aws-sdk-wafv2 1.40.0 → 1.42.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (8) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +10 -0
  3. data/VERSION +1 -1
  4. data/lib/aws-sdk-wafv2/client.rb +110 -78
  5. data/lib/aws-sdk-wafv2/client_api.rb +1 -0
  6. data/lib/aws-sdk-wafv2/types.rb +158 -87
  7. data/lib/aws-sdk-wafv2.rb +1 -1
  8. metadata +2 -2
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 4855a0e2977f335d6c1140cd0f82c060f271d768115ca22040c0ebc6d3e66910
4
- data.tar.gz: 94864a8664f62a351becbbd152a65bbf3ef59eeda88ccf74c0fef1ca2cc4f3e0
3
+ metadata.gz: 055ebbbdafbd3910a0057443ee5fe424d21db8df430f2bcdf90c014362bcee2f
4
+ data.tar.gz: 9036086231dfca9ba374fc5cd044777cabf24c1b1fc472773b02cceee9ba2b8f
5
5
  SHA512:
6
- metadata.gz: d625cd9710e00169c4325b34dae5673af20a5aae346087dcb82a09a83223700aa605c488839cd7678911d9029e8227b60f61c2f066cbcbe4f72609c579acfff2
7
- data.tar.gz: e399714ade4f8ee4402d179f35e45dd362d87d86307a31849689f1aa06aa0d029b6daf9edea06ad9dc689a9ff4aff038e5395b79af2f61221cbb0a59ac691b12
6
+ metadata.gz: 3e7ed091bc6691520094f1a9fb99aaccf6b7b4b42b4732d1d14e13ba34eb528f4a2d2a48d0448ab88fedb787481f70d97e34831b60551690a94feaeab7e46e21
7
+ data.tar.gz: 01cc2a5fac9688467c6dc18a00ac8a9e2a87f285993120d071f71108d55070fbd29618018317cab07ff0252cc3353d74563b69453e2e665c05ad7d612159ac03
data/CHANGELOG.md CHANGED
@@ -1,6 +1,16 @@
1
1
  Unreleased Changes
2
2
  ------------------
3
3
 
4
+ 1.42.0 (2022-09-23)
5
+ ------------------
6
+
7
+ * Feature - Add the default specification for ResourceType in ListResourcesForWebACL.
8
+
9
+ 1.41.0 (2022-08-03)
10
+ ------------------
11
+
12
+ * Feature - You can now associate an AWS WAF web ACL with an Amazon Cognito user pool.
13
+
4
14
  1.40.0 (2022-07-15)
5
15
  ------------------
6
16
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.40.0
1
+ 1.42.0
data/lib/aws-sdk-wafv2/client.rb CHANGED
@@ -363,8 +363,8 @@ module Aws::WAFV2
363
363
 
364
364
  # Associates a web ACL with a regional application resource, to protect
365
365
  # the resource. A regional application can be an Application Load
366
- # Balancer (ALB), an Amazon API Gateway REST API, or an AppSync GraphQL
367
- # API.
366
+ # Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL
367
+ # API, or an Amazon Cognito user pool.
368
368
  #
369
369
  # For Amazon CloudFront, don't use this call. Instead, use your
370
370
  # CloudFront distribution configuration. To associate a web ACL, in the
@@ -410,6 +410,9 @@ module Aws::WAFV2
410
410
  # * For an AppSync GraphQL API:
411
411
  # `arn:aws:appsync:region:account-id:apis/GraphQLApiId `
412
412
  #
413
+ # * For an Amazon Cognito user pool:
414
+ # `arn:aws:cognito-idp:region:account-id:userpool/user-pool-id `
415
+ #
413
416
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
414
417
  #
415
418
  # @example Request syntax with placeholder values
@@ -443,8 +446,8 @@ module Aws::WAFV2
443
446
  # @option params [required, String] :scope
444
447
  # Specifies whether this is for an Amazon CloudFront distribution or for
445
448
  # a regional application. A regional application can be an Application
446
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
447
- # GraphQL API.
449
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
450
+ # GraphQL API, or an Amazon Cognito user pool.
448
451
  #
449
452
  # To work with CloudFront, you must also specify the Region US East (N.
450
453
  # Virginia) as follows:
@@ -1006,8 +1009,8 @@ module Aws::WAFV2
1006
1009
  # @option params [required, String] :scope
1007
1010
  # Specifies whether this is for an Amazon CloudFront distribution or for
1008
1011
  # a regional application. A regional application can be an Application
1009
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
1010
- # GraphQL API.
1012
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1013
+ # GraphQL API, or an Amazon Cognito user pool.
1011
1014
  #
1012
1015
  # To work with CloudFront, you must also specify the Region US East (N.
1013
1016
  # Virginia) as follows:
@@ -1025,8 +1028,9 @@ module Aws::WAFV2
1025
1028
  #
1026
1029
  # @option params [required, Array<String>] :addresses
1027
1030
  # Contains an array of strings that specifies zero or more IP addresses
1028
- # or blocks of IP addresses in Classless Inter-Domain Routing (CIDR)
1029
- # notation. WAF supports all IPv4 and IPv6 CIDR ranges except for /0.
1031
+ # or blocks of IP addresses. All addresses must be specified using
1032
+ # Classless Inter-Domain Routing (CIDR) notation. WAF supports all IPv4
1033
+ # and IPv6 CIDR ranges except for `/0`.
1030
1034
  #
1031
1035
  # Example address strings:
1032
1036
  #
@@ -1115,8 +1119,8 @@ module Aws::WAFV2
1115
1119
  # @option params [required, String] :scope
1116
1120
  # Specifies whether this is for an Amazon CloudFront distribution or for
1117
1121
  # a regional application. A regional application can be an Application
1118
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
1119
- # GraphQL API.
1122
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1123
+ # GraphQL API, or an Amazon Cognito user pool.
1120
1124
  #
1121
1125
  # To work with CloudFront, you must also specify the Region US East (N.
1122
1126
  # Virginia) as follows:
@@ -1190,8 +1194,8 @@ module Aws::WAFV2
1190
1194
  # @option params [required, String] :scope
1191
1195
  # Specifies whether this is for an Amazon CloudFront distribution or for
1192
1196
  # a regional application. A regional application can be an Application
1193
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
1194
- # GraphQL API.
1197
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1198
+ # GraphQL API, or an Amazon Cognito user pool.
1195
1199
  #
1196
1200
  # To work with CloudFront, you must also specify the Region US East (N.
1197
1201
  # Virginia) as follows:
@@ -1822,8 +1826,8 @@ module Aws::WAFV2
1822
1826
  # combination of the types Rule, RuleGroup, and managed rule group. You
1823
1827
  # can associate a web ACL with one or more Amazon Web Services resources
1824
1828
  # to protect. The resources can be an Amazon CloudFront distribution, an
1825
- # Amazon API Gateway REST API, an Application Load Balancer, or an
1826
- # AppSync GraphQL API.
1829
+ # Amazon API Gateway REST API, an Application Load Balancer, an AppSync
1830
+ # GraphQL API, or an Amazon Cognito user pool.
