aws-sdk-wafv2 1.5.0 → 1.10.0

data/lib/aws-sdk-wafv2/errors.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-wafv2/resource.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-wafv2/types.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
@@ -183,6 +185,10 @@ module Aws::WAFV2
     #             },
     #             geo_match_statement: {
     #               country_codes: ["AF"], # accepts AF, AX, AL, DZ, AS, AD, AO, AI, AQ, AG, AR, AM, AW, AU, AT, AZ, BS, BH, BD, BB, BY, BE, BZ, BJ, BM, BT, BO, BQ, BA, BW, BV, BR, IO, BN, BG, BF, BI, KH, CM, CA, CV, KY, CF, TD, CL, CN, CX, CC, CO, KM, CG, CD, CK, CR, CI, HR, CU, CW, CY, CZ, DK, DJ, DM, DO, EC, EG, SV, GQ, ER, EE, ET, FK, FO, FJ, FI, FR, GF, PF, TF, GA, GM, GE, DE, GH, GI, GR, GL, GD, GP, GU, GT, GG, GN, GW, GY, HT, HM, VA, HN, HK, HU, IS, IN, ID, IR, IQ, IE, IM, IL, IT, JM, JP, JE, JO, KZ, KE, KI, KP, KR, KW, KG, LA, LV, LB, LS, LR, LY, LI, LT, LU, MO, MK, MG, MW, MY, MV, ML, MT, MH, MQ, MR, MU, YT, MX, FM, MD, MC, MN, ME, MS, MA, MZ, MM, NA, NR, NP, NL, NC, NZ, NI, NE, NG, NU, NF, MP, NO, OM, PK, PW, PS, PA, PG, PY, PE, PH, PN, PL, PT, PR, QA, RE, RO, RU, RW, BL, SH, KN, LC, MF, PM, VC, WS, SM, ST, SA, SN, RS, SC, SL, SG, SX, SK, SI, SB, SO, ZA, GS, SS, ES, LK, SD, SR, SJ, SZ, SE, CH, SY, TW, TJ, TZ, TH, TL, TG, TK, TO, TT, TN, TR, TM, TC, TV, UG, UA, AE, GB, US, UM, UY, UZ, VU, VE, VN, VG, VI, WF, EH, YE, ZM, ZW
+    #               forwarded_ip_config: {
+    #                 header_name: "ForwardedIPHeaderName", # required
+    #                 fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #               },
     #             },
     #             rule_group_reference_statement: {
     #               arn: "ResourceArn", # required
@@ -194,6 +200,11 @@ module Aws::WAFV2
     #             },
     #             ip_set_reference_statement: {
     #               arn: "ResourceArn", # required
+    #               ip_set_forwarded_ip_config: {
+    #                 header_name: "ForwardedIPHeaderName", # required
+    #                 fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                 position: "FIRST", # required, accepts FIRST, LAST, ANY
+    #               },
     #             },
     #             regex_pattern_set_reference_statement: {
     #               arn: "ResourceArn", # required
@@ -224,10 +235,14 @@ module Aws::WAFV2
     #             },
     #             rate_based_statement: {
     #               limit: 1, # required
-    #               aggregate_key_type: "IP", # required, accepts IP
+    #               aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
     #               scope_down_statement: {
     #                 # recursive Statement
     #               },
+    #               forwarded_ip_config: {
+    #                 header_name: "ForwardedIPHeaderName", # required
+    #                 fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #               },
     #             },
     #             and_statement: {
     #               statements: { # required
@@ -266,6 +281,7 @@ module Aws::WAFV2
     #
     class AndStatement < Struct.new(
       :statements)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -301,6 +317,7 @@ module Aws::WAFV2
     class AssociateWebACLRequest < Struct.new(
       :web_acl_arn,
       :resource_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -501,6 +518,7 @@ module Aws::WAFV2
       :field_to_match,
       :text_transformations,
       :positional_constraint)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -624,6 +642,10 @@ module Aws::WAFV2
     #               },
     #               geo_match_statement: {
     #                 country_codes: ["AF"], # accepts AF, AX, AL, DZ, AS, AD, AO, AI, AQ, AG, AR, AM, AW, AU, AT, AZ, BS, BH, BD, BB, BY, BE, BZ, BJ, BM, BT, BO, BQ, BA, BW, BV, BR, IO, BN, BG, BF, BI, KH, CM, CA, CV, KY, CF, TD, CL, CN, CX, CC, CO, KM, CG, CD, CK, CR, CI, HR, CU, CW, CY, CZ, DK, DJ, DM, DO, EC, EG, SV, GQ, ER, EE, ET, FK, FO, FJ, FI, FR, GF, PF, TF, GA, GM, GE, DE, GH, GI, GR, GL, GD, GP, GU, GT, GG, GN, GW, GY, HT, HM, VA, HN, HK, HU, IS, IN, ID, IR, IQ, IE, IM, IL, IT, JM, JP, JE, JO, KZ, KE, KI, KP, KR, KW, KG, LA, LV, LB, LS, LR, LY, LI, LT, LU, MO, MK, MG, MW, MY, MV, ML, MT, MH, MQ, MR, MU, YT, MX, FM, MD, MC, MN, ME, MS, MA, MZ, MM, NA, NR, NP, NL, NC, NZ, NI, NE, NG, NU, NF, MP, NO, OM, PK, PW, PS, PA, PG, PY, PE, PH, PN, PL, PT, PR, QA, RE, RO, RU, RW, BL, SH, KN, LC, MF, PM, VC, WS, SM, ST, SA, SN, RS, SC, SL, SG, SX, SK, SI, SB, SO, ZA, GS, SS, ES, LK, SD, SR, SJ, SZ, SE, CH, SY, TW, TJ, TZ, TH, TL, TG, TK, TO, TT, TN, TR, TM, TC, TV, UG, UA, AE, GB, US, UM, UY, UZ, VU, VE, VN, VG, VI, WF, EH, YE, ZM, ZW
+    #                 forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                 },
     #               },
     #               rule_group_reference_statement: {
     #                 arn: "ResourceArn", # required
@@ -635,6 +657,11 @@ module Aws::WAFV2
     #               },
     #               ip_set_reference_statement: {
     #                 arn: "ResourceArn", # required
+    #                 ip_set_forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                   position: "FIRST", # required, accepts FIRST, LAST, ANY
+    #                 },
     #               },
     #               regex_pattern_set_reference_statement: {
     #                 arn: "ResourceArn", # required
@@ -665,10 +692,14 @@ module Aws::WAFV2
     #               },
     #               rate_based_statement: {
     #                 limit: 1, # required
-    #                 aggregate_key_type: "IP", # required, accepts IP
+    #                 aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
     #                 scope_down_statement: {
     #                   # recursive Statement
     #                 },
+    #                 forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                 },
     #               },
     #               and_statement: {
     #                 statements: [ # required
@@ -746,6 +777,7 @@ module Aws::WAFV2
     class CheckCapacityRequest < Struct.new(
       :scope,
       :rules)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -757,6 +789,7 @@ module Aws::WAFV2
     #
     class CheckCapacityResponse < Struct.new(
       :capacity)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -875,6 +908,7 @@ module Aws::WAFV2
       :ip_address_version,
       :addresses,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -889,6 +923,7 @@ module Aws::WAFV2
     #
     class CreateIPSetResponse < Struct.new(
       :summary)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -952,6 +987,7 @@ module Aws::WAFV2
       :description,
       :regular_expression_list,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -967,6 +1003,7 @@ module Aws::WAFV2
     #
     class CreateRegexPatternSetResponse < Struct.new(
       :summary)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1093,6 +1130,10 @@ module Aws::WAFV2
     #               },
     #               geo_match_statement: {
     #                 country_codes: ["AF"], # accepts AF, AX, AL, DZ, AS, AD, AO, AI, AQ, AG, AR, AM, AW, AU, AT, AZ, BS, BH, BD, BB, BY, BE, BZ, BJ, BM, BT, BO, BQ, BA, BW, BV, BR, IO, BN, BG, BF, BI, KH, CM, CA, CV, KY, CF, TD, CL, CN, CX, CC, CO, KM, CG, CD, CK, CR, CI, HR, CU, CW, CY, CZ, DK, DJ, DM, DO, EC, EG, SV, GQ, ER, EE, ET, FK, FO, FJ, FI, FR, GF, PF, TF, GA, GM, GE, DE, GH, GI, GR, GL, GD, GP, GU, GT, GG, GN, GW, GY, HT, HM, VA, HN, HK, HU, IS, IN, ID, IR, IQ, IE, IM, IL, IT, JM, JP, JE, JO, KZ, KE, KI, KP, KR, KW, KG, LA, LV, LB, LS, LR, LY, LI, LT, LU, MO, MK, MG, MW, MY, MV, ML, MT, MH, MQ, MR, MU, YT, MX, FM, MD, MC, MN, ME, MS, MA, MZ, MM, NA, NR, NP, NL, NC, NZ, NI, NE, NG, NU, NF, MP, NO, OM, PK, PW, PS, PA, PG, PY, PE, PH, PN, PL, PT, PR, QA, RE, RO, RU, RW, BL, SH, KN, LC, MF, PM, VC, WS, SM, ST, SA, SN, RS, SC, SL, SG, SX, SK, SI, SB, SO, ZA, GS, SS, ES, LK, SD, SR, SJ, SZ, SE, CH, SY, TW, TJ, TZ, TH, TL, TG, TK, TO, TT, TN, TR, TM, TC, TV, UG, UA, AE, GB, US, UM, UY, UZ, VU, VE, VN, VG, VI, WF, EH, YE, ZM, ZW
+    #                 forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                 },
     #               },
     #               rule_group_reference_statement: {
     #                 arn: "ResourceArn", # required
@@ -1104,6 +1145,11 @@ module Aws::WAFV2
     #               },
     #               ip_set_reference_statement: {
     #                 arn: "ResourceArn", # required
+    #                 ip_set_forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                   position: "FIRST", # required, accepts FIRST, LAST, ANY
+    #                 },
     #               },
     #               regex_pattern_set_reference_statement: {
     #                 arn: "ResourceArn", # required
@@ -1134,10 +1180,14 @@ module Aws::WAFV2
     #               },
     #               rate_based_statement: {
     #                 limit: 1, # required
-    #                 aggregate_key_type: "IP", # required, accepts IP
+    #                 aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
     #                 scope_down_statement: {
     #                   # recursive Statement
     #                 },
+    #                 forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                 },
     #               },
     #               and_statement: {
     #                 statements: [ # required
@@ -1270,6 +1320,7 @@ module Aws::WAFV2
       :rules,
