWebACL`, `wafv2:UpdateWebACL`,
10988
- # and `wafv2:PutFirewallManagerRuleGroups`. AWS WAF rejects any extra
11042
+ # and `wafv2:PutFirewallManagerRuleGroups`. WAF rejects any extra
10989
11043
  # actions or wildcard actions in the policy.
10990
11044
  #
10991
11045
  # * The policy must not include a `Resource` parameter.
@@ -11007,7 +11061,7 @@ module Aws::WAFV2
11007
11061
  include Aws::Structure
11008
11062
  end
11009
11063
 
11010
- # AWS WAF couldn’t perform the operation because the resource that you
11064
+ # WAF couldn’t perform the operation because the resource that you
11011
11065
  # requested isn’t valid. Check the resource, and try again.
11012
11066
  #
11013
11067
  # @!attribute [rw] message
@@ -11021,10 +11075,10 @@ module Aws::WAFV2
11021
11075
  include Aws::Structure
11022
11076
  end
11023
11077
 
11024
- # AWS WAF couldn’t perform the operation because you exceeded your
11025
- # resource limit. For example, the maximum number of `WebACL` objects
11026
- # that you can create for an AWS account. For more information, see
11027
- # [Limits][1] in the *AWS WAF Developer Guide*.
11078
+ # WAF couldn’t perform the operation because you exceeded your resource
11079
+ # limit. For example, the maximum number of `WebACL` objects that you
11080
+ # can create for an account. For more information, see [Limits][1] in
11081
+ # the *WAF Developer Guide*.
11028
11082
  #
11029
11083
  #
11030
11084
  #
@@ -11041,7 +11095,7 @@ module Aws::WAFV2
11041
11095
  include Aws::Structure
11042
11096
  end
11043
11097
 
11044
- # AWS WAF couldn’t perform the operation because your resource doesn’t
11098
+ # WAF couldn’t perform the operation because your resource doesn’t
11045
11099
  # exist.
11046
11100
  #
11047
11101
  # @!attribute [rw] message
@@ -11055,10 +11109,10 @@ module Aws::WAFV2
11055
11109
  include Aws::Structure
11056
11110
  end
11057
11111
 
11058
- # AWS WAF couldn’t save your changes because you tried to update or
11059
- # delete a resource that has changed since you last retrieved it. Get
11060
- # the resource again, make any changes you need to make to the new copy,
11061
- # and retry your operation.
11112
+ # WAF couldn’t save your changes because you tried to update or delete a
11113
+ # resource that has changed since you last retrieved it. Get the
11114
+ # resource again, make any changes you need to make to the new copy, and
11115
+ # retry your operation.
11062
11116
  #
11063
11117
  # @!attribute [rw] message
11064
11118
  # @return [String]
@@ -11071,9 +11125,9 @@ module Aws::WAFV2
11071
11125
  include Aws::Structure
11072
11126
  end
11073
11127
 
11074
- # AWS WAF is not able to access the service linked role. This can be
11075
- # caused by a previous `PutLoggingConfiguration` request, which can lock
11076
- # the service linked role for about 20 seconds. Please try your request
11128
+ # WAF is not able to access the service linked role. This can be caused
11129
+ # by a previous `PutLoggingConfiguration` request, which can lock the
11130
+ # service linked role for about 20 seconds. Please try your request
11077
11131
  # again. The service linked role can also be locked by a previous
11078
11132
  # `DeleteServiceLinkedRole` request, which can lock the role for 15
11079
11133
  # minutes or more. If you recently made a call to
@@ -11119,7 +11173,7 @@ module Aws::WAFV2
11119
11173
  include Aws::Structure
11120
11174
  end
11121
11175
 
11122
- # AWS WAF couldn’t perform your tagging operation because of an internal
11176
+ # WAF couldn’t perform your tagging operation because of an internal
11123
11177
  # error. Retry your request.
11124
11178
  #
11125
11179
  # @!attribute [rw] message
@@ -11133,7 +11187,7 @@ module Aws::WAFV2
11133
11187
  include Aws::Structure
11134
11188
  end
11135
11189
 