1827
1831
  #
1828
1832
  # @option params [required, String] :name
1829
1833
  # The name of the web ACL. You cannot change the name of a web ACL after
@@ -1832,8 +1836,8 @@ module Aws::WAFV2
1832
1836
  # @option params [required, String] :scope
1833
1837
  # Specifies whether this is for an Amazon CloudFront distribution or for
1834
1838
  # a regional application. A regional application can be an Application
1835
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
1836
- # GraphQL API.
1839
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1840
+ # GraphQL API, or an Amazon Cognito user pool.
1837
1841
  #
1838
1842
  # To work with CloudFront, you must also specify the Region US East (N.
1839
1843
  # Virginia) as follows:
@@ -2527,8 +2531,8 @@ module Aws::WAFV2
2527
2531
  # @option params [required, String] :scope
2528
2532
  # Specifies whether this is for an Amazon CloudFront distribution or for
2529
2533
  # a regional application. A regional application can be an Application
2530
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
2531
- # GraphQL API.
2534
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
2535
+ # GraphQL API, or an Amazon Cognito user pool.
2532
2536
  #
2533
2537
  # To work with CloudFront, you must also specify the Region US East (N.
2534
2538
  # Virginia) as follows:
@@ -2632,8 +2636,8 @@ module Aws::WAFV2
2632
2636
  # @option params [required, String] :scope
2633
2637
  # Specifies whether this is for an Amazon CloudFront distribution or for
2634
2638
  # a regional application. A regional application can be an Application
2635
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
2636
- # GraphQL API.
2639
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
2640
+ # GraphQL API, or an Amazon Cognito user pool.
2637
2641
  #
2638
2642
  # To work with CloudFront, you must also specify the Region US East (N.
2639
2643
  # Virginia) as follows:
@@ -2687,8 +2691,8 @@ module Aws::WAFV2
2687
2691
  # @option params [required, String] :scope
2688
2692
  # Specifies whether this is for an Amazon CloudFront distribution or for
2689
2693
  # a regional application. A regional application can be an Application
2690
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
2691
- # GraphQL API.
2694
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
2695
+ # GraphQL API, or an Amazon Cognito user pool.
2692
2696
  #
2693
2697
  # To work with CloudFront, you must also specify the Region US East (N.
2694
2698
  # Virginia) as follows:
@@ -2771,8 +2775,8 @@ module Aws::WAFV2
2771
2775
  # @option params [required, String] :scope
2772
2776
  # Specifies whether this is for an Amazon CloudFront distribution or for
2773
2777
  # a regional application. A regional application can be an Application
2774
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
2775
- # GraphQL API.
2778
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
2779
+ # GraphQL API, or an Amazon Cognito user pool.
2776
2780
  #
2777
2781
  # To work with CloudFront, you must also specify the Region US East (N.
2778
2782
  # Virginia) as follows:
@@ -2831,8 +2835,8 @@ module Aws::WAFV2
2831
2835
  # @option params [required, String] :scope
2832
2836
  # Specifies whether this is for an Amazon CloudFront distribution or for
2833
2837
  # a regional application. A regional application can be an Application
2834
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
2835
- # GraphQL API.
2838
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
2839
+ # GraphQL API, or an Amazon Cognito user pool.
2836
2840
  #
2837
2841
  # To work with CloudFront, you must also specify the Region US East (N.
2838
2842
  # Virginia) as follows:
@@ -2905,8 +2909,8 @@ module Aws::WAFV2
2905
2909
  # Disassociates the specified regional application resource from any
2906
2910
  # existing web ACL association. A resource can have at most one web ACL
2907
2911
  # association. A regional application can be an Application Load
2908
- # Balancer (ALB), an Amazon API Gateway REST API, or an AppSync GraphQL
2909
- # API.
2912
+ # Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL
2913
+ # API, or an Amazon Cognito user pool.
2910
2914
  #
2911
2915
  # For Amazon CloudFront, don't use this call. Instead, use your
2912
2916
  # CloudFront distribution configuration. To disassociate a web ACL,
@@ -2933,6 +2937,9 @@ module Aws::WAFV2
2933
2937
  # * For an AppSync GraphQL API:
2934
2938
  # `arn:aws:appsync:region:account-id:apis/GraphQLApiId `
2935
2939
  #
2940
+ # * For an Amazon Cognito user pool:
2941
+ # `arn:aws:cognito-idp:region:account-id:userpool/user-pool-id `
2942
+ #
2936
2943
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
2937
2944
  #
2938
2945
  # @example Request syntax with placeholder values
@@ -3003,8 +3010,8 @@ module Aws::WAFV2
3003
3010
  # @option params [required, String] :scope
3004
3011
  # Specifies whether this is for an Amazon CloudFront distribution or for
3005
3012
  # a regional application. A regional application can be an Application
3006
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
3007
- # GraphQL API.
3013
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3014
+ # GraphQL API, or an Amazon Cognito user pool.
3008
3015
  #
3009
3016
  # To work with CloudFront, you must also specify the Region US East (N.
3010
3017
  # Virginia) as follows:
@@ -3135,8 +3142,8 @@ module Aws::WAFV2
3135
3142
  # @option params [required, String] :scope
3136
3143
  # Specifies whether this is for an Amazon CloudFront distribution or for
3137
3144
  # a regional application. A regional application can be an Application
3138
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
3139
- # GraphQL API.
3145
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3146
+ # GraphQL API, or an Amazon Cognito user pool.
3140
3147
  #
3141
3148
  # To work with CloudFront, you must also specify the Region US East (N.
3142
3149
  # Virginia) as follows:
@@ -3292,8 +3299,8 @@ module Aws::WAFV2
3292
3299
  # @option params [required, String] :scope
3293
3300
  # Specifies whether this is for an Amazon CloudFront distribution or for
3294
3301
  # a regional application. A regional application can be an Application
3295
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
3296
- # GraphQL API.
3302
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3303
+ # GraphQL API, or an Amazon Cognito user pool.
3297
3304
  #
3298
3305
  # To work with CloudFront, you must also specify the Region US East (N.
3299
3306
  # Virginia) as follows:
@@ -3365,8 +3372,8 @@ module Aws::WAFV2
3365
3372
  # @option params [required, String] :scope
3366
3373
  # Specifies whether this is for an Amazon CloudFront distribution or for
3367
3374
  # a regional application. A regional application can be an Application
3368
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
3369
- # GraphQL API.
3375
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3376
+ # GraphQL API, or an Amazon Cognito user pool.
3370
3377
  #
3371
3378
  # To work with CloudFront, you must also specify the Region US East (N.
3372
3379
  # Virginia) as follows:
@@ -3422,8 +3429,8 @@ module Aws::WAFV2
3422
3429
  # @option params [String] :scope
3423
3430
  # Specifies whether this is for an Amazon CloudFront distribution or for
3424
3431
  # a regional application. A regional application can be an Application
3425
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
3426
- # GraphQL API.
3432
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3433
+ # GraphQL API, or an Amazon Cognito user pool.
3427
3434
  #
3428
3435
  # To work with CloudFront, you must also specify the Region US East (N.
3429
3436
  # Virginia) as follows:
@@ -3713,8 +3720,8 @@ module Aws::WAFV2
3713
3720
  # @option params [required, String] :scope
3714
3721
  # Specifies whether this is for an Amazon CloudFront distribution or for
3715
3722
  # a regional application. A regional application can be an Application
3716
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
3717
- # GraphQL API.