       :visibility_config,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1285,6 +1336,7 @@ module Aws::WAFV2
     #
     class CreateRuleGroupResponse < Struct.new(
       :summary)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1416,6 +1468,10 @@ module Aws::WAFV2
     #               },
     #               geo_match_statement: {
     #                 country_codes: ["AF"], # accepts AF, AX, AL, DZ, AS, AD, AO, AI, AQ, AG, AR, AM, AW, AU, AT, AZ, BS, BH, BD, BB, BY, BE, BZ, BJ, BM, BT, BO, BQ, BA, BW, BV, BR, IO, BN, BG, BF, BI, KH, CM, CA, CV, KY, CF, TD, CL, CN, CX, CC, CO, KM, CG, CD, CK, CR, CI, HR, CU, CW, CY, CZ, DK, DJ, DM, DO, EC, EG, SV, GQ, ER, EE, ET, FK, FO, FJ, FI, FR, GF, PF, TF, GA, GM, GE, DE, GH, GI, GR, GL, GD, GP, GU, GT, GG, GN, GW, GY, HT, HM, VA, HN, HK, HU, IS, IN, ID, IR, IQ, IE, IM, IL, IT, JM, JP, JE, JO, KZ, KE, KI, KP, KR, KW, KG, LA, LV, LB, LS, LR, LY, LI, LT, LU, MO, MK, MG, MW, MY, MV, ML, MT, MH, MQ, MR, MU, YT, MX, FM, MD, MC, MN, ME, MS, MA, MZ, MM, NA, NR, NP, NL, NC, NZ, NI, NE, NG, NU, NF, MP, NO, OM, PK, PW, PS, PA, PG, PY, PE, PH, PN, PL, PT, PR, QA, RE, RO, RU, RW, BL, SH, KN, LC, MF, PM, VC, WS, SM, ST, SA, SN, RS, SC, SL, SG, SX, SK, SI, SB, SO, ZA, GS, SS, ES, LK, SD, SR, SJ, SZ, SE, CH, SY, TW, TJ, TZ, TH, TL, TG, TK, TO, TT, TN, TR, TM, TC, TV, UG, UA, AE, GB, US, UM, UY, UZ, VU, VE, VN, VG, VI, WF, EH, YE, ZM, ZW
+    #                 forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                 },
     #               },
     #               rule_group_reference_statement: {
     #                 arn: "ResourceArn", # required
@@ -1427,6 +1483,11 @@ module Aws::WAFV2
     #               },
     #               ip_set_reference_statement: {
     #                 arn: "ResourceArn", # required
+    #                 ip_set_forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                   position: "FIRST", # required, accepts FIRST, LAST, ANY
+    #                 },
     #               },
     #               regex_pattern_set_reference_statement: {
     #                 arn: "ResourceArn", # required
@@ -1457,10 +1518,14 @@ module Aws::WAFV2
     #               },
     #               rate_based_statement: {
     #                 limit: 1, # required
-    #                 aggregate_key_type: "IP", # required, accepts IP
+    #                 aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
     #                 scope_down_statement: {
     #                   # recursive Statement
     #                 },
+    #                 forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                 },
     #               },
     #               and_statement: {
     #                 statements: [ # required
@@ -1580,6 +1645,7 @@ module Aws::WAFV2
       :rules,
       :visibility_config,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1594,6 +1660,7 @@ module Aws::WAFV2
     #
     class CreateWebACLResponse < Struct.new(
       :summary)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1635,6 +1702,7 @@ module Aws::WAFV2
     class DefaultAction < Struct.new(
       :block,
       :allow)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1667,6 +1735,7 @@ module Aws::WAFV2
     class DeleteFirewallManagerRuleGroupsRequest < Struct.new(
       :web_acl_arn,
       :web_acl_lock_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1686,6 +1755,7 @@ module Aws::WAFV2
     #
     class DeleteFirewallManagerRuleGroupsResponse < Struct.new(
       :next_web_acl_lock_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1743,6 +1813,7 @@ module Aws::WAFV2
       :scope,
       :id,
       :lock_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1766,6 +1837,7 @@ module Aws::WAFV2
     #
     class DeleteLoggingConfigurationRequest < Struct.new(
       :resource_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1791,6 +1863,7 @@ module Aws::WAFV2
     #
     class DeletePermissionPolicyRequest < Struct.new(
       :resource_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1852,6 +1925,7 @@ module Aws::WAFV2
       :scope,
       :id,
       :lock_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1913,6 +1987,7 @@ module Aws::WAFV2
       :scope,
       :id,
       :lock_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1974,6 +2049,7 @@ module Aws::WAFV2
       :scope,
       :id,
       :lock_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2020,6 +2096,7 @@ module Aws::WAFV2
       :vendor_name,
       :name,
       :scope)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2041,6 +2118,7 @@ module Aws::WAFV2
     class DescribeManagedRuleGroupResponse < Struct.new(
       :capacity,
       :rules)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2069,6 +2147,7 @@ module Aws::WAFV2
     #
     class DisassociateWebACLRequest < Struct.new(
       :resource_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2107,6 +2186,7 @@ module Aws::WAFV2
     #
     class ExcludedRule < Struct.new(
       :name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2211,6 +2291,7 @@ module Aws::WAFV2
       :query_string,
       :body,
       :method)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2278,6 +2359,7 @@ module Aws::WAFV2
       :firewall_manager_statement,
       :override_action,
       :visibility_config)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2333,6 +2415,70 @@ module Aws::WAFV2
     class FirewallManagerStatement < Struct.new(
       :managed_rule_group_statement,
       :rule_group_reference_statement)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The configuration for inspecting IP addresses in an HTTP header that
+    # you specify, instead of using the IP address that's reported by the
+    # web request origin. Commonly, this is the X-Forwarded-For (XFF)
+    # header, but you can specify any header name.
+    #
+    # <note markdown="1"> If the specified header isn't present in the request, AWS WAF
+    # doesn't apply the rule to the web request at all.
+    #
+    #  </note>
+    #
+    # This configuration is used for GeoMatchStatement and
+    # RateBasedStatement. For IPSetReferenceStatement, use
+    # IPSetForwardedIPConfig instead.
+    #
+    # AWS WAF only evaluates the first IP address found in the specified
+    # HTTP header.
+    #
+    # @note When making an API call, you may pass ForwardedIPConfig
+    #   data as a hash:
+    #
+    #       {
+    #         header_name: "ForwardedIPHeaderName", # required
+    #         fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #       }
+    #
+    # @!attribute [rw] header_name
+    #   The name of the HTTP header to use for the IP address. For example,
+    #   to use the X-Forwarded-For (XFF) header, set this to
+    #   `X-Forwarded-For`.
+    #
+    #   <note markdown="1"> If the specified header isn't present in the request, AWS WAF
+    #   doesn't apply the rule to the web request at all.
+    #
+    #    </note>
+    #   @return [String]
+    #
+    # @!attribute [rw] fallback_behavior
+    #   The match status to assign to the web request if the request
+    #   doesn't have a valid IP address in the specified position.
+    #
+    #   <note markdown="1"> If the specified header isn't present in the request, AWS WAF
+    #   doesn't apply the rule to the web request at all.
+    #
+    #    </note>
+    #
+    #   You can specify the following fallback behaviors:
+    #
+    #   * MATCH - Treat the web request as matching the rule statement. AWS
+    #     WAF applies the rule action to the request.
+    #
+    #   * NO\_MATCH - Treat the web request as not matching the rule
+    #     statement.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/ForwardedIPConfig AWS API Documentation
+    #
+    class ForwardedIPConfig < Struct.new(
+      :header_name,
+      :fallback_behavior)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2355,6 +2501,10 @@ module Aws::WAFV2
     #
     #       {
     #         country_codes: ["AF"], # accepts AF, AX, AL, DZ, AS, AD, AO, AI, AQ, AG, AR, AM, AW, AU, AT, AZ, BS, BH, BD, BB, BY, BE, BZ, BJ, BM, BT, BO, BQ, BA, BW, BV, BR, IO, BN, BG, BF, BI, KH, CM, CA, CV, KY, CF, TD, CL, CN, CX, CC, CO, KM, CG, CD, CK, CR, CI, HR, CU, CW, CY, CZ, DK, DJ, DM, DO, EC, EG, SV, GQ, ER, EE, ET, FK, FO, FJ, FI, FR, GF, PF, TF, GA, GM, GE, DE, GH, GI, GR, GL, GD, GP, GU, GT, GG, GN, GW, GY, HT, HM, VA, HN, HK, HU, IS, IN, ID, IR, IQ, IE, IM, IL, IT, JM, JP, JE, JO, KZ, KE, KI, KP, KR, KW, KG, LA, LV, LB, LS, LR, LY, LI, LT, LU, MO, MK, MG, MW, MY, MV, ML, MT, MH, MQ, MR, MU, YT, MX, FM, MD, MC, MN, ME, MS, MA, MZ, MM, NA, NR, NP, NL, NC, NZ, NI, NE, NG, NU, NF, MP, NO, OM, PK, PW, PS, PA, PG, PY, PE, PH, PN, PL, PT, PR, QA, RE, RO, RU, RW, BL, SH, KN, LC, MF, PM, VC, WS, SM, ST, SA, SN, RS, SC, SL, SG, SX, SK, SI, SB, SO, ZA, GS, SS, ES, LK, SD, SR, SJ, SZ, SE, CH, SY, TW, TJ, TZ, TH, TL, TG, TK, TO, TT, TN, TR, TM, TC, TV, UG, UA, AE, GB, US, UM, UY, UZ, VU, VE, VN, VG, VI, WF, EH, YE, ZM, ZW
+    #         forwarded_ip_config: {
+    #           header_name: "ForwardedIPHeaderName", # required
+    #           fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #         },
     #       }
     #
     # @!attribute [rw] country_codes
@@ -2363,10 +2513,24 @@ module Aws::WAFV2
     #   standard.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] forwarded_ip_config
+    #   The configuration for inspecting IP addresses in an HTTP header that
+    #   you specify, instead of using the IP address that's reported by the
+    #   web request origin. Commonly, this is the X-Forwarded-For (XFF)
+    #   header, but you can specify any header name.