11136
- # AWS WAF couldn’t retrieve the resource that you requested. Retry your
11190
+ # WAF couldn’t retrieve the resource that you requested. Retry your
11137
11191
  # request.
11138
11192
  #
11139
11193
  # @!attribute [rw] message
@@ -11147,18 +11201,19 @@ module Aws::WAFV2
11147
11201
  include Aws::Structure
11148
11202
  end
11149
11203
 
11150
- # A Web ACL defines a collection of rules to use to inspect and control
11204
+ # A web ACL defines a collection of rules to use to inspect and control
11151
11205
  # web requests. Each rule has an action defined (allow, block, or count)
11152
- # for requests that match the statement of the rule. In the Web ACL, you
11206
+ # for requests that match the statement of the rule. In the web ACL, you
11153
11207
  # assign a default action to take (allow, block) for any request that
11154
- # does not match any of the rules. The rules in a Web ACL can be a
11208
+ # does not match any of the rules. The rules in a web ACL can be a
11155
11209
  # combination of the types Rule, RuleGroup, and managed rule group. You
11156
- # can associate a Web ACL with one or more AWS resources to protect. The
11157
- # resources can be Amazon CloudFront, an Amazon API Gateway REST API, an
11158
- # Application Load Balancer, or an AWS AppSync GraphQL API.
11210
+ # can associate a web ACL with one or more Amazon Web Services resources
11211
+ # to protect. The resources can be an Amazon CloudFront distribution, an
11212
+ # Amazon API Gateway REST API, an Application Load Balancer, or an
11213
+ # AppSync GraphQL API.
11159
11214
  #
11160
11215
  # @!attribute [rw] name
11161
- # The name of the Web ACL. You cannot change the name of a Web ACL
11216
+ # The name of the web ACL. You cannot change the name of a web ACL
11162
11217
  # after you create it.
11163
11218
  # @return [String]
11164
11219
  #
@@ -11169,7 +11224,7 @@ module Aws::WAFV2
11169
11224
  # @return [String]
11170
11225
  #
11171
11226
  # @!attribute [rw] arn
11172
- # The Amazon Resource Name (ARN) of the Web ACL that you want to
11227
+ # The Amazon Resource Name (ARN) of the web ACL that you want to
11173
11228
  # associate with the resource.
11174
11229
  # @return [String]
11175
11230
  #
@@ -11179,14 +11234,14 @@ module Aws::WAFV2
11179
11234
  # @return [Types::DefaultAction]
11180
11235
  #
11181
11236
  # @!attribute [rw] description
11182
- # A description of the Web ACL that helps with identification.
11237
+ # A description of the web ACL that helps with identification.
11183
11238
  # @return [String]
11184
11239
  #
11185
11240
  # @!attribute [rw] rules
11186
11241
  # The Rule statements used to identify the web requests that you want
11187
11242
  # to allow, block, or count. Each rule includes one top-level
11188
- # statement that AWS WAF uses to identify matching web requests, and
11189
- # parameters that govern how AWS WAF handles them.
11243
+ # statement that WAF uses to identify matching web requests, and
11244
+ # parameters that govern how WAF handles them.
11190
11245
  # @return [Array<Types::Rule>]
11191
11246
  #
11192
11247
  # @!attribute [rw] visibility_config
@@ -11198,8 +11253,8 @@ module Aws::WAFV2
11198
11253
  # The web ACL capacity units (WCUs) currently being used by this web
11199
11254
  # ACL.
11200
11255
  #
11201
- # AWS WAF uses WCUs to calculate and control the operating resources
11202
- # that are used to run your rules, rule groups, and web ACLs. AWS WAF
11256
+ # WAF uses WCUs to calculate and control the operating resources that
11257
+ # are used to run your rules, rule groups, and web ACLs. WAF
11203
11258
  # calculates capacity differently for each rule type, to reflect the
11204
11259
  # relative cost of each rule. Simple rules that cost little to run use
11205
11260
  # fewer WCUs than more complex rules that use more processing power.
@@ -11209,10 +11264,10 @@ module Aws::WAFV2
11209
11264
  # @return [Integer]
11210
11265
  #
11211
11266
  # @!attribute [rw] pre_process_firewall_manager_rule_groups
11212
- # The first set of rules for AWS WAF to process in the web ACL. This
11213
- # is defined in an AWS Firewall Manager WAF policy and contains only
11214
- # rule group references. You can't alter these. Any rules and rule
11215
- # groups that you define for the web ACL are prioritized after these.
11267
+ # The first set of rules for WAF to process in the web ACL. This is
11268
+ # defined in an Firewall Manager WAF policy and contains only rule
11269
+ # group references. You can't alter these. Any rules and rule groups
11270
+ # that you define for the web ACL are prioritized after these.
11216
11271
  #
11217
11272
  # In the Firewall Manager WAF policy, the Firewall Manager
11218
11273
  # administrator can define a set of rule groups to run first in the
@@ -11222,8 +11277,8 @@ module Aws::WAFV2
11222
11277
  # @return [Array<Types::FirewallManagerRuleGroup>]
11223
11278
  #
11224
11279
  # @!attribute [rw] post_process_firewall_manager_rule_groups
11225
- # The last set of rules for AWS WAF to process in the web ACL. This is