3723
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3724
+ # GraphQL API, or an Amazon Cognito user pool.
3718
3725
  #
3719
3726
  # To work with CloudFront, you must also specify the Region US East (N.
3720
3727
  # Virginia) as follows:
@@ -3805,8 +3812,8 @@ module Aws::WAFV2
3805
3812
  # @option params [required, String] :scope
3806
3813
  # Specifies whether this is for an Amazon CloudFront distribution or for
3807
3814
  # a regional application. A regional application can be an Application
3808
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
3809
- # GraphQL API.
3815
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3816
+ # GraphQL API, or an Amazon Cognito user pool.
3810
3817
  #
3811
3818
  # To work with CloudFront, you must also specify the Region US East (N.
3812
3819
  # Virginia) as follows:
@@ -4461,7 +4468,23 @@ module Aws::WAFV2
4461
4468
  # Retrieves the WebACL for the specified resource.
4462
4469
  #
4463
4470
  # @option params [required, String] :resource_arn
4464
- # The ARN (Amazon Resource Name) of the resource.
4471
+ # The Amazon Resource Name (ARN) of the resource whose web ACL you want
4472
+ # to retrieve.
4473
+ #
4474
+ # The ARN must be in one of the following formats:
4475
+ #
4476
+ # * For an Application Load Balancer:
4477
+ # `arn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
4478
+ # `
4479
+ #
4480
+ # * For an Amazon API Gateway REST API:
4481
+ # `arn:aws:apigateway:region::/restapis/api-id/stages/stage-name `
4482
+ #
4483
+ # * For an AppSync GraphQL API:
4484
+ # `arn:aws:appsync:region:account-id:apis/GraphQLApiId `
4485
+ #
4486
+ # * For an Amazon Cognito user pool:
4487
+ # `arn:aws:cognito-idp:region:account-id:userpool/user-pool-id `
4465
4488
  #
4466
4489
  # @return [Types::GetWebACLForResourceResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
4467
4490
  #
@@ -5108,8 +5131,8 @@ module Aws::WAFV2
5108
5131
  # @option params [required, String] :scope
5109
5132
  # Specifies whether this is for an Amazon CloudFront distribution or for
5110
5133
  # a regional application. A regional application can be an Application
5111
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
5112
- # GraphQL API.
5134
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
5135
+ # GraphQL API, or an Amazon Cognito user pool.
5113
5136
  #
5114
5137
  # To work with CloudFront, you must also specify the Region US East (N.
5115
5138
  # Virginia) as follows:
@@ -5173,8 +5196,8 @@ module Aws::WAFV2
5173
5196
  # @option params [required, String] :scope
5174
5197
  # Specifies whether this is for an Amazon CloudFront distribution or for
5175
5198
  # a regional application. A regional application can be an Application
5176
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
5177
- # GraphQL API.
5199
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
5200
+ # GraphQL API, or an Amazon Cognito user pool.
5178
5201
  #
5179
5202
  # To work with CloudFront, you must also specify the Region US East (N.
5180
5203
  # Virginia) as follows:
@@ -5234,8 +5257,8 @@ module Aws::WAFV2
5234
5257
  # @option params [required, String] :scope
5235
5258
  # Specifies whether this is for an Amazon CloudFront distribution or for
5236
5259
  # a regional application. A regional application can be an Application
5237
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
5238
- # GraphQL API.
5260
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
5261
+ # GraphQL API, or an Amazon Cognito user pool.
5239
5262
  #
5240
5263
  # To work with CloudFront, you must also specify the Region US East (N.
5241
5264
  # Virginia) as follows:
@@ -5295,8 +5318,8 @@ module Aws::WAFV2
5295
5318
  # @option params [required, String] :scope
5296
5319
  # Specifies whether this is for an Amazon CloudFront distribution or for
5297
5320
  # a regional application. A regional application can be an Application
5298
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
5299
- # GraphQL API.
5321
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
5322
+ # GraphQL API, or an Amazon Cognito user pool.
5300
5323
  #
5301
5324
  # To work with CloudFront, you must also specify the Region US East (N.
5302
5325
  # Virginia) as follows:
@@ -5394,8 +5417,8 @@ module Aws::WAFV2
5394
5417
  # @option params [required, String] :scope
5395
5418
  # Specifies whether this is for an Amazon CloudFront distribution or for
5396
5419
  # a regional application. A regional application can be an Application
5397
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
5398
- # GraphQL API.
5420
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
5421
+ # GraphQL API, or an Amazon Cognito user pool.
5399
5422
  #
5400
5423
  # To work with CloudFront, you must also specify the Region US East (N.
5401
5424
  # Virginia) as follows:
@@ -5515,8 +5538,8 @@ module Aws::WAFV2
5515
5538
  # @option params [required, String] :scope
5516
5539
  # Specifies whether this is for an Amazon CloudFront distribution or for
5517
5540
  # a regional application. A regional application can be an Application
5518
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
5519
- # GraphQL API.
5541
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
5542
+ # GraphQL API, or an Amazon Cognito user pool.
5520
5543
  #
5521
5544
  # To work with CloudFront, you must also specify the Region US East (N.
5522
5545
  # Virginia) as follows:
@@ -5582,7 +5605,15 @@ module Aws::WAFV2
5582
5605
  # @option params [String] :resource_type
5583
5606
  # Used for web ACLs that are scoped for regional applications. A
5584
5607
  # regional application can be an Application Load Balancer (ALB), an
5585
- # Amazon API Gateway REST API, or an AppSync GraphQL API.
5608
+ # Amazon API Gateway REST API, an AppSync GraphQL API, or an Amazon
5609
+ # Cognito user pool.
5610
+ #
5611
+ # <note markdown="1"> If you don't provide a resource type, the call uses the resource type
5612
+ # `APPLICATION_LOAD_BALANCER`.
5613
+ #
5614
+ # </note>
5615
+ #
5616
+ # Default: `APPLICATION_LOAD_BALANCER`
5586
5617
  #
5587
5618
  # @return [Types::ListResourcesForWebACLResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
5588
5619
  #
@@ -5592,7 +5623,7 @@ module Aws::WAFV2
5592
5623
  #
5593
5624
  # resp = client.list_resources_for_web_acl({
5594
5625
  # web_acl_arn: "ResourceArn", # required
5595
- # resource_type: "APPLICATION_LOAD_BALANCER", # accepts APPLICATION_LOAD_BALANCER, API_GATEWAY, APPSYNC
5626
+ # resource_type: "APPLICATION_LOAD_BALANCER", # accepts APPLICATION_LOAD_BALANCER, API_GATEWAY, APPSYNC, COGNITO_USER_POOL
5596
5627
  # })
5597
5628
  #
5598
5629
  # @example Response structure
@@ -5615,8 +5646,8 @@ module Aws::WAFV2
5615
5646
  # @option params [required, String] :scope
5616
5647
  # Specifies whether this is for an Amazon CloudFront distribution or for
5617
5648
  # a regional application. A regional application can be an Application
5618
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
5619
- # GraphQL API.