+    #
+    #   <note markdown="1"> If the specified header isn't present in the request, AWS WAF
+    #   doesn't apply the rule to the web request at all.
+    #
+    #    </note>
+    #   @return [Types::ForwardedIPConfig]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/GeoMatchStatement AWS API Documentation
     #
     class GeoMatchStatement < Struct.new(
-      :country_codes)
+      :country_codes,
+      :forwarded_ip_config)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2410,6 +2574,7 @@ module Aws::WAFV2
       :name,
       :scope,
       :id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2433,6 +2598,7 @@ module Aws::WAFV2
     class GetIPSetResponse < Struct.new(
       :ip_set,
       :lock_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2452,6 +2618,7 @@ module Aws::WAFV2
     #
     class GetLoggingConfigurationRequest < Struct.new(
       :resource_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2463,6 +2630,7 @@ module Aws::WAFV2
     #
     class GetLoggingConfigurationResponse < Struct.new(
       :logging_configuration)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2482,6 +2650,7 @@ module Aws::WAFV2
     #
     class GetPermissionPolicyRequest < Struct.new(
       :resource_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2493,6 +2662,7 @@ module Aws::WAFV2
     #
     class GetPermissionPolicyResponse < Struct.new(
       :policy)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2542,6 +2712,7 @@ module Aws::WAFV2
       :web_acl_name,
       :web_acl_id,
       :rule_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2558,6 +2729,7 @@ module Aws::WAFV2
     class GetRateBasedStatementManagedKeysResponse < Struct.new(
       :managed_keys_ipv4,
       :managed_keys_ipv6)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2601,6 +2773,7 @@ module Aws::WAFV2
       :name,
       :scope,
       :id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2624,6 +2797,7 @@ module Aws::WAFV2
     class GetRegexPatternSetResponse < Struct.new(
       :regex_pattern_set,
       :lock_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2667,6 +2841,7 @@ module Aws::WAFV2
       :name,
       :scope,
       :id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2690,6 +2865,7 @@ module Aws::WAFV2
     class GetRuleGroupResponse < Struct.new(
       :rule_group,
       :lock_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2734,9 +2910,10 @@ module Aws::WAFV2
     # @!attribute [rw] time_window
     #   The start date and time and the end date and time of the range for
     #   which you want `GetSampledRequests` to return a sample of requests.
-    #   Specify the date and time in the following format:
-    #   `"2016-09-27T14:50Z"`. You can specify any time range in the
-    #   previous three hours.
+    #   You must specify the times in Coordinated Universal Time (UTC)
+    #   format. UTC format includes the special designator, `Z`. For
+    #   example, `"2016-09-27T14:50Z"`. You can specify any time range in
+    #   the previous three hours.
     #   @return [Types::TimeWindow]
     #
     # @!attribute [rw] max_items
@@ -2755,6 +2932,7 @@ module Aws::WAFV2
       :scope,
       :time_window,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2775,7 +2953,8 @@ module Aws::WAFV2
     #   `GetSampledRequests` request. However, if your AWS resource received
     #   more than 5,000 requests during the time range that you specified in
     #   the request, `GetSampledRequests` returns the time range for the
-    #   first 5,000 requests.
+    #   first 5,000 requests. Times are in Coordinated Universal Time (UTC)
+    #   format.
     #   @return [Types::TimeWindow]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/GetSampledRequestsResponse AWS API Documentation
@@ -2784,6 +2963,7 @@ module Aws::WAFV2
       :sampled_requests,
       :population_size,
       :time_window)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2802,6 +2982,7 @@ module Aws::WAFV2
     #
     class GetWebACLForResourceRequest < Struct.new(
       :resource_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2814,6 +2995,7 @@ module Aws::WAFV2
     #
     class GetWebACLForResourceResponse < Struct.new(
       :web_acl)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2857,6 +3039,7 @@ module Aws::WAFV2
       :name,
       :scope,
       :id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2882,6 +3065,7 @@ module Aws::WAFV2
     class GetWebACLResponse < Struct.new(
       :web_acl,
       :lock_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2914,6 +3098,7 @@ module Aws::WAFV2
     class HTTPHeader < Struct.new(
       :name,
       :value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2982,6 +3167,7 @@ module Aws::WAFV2
       :method,
       :http_version,
       :headers)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3074,6 +3260,89 @@ module Aws::WAFV2
       :description,
       :ip_address_version,
       :addresses)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The configuration for inspecting IP addresses in an HTTP header that
+    # you specify, instead of using the IP address that's reported by the
+    # web request origin. Commonly, this is the X-Forwarded-For (XFF)
+    # header, but you can specify any header name.
+    #
+    # <note markdown="1"> If the specified header isn't present in the request, AWS WAF
+    # doesn't apply the rule to the web request at all.
+    #
+    #  </note>
+    #
+    # This configuration is used only for IPSetReferenceStatement. For
+    # GeoMatchStatement and RateBasedStatement, use ForwardedIPConfig
+    # instead.
+    #
+    # @note When making an API call, you may pass IPSetForwardedIPConfig
+    #   data as a hash:
+    #
+    #       {
+    #         header_name: "ForwardedIPHeaderName", # required
+    #         fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #         position: "FIRST", # required, accepts FIRST, LAST, ANY
+    #       }
+    #
+    # @!attribute [rw] header_name
+    #   The name of the HTTP header to use for the IP address. For example,
+    #   to use the X-Forwarded-For (XFF) header, set this to
+    #   `X-Forwarded-For`.
+    #
+    #   <note markdown="1"> If the specified header isn't present in the request, AWS WAF
+    #   doesn't apply the rule to the web request at all.
+    #
+    #    </note>
+    #   @return [String]
+    #
+    # @!attribute [rw] fallback_behavior
+    #   The match status to assign to the web request if the request
+    #   doesn't have a valid IP address in the specified position.
+    #
+    #   <note markdown="1"> If the specified header isn't present in the request, AWS WAF
+    #   doesn't apply the rule to the web request at all.
+    #
+    #    </note>
+    #
+    #   You can specify the following fallback behaviors:
+    #
+    #   * MATCH - Treat the web request as matching the rule statement. AWS
+    #     WAF applies the rule action to the request.
+    #
+    #   * NO\_MATCH - Treat the web request as not matching the rule
+    #     statement.
+    #   @return [String]
+    #
+    # @!attribute [rw] position
+    #   The position in the header to search for the IP address. The header
+    #   can contain IP addresses of the original client and also of proxies.
+    #   For example, the header value could be `10.1.1.1, 127.0.0.0,
+    #   10.10.10.10` where the first IP address identifies the original
+    #   client and the rest identify proxies that the request went through.
+    #
+    #   The options for this setting are the following:
+    #
+    #   * FIRST - Inspect the first IP address in the list of IP addresses
+    #     in the header. This is usually the client's original IP.
+    #
+    #   * LAST - Inspect the last IP address in the list of IP addresses in
+    #     the header.
+    #
+    #   * ANY - Inspect all IP addresses in the header for a match. If the
+    #     header contains more than 10 IP addresses, AWS WAF inspects the
+    #     last 10.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/IPSetForwardedIPConfig AWS API Documentation
+    #
+    class IPSetForwardedIPConfig < Struct.new(
+      :header_name,
+      :fallback_behavior,
+      :position)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3103,6 +3372,11 @@ module Aws::WAFV2
     #
     #       {
     #         arn: "ResourceArn", # required
+    #         ip_set_forwarded_ip_config: {
+    #           header_name: "ForwardedIPHeaderName", # required
+    #           fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #           position: "FIRST", # required, accepts FIRST, LAST, ANY
+    #         },
     #       }
     #
     # @!attribute [rw] arn
@@ -3110,10 +3384,24 @@ module Aws::WAFV2
     #   references.
     #   @return [String]
     #
+    # @!attribute [rw] ip_set_forwarded_ip_config
+    #   The configuration for inspecting IP addresses in an HTTP header that
+    #   you specify, instead of using the IP address that's reported by the
+    #   web request origin. Commonly, this is the X-Forwarded-For (XFF)
+    #   header, but you can specify any header name.
+    #
+    #   <note markdown="1"> If the specified header isn't present in the request, AWS WAF
+    #   doesn't apply the rule to the web request at all.
+    #
+    #    </note>
+    #   @return [Types::IPSetForwardedIPConfig]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/IPSetReferenceStatement AWS API Documentation
     #
     class IPSetReferenceStatement < Struct.new(
-      :arn)
+      :arn,
+      :ip_set_forwarded_ip_config)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3173,6 +3461,7 @@ module Aws::WAFV2
       :description,
       :lock_token,
       :arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3220,6 +3509,7 @@ module Aws::WAFV2
       :scope,
       :next_marker,
       :limit)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3239,6 +3529,7 @@ module Aws::WAFV2
     class ListAvailableManagedRuleGroupsResponse < Struct.new(
       :next_marker,
       :managed_rule_groups)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3286,6 +3577,7 @@ module Aws::WAFV2
       :scope,
       :next_marker,
       :limit)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3307,6 +3599,7 @@ module Aws::WAFV2
     class ListIPSetsResponse < Struct.new(
       :next_marker,
       :ip_sets)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3354,6 +3647,7 @@ module Aws::WAFV2
       :scope,
       :next_marker,
       :limit)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3373,6 +3667,7 @@ module Aws::WAFV2
     class ListLoggingConfigurationsResponse < Struct.new(
       :logging_configurations,
       :next_marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3420,6 +3715,7 @@ module Aws::WAFV2
       :scope,
       :next_marker,
       :limit)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3439,6 +3735,7 @@ module Aws::WAFV2
     class ListRegexPatternSetsResponse < Struct.new(
       :next_marker,
       :regex_pattern_sets)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3465,6 +3762,7 @@ module Aws::WAFV2
     class ListResourcesForWebACLRequest < Struct.new(
       :web_acl_arn,
       :resource_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3477,6 +3775,7 @@ module Aws::WAFV2
     #
     class ListResourcesForWebACLResponse < Struct.new(
       :resource_arns)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3524,6 +3823,7 @@ module Aws::WAFV2
       :scope,
       :next_marker,
       :limit)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3543,6 +3843,7 @@ module Aws::WAFV2
     class ListRuleGroupsResponse < Struct.new(
       :next_marker,
       :rule_groups)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3580,6 +3881,7 @@ module Aws::WAFV2
       :next_marker,
       :limit,
       :resource_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3600,6 +3902,7 @@ module Aws::WAFV2
     class ListTagsForResourceResponse < Struct.new(
       :next_marker,
       :tag_info_for_resource)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3647,6 +3950,7 @@ module Aws::WAFV2
       :scope,
       :next_marker,
       :limit)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3666,6 +3970,7 @@ module Aws::WAFV2
     class ListWebACLsResponse < Struct.new(
       :next_marker,
       :web_acls)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3711,6 +4016,7 @@ module Aws::WAFV2
     #             },
     #           },
     #         ],
+    #         managed_by_firewall_manager: false,
     #       }
     #
     # @!attribute [rw] resource_arn
@@ -3725,16 +4031,29 @@ module Aws::WAFV2
     #
     # @!attribute [rw] redacted_fields
     #   The parts of the request that you want to keep out of the logs. For
-    #   example, if you redact the cookie field, the cookie field in the
+    #   example, if you redact the `HEADER` field, the `HEADER` field in the
     #   firehose will be `xxx`.
+    #
+    #   <note markdown="1"> You must use one of the following values: `URI`, `QUERY_STRING`,
+    #   `HEADER`, or `METHOD`.