11226
- # defined in an AWS Firewall Manager WAF policy and contains only rule
11280
+ # The last set of rules for WAF to process in the web ACL. This is
11281
+ # defined in an Firewall Manager WAF policy and contains only rule
11227
11282
  # group references. You can't alter these. Any rules and rule groups
11228
11283
  # that you define for the web ACL are prioritized before these.
11229
11284
  #
@@ -11235,9 +11290,9 @@ module Aws::WAFV2
11235
11290
  # @return [Array<Types::FirewallManagerRuleGroup>]
11236
11291
  #
11237
11292
  # @!attribute [rw] managed_by_firewall_manager
11238
- # Indicates whether this web ACL is managed by AWS Firewall Manager.
11239
- # If true, then only AWS Firewall Manager can delete the web ACL or
11240
- # any Firewall Manager rule groups in the web ACL.
11293
+ # Indicates whether this web ACL is managed by Firewall Manager. If
11294
+ # true, then only Firewall Manager can delete the web ACL or any
11295
+ # Firewall Manager rule groups in the web ACL.
11241
11296
  # @return [Boolean]
11242
11297
  #
11243
11298
  # @!attribute [rw] label_namespace
@@ -11249,11 +11304,10 @@ module Aws::WAFV2
11249
11304
  #
11250
11305
  # `awswaf:<account ID>:webacl:<web ACL name>:`
11251
11306
  #
11252
- # * When a rule with a label matches a web request, AWS WAF adds the
11253
- # fully qualified label to the request. A fully qualified label is
11254
- # made up of the label namespace from the rule group or web ACL
11255
- # where the rule is defined and the label from the rule, separated
11256
- # by a colon:
11307
+ # * When a rule with a label matches a web request, WAF adds the fully
11308
+ # qualified label to the request. A fully qualified label is made up
11309
+ # of the label namespace from the rule group or web ACL where the
11310
+ # rule is defined and the label from the rule, separated by a colon:
11257
11311
  #
11258
11312
  # `<label namespace>:<label from rule>`
11259
11313
  # @return [String]
@@ -11265,12 +11319,12 @@ module Aws::WAFV2
11265
11319
  # rules and default actions that you define in the web ACL.
11266
11320
  #
11267
11321
  # For information about customizing web requests and responses, see
11268
- # [Customizing web requests and responses in AWS WAF][1] in the [AWS
11269
- # WAF Developer Guide][2].
11322
+ # [Customizing web requests and responses in WAF][1] in the [WAF
11323
+ # Developer Guide][2].
11270
11324
  #
11271
11325
  # For information about the limits on count and size for custom
11272
- # request and response settings, see [AWS WAF quotas][3] in the [AWS
11273
- # WAF Developer Guide][2].
11326
+ # request and response settings, see [WAF quotas][3] in the [WAF
11327
+ # Developer Guide][2].
11274
11328
  #
11275
11329
  #
11276
11330
  #
@@ -11305,29 +11359,29 @@ module Aws::WAFV2
11305
11359
  # to operations like AssociateWebACL.
11306
11360
  #
11307
11361
  # @!attribute [rw] name
11308
- # The name of the Web ACL. You cannot change the name of a Web ACL
11362
+ # The name of the web ACL. You cannot change the name of a web ACL
11309
11363
  # after you create it.
11310
11364
  # @return [String]
11311
11365
  #
11312
11366
  # @!attribute [rw] id
11313
- # The unique identifier for the Web ACL. This ID is returned in the
11367
+ # The unique identifier for the web ACL. This ID is returned in the
11314
11368
  # responses to create and list commands. You provide it to operations
11315
11369
  # like update and delete.
11316
11370
  # @return [String]
11317
11371
  #
11318
11372
  # @!attribute [rw] description
11319
- # A description of the Web ACL that helps with identification.
11373
+ # A description of the web ACL that helps with identification.
11320
11374
  # @return [String]
11321
11375
  #
11322
11376
  # @!attribute [rw] lock_token
11323
- # A token used for optimistic locking. AWS WAF returns a token to your
11324
- # get and list requests, to mark the state of the entity at the time
11325
- # of the request. To make changes to the entity associated with the
11377
+ # A token used for optimistic locking. WAF returns a token to your get
11378
+ # and list requests, to mark the state of the entity at the time of
11379
+ # the request. To make changes to the entity associated with the
11326
11380
  # token, you provide the token to operations like update and delete.
11327
- # AWS WAF uses the token to ensure that no changes have been made to
11328
- # the entity since you last retrieved it. If a change has been made,
11329
- # the update fails with a `WAFOptimisticLockException`. If this
11330
- # happens, perform another get, and use the new token returned by that
11381
+ # WAF uses the token to ensure that no changes have been made to the
11382
+ # entity since you last retrieved it. If a change has been made, the
11383
+ # update fails with a `WAFOptimisticLockException`. If this happens,
11384
+ # perform another get, and use the new token returned by that
11331
11385
  # operation.
11332
11386
  # @return [String]
11333
11387
  #
@@ -11348,13 +11402,13 @@ module Aws::WAFV2
11348
11402
  end
11349
11403
 