5649
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
5650
+ # GraphQL API, or an Amazon Cognito user pool.
5620
5651
  #
5621
5652
  # To work with CloudFront, you must also specify the Region US East (N.
5622
5653
  # Virginia) as follows:
@@ -5734,8 +5765,8 @@ module Aws::WAFV2
5734
5765
  # @option params [required, String] :scope
5735
5766
  # Specifies whether this is for an Amazon CloudFront distribution or for
5736
5767
  # a regional application. A regional application can be an Application
5737
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
5738
- # GraphQL API.
5768
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
5769
+ # GraphQL API, or an Amazon Cognito user pool.
5739
5770
  #
5740
5771
  # To work with CloudFront, you must also specify the Region US East (N.
5741
5772
  # Virginia) as follows:
@@ -6000,8 +6031,8 @@ module Aws::WAFV2
6000
6031
  # @option params [required, String] :scope
6001
6032
  # Specifies whether this is for an Amazon CloudFront distribution or for
6002
6033
  # a regional application. A regional application can be an Application
6003
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
6004
- # GraphQL API.
6034
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6035
+ # GraphQL API, or an Amazon Cognito user pool.
6005
6036
  #
6006
6037
  # To work with CloudFront, you must also specify the Region US East (N.
6007
6038
  # Virginia) as follows:
@@ -6233,8 +6264,8 @@ module Aws::WAFV2
6233
6264
  # @option params [required, String] :scope
6234
6265
  # Specifies whether this is for an Amazon CloudFront distribution or for
6235
6266
  # a regional application. A regional application can be an Application
6236
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
6237
- # GraphQL API.
6267
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6268
+ # GraphQL API, or an Amazon Cognito user pool.
6238
6269
  #
6239
6270
  # To work with CloudFront, you must also specify the Region US East (N.
6240
6271
  # Virginia) as follows:
@@ -6254,8 +6285,9 @@ module Aws::WAFV2
6254
6285
  #
6255
6286
  # @option params [required, Array<String>] :addresses
6256
6287
  # Contains an array of strings that specifies zero or more IP addresses
6257
- # or blocks of IP addresses in Classless Inter-Domain Routing (CIDR)
6258
- # notation. WAF supports all IPv4 and IPv6 CIDR ranges except for /0.
6288
+ # or blocks of IP addresses. All addresses must be specified using
6289
+ # Classless Inter-Domain Routing (CIDR) notation. WAF supports all IPv4
6290
+ # and IPv6 CIDR ranges except for `/0`.
6259
6291
  #
6260
6292
  # Example address strings:
6261
6293
  #
@@ -6357,8 +6389,8 @@ module Aws::WAFV2
6357
6389
  # @option params [required, String] :scope
6358
6390
  # Specifies whether this is for an Amazon CloudFront distribution or for
6359
6391
  # a regional application. A regional application can be an Application
6360
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
6361
- # GraphQL API.
6392
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6393
+ # GraphQL API, or an Amazon Cognito user pool.
6362
6394
  #
6363
6395
  # To work with CloudFront, you must also specify the Region US East (N.
6364
6396
  # Virginia) as follows:
@@ -6457,8 +6489,8 @@ module Aws::WAFV2
6457
6489
  # @option params [required, String] :scope
6458
6490
  # Specifies whether this is for an Amazon CloudFront distribution or for
6459
6491
  # a regional application. A regional application can be an Application
6460
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
6461
- # GraphQL API.
6492
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6493
+ # GraphQL API, or an Amazon Cognito user pool.
6462
6494
  #
6463
6495
  # To work with CloudFront, you must also specify the Region US East (N.
6464
6496
  # Virginia) as follows:
@@ -6557,8 +6589,8 @@ module Aws::WAFV2
6557
6589
  # @option params [required, String] :scope
6558
6590
  # Specifies whether this is for an Amazon CloudFront distribution or for
6559
6591
  # a regional application. A regional application can be an Application
6560
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
6561
- # GraphQL API.
6592
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6593
+ # GraphQL API, or an Amazon Cognito user pool.
6562
6594
  #
6563
6595
  # To work with CloudFront, you must also specify the Region US East (N.
6564
6596
  # Virginia) as follows:
@@ -7200,8 +7232,8 @@ module Aws::WAFV2
7200
7232
  # combination of the types Rule, RuleGroup, and managed rule group. You
7201
7233
  # can associate a web ACL with one or more Amazon Web Services resources
7202
7234
  # to protect. The resources can be an Amazon CloudFront distribution, an
7203
- # Amazon API Gateway REST API, an Application Load Balancer, or an
7204
- # AppSync GraphQL API.
7235
+ # Amazon API Gateway REST API, an Application Load Balancer, an AppSync
7236
+ # GraphQL API, or an Amazon Cognito user pool.
7205
7237
  #
7206
7238
  # @option params [required, String] :name
7207
7239
  # The name of the web ACL. You cannot change the name of a web ACL after
@@ -7210,8 +7242,8 @@ module Aws::WAFV2
7210
7242
  # @option params [required, String] :scope
7211
7243
  # Specifies whether this is for an Amazon CloudFront distribution or for
7212
7244
  # a regional application. A regional application can be an Application
7213
- # Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync
7214
- # GraphQL API.
7245
+ # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7246
+ # GraphQL API, or an Amazon Cognito user pool.
7215
7247
  #
7216
7248
  # To work with CloudFront, you must also specify the Region US East (N.
7217
7249
  # Virginia) as follows:
@@ -7870,7 +7902,7 @@ module Aws::WAFV2
7870
7902
  params: params,
7871
7903
  config: config)
7872
7904
  context[:gem_name] = 'aws-sdk-wafv2'
7873
- context[:gem_version] = '1.40.0'
7905
+ context[:gem_version] = '1.42.0'
7874
7906
  Seahorse::Client::Request.new(handlers, context)
7875
7907
  end
7876
7908
 
data/lib/aws-sdk-wafv2/client_api.rb CHANGED
@@ -1402,6 +1402,7 @@ module Aws::WAFV2
1402
1402
  o.errors << Shapes::ShapeRef.new(shape: WAFUnavailableEntityException)
1403
1403
  o.errors << Shapes::ShapeRef.new(shape: WAFSubscriptionNotFoundException)
1404
1404
  o.errors << Shapes::ShapeRef.new(shape: WAFExpiredManagedRuleGroupVersionException)
1405
+ o.errors << Shapes::ShapeRef.new(shape: WAFInvalidOperationException)
1405
1406
  end)
1406
1407
 
1407
1408
  api.add_operation(:create_ip_set, Seahorse::Model::Operation.new.tap do |o|
data/lib/aws-sdk-wafv2/types.rb CHANGED
@@ -583,6 +583,9 @@ module Aws::WAFV2
583
583
  #
584
584
  # * For an AppSync GraphQL API:
585
585
  # `arn:aws:appsync:region:account-id:apis/GraphQLApiId `
586
+ #
587
+ # * For an Amazon Cognito user pool:
588
+ # `arn:aws:cognito-idp:region:account-id:userpool/user-pool-id `
586
589
  # @return [String]
587
590
  #
588
591
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/AssociateWebACLRequest AWS API Documentation
@@ -1496,8 +1499,8 @@ module Aws::WAFV2
1496
1499
  # @!attribute [rw] scope
1497
1500
  # Specifies whether this is for an Amazon CloudFront distribution or
1498
1501
  # for a regional application. A regional application can be an
1499
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
1500
- # an AppSync GraphQL API.