+    #
+    #    </note>
     #   @return [Array<Types::FieldToMatch>]
     #
+    # @!attribute [rw] managed_by_firewall_manager
+    #   Indicates whether the logging configuration was created by AWS
+    #   Firewall Manager, as part of an AWS WAF policy configuration. If
+    #   true, only Firewall Manager can modify or delete the configuration.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/LoggingConfiguration AWS API Documentation
     #
     class LoggingConfiguration < Struct.new(
       :resource_arn,
       :log_destination_configs,
-      :redacted_fields)
+      :redacted_fields,
+      :managed_by_firewall_manager)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3793,6 +4112,7 @@ module Aws::WAFV2
       :vendor_name,
       :name,
       :excluded_rules)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3836,6 +4156,7 @@ module Aws::WAFV2
       :vendor_name,
       :name,
       :description)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4015,6 +4336,10 @@ module Aws::WAFV2
     #           },
     #           geo_match_statement: {
     #             country_codes: ["AF"], # accepts AF, AX, AL, DZ, AS, AD, AO, AI, AQ, AG, AR, AM, AW, AU, AT, AZ, BS, BH, BD, BB, BY, BE, BZ, BJ, BM, BT, BO, BQ, BA, BW, BV, BR, IO, BN, BG, BF, BI, KH, CM, CA, CV, KY, CF, TD, CL, CN, CX, CC, CO, KM, CG, CD, CK, CR, CI, HR, CU, CW, CY, CZ, DK, DJ, DM, DO, EC, EG, SV, GQ, ER, EE, ET, FK, FO, FJ, FI, FR, GF, PF, TF, GA, GM, GE, DE, GH, GI, GR, GL, GD, GP, GU, GT, GG, GN, GW, GY, HT, HM, VA, HN, HK, HU, IS, IN, ID, IR, IQ, IE, IM, IL, IT, JM, JP, JE, JO, KZ, KE, KI, KP, KR, KW, KG, LA, LV, LB, LS, LR, LY, LI, LT, LU, MO, MK, MG, MW, MY, MV, ML, MT, MH, MQ, MR, MU, YT, MX, FM, MD, MC, MN, ME, MS, MA, MZ, MM, NA, NR, NP, NL, NC, NZ, NI, NE, NG, NU, NF, MP, NO, OM, PK, PW, PS, PA, PG, PY, PE, PH, PN, PL, PT, PR, QA, RE, RO, RU, RW, BL, SH, KN, LC, MF, PM, VC, WS, SM, ST, SA, SN, RS, SC, SL, SG, SX, SK, SI, SB, SO, ZA, GS, SS, ES, LK, SD, SR, SJ, SZ, SE, CH, SY, TW, TJ, TZ, TH, TL, TG, TK, TO, TT, TN, TR, TM, TC, TV, UG, UA, AE, GB, US, UM, UY, UZ, VU, VE, VN, VG, VI, WF, EH, YE, ZM, ZW
+    #             forwarded_ip_config: {
+    #               header_name: "ForwardedIPHeaderName", # required
+    #               fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #             },
     #           },
     #           rule_group_reference_statement: {
     #             arn: "ResourceArn", # required
@@ -4026,6 +4351,11 @@ module Aws::WAFV2
     #           },
     #           ip_set_reference_statement: {
     #             arn: "ResourceArn", # required
+    #             ip_set_forwarded_ip_config: {
+    #               header_name: "ForwardedIPHeaderName", # required
+    #               fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #               position: "FIRST", # required, accepts FIRST, LAST, ANY
+    #             },
     #           },
     #           regex_pattern_set_reference_statement: {
     #             arn: "ResourceArn", # required
@@ -4056,10 +4386,14 @@ module Aws::WAFV2
     #           },
     #           rate_based_statement: {
     #             limit: 1, # required
-    #             aggregate_key_type: "IP", # required, accepts IP
+    #             aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
     #             scope_down_statement: {
     #               # recursive Statement
     #             },
+    #             forwarded_ip_config: {
+    #               header_name: "ForwardedIPHeaderName", # required
+    #               fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #             },
     #           },
     #           and_statement: {
     #             statements: [ # required
@@ -4101,6 +4435,7 @@ module Aws::WAFV2
     #
     class NotStatement < Struct.new(
       :statement)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4234,6 +4569,10 @@ module Aws::WAFV2
     #             },
     #             geo_match_statement: {
     #               country_codes: ["AF"], # accepts AF, AX, AL, DZ, AS, AD, AO, AI, AQ, AG, AR, AM, AW, AU, AT, AZ, BS, BH, BD, BB, BY, BE, BZ, BJ, BM, BT, BO, BQ, BA, BW, BV, BR, IO, BN, BG, BF, BI, KH, CM, CA, CV, KY, CF, TD, CL, CN, CX, CC, CO, KM, CG, CD, CK, CR, CI, HR, CU, CW, CY, CZ, DK, DJ, DM, DO, EC, EG, SV, GQ, ER, EE, ET, FK, FO, FJ, FI, FR, GF, PF, TF, GA, GM, GE, DE, GH, GI, GR, GL, GD, GP, GU, GT, GG, GN, GW, GY, HT, HM, VA, HN, HK, HU, IS, IN, ID, IR, IQ, IE, IM, IL, IT, JM, JP, JE, JO, KZ, KE, KI, KP, KR, KW, KG, LA, LV, LB, LS, LR, LY, LI, LT, LU, MO, MK, MG, MW, MY, MV, ML, MT, MH, MQ, MR, MU, YT, MX, FM, MD, MC, MN, ME, MS, MA, MZ, MM, NA, NR, NP, NL, NC, NZ, NI, NE, NG, NU, NF, MP, NO, OM, PK, PW, PS, PA, PG, PY, PE, PH, PN, PL, PT, PR, QA, RE, RO, RU, RW, BL, SH, KN, LC, MF, PM, VC, WS, SM, ST, SA, SN, RS, SC, SL, SG, SX, SK, SI, SB, SO, ZA, GS, SS, ES, LK, SD, SR, SJ, SZ, SE, CH, SY, TW, TJ, TZ, TH, TL, TG, TK, TO, TT, TN, TR, TM, TC, TV, UG, UA, AE, GB, US, UM, UY, UZ, VU, VE, VN, VG, VI, WF, EH, YE, ZM, ZW
+    #               forwarded_ip_config: {
+    #                 header_name: "ForwardedIPHeaderName", # required
+    #                 fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #               },
     #             },
     #             rule_group_reference_statement: {
     #               arn: "ResourceArn", # required
@@ -4245,6 +4584,11 @@ module Aws::WAFV2
     #             },
     #             ip_set_reference_statement: {
     #               arn: "ResourceArn", # required
+    #               ip_set_forwarded_ip_config: {
+    #                 header_name: "ForwardedIPHeaderName", # required
+    #                 fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                 position: "FIRST", # required, accepts FIRST, LAST, ANY
+    #               },
     #             },
     #             regex_pattern_set_reference_statement: {
     #               arn: "ResourceArn", # required
@@ -4275,10 +4619,14 @@ module Aws::WAFV2
     #             },
     #             rate_based_statement: {
     #               limit: 1, # required
-    #               aggregate_key_type: "IP", # required, accepts IP
+    #               aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
     #               scope_down_statement: {
     #                 # recursive Statement
     #               },
+    #               forwarded_ip_config: {
+    #                 header_name: "ForwardedIPHeaderName", # required
+    #                 fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #               },
     #             },
     #             and_statement: {
     #               statements: { # required
@@ -4317,6 +4665,7 @@ module Aws::WAFV2
     #
     class OrStatement < Struct.new(
       :statements)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4360,6 +4709,7 @@ module Aws::WAFV2
     class OverrideAction < Struct.new(
       :count,
       :none)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4390,6 +4740,7 @@ module Aws::WAFV2
     #               },
     #             },
     #           ],
+    #           managed_by_firewall_manager: false,
     #         },
     #       }
     #
@@ -4400,6 +4751,7 @@ module Aws::WAFV2
     #
     class PutLoggingConfigurationRequest < Struct.new(
       :logging_configuration)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4410,6 +4762,7 @@ module Aws::WAFV2
     #
     class PutLoggingConfigurationResponse < Struct.new(
       :logging_configuration)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4457,6 +4810,7 @@ module Aws::WAFV2
     class PutPermissionPolicyRequest < Struct.new(
       :resource_arn,
       :policy)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4536,7 +4890,7 @@ module Aws::WAFV2
     #
     #       {
     #         limit: 1, # required
-    #         aggregate_key_type: "IP", # required, accepts IP
+    #         aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
     #         scope_down_statement: {
     #           byte_match_statement: {
     #             search_string: "data", # required
@@ -4648,6 +5002,10 @@ module Aws::WAFV2
     #           },
     #           geo_match_statement: {
     #             country_codes: ["AF"], # accepts AF, AX, AL, DZ, AS, AD, AO, AI, AQ, AG, AR, AM, AW, AU, AT, AZ, BS, BH, BD, BB, BY, BE, BZ, BJ, BM, BT, BO, BQ, BA, BW, BV, BR, IO, BN, BG, BF, BI, KH, CM, CA, CV, KY, CF, TD, CL, CN, CX, CC, CO, KM, CG, CD, CK, CR, CI, HR, CU, CW, CY, CZ, DK, DJ, DM, DO, EC, EG, SV, GQ, ER, EE, ET, FK, FO, FJ, FI, FR, GF, PF, TF, GA, GM, GE, DE, GH, GI, GR, GL, GD, GP, GU, GT, GG, GN, GW, GY, HT, HM, VA, HN, HK, HU, IS, IN, ID, IR, IQ, IE, IM, IL, IT, JM, JP, JE, JO, KZ, KE, KI, KP, KR, KW, KG, LA, LV, LB, LS, LR, LY, LI, LT, LU, MO, MK, MG, MW, MY, MV, ML, MT, MH, MQ, MR, MU, YT, MX, FM, MD, MC, MN, ME, MS, MA, MZ, MM, NA, NR, NP, NL, NC, NZ, NI, NE, NG, NU, NF, MP, NO, OM, PK, PW, PS, PA, PG, PY, PE, PH, PN, PL, PT, PR, QA, RE, RO, RU, RW, BL, SH, KN, LC, MF, PM, VC, WS, SM, ST, SA, SN, RS, SC, SL, SG, SX, SK, SI, SB, SO, ZA, GS, SS, ES, LK, SD, SR, SJ, SZ, SE, CH, SY, TW, TJ, TZ, TH, TL, TG, TK, TO, TT, TN, TR, TM, TC, TV, UG, UA, AE, GB, US, UM, UY, UZ, VU, VE, VN, VG, VI, WF, EH, YE, ZM, ZW
