aws-sdk-wafv2 1.51.0 → 1.53.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -381,13 +381,13 @@ module Aws::WAFV2
381
381
  # Associates a web ACL with a regional application resource, to protect
382
382
  # the resource. A regional application can be an Application Load
383
383
  # Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL
384
- # API, an Amazon Cognito user pool, or an App Runner service.
384
+ # API, a Amazon Cognito user pool, or an App Runner service.
385
385
  #
386
386
  # For Amazon CloudFront, don't use this call. Instead, use your
387
387
  # CloudFront distribution configuration. To associate a web ACL, in the
388
388
  # CloudFront call `UpdateDistribution`, set the web ACL ID to the Amazon
389
389
  # Resource Name (ARN) of the web ACL. For information, see
390
- # [UpdateDistribution][1] in the *Amazon CloudFront Developer Guide*.
390
+ # [UpdateDistribution][1].
391
391
  #
392
392
  # When you make changes to web ACLs or web ACL components, like rules
393
393
  # and rule groups, WAF propagates the changes everywhere that the web
@@ -418,21 +418,20 @@ module Aws::WAFV2
418
418
  # The ARN must be in one of the following formats:
419
419
  #
420
420
  # * For an Application Load Balancer:
421
- # `arn:partition:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
421
+ # `arn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
422
422
  # `
423
423
  #
424
424
  # * For an Amazon API Gateway REST API:
425
- # `arn:partition:apigateway:region::/restapis/api-id/stages/stage-name
426
- # `
425
+ # `arn:aws:apigateway:region::/restapis/api-id/stages/stage-name `
427
426
  #
428
427
  # * For an AppSync GraphQL API:
429
- # `arn:partition:appsync:region:account-id:apis/GraphQLApiId `
428
+ # `arn:aws:appsync:region:account-id:apis/GraphQLApiId `
430
429
  #
431
430
  # * For an Amazon Cognito user pool:
432
- # `arn:partition:cognito-idp:region:account-id:userpool/user-pool-id `
431
+ # `arn:aws:cognito-idp:region:account-id:userpool/user-pool-id `
433
432
  #
434
433
  # * For an App Runner service:
435
- # `arn:partition:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
434
+ # `arn:aws:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
436
435
  # `
437
436
  #
438
437
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
@@ -463,18 +462,13 @@ module Aws::WAFV2
463
462
  # of each rule. Simple rules that cost little to run use fewer WCUs than
464
463
  # more complex rules that use more processing power. Rule group capacity
465
464
  # is fixed at creation, which helps users plan their web ACL WCU usage
466
- # when they use a rule group. For more information, see [WAF web ACL
467
- # capacity units (WCU)][1] in the *WAF Developer Guide*.
468
- #
469
- #
470
- #
471
- # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/aws-waf-capacity-units.html
465
+ # when they use a rule group. The WCU limit for web ACLs is 1,500.
472
466
  #
473
467
  # @option params [required, String] :scope
474
468
  # Specifies whether this is for an Amazon CloudFront distribution or for
475
469
  # a regional application. A regional application can be an Application
476
470
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
477
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
471
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
478
472
  #
479
473
  # To work with CloudFront, you must also specify the Region US East (N.
480
474
  # Virginia) as follows:
@@ -1205,7 +1199,7 @@ module Aws::WAFV2
1205
1199
  # Specifies whether this is for an Amazon CloudFront distribution or for
1206
1200
  # a regional application. A regional application can be an Application
1207
1201
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1208
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
1202
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
1209
1203
  #
1210
1204
  # To work with CloudFront, you must also specify the Region US East (N.
1211
1205
  # Virginia) as follows:
@@ -1315,7 +1309,7 @@ module Aws::WAFV2
1315
1309
  # Specifies whether this is for an Amazon CloudFront distribution or for
1316
1310
  # a regional application. A regional application can be an Application
1317
1311
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1318
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
1312
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
1319
1313
  #
1320
1314
  # To work with CloudFront, you must also specify the Region US East (N.
1321
1315
  # Virginia) as follows:
@@ -1390,7 +1384,7 @@ module Aws::WAFV2
1390
1384
  # Specifies whether this is for an Amazon CloudFront distribution or for
1391
1385
  # a regional application. A regional application can be an Application
1392
1386
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1393
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
1387
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
1394
1388
  #
1395
1389
  # To work with CloudFront, you must also specify the Region US East (N.
1396
1390
  # Virginia) as follows:
@@ -1414,12 +1408,7 @@ module Aws::WAFV2
1414
1408
  # of each rule. Simple rules that cost little to run use fewer WCUs than
1415
1409
  # more complex rules that use more processing power. Rule group capacity
1416
1410
  # is fixed at creation, which helps users plan their web ACL WCU usage
1417
- # when they use a rule group. For more information, see [WAF web ACL
1418
- # capacity units (WCU)][1] in the *WAF Developer Guide*.
1419
- #
1420
- #
1421
- #
1422
- # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/aws-waf-capacity-units.html
1411
+ # when they use a rule group. The WCU limit for web ACLs is 1,500.
1423
1412
  #
1424
1413
  # @option params [String] :description
1425
1414
  # A description of the rule group that helps with identification.
@@ -1444,17 +1433,18 @@ module Aws::WAFV2
1444
1433
  # rules that you define in the rule group.
1445
1434
  #
1446
1435
  # For information about customizing web requests and responses, see
1447
- # [Customizing web requests and responses in WAF][1] in the *WAF
1448
- # Developer Guide*.
1436
+ # [Customizing web requests and responses in WAF][1] in the [WAF
1437
+ # Developer Guide][2].
1449
1438
  #
1450
1439
  # For information about the limits on count and size for custom request
1451
- # and response settings, see [WAF quotas][2] in the *WAF Developer
1452
- # Guide*.
1440
+ # and response settings, see [WAF quotas][3] in the [WAF Developer
1441
+ # Guide][2].
1453
1442
  #
1454
1443
  #
1455
1444
  #
1456
1445
  # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html
1457
- # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
1446
+ # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html
1447
+ # [3]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
1458
1448
  #
1459
1449
  # @return [Types::CreateRuleGroupResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
1460
1450
  #
@@ -2194,7 +2184,7 @@ module Aws::WAFV2
2194
2184
  # can associate a web ACL with one or more Amazon Web Services resources
2195
2185
  # to protect. The resources can be an Amazon CloudFront distribution, an
2196
2186
  # Amazon API Gateway REST API, an Application Load Balancer, an AppSync
2197
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
2187
+ # GraphQL API