1502
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
1503
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
1501
1504
  #
1502
1505
  # To work with CloudFront, you must also specify the Region US East
1503
1506
  # (N. Virginia) as follows:
@@ -1748,8 +1751,8 @@ module Aws::WAFV2
1748
1751
  # @!attribute [rw] scope
1749
1752
  # Specifies whether this is for an Amazon CloudFront distribution or
1750
1753
  # for a regional application. A regional application can be an
1751
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
1752
- # an AppSync GraphQL API.
1754
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
1755
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
1753
1756
  #
1754
1757
  # To work with CloudFront, you must also specify the Region US East
1755
1758
  # (N. Virginia) as follows:
@@ -1770,9 +1773,9 @@ module Aws::WAFV2
1770
1773
  #
1771
1774
  # @!attribute [rw] addresses
1772
1775
  # Contains an array of strings that specifies zero or more IP
1773
- # addresses or blocks of IP addresses in Classless Inter-Domain
1774
- # Routing (CIDR) notation. WAF supports all IPv4 and IPv6 CIDR ranges
1775
- # except for /0.
1776
+ # addresses or blocks of IP addresses. All addresses must be specified
1777
+ # using Classless Inter-Domain Routing (CIDR) notation. WAF supports
1778
+ # all IPv4 and IPv6 CIDR ranges except for `/0`.
1776
1779
  #
1777
1780
  # Example address strings:
1778
1781
  #
@@ -1874,8 +1877,8 @@ module Aws::WAFV2
1874
1877
  # @!attribute [rw] scope
1875
1878
  # Specifies whether this is for an Amazon CloudFront distribution or
1876
1879
  # for a regional application. A regional application can be an
1877
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
1878
- # an AppSync GraphQL API.
1880
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
1881
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
1879
1882
  #
1880
1883
  # To work with CloudFront, you must also specify the Region US East
1881
1884
  # (N. Virginia) as follows:
@@ -2473,8 +2476,8 @@ module Aws::WAFV2
2473
2476
  # @!attribute [rw] scope
2474
2477
  # Specifies whether this is for an Amazon CloudFront distribution or
2475
2478
  # for a regional application. A regional application can be an
2476
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
2477
- # an AppSync GraphQL API.
2479
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
2480
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
2478
2481
  #
2479
2482
  # To work with CloudFront, you must also specify the Region US East
2480
2483
  # (N. Virginia) as follows:
@@ -3150,8 +3153,8 @@ module Aws::WAFV2
3150
3153
  # @!attribute [rw] scope
3151
3154
  # Specifies whether this is for an Amazon CloudFront distribution or
3152
3155
  # for a regional application. A regional application can be an
3153
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
3154
- # an AppSync GraphQL API.
3156
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
3157
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
3155
3158
  #
3156
3159
  # To work with CloudFront, you must also specify the Region US East
3157
3160
  # (N. Virginia) as follows:
@@ -3444,7 +3447,7 @@ module Aws::WAFV2
3444
3447
 
3445
3448
  # In a WebACL, this is the action that you want WAF to perform when a
3446
3449
  # web request doesn't match any of the rules in the `WebACL`. The
3447
- # default action must be a terminating action, so you can't use count.
3450
+ # default action must be a terminating action.
3448
3451
  #
3449
3452
  # @note When making an API call, you may pass DefaultAction
3450
3453
  # data as a hash:
@@ -3562,8 +3565,8 @@ module Aws::WAFV2
3562
3565
  # @!attribute [rw] scope
3563
3566
  # Specifies whether this is for an Amazon CloudFront distribution or
3564
3567
  # for a regional application. A regional application can be an
3565
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
3566
- # an AppSync GraphQL API.
3568
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
3569
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
3567
3570
  #
3568
3571
  # To work with CloudFront, you must also specify the Region US East
3569
3572
  # (N. Virginia) as follows:
@@ -3675,8 +3678,8 @@ module Aws::WAFV2
3675
3678
  # @!attribute [rw] scope
3676
3679
  # Specifies whether this is for an Amazon CloudFront distribution or
3677
3680
  # for a regional application. A regional application can be an
3678
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
3679
- # an AppSync GraphQL API.
3681
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
3682
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
3680
3683
  #
3681
3684
  # To work with CloudFront, you must also specify the Region US East
3682
3685
  # (N. Virginia) as follows:
@@ -3738,8 +3741,8 @@ module Aws::WAFV2
3738
3741
  # @!attribute [rw] scope
3739
3742
  # Specifies whether this is for an Amazon CloudFront distribution or
3740
3743
  # for a regional application. A regional application can be an
3741
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
3742
- # an AppSync GraphQL API.
3744
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
3745
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
3743
3746
  #
3744
3747
  # To work with CloudFront, you must also specify the Region US East
3745
3748
  # (N. Virginia) as follows:
@@ -3801,8 +3804,8 @@ module Aws::WAFV2
3801
3804
  # @!attribute [rw] scope
3802
3805
  # Specifies whether this is for an Amazon CloudFront distribution or
3803
3806
  # for a regional application. A regional application can be an
3804
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
3805
- # an AppSync GraphQL API.
3807
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
3808
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
3806
3809
  #
3807
3810
  # To work with CloudFront, you must also specify the Region US East
3808
3811
  # (N. Virginia) as follows:
@@ -3869,8 +3872,8 @@ module Aws::WAFV2
3869
3872
  # @!attribute [rw] scope
3870
3873
  # Specifies whether this is for an Amazon CloudFront distribution or
3871
3874
  # for a regional application. A regional application can be an
3872
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
3873
- # an AppSync GraphQL API.
3875
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
3876
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
3874
3877
  #
3875
3878
  # To work with CloudFront, you must also specify the Region US East
3876
3879
  # (N. Virginia) as follows:
@@ -3994,6 +3997,9 @@ module Aws::WAFV2
3994
3997
  #
3995
3998
  # * For an AppSync GraphQL API:
3996
3999
  # `arn:aws:appsync:region:account-id:apis/GraphQLApiId `
4000
+ #
4001
+ # * For an Amazon Cognito user pool:
4002
+ # `arn:aws:cognito-idp:region:account-id:userpool/user-pool-id `
3997
4003
  # @return [String]
3998
4004
  #
3999
4005
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/DisassociateWebACLRequest AWS API Documentation
@@ -4320,6 +4326,18 @@ module Aws::WAFV2
4320
4326
  # You cannot nest a `ManagedRuleGroupStatement`, for example for use
4321
4327
  # inside a `NotStatement` or `OrStatement`. It can only be referenced
4322
4328
  # as a top-level statement within a rule.
4329
+ #
4330
+ # <note markdown="1"> You are charged additional fees when you use the WAF Bot Control
4331
+ # managed rule group `AWSManagedRulesBotControlRuleSet` or the WAF
4332
+ # Fraud Control account takeover prevention (ATP) managed rule group
4333
+ # `AWSManagedRulesATPRuleSet`. For more information, see [WAF
4334
+ # Pricing][1].