+    #             forwarded_ip_config: {
+    #               header_name: "ForwardedIPHeaderName", # required
+    #               fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #             },
     #           },
     #           rule_group_reference_statement: {
     #             arn: "ResourceArn", # required
@@ -4659,6 +5017,11 @@ module Aws::WAFV2
     #           },
     #           ip_set_reference_statement: {
     #             arn: "ResourceArn", # required
+    #             ip_set_forwarded_ip_config: {
+    #               header_name: "ForwardedIPHeaderName", # required
+    #               fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #               position: "FIRST", # required, accepts FIRST, LAST, ANY
+    #             },
     #           },
     #           regex_pattern_set_reference_statement: {
     #             arn: "ResourceArn", # required
@@ -4689,10 +5052,14 @@ module Aws::WAFV2
     #           },
     #           rate_based_statement: {
     #             limit: 1, # required
-    #             aggregate_key_type: "IP", # required, accepts IP
+    #             aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
     #             scope_down_statement: {
     #               # recursive Statement
     #             },
+    #             forwarded_ip_config: {
+    #               header_name: "ForwardedIPHeaderName", # required
+    #               fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #             },
     #           },
     #           and_statement: {
     #             statements: [ # required
@@ -4723,18 +5090,28 @@ module Aws::WAFV2
     #             ],
     #           },
     #         },
+    #         forwarded_ip_config: {
+    #           header_name: "ForwardedIPHeaderName", # required
+    #           fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #         },
     #       }
     #
     # @!attribute [rw] limit
     #   The limit on requests per 5-minute period for a single originating
-    #   IP address. If the statement includes a `ScopDownStatement`, this
+    #   IP address. If the statement includes a `ScopeDownStatement`, this
     #   limit is applied only to the requests that match the statement.
     #   @return [Integer]
     #
     # @!attribute [rw] aggregate_key_type
-    #   Setting that indicates how to aggregate the request counts.
-    #   Currently, you must set this to `IP`. The request counts are
-    #   aggregated on IP addresses.
+    #   Setting that indicates how to aggregate the request counts. The
+    #   options are the following:
+    #
+    #   * IP - Aggregate the request counts on the IP address from the web
+    #     request origin.
+    #
+    #   * FORWARDED\_IP - Aggregate the request counts on the first IP
+    #     address in an HTTP header. If you use this, configure the
+    #     `ForwardedIPConfig`, to specify the header to use.
     #   @return [String]
     #
     # @!attribute [rw] scope_down_statement
@@ -4744,12 +5121,28 @@ module Aws::WAFV2
     #   this scope-down statement.
     #   @return [Types::Statement]
     #
+    # @!attribute [rw] forwarded_ip_config
+    #   The configuration for inspecting IP addresses in an HTTP header that
+    #   you specify, instead of using the IP address that's reported by the
+    #   web request origin. Commonly, this is the X-Forwarded-For (XFF)
+    #   header, but you can specify any header name.
+    #
+    #   <note markdown="1"> If the specified header isn't present in the request, AWS WAF
+    #   doesn't apply the rule to the web request at all.
+    #
+    #    </note>
+    #
+    #   This is required if `AggregateKeyType` is set to `FORWARDED_IP`.
+    #   @return [Types::ForwardedIPConfig]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/RateBasedStatement AWS API Documentation
     #
     class RateBasedStatement < Struct.new(
       :limit,
       :aggregate_key_type,
-      :scope_down_statement)
+      :scope_down_statement,
+      :forwarded_ip_config)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4779,6 +5172,7 @@ module Aws::WAFV2
     class RateBasedStatementManagedKeysIPSet < Struct.new(
       :ip_address_version,
       :addresses)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4810,6 +5204,7 @@ module Aws::WAFV2
     #
     class Regex < Struct.new(
       :regex_string)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4862,6 +5257,7 @@ module Aws::WAFV2
       :arn,
       :description,
       :regular_expression_list)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4945,6 +5341,7 @@ module Aws::WAFV2
       :arn,
       :field_to_match,
       :text_transformations)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5005,6 +5402,7 @@ module Aws::WAFV2
       :description,
       :lock_token,
       :arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5142,6 +5540,10 @@ module Aws::WAFV2
     #           },
     #           geo_match_statement: {
     #             country_codes: ["AF"], # accepts AF, AX, AL, DZ, AS, AD, AO, AI, AQ, AG, AR, AM, AW, AU, AT, AZ, BS, BH, BD, BB, BY, BE, BZ, BJ, BM, BT, BO, BQ, BA, BW, BV, BR, IO, BN, BG, BF, BI, KH, CM, CA, CV, KY, CF, TD, CL, CN, CX, CC, CO, KM, CG, CD, CK, CR, CI, HR, CU, CW, CY, CZ, DK, DJ, DM, DO, EC, EG, SV, GQ, ER, EE, ET, FK, FO, FJ, FI, FR, GF, PF, TF, GA, GM, GE, DE, GH, GI, GR, GL, GD, GP, GU, GT, GG, GN, GW, GY, HT, HM, VA, HN, HK, HU, IS, IN, ID, IR, IQ, IE, IM, IL, IT, JM, JP, JE, JO, KZ, KE, KI, KP, KR, KW, KG, LA, LV, LB, LS, LR, LY, LI, LT, LU, MO, MK, MG, MW, MY, MV, ML, MT, MH, MQ, MR, MU, YT, MX, FM, MD, MC, MN, ME, MS, MA, MZ, MM, NA, NR, NP, NL, NC, NZ, NI, NE, NG, NU, NF, MP, NO, OM, PK, PW, PS, PA, PG, PY, PE, PH, PN, PL, PT, PR, QA, RE, RO, RU, RW, BL, SH, KN, LC, MF, PM, VC, WS, SM, ST, SA, SN, RS, SC, SL, SG, SX, SK, SI, SB, SO, ZA, GS, SS, ES, LK, SD, SR, SJ, SZ, SE, CH, SY, TW, TJ, TZ, TH, TL, TG, TK, TO, TT, TN, TR, TM, TC, TV, UG, UA, AE, GB, US, UM, UY, UZ, VU, VE, VN, VG, VI, WF, EH, YE, ZM, ZW
+    #             forwarded_ip_config: {
+    #               header_name: "ForwardedIPHeaderName", # required
+    #               fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #             },
     #           },
     #           rule_group_reference_statement: {
     #             arn: "ResourceArn", # required
@@ -5153,6 +5555,11 @@ module Aws::WAFV2
     #           },
     #           ip_set_reference_statement: {
     #             arn: "ResourceArn", # required
+    #             ip_set_forwarded_ip_config: {
+    #               header_name: "ForwardedIPHeaderName", # required
+    #               fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #               position: "FIRST", # required, accepts FIRST, LAST, ANY
+    #             },
     #           },
     #           regex_pattern_set_reference_statement: {
     #             arn: "ResourceArn", # required
@@ -5183,10 +5590,14 @@ module Aws::WAFV2
     #           },
     #           rate_based_statement: {
     #             limit: 1, # required
-    #             aggregate_key_type: "IP", # required, accepts IP
+    #             aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
     #             scope_down_statement: {
     #               # recursive Statement
     #             },
+    #             forwarded_ip_config: {
+    #               header_name: "ForwardedIPHeaderName", # required
+    #               fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #             },
     #           },
     #           and_statement: {
     #             statements: [ # required
@@ -5308,6 +5719,7 @@ module Aws::WAFV2
       :action,
       :override_action,
       :visibility_config)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5356,6 +5768,7 @@ module Aws::WAFV2
       :block,
       :allow,
       :count)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5436,6 +5849,7 @@ module Aws::WAFV2
       :description,
       :rules,
       :visibility_config)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5484,6 +5898,7 @@ module Aws::WAFV2
     class RuleGroupReferenceStatement < Struct.new(
       :arn,
       :excluded_rules)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5544,6 +5959,7 @@ module Aws::WAFV2
       :description,
       :lock_token,
       :arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5590,6 +6006,7 @@ module Aws::WAFV2
     class RuleSummary < Struct.new(
       :name,
       :action)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5636,7 +6053,7 @@ module Aws::WAFV2
     #   groups, the format for this name is `<vendor name>#<managed rule
     #   group name>#<rule name>`. For your own rule groups, the format for
     #   this name is `<rule group name>#<rule name>`. If the rule is not in
-    #   a rule group, the format is `<rule name>`.