11350
11404
  # A rule statement that defines a cross-site scripting (XSS) match
11351
- # search for AWS WAF to apply to web requests. XSS attacks are those
11352
- # where the attacker uses vulnerabilities in a benign website as a
11353
- # vehicle to inject malicious client-site scripts into other legitimate
11354
- # web browsers. The XSS match statement provides the location in
11355
- # requests that you want AWS WAF to search and text transformations to
11356
- # use on the search area before AWS WAF searches for character sequences
11357
- # that are likely to be malicious strings.
11405
+ # search for WAF to apply to web requests. XSS attacks are those where
11406
+ # the attacker uses vulnerabilities in a benign website as a vehicle to
11407
+ # inject malicious client-site scripts into other legitimate web
11408
+ # browsers. The XSS match statement provides the location in requests
11409
+ # that you want WAF to search and text transformations to use on the
11410
+ # search area before WAF searches for character sequences that are
11411
+ # likely to be malicious strings.
11358
11412
  #
11359
11413
  # @note When making an API call, you may pass XssMatchStatement
11360
11414
  # data as a hash:
@@ -11390,20 +11444,20 @@ module Aws::WAFV2
11390
11444
  # text_transformations: [ # required
11391
11445
  # {
11392
11446
  # priority: 1, # required
11393
- # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE
11447
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
11394
11448
  # },
11395
11449
  # ],
11396
11450
  # }
11397
11451
  #
11398
11452
  # @!attribute [rw] field_to_match
11399
- # The part of a web request that you want AWS WAF to inspect. For more
11453
+ # The part of a web request that you want WAF to inspect. For more
11400
11454
  # information, see FieldToMatch.
11401
11455
  # @return [Types::FieldToMatch]
11402
11456
  #
11403
11457
  # @!attribute [rw] text_transformations
11404
11458
  # Text transformations eliminate some of the unusual formatting that
11405
11459
  # attackers use in web requests in an effort to bypass detection. If
11406
- # you specify one or more transformations in a rule statement, AWS WAF
11460
+ # you specify one or more transformations in a rule statement, WAF
11407
11461
  # performs all transformations on the content of the request component
11408
11462
  # identified by `FieldToMatch`, starting from the lowest priority
11409
11463
  # setting, before inspecting the content for a match.