4335
+ #
4336
+ # </note>
4337
+ #
4338
+ #
4339
+ #
4340
+ # [1]: http://aws.amazon.com/waf/pricing/
4323
4341
  # @return [Types::ManagedRuleGroupStatement]
4324
4342
  #
4325
4343
  # @!attribute [rw] rule_group_reference_statement
@@ -4500,8 +4518,8 @@ module Aws::WAFV2
4500
4518
  # @!attribute [rw] scope
4501
4519
  # Specifies whether this is for an Amazon CloudFront distribution or
4502
4520
  # for a regional application. A regional application can be an
4503
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
4504
- # an AppSync GraphQL API.
4521
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
4522
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
4505
4523
  #
4506
4524
  # To work with CloudFront, you must also specify the Region US East
4507
4525
  # (N. Virginia) as follows:
@@ -4604,8 +4622,8 @@ module Aws::WAFV2
4604
4622
  # @!attribute [rw] scope
4605
4623
  # Specifies whether this is for an Amazon CloudFront distribution or
4606
4624
  # for a regional application. A regional application can be an
4607
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
4608
- # an AppSync GraphQL API.
4625
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
4626
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
4609
4627
  #
4610
4628
  # To work with CloudFront, you must also specify the Region US East
4611
4629
  # (N. Virginia) as follows:
@@ -4742,8 +4760,8 @@ module Aws::WAFV2
4742
4760
  # @!attribute [rw] scope
4743
4761
  # Specifies whether this is for an Amazon CloudFront distribution or
4744
4762
  # for a regional application. A regional application can be an
4745
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
4746
- # an AppSync GraphQL API.
4763
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
4764
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
4747
4765
  #
4748
4766
  # To work with CloudFront, you must also specify the Region US East
4749
4767
  # (N. Virginia) as follows:
@@ -4824,8 +4842,8 @@ module Aws::WAFV2
4824
4842
  # @!attribute [rw] scope
4825
4843
  # Specifies whether this is for an Amazon CloudFront distribution or
4826
4844
  # for a regional application. A regional application can be an
4827
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
4828
- # an AppSync GraphQL API.
4845
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
4846
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
4829
4847
  #
4830
4848
  # To work with CloudFront, you must also specify the Region US East
4831
4849
  # (N. Virginia) as follows:
@@ -4894,8 +4912,8 @@ module Aws::WAFV2
4894
4912
  # @!attribute [rw] scope
4895
4913
  # Specifies whether this is for an Amazon CloudFront distribution or
4896
4914
  # for a regional application. A regional application can be an
4897
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
4898
- # an AppSync GraphQL API.
4915
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
4916
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
4899
4917
  #
4900
4918
  # To work with CloudFront, you must also specify the Region US East
4901
4919
  # (N. Virginia) as follows:
@@ -4978,8 +4996,8 @@ module Aws::WAFV2
4978
4996
  # @!attribute [rw] scope
4979
4997
  # Specifies whether this is for an Amazon CloudFront distribution or
4980
4998
  # for a regional application. A regional application can be an
4981
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
4982
- # an AppSync GraphQL API.
4999
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
5000
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
4983
5001
  #
4984
5002
  # To work with CloudFront, you must also specify the Region US East
4985
5003
  # (N. Virginia) as follows:
@@ -5059,7 +5077,23 @@ module Aws::WAFV2
5059
5077
  # }
5060
5078
  #
5061
5079
  # @!attribute [rw] resource_arn
5062
- # The ARN (Amazon Resource Name) of the resource.
5080
+ # The Amazon Resource Name (ARN) of the resource whose web ACL you
5081
+ # want to retrieve.
5082
+ #
5083
+ # The ARN must be in one of the following formats:
5084
+ #
5085
+ # * For an Application Load Balancer:
5086
+ # `arn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
5087
+ # `
5088
+ #
5089
+ # * For an Amazon API Gateway REST API:
5090
+ # `arn:aws:apigateway:region::/restapis/api-id/stages/stage-name `
5091
+ #
5092
+ # * For an AppSync GraphQL API:
5093
+ # `arn:aws:appsync:region:account-id:apis/GraphQLApiId `
5094
+ #
5095
+ # * For an Amazon Cognito user pool:
5096
+ # `arn:aws:cognito-idp:region:account-id:userpool/user-pool-id `
5063
5097
  # @return [String]
5064
5098
  #
5065
5099
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/GetWebACLForResourceRequest AWS API Documentation
@@ -5100,8 +5134,8 @@ module Aws::WAFV2
5100
5134
  # @!attribute [rw] scope
5101
5135
  # Specifies whether this is for an Amazon CloudFront distribution or
5102
5136
  # for a regional application. A regional application can be an
5103
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
5104
- # an AppSync GraphQL API.
5137
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
5138
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
5105
5139
  #
5106
5140
  # To work with CloudFront, you must also specify the Region US East
5107
5141
  # (N. Virginia) as follows:
@@ -5402,9 +5436,9 @@ module Aws::WAFV2
5402
5436
  #
5403
5437
  # @!attribute [rw] addresses
5404
5438
  # Contains an array of strings that specifies zero or more IP
5405
- # addresses or blocks of IP addresses in Classless Inter-Domain
5406
- # Routing (CIDR) notation. WAF supports all IPv4 and IPv6 CIDR ranges
5407
- # except for /0.
5439
+ # addresses or blocks of IP addresses. All addresses must be specified
5440
+ # using Classless Inter-Domain Routing (CIDR) notation. WAF supports
5441
+ # all IPv4 and IPv6 CIDR ranges except for `/0`.
5408
5442
  #
5409
5443
  # Example address strings:
5410
5444
  #
@@ -5964,8 +5998,8 @@ module Aws::WAFV2
5964
5998
  # @!attribute [rw] scope
5965
5999
  # Specifies whether this is for an Amazon CloudFront distribution or
5966
6000
  # for a regional application. A regional application can be an
5967
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
5968
- # an AppSync GraphQL API.
6001
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
6002
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
5969
6003
  #
5970
6004
  # To work with CloudFront, you must also specify the Region US East
5971
6005
  # (N. Virginia) as follows:
@@ -6042,8 +6076,8 @@ module Aws::WAFV2
6042
6076
  # @!attribute [rw] scope
6043
6077
  # Specifies whether this is for an Amazon CloudFront distribution or
6044
6078
  # for a regional application. A regional application can be an
6045
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
6046
- # an AppSync GraphQL API.
6079
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
6080
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
6047
6081
  #
6048
6082
  # To work with CloudFront, you must also specify the Region US East
6049
6083
  # (N. Virginia) as follows:
@@ -6111,8 +6145,8 @@ module Aws::WAFV2
6111
6145
  # @!attribute [rw] scope
6112
6146
  # Specifies whether this is for an Amazon CloudFront distribution or
6113
6147
  # for a regional application. A regional application can be an
6114
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
6115
- # an AppSync GraphQL API.