+    #   a rule group, this field is absent.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/SampledHTTPRequest AWS API Documentation
@@ -5647,6 +6064,7 @@ module Aws::WAFV2
       :timestamp,
       :action,
       :rule_name_within_rule_group)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5682,6 +6100,7 @@ module Aws::WAFV2
     #
     class SingleHeader < Struct.new(
       :name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5715,6 +6134,7 @@ module Aws::WAFV2
     #
     class SingleQueryArgument < Struct.new(
       :name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5806,6 +6226,7 @@ module Aws::WAFV2
       :comparison_operator,
       :size,
       :text_transformations)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5878,6 +6299,7 @@ module Aws::WAFV2
     class SqliMatchStatement < Struct.new(
       :field_to_match,
       :text_transformations)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6009,6 +6431,10 @@ module Aws::WAFV2
     #         },
     #         geo_match_statement: {
     #           country_codes: ["AF"], # accepts AF, AX, AL, DZ, AS, AD, AO, AI, AQ, AG, AR, AM, AW, AU, AT, AZ, BS, BH, BD, BB, BY, BE, BZ, BJ, BM, BT, BO, BQ, BA, BW, BV, BR, IO, BN, BG, BF, BI, KH, CM, CA, CV, KY, CF, TD, CL, CN, CX, CC, CO, KM, CG, CD, CK, CR, CI, HR, CU, CW, CY, CZ, DK, DJ, DM, DO, EC, EG, SV, GQ, ER, EE, ET, FK, FO, FJ, FI, FR, GF, PF, TF, GA, GM, GE, DE, GH, GI, GR, GL, GD, GP, GU, GT, GG, GN, GW, GY, HT, HM, VA, HN, HK, HU, IS, IN, ID, IR, IQ, IE, IM, IL, IT, JM, JP, JE, JO, KZ, KE, KI, KP, KR, KW, KG, LA, LV, LB, LS, LR, LY, LI, LT, LU, MO, MK, MG, MW, MY, MV, ML, MT, MH, MQ, MR, MU, YT, MX, FM, MD, MC, MN, ME, MS, MA, MZ, MM, NA, NR, NP, NL, NC, NZ, NI, NE, NG, NU, NF, MP, NO, OM, PK, PW, PS, PA, PG, PY, PE, PH, PN, PL, PT, PR, QA, RE, RO, RU, RW, BL, SH, KN, LC, MF, PM, VC, WS, SM, ST, SA, SN, RS, SC, SL, SG, SX, SK, SI, SB, SO, ZA, GS, SS, ES, LK, SD, SR, SJ, SZ, SE, CH, SY, TW, TJ, TZ, TH, TL, TG, TK, TO, TT, TN, TR, TM, TC, TV, UG, UA, AE, GB, US, UM, UY, UZ, VU, VE, VN, VG, VI, WF, EH, YE, ZM, ZW
+    #           forwarded_ip_config: {
+    #             header_name: "ForwardedIPHeaderName", # required
+    #             fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #           },
     #         },
     #         rule_group_reference_statement: {
     #           arn: "ResourceArn", # required
@@ -6020,6 +6446,11 @@ module Aws::WAFV2
     #         },
     #         ip_set_reference_statement: {
     #           arn: "ResourceArn", # required
+    #           ip_set_forwarded_ip_config: {
+    #             header_name: "ForwardedIPHeaderName", # required
+    #             fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #             position: "FIRST", # required, accepts FIRST, LAST, ANY
+    #           },
     #         },
     #         regex_pattern_set_reference_statement: {
     #           arn: "ResourceArn", # required
@@ -6050,7 +6481,7 @@ module Aws::WAFV2
     #         },
     #         rate_based_statement: {
     #           limit: 1, # required
-    #           aggregate_key_type: "IP", # required, accepts IP
+    #           aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
     #           scope_down_statement: {
     #             byte_match_statement: {
     #               search_string: "data", # required
@@ -6162,6 +6593,10 @@ module Aws::WAFV2
     #             },
     #             geo_match_statement: {
     #               country_codes: ["AF"], # accepts AF, AX, AL, DZ, AS, AD, AO, AI, AQ, AG, AR, AM, AW, AU, AT, AZ, BS, BH, BD, BB, BY, BE, BZ, BJ, BM, BT, BO, BQ, BA, BW, BV, BR, IO, BN, BG, BF, BI, KH, CM, CA, CV, KY, CF, TD, CL, CN, CX, CC, CO, KM, CG, CD, CK, CR, CI, HR, CU, CW, CY, CZ, DK, DJ, DM, DO, EC, EG, SV, GQ, ER, EE, ET, FK, FO, FJ, FI, FR, GF, PF, TF, GA, GM, GE, DE, GH, GI, GR, GL, GD, GP, GU, GT, GG, GN, GW, GY, HT, HM, VA, HN, HK, HU, IS, IN, ID, IR, IQ, IE, IM, IL, IT, JM, JP, JE, JO, KZ, KE, KI, KP, KR, KW, KG, LA, LV, LB, LS, LR, LY, LI, LT, LU, MO, MK, MG, MW, MY, MV, ML, MT, MH, MQ, MR, MU, YT, MX, FM, MD, MC, MN, ME, MS, MA, MZ, MM, NA, NR, NP, NL, NC, NZ, NI, NE, NG, NU, NF, MP, NO, OM, PK, PW, PS, PA, PG, PY, PE, PH, PN, PL, PT, PR, QA, RE, RO, RU, RW, BL, SH, KN, LC, MF, PM, VC, WS, SM, ST, SA, SN, RS, SC, SL, SG, SX, SK, SI, SB, SO, ZA, GS, SS, ES, LK, SD, SR, SJ, SZ, SE, CH, SY, TW, TJ, TZ, TH, TL, TG, TK, TO, TT, TN, TR, TM, TC, TV, UG, UA, AE, GB, US, UM, UY, UZ, VU, VE, VN, VG, VI, WF, EH, YE, ZM, ZW
+    #               forwarded_ip_config: {
+    #                 header_name: "ForwardedIPHeaderName", # required
+    #                 fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #               },
     #             },
     #             rule_group_reference_statement: {
     #               arn: "ResourceArn", # required
@@ -6173,6 +6608,11 @@ module Aws::WAFV2
     #             },
     #             ip_set_reference_statement: {
     #               arn: "ResourceArn", # required
+    #               ip_set_forwarded_ip_config: {
+    #                 header_name: "ForwardedIPHeaderName", # required
+    #                 fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                 position: "FIRST", # required, accepts FIRST, LAST, ANY
+    #               },
     #             },
     #             regex_pattern_set_reference_statement: {
     #               arn: "ResourceArn", # required
@@ -6233,6 +6673,10 @@ module Aws::WAFV2
     #               ],
     #             },
     #           },
+    #           forwarded_ip_config: {
+    #             header_name: "ForwardedIPHeaderName", # required
+    #             fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #           },
     #         },
     #         and_statement: {
     #           statements: [ # required
@@ -6347,6 +6791,10 @@ module Aws::WAFV2
     #               },
     #               geo_match_statement: {
     #                 country_codes: ["AF"], # accepts AF, AX, AL, DZ, AS, AD, AO, AI, AQ, AG, AR, AM, AW, AU, AT, AZ, BS, BH, BD, BB, BY, BE, BZ, BJ, BM, BT, BO, BQ, BA, BW, BV, BR, IO, BN, BG, BF, BI, KH, CM, CA, CV, KY, CF, TD, CL, CN, CX, CC, CO, KM, CG, CD, CK, CR, CI, HR, CU, CW, CY, CZ, DK, DJ, DM, DO, EC, EG, SV, GQ, ER, EE, ET, FK, FO, FJ, FI, FR, GF, PF, TF, GA, GM, GE, DE, GH, GI, GR, GL, GD, GP, GU, GT, GG, GN, GW, GY, HT, HM, VA, HN, HK, HU, IS, IN, ID, IR, IQ, IE, IM, IL, IT, JM, JP, JE, JO, KZ, KE, KI, KP, KR, KW, KG, LA, LV, LB, LS, LR, LY, LI, LT, LU, MO, MK, MG, MW, MY, MV, ML, MT, MH, MQ, MR, MU, YT, MX, FM, MD, MC, MN, ME, MS, MA, MZ, MM, NA, NR, NP, NL, NC, NZ, NI, NE, NG, NU, NF, MP, NO, OM, PK, PW, PS, PA, PG, PY, PE, PH, PN, PL, PT, PR, QA, RE, RO, RU, RW, BL, SH, KN, LC, MF, PM, VC, WS, SM, ST, SA, SN, RS, SC, SL, SG, SX, SK, SI, SB, SO, ZA, GS, SS, ES, LK, SD, SR, SJ, SZ, SE, CH, SY, TW, TJ, TZ, TH, TL, TG, TK, TO, TT, TN, TR, TM, TC, TV, UG, UA, AE, GB, US, UM, UY, UZ, VU, VE, VN, VG, VI, WF, EH, YE, ZM, ZW
+    #                 forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                 },
     #               },
     #               rule_group_reference_statement: {
     #                 arn: "ResourceArn", # required
@@ -6358,6 +6806,11 @@ module Aws::WAFV2
     #               },
     #               ip_set_reference_statement: {
     #                 arn: "ResourceArn", # required
+    #                 ip_set_forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                   position: "FIRST", # required, accepts FIRST, LAST, ANY
+    #                 },
     #               },
     #               regex_pattern_set_reference_statement: {
     #                 arn: "ResourceArn", # required
@@ -6388,10 +6841,14 @@ module Aws::WAFV2
     #               },
     #               rate_based_statement: {
     #                 limit: 1, # required
-    #                 aggregate_key_type: "IP", # required, accepts IP
+    #                 aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
     #                 scope_down_statement: {
     #                   # recursive Statement
     #                 },
+    #                 forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                 },
     #               },
     #               and_statement: {
     #                 # recursive AndStatement
@@ -6531,6 +6988,10 @@ module Aws::WAFV2
     #               },
     #               geo_match_statement: {
     #                 country_codes: ["AF"], # accepts AF, AX, AL, DZ, AS, AD, AO, AI, AQ, AG, AR, AM, AW, AU, AT, AZ, BS, BH, BD, BB, BY, BE, BZ, BJ, BM, BT, BO, BQ, BA, BW, BV, BR, IO, BN, BG, BF, BI, KH, CM, CA, CV, KY, CF, TD, CL, CN, CX, CC, CO, KM, CG, CD, CK, CR, CI, HR, CU, CW, CY, CZ, DK, DJ, DM, DO, EC, EG, SV, GQ, ER, EE, ET, FK, FO, FJ, FI, FR, GF, PF, TF, GA, GM, GE, DE, GH, GI, GR, GL, GD, GP, GU, GT, GG, GN, GW, GY, HT, HM, VA, HN, HK, HU, IS, IN, ID, IR, IQ, IE, IM, IL, IT, JM, JP, JE, JO, KZ, KE, KI, KP, KR, KW, KG, LA, LV, LB, LS, LR, LY, LI, LT, LU, MO, MK, MG, MW, MY, MV, ML, MT, MH, MQ, MR, MU, YT, MX, FM, MD, MC, MN, ME, MS, MA, MZ, MM, NA, NR, NP, NL, NC, NZ, NI, NE, NG, NU, NF, MP, NO, OM, PK, PW, PS, PA, PG, PY, PE, PH, PN, PL, PT, PR, QA, RE, RO, RU, RW, BL, SH, KN, LC, MF, PM, VC, WS, SM, ST, SA, SN, RS, SC, SL, SG, SX, SK, SI, SB, SO, ZA, GS, SS, ES, LK, SD, SR, SJ, SZ, SE, CH, SY, TW, TJ, TZ, TH, TL, TG, TK, TO, TT, TN, TR, TM, TC, TV, UG, UA, AE, GB, US, UM, UY, UZ, VU, VE, VN, VG, VI, WF, EH, YE, ZM, ZW