6148
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
6149
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
6116
6150
  #
6117
6151
  # To work with CloudFront, you must also specify the Region US East
6118
6152
  # (N. Virginia) as follows:
@@ -6182,8 +6216,8 @@ module Aws::WAFV2
6182
6216
  # @!attribute [rw] scope
6183
6217
  # Specifies whether this is for an Amazon CloudFront distribution or
6184
6218
  # for a regional application. A regional application can be an
6185
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
6186
- # an AppSync GraphQL API.
6219
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
6220
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
6187
6221
  #
6188
6222
  # To work with CloudFront, you must also specify the Region US East
6189
6223
  # (N. Virginia) as follows:
@@ -6251,8 +6285,8 @@ module Aws::WAFV2
6251
6285
  # @!attribute [rw] scope
6252
6286
  # Specifies whether this is for an Amazon CloudFront distribution or
6253
6287
  # for a regional application. A regional application can be an
6254
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
6255
- # an AppSync GraphQL API.
6288
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
6289
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
6256
6290
  #
6257
6291
  # To work with CloudFront, you must also specify the Region US East
6258
6292
  # (N. Virginia) as follows:
@@ -6380,8 +6414,8 @@ module Aws::WAFV2
6380
6414
  # @!attribute [rw] scope
6381
6415
  # Specifies whether this is for an Amazon CloudFront distribution or
6382
6416
  # for a regional application. A regional application can be an
6383
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
6384
- # an AppSync GraphQL API.
6417
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
6418
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
6385
6419
  #
6386
6420
  # To work with CloudFront, you must also specify the Region US East
6387
6421
  # (N. Virginia) as follows:
@@ -6442,7 +6476,7 @@ module Aws::WAFV2
6442
6476
  #
6443
6477
  # {
6444
6478
  # web_acl_arn: "ResourceArn", # required
6445
- # resource_type: "APPLICATION_LOAD_BALANCER", # accepts APPLICATION_LOAD_BALANCER, API_GATEWAY, APPSYNC
6479
+ # resource_type: "APPLICATION_LOAD_BALANCER", # accepts APPLICATION_LOAD_BALANCER, API_GATEWAY, APPSYNC, COGNITO_USER_POOL
6446
6480
  # }
6447
6481
  #
6448
6482
  # @!attribute [rw] web_acl_arn
@@ -6452,7 +6486,15 @@ module Aws::WAFV2
6452
6486
  # @!attribute [rw] resource_type
6453
6487
  # Used for web ACLs that are scoped for regional applications. A
6454
6488
  # regional application can be an Application Load Balancer (ALB), an
6455
- # Amazon API Gateway REST API, or an AppSync GraphQL API.
6489
+ # Amazon API Gateway REST API, an AppSync GraphQL API, or an Amazon
6490
+ # Cognito user pool.
6491
+ #
6492
+ # <note markdown="1"> If you don't provide a resource type, the call uses the resource
6493
+ # type `APPLICATION_LOAD_BALANCER`.
6494
+ #
6495
+ # </note>
6496
+ #
6497
+ # Default: `APPLICATION_LOAD_BALANCER`
6456
6498
  # @return [String]
6457
6499
  #
6458
6500
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/ListResourcesForWebACLRequest AWS API Documentation
@@ -6489,8 +6531,8 @@ module Aws::WAFV2
6489
6531
  # @!attribute [rw] scope
6490
6532
  # Specifies whether this is for an Amazon CloudFront distribution or
6491
6533
  # for a regional application. A regional application can be an
6492
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
6493
- # an AppSync GraphQL API.
6534
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
6535
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
6494
6536
  #
6495
6537
  # To work with CloudFront, you must also specify the Region US East
6496
6538
  # (N. Virginia) as follows:
@@ -6617,8 +6659,8 @@ module Aws::WAFV2
6617
6659
  # @!attribute [rw] scope
6618
6660
  # Specifies whether this is for an Amazon CloudFront distribution or
6619
6661
  # for a regional application. A regional application can be an
6620
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
6621
- # an AppSync GraphQL API.
6662
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
6663
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
6622
6664
  #
6623
6665
  # To work with CloudFront, you must also specify the Region US East
6624
6666
  # (N. Virginia) as follows:
@@ -6901,6 +6943,8 @@ module Aws::WAFV2
6901
6943
  # provide the following individual configuration objects: `LoginPath`,
6902
6944
  # `PasswordField`, `PayloadType` and `UsernameField`.
6903
6945
  #
6946
+ # For example specifications, see the examples section of CreateWebACL.
6947
+ #
6904
6948
  # @note When making an API call, you may pass ManagedRuleGroupConfig
6905
6949
  # data as a hash:
6906
6950
  #
@@ -6954,6 +6998,18 @@ module Aws::WAFV2
6954
6998
  # inside a `NotStatement` or `OrStatement`. It can only be referenced as
6955
6999
  # a top-level statement within a rule.
6956
7000
  #
7001
+ # <note markdown="1"> You are charged additional fees when you use the WAF Bot Control
7002
+ # managed rule group `AWSManagedRulesBotControlRuleSet` or the WAF Fraud
7003
+ # Control account takeover prevention (ATP) managed rule group
7004
+ # `AWSManagedRulesATPRuleSet`. For more information, see [WAF
7005
+ # Pricing][1].
7006
+ #
7007
+ # </note>
7008
+ #
7009
+ #
7010
+ #
7011
+ # [1]: http://aws.amazon.com/waf/pricing/
7012
+ #
6957
7013
  # @note When making an API call, you may pass ManagedRuleGroupStatement
6958
7014
  # data as a hash:
6959
7015
  #
@@ -8956,8 +9012,8 @@ module Aws::WAFV2
8956
9012
  # @!attribute [rw] scope
8957
9013
  # Specifies whether this is for an Amazon CloudFront distribution or
8958
9014
  # for a regional application. A regional application can be an
8959
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
8960
- # an AppSync GraphQL API.
9015
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
9016
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
8961
9017
  #
8962
9018
  # To work with CloudFront, you must also specify the Region US East
8963
9019
  # (N. Virginia) as follows:
@@ -10666,7 +10722,8 @@ module Aws::WAFV2
10666
10722
  # @return [Types::AllowAction]
10667
10723
  #
10668
10724
  # @!attribute [rw] count
10669
- # Instructs WAF to count the web request and allow it.
10725
+ # Instructs WAF to count the web request and then continue evaluating
10726
+ # the request using the remaining rules in the web ACL.
10670
10727
  # @return [Types::CountAction]
10671
10728
  #
10672
10729
  # @!attribute [rw] captcha
@@ -11278,6 +11335,8 @@ module Aws::WAFV2
11278
11335
  # The processing guidance for a Rule, used by WAF to determine whether a
11279
11336
  # web request matches the rule.
11280
11337
  #
11338
+ # For example specifications, see the examples section of CreateWebACL.
11339
+ #
11281
11340
  # @note When making an API call, you may pass Statement
11282
11341
  # data as a hash:
11283
11342
  #
@@ -13975,6 +14034,18 @@ module Aws::WAFV2
13975
14034
  # You cannot nest a `ManagedRuleGroupStatement`, for example for use
13976
14035
  # inside a `NotStatement` or `OrStatement`. It can only be referenced
13977
14036
  # as a top-level statement within a rule.
14037
+ #
14038
+ # <note markdown="1"> You are charged additional fees when you use the WAF Bot Control
14039
+ # managed rule group `AWSManagedRulesBotControlRuleSet` or the WAF
14040
+ # Fraud Control account takeover prevention (ATP) managed rule group
14041
+ # `AWSManagedRulesATPRuleSet`. For more information, see [WAF
14042
+ # Pricing][1].