+    #                 forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                 },
     #               },
     #               rule_group_reference_statement: {
     #                 arn: "ResourceArn", # required
@@ -6542,6 +7003,11 @@ module Aws::WAFV2
     #               },
     #               ip_set_reference_statement: {
     #                 arn: "ResourceArn", # required
+    #                 ip_set_forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                   position: "FIRST", # required, accepts FIRST, LAST, ANY
+    #                 },
     #               },
     #               regex_pattern_set_reference_statement: {
     #                 arn: "ResourceArn", # required
@@ -6572,10 +7038,14 @@ module Aws::WAFV2
     #               },
     #               rate_based_statement: {
     #                 limit: 1, # required
-    #                 aggregate_key_type: "IP", # required, accepts IP
+    #                 aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
     #                 scope_down_statement: {
     #                   # recursive Statement
     #                 },
+    #                 forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                 },
     #               },
     #               and_statement: {
     #                 statements: { # required
@@ -6714,6 +7184,10 @@ module Aws::WAFV2
     #             },
     #             geo_match_statement: {
     #               country_codes: ["AF"], # accepts AF, AX, AL, DZ, AS, AD, AO, AI, AQ, AG, AR, AM, AW, AU, AT, AZ, BS, BH, BD, BB, BY, BE, BZ, BJ, BM, BT, BO, BQ, BA, BW, BV, BR, IO, BN, BG, BF, BI, KH, CM, CA, CV, KY, CF, TD, CL, CN, CX, CC, CO, KM, CG, CD, CK, CR, CI, HR, CU, CW, CY, CZ, DK, DJ, DM, DO, EC, EG, SV, GQ, ER, EE, ET, FK, FO, FJ, FI, FR, GF, PF, TF, GA, GM, GE, DE, GH, GI, GR, GL, GD, GP, GU, GT, GG, GN, GW, GY, HT, HM, VA, HN, HK, HU, IS, IN, ID, IR, IQ, IE, IM, IL, IT, JM, JP, JE, JO, KZ, KE, KI, KP, KR, KW, KG, LA, LV, LB, LS, LR, LY, LI, LT, LU, MO, MK, MG, MW, MY, MV, ML, MT, MH, MQ, MR, MU, YT, MX, FM, MD, MC, MN, ME, MS, MA, MZ, MM, NA, NR, NP, NL, NC, NZ, NI, NE, NG, NU, NF, MP, NO, OM, PK, PW, PS, PA, PG, PY, PE, PH, PN, PL, PT, PR, QA, RE, RO, RU, RW, BL, SH, KN, LC, MF, PM, VC, WS, SM, ST, SA, SN, RS, SC, SL, SG, SX, SK, SI, SB, SO, ZA, GS, SS, ES, LK, SD, SR, SJ, SZ, SE, CH, SY, TW, TJ, TZ, TH, TL, TG, TK, TO, TT, TN, TR, TM, TC, TV, UG, UA, AE, GB, US, UM, UY, UZ, VU, VE, VN, VG, VI, WF, EH, YE, ZM, ZW
+    #               forwarded_ip_config: {
+    #                 header_name: "ForwardedIPHeaderName", # required
+    #                 fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #               },
     #             },
     #             rule_group_reference_statement: {
     #               arn: "ResourceArn", # required
@@ -6725,6 +7199,11 @@ module Aws::WAFV2
     #             },
     #             ip_set_reference_statement: {
     #               arn: "ResourceArn", # required
+    #               ip_set_forwarded_ip_config: {
+    #                 header_name: "ForwardedIPHeaderName", # required
+    #                 fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                 position: "FIRST", # required, accepts FIRST, LAST, ANY
+    #               },
     #             },
     #             regex_pattern_set_reference_statement: {
     #               arn: "ResourceArn", # required
@@ -6755,10 +7234,14 @@ module Aws::WAFV2
     #             },
     #             rate_based_statement: {
     #               limit: 1, # required
-    #               aggregate_key_type: "IP", # required, accepts IP
+    #               aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
     #               scope_down_statement: {
     #                 # recursive Statement
     #               },
+    #               forwarded_ip_config: {
+    #                 header_name: "ForwardedIPHeaderName", # required
+    #                 fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #               },
     #             },
     #             and_statement: {
     #               statements: [ # required
@@ -6971,6 +7454,7 @@ module Aws::WAFV2
       :or_statement,
       :not_statement,
       :managed_rule_group_statement)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6981,12 +7465,19 @@ module Aws::WAFV2
     #
     #  </note>
     #
-    # A collection of key:value pairs associated with an AWS resource. The
-    # key:value pair can be anything you define. Typically, the tag key
-    # represents a category (such as "environment") and the tag value
-    # represents a specific value within that category (such as "test,"
-    # "development," or "production"). You can add up to 50 tags to each
-    # AWS resource.
+    # A tag associated with an AWS resource. Tags are key:value pairs that
+    # you can use to categorize and manage your resources, for purposes like
+    # billing or other management. Typically, the tag key represents a
+    # category, such as "environment", and the tag value represents a
+    # specific value within that category, such as "test,"
+    # "development," or "production". Or you might set the tag key to
+    # "customer" and the value to the customer name or ID. You can specify
+    # one or more tags to add to each AWS resource, up to 50 tags for a
+    # resource.
+    #
+    # You can tag the AWS resources that you manage through AWS WAF: web
+    # ACLs, rule groups, IP sets, and regex pattern sets. You can't manage
+    # or view tags through the AWS WAF console.
     #
     #
     #
@@ -7017,6 +7508,7 @@ module Aws::WAFV2
     class Tag < Struct.new(
       :key,
       :value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7027,7 +7519,19 @@ module Aws::WAFV2
     #
     #  </note>
     #
-    # The collection of tagging definitions for an AWS resource.
+    # The collection of tagging definitions for an AWS resource. Tags are
+    # key:value pairs that you can use to categorize and manage your
+    # resources, for purposes like billing or other management. Typically,
+    # the tag key represents a category, such as "environment", and the
+    # tag value represents a specific value within that category, such as
+    # "test," "development," or "production". Or you might set the tag
+    # key to "customer" and the value to the customer name or ID. You can
+    # specify one or more tags to add to each AWS resource, up to 50 tags
+    # for a resource.
+    #
+    # You can tag the AWS resources that you manage through AWS WAF: web
+    # ACLs, rule groups, IP sets, and regex pattern sets. You can't manage
+    # or view tags through the AWS WAF console.
     #
     #
     #
@@ -7046,6 +7550,7 @@ module Aws::WAFV2
     class TagInfoForResource < Struct.new(
       :resource_arn,
       :tag_list)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7075,6 +7580,7 @@ module Aws::WAFV2
     class TagResourceRequest < Struct.new(
       :resource_arn,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7189,6 +7695,7 @@ module Aws::WAFV2
     class TextTransformation < Struct.new(
       :priority,
       :type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7203,6 +7710,11 @@ module Aws::WAFV2
     # specify the time range for which you want AWS WAF to return a sample
     # of web requests.
     #
+    # You must specify the times in Coordinated Universal Time (UTC) format.
+    # UTC format includes the special designator, `Z`. For example,
+    # `"2016-09-27T14:50Z"`. You can specify any time range in the previous
+    # three hours.
+    #
     # In a GetSampledRequests response, the `StartTime` and `EndTime`
     # objects specify the time range for which AWS WAF actually returned a
     # sample of web requests. AWS WAF gets the specified number of requests
@@ -7227,17 +7739,19 @@ module Aws::WAFV2
     # @!attribute [rw] start_time
     #   The beginning of the time range from which you want
     #   `GetSampledRequests` to return a sample of the requests that your
-    #   AWS resource received. Specify the date and time in the following
-    #   format: `"2016-09-27T14:50Z"`. You can specify any time range in the
-    #   previous three hours.
+    #   AWS resource received. You must specify the times in Coordinated
+    #   Universal Time (UTC) format. UTC format includes the special
+    #   designator, `Z`. For example, `"2016-09-27T14:50Z"`. You can specify
+    #   any time range in the previous three hours.
     #   @return [Time]
     #
     # @!attribute [rw] end_time
     #   The end of the time range from which you want `GetSampledRequests`
     #   to return a sample of the requests that your AWS resource received.
-    #   Specify the date and time in the following format:
-    #   `"2016-09-27T14:50Z"`. You can specify any time range in the
-    #   previous three hours.
+    #   You must specify the times in Coordinated Universal Time (UTC)
+    #   format. UTC format includes the special designator, `Z`. For
+    #   example, `"2016-09-27T14:50Z"`. You can specify any time range in
+    #   the previous three hours.
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/TimeWindow AWS API Documentation
@@ -7245,6 +7759,7 @@ module Aws::WAFV2
     class TimeWindow < Struct.new(
       :start_time,
       :end_time)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7270,6 +7785,7 @@ module Aws::WAFV2
     class UntagResourceRequest < Struct.new(
       :resource_arn,
       :tag_keys)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7375,6 +7891,7 @@ module Aws::WAFV2
       :description,
       :addresses,
       :lock_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7388,6 +7905,7 @@ module Aws::WAFV2
     #
     class UpdateIPSetResponse < Struct.new(
       :next_lock_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7461,6 +7979,7 @@ module Aws::WAFV2
       :description,
       :regular_expression_list,
       :lock_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7474,6 +7993,7 @@ module Aws::WAFV2
     #
     class UpdateRegexPatternSetResponse < Struct.new(
       :next_lock_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7600,6 +8120,10 @@ module Aws::WAFV2
     #               },
     #               geo_match_statement: {
     #                 country_codes: ["AF"], # accepts AF, AX, AL, DZ, AS, AD, AO, AI, AQ, AG, AR, AM, AW, AU, AT, AZ, BS, BH, BD, BB, BY, BE, BZ, BJ, BM, BT, BO, BQ, BA, BW, BV, BR, IO, BN, BG, BF, BI, KH, CM, CA, CV, KY, CF, TD, CL, CN, CX, CC, CO, KM, CG, CD, CK, CR, CI, HR, CU, CW, CY, CZ, DK, DJ, DM, DO, EC, EG, SV, GQ, ER, EE, ET, FK, FO, FJ, FI, FR, GF, PF, TF, GA, GM, GE, DE, GH, GI, GR, GL, GD, GP, GU, GT, GG, GN, GW, GY, HT, HM, VA, HN, HK, HU, IS, IN, ID, IR, IQ, IE, IM, IL, IT, JM, JP, JE, JO, KZ, KE, KI, KP, KR, KW, KG, LA, LV, LB, LS, LR, LY, LI, LT, LU, MO, MK, MG, MW, MY, MV, ML, MT, MH, MQ, MR, MU, YT, MX, FM, MD, MC, MN, ME, MS, MA, MZ, MM, NA, NR, NP, NL, NC, NZ, NI, NE, NG, NU, NF, MP, NO, OM, PK, PW, PS, PA, PG, PY, PE, PH, PN, PL, PT, PR, QA, RE, RO, RU, RW, BL, SH, KN, LC, MF, PM, VC, WS, SM, ST, SA, SN, RS, SC, SL, SG, SX, SK, SI, SB, SO, ZA, GS, SS, ES, LK, SD, SR, SJ, SZ, SE, CH, SY, TW, TJ, TZ, TH, TL, TG, TK, TO, TT, TN, TR, TM, TC, TV, UG, UA, AE, GB, US, UM, UY, UZ, VU, VE, VN, VG, VI, WF, EH, YE, ZM, ZW
+    #                 forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                 },
     #               },
     #               rule_group_reference_statement: {
     #                 arn: "ResourceArn", # required
@@ -7611,6 +8135,11 @@ module Aws::WAFV2
     #               },
     #               ip_set_reference_statement: {
     #                 arn: "ResourceArn", # required
+    #                 ip_set_forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                   position: "FIRST", # required, accepts FIRST, LAST, ANY
+    #                 },
     #               },
     #               regex_pattern_set_reference_statement: {
     #                 arn: "ResourceArn", # required
@@ -7641,10 +8170,14 @@ module Aws::WAFV2
     #               },
     #               rate_based_statement: {
     #                 limit: 1, # required
-    #                 aggregate_key_type: "IP", # required, accepts IP
+    #                 aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
     #                 scope_down_statement: {
     #                   # recursive Statement
     #                 },
+    #                 forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                 },
     #               },
     #               and_statement: {
     #                 statements: [ # required
@@ -7768,6 +8301,7 @@ module Aws::WAFV2
       :rules,
       :visibility_config,
       :lock_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7781,6 +8315,7 @@ module Aws::WAFV2
     #
     class UpdateRuleGroupResponse < Struct.new(
       :next_lock_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7913,6 +8448,10 @@ module Aws::WAFV2
     #               },
     #               geo_match_statement: {
     #                 country_codes: ["AF"], # accepts AF, AX, AL, DZ, AS, AD, AO, AI, AQ, AG, AR, AM, AW, AU, AT, AZ, BS, BH, BD, BB, BY, BE, BZ, BJ, BM, BT, BO, BQ, BA, BW, BV, BR, IO, BN, BG, BF, BI, KH, CM, CA, CV, KY, CF, TD, CL, CN, CX, CC, CO, KM, CG, CD, CK, CR, CI, HR, CU, CW, CY, CZ, DK, DJ, DM, DO, EC, EG, SV, GQ, ER, EE, ET, FK, FO, FJ, FI, FR, GF, PF, TF, GA, GM, GE, DE, GH, GI, GR, GL, GD, GP, GU, GT, GG, GN, GW, GY, HT, HM, VA, HN, HK, HU, IS, IN, ID, IR, IQ, IE, IM, IL, IT, JM, JP, JE, JO, KZ, KE, KI, KP, KR, KW, KG, LA, LV, LB, LS, LR, LY, LI, LT, LU, MO, MK, MG, MW, MY, MV, ML, MT, MH, MQ, MR, MU, YT, MX, FM, MD, MC, MN, ME, MS, MA, MZ, MM, NA, NR, NP, NL, NC, NZ, NI, NE, NG, NU, NF, MP, NO, OM, PK, PW, PS, PA, PG, PY, PE, PH, PN, PL, PT, PR, QA, RE, RO, RU, RW, BL, SH, KN, LC, MF, PM, VC, WS, SM, ST, SA, SN, RS, SC, SL, SG, SX, SK, SI, SB, SO, ZA, GS, SS, ES, LK, SD, SR, SJ, SZ, SE, CH, SY, TW, TJ, TZ, TH, TL, TG, TK, TO, TT, TN, TR, TM, TC, TV, UG, UA, AE, GB, US, UM, UY, UZ, VU, VE, VN, VG, VI, WF, EH, YE, ZM, ZW
+    #                 forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                 },
     #               },
     #               rule_group_reference_statement: {
     #                 arn: "ResourceArn", # required
@@ -7924,6 +8463,11 @@ module Aws::WAFV2
     #               },
     #               ip_set_reference_statement: {
     #                 arn: "ResourceArn", # required
+    #                 ip_set_forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                   position: "FIRST", # required, accepts FIRST, LAST, ANY
+    #                 },
     #               },
     #               regex_pattern_set_reference_statement: {
     #                 arn: "ResourceArn", # required
@@ -7954,10 +8498,14 @@ module Aws::WAFV2
     #               },
     #               rate_based_statement: {
     #                 limit: 1, # required
-    #                 aggregate_key_type: "IP", # required, accepts IP
+    #                 aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
     #                 scope_down_statement: {
     #                   # recursive Statement
     #                 },
+    #                 forwarded_ip_config: {
+    #                   header_name: "ForwardedIPHeaderName", # required
+    #                   fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
+    #                 },
     #               },
     #               and_statement: {
     #                 statements: [ # required
@@ -8087,6 +8635,7 @@ module Aws::WAFV2
       :rules,
       :visibility_config,
       :lock_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8100,6 +8649,7 @@ module Aws::WAFV2
     #
     class UpdateWebACLResponse < Struct.new(
       :next_lock_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8167,11 +8717,11 @@ module Aws::WAFV2
     #   @return [Boolean]
     #
     # @!attribute [rw] metric_name
-    #   A name of the CloudWatch metric. The name can contain only
-    #   alphanumeric characters (A-Z, a-z, 0-9), with length from one to 128
-    #   characters. It can't contain whitespace or metric names reserved
-    #   for AWS WAF, for example "All" and "Default\_Action." You can't
-    #   change a `MetricName` after you create a `VisibilityConfig`.
+    #   A name of the CloudWatch metric. The name can contain only the
+    #   characters: A-Z, a-z, 0-9, - (hyphen), and \_ (underscore). The name
+    #   can be from one to 128 characters long. It can't contain whitespace
+    #   or metric names reserved for AWS WAF, for example "All" and
+    #   "Default\_Action."
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/VisibilityConfig AWS API Documentation
@@ -8180,6 +8730,7 @@ module Aws::WAFV2
       :sampled_requests_enabled,
       :cloud_watch_metrics_enabled,
       :metric_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8193,6 +8744,7 @@ module Aws::WAFV2
     #
     class WAFAssociatedItemException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8206,6 +8758,7 @@ module Aws::WAFV2
     #
     class WAFDuplicateItemException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8219,6 +8772,7 @@ module Aws::WAFV2
     #
     class WAFInternalErrorException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8231,6 +8785,7 @@ module Aws::WAFV2
     #
     class WAFInvalidOperationException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8267,6 +8822,7 @@ module Aws::WAFV2
       :field,
       :parameter,
       :reason)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8302,6 +8858,7 @@ module Aws::WAFV2
     #
     class WAFInvalidPermissionPolicyException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8315,6 +8872,7 @@ module Aws::WAFV2
     #
     class WAFInvalidResourceException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8334,6 +8892,7 @@ module Aws::WAFV2
     #
     class WAFLimitsExceededException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8347,6 +8906,7 @@ module Aws::WAFV2
     #
     class WAFNonexistentItemException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8362,6 +8922,7 @@ module Aws::WAFV2
     #
     class WAFOptimisticLockException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8382,6 +8943,7 @@ module Aws::WAFV2
     #
     class WAFServiceLinkedRoleErrorException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8392,6 +8954,7 @@ module Aws::WAFV2
     #
     class WAFSubscriptionNotFoundException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8404,6 +8967,7 @@ module Aws::WAFV2
     #
     class WAFTagOperationException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8417,6 +8981,7 @@ module Aws::WAFV2
     #
     class WAFTagOperationInternalErrorException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8430,6 +8995,7 @@ module Aws::WAFV2
     #
     class WAFUnavailableEntityException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8552,6 +9118,7 @@ module Aws::WAFV2
       :pre_process_firewall_manager_rule_groups,
       :post_process_firewall_manager_rule_groups,
       :managed_by_firewall_manager)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8611,6 +9178,7 @@ module Aws::WAFV2
       :description,
       :lock_token,
       :arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8683,6 +9251,7 @@ module Aws::WAFV2
     class XssMatchStatement < Struct.new(
       :field_to_match,
       :text_transformations)
+      SENSITIVE = []
       include Aws::Structure
     end