14043
+ #
14044
+ # </note>
14045
+ #
14046
+ #
14047
+ #
14048
+ # [1]: http://aws.amazon.com/waf/pricing/
13978
14049
  # @return [Types::ManagedRuleGroupStatement]
13979
14050
  #
13980
14051
  # @!attribute [rw] label_match_statement
@@ -14381,8 +14452,8 @@ module Aws::WAFV2
14381
14452
  # @!attribute [rw] scope
14382
14453
  # Specifies whether this is for an Amazon CloudFront distribution or
14383
14454
  # for a regional application. A regional application can be an
14384
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
14385
- # an AppSync GraphQL API.
14455
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
14456
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
14386
14457
  #
14387
14458
  # To work with CloudFront, you must also specify the Region US East
14388
14459
  # (N. Virginia) as follows:
@@ -14405,9 +14476,9 @@ module Aws::WAFV2
14405
14476
  #
14406
14477
  # @!attribute [rw] addresses
14407
14478
  # Contains an array of strings that specifies zero or more IP
14408
- # addresses or blocks of IP addresses in Classless Inter-Domain
14409
- # Routing (CIDR) notation. WAF supports all IPv4 and IPv6 CIDR ranges
14410
- # except for /0.
14479
+ # addresses or blocks of IP addresses. All addresses must be specified
14480
+ # using Classless Inter-Domain Routing (CIDR) notation. WAF supports
14481
+ # all IPv4 and IPv6 CIDR ranges except for `/0`.
14411
14482
  #
14412
14483
  # Example address strings:
14413
14484
  #
@@ -14511,8 +14582,8 @@ module Aws::WAFV2
14511
14582
  # @!attribute [rw] scope
14512
14583
  # Specifies whether this is for an Amazon CloudFront distribution or
14513
14584
  # for a regional application. A regional application can be an
14514
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
14515
- # an AppSync GraphQL API.
14585
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
14586
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
14516
14587
  #
14517
14588
  # To work with CloudFront, you must also specify the Region US East
14518
14589
  # (N. Virginia) as follows:
@@ -14625,8 +14696,8 @@ module Aws::WAFV2
14625
14696
  # @!attribute [rw] scope
14626
14697
  # Specifies whether this is for an Amazon CloudFront distribution or
14627
14698
  # for a regional application. A regional application can be an
14628
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
14629
- # an AppSync GraphQL API.
14699
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
14700
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
14630
14701
  #
14631
14702
  # To work with CloudFront, you must also specify the Region US East
14632
14703
  # (N. Virginia) as follows:
@@ -15231,8 +15302,8 @@ module Aws::WAFV2
15231
15302
  # @!attribute [rw] scope
15232
15303
  # Specifies whether this is for an Amazon CloudFront distribution or
15233
15304
  # for a regional application. A regional application can be an
15234
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
15235
- # an AppSync GraphQL API.
15305
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
15306
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
15236
15307
  #
15237
15308
  # To work with CloudFront, you must also specify the Region US East
15238
15309
  # (N. Virginia) as follows:
@@ -15898,8 +15969,8 @@ module Aws::WAFV2
15898
15969
  # @!attribute [rw] scope
15899
15970
  # Specifies whether this is for an Amazon CloudFront distribution or
15900
15971
  # for a regional application. A regional application can be an
15901
- # Application Load Balancer (ALB), an Amazon API Gateway REST API, or
15902
- # an AppSync GraphQL API.
15972
+ # Application Load Balancer (ALB), an Amazon API Gateway REST API, an
15973
+ # AppSync GraphQL API, or an Amazon Cognito user pool.
15903
15974
  #
15904
15975
  # To work with CloudFront, you must also specify the Region US East
15905
15976
  # (N. Virginia) as follows:
@@ -16134,11 +16205,6 @@ module Aws::WAFV2
16134
16205
  # WAF couldn’t perform the operation because your resource is being used
16135
16206
  # by another resource or it’s associated with another resource.
16136
16207
  #
16137
- # For `DeleteWebACL`, you will only get this exception if the web ACL is
16138
- # still associated with a regional resource. Deleting a web ACL that is
16139
- # still associated with an Amazon CloudFront distribution won't get
16140
- # this exception.
16141
- #
16142
16208
  # @!attribute [rw] message
16143
16209
  # @return [String]
16144
16210
  #
@@ -16362,8 +16428,10 @@ module Aws::WAFV2
16362
16428
  include Aws::Structure
16363
16429
  end
16364
16430
 
16365
- # WAF couldn’t perform the operation because your resource doesn’t
16366
- # exist.
16431
+ # WAF couldn’t perform the operation because your resource doesn't
16432
+ # exist. If you've just created a resource that you're using in this
16433
+ # operation, you might just need to wait a few minutes. It can take from
16434
+ # a few seconds to a number of minutes for changes to propagate.
16367
16435
  #
16368
16436
  # @!attribute [rw] message
16369
16437
  # @return [String]
@@ -16455,8 +16523,11 @@ module Aws::WAFV2
16455
16523
  end
16456
16524
 
16457
16525
  # WAF couldn’t retrieve a resource that you specified for this
16458
- # operation. Verify the resources that you are specifying in your
16459
- # request parameters and then retry the operation.
16526
+ # operation. If you've just created a resource that you're using in
16527
+ # this operation, you might just need to wait a few minutes. It can take
16528
+ # from a few seconds to a number of minutes for changes to propagate.
16529
+ # Verify the resources that you are specifying in your request
16530
+ # parameters and then retry the operation.
16460
16531
  #
16461
16532
  # @!attribute [rw] message
16462
16533
  # @return [String]
@@ -16477,8 +16548,8 @@ module Aws::WAFV2
16477
16548
  # combination of the types Rule, RuleGroup, and managed rule group. You
16478
16549
  # can associate a web ACL with one or more Amazon Web Services resources
16479
16550
  # to protect. The resources can be an Amazon CloudFront distribution, an
16480
- # Amazon API Gateway REST API, an Application Load Balancer, or an
16481
- # AppSync GraphQL API.
16551
+ # Amazon API Gateway REST API, an Application Load Balancer, an AppSync
16552
+ # GraphQL API, or an Amazon Cognito user pool.
16482
16553
  #
16483
16554
  # @!attribute [rw] name
16484
16555
  # The name of the web ACL. You cannot change the name of a web ACL
data/lib/aws-sdk-wafv2.rb CHANGED
@@ -48,6 +48,6 @@ require_relative 'aws-sdk-wafv2/customizations'
48
48
  # @!group service
49
49
  module Aws::WAFV2
50
50
 
51
- GEM_VERSION = '1.40.0'
51
+ GEM_VERSION = '1.42.0'
52
52
 
53
53
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-wafv2
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.40.0
4
+ version: 1.42.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2022-07-15 00:00:00.000000000 Z
11
+ date: 2022-09-23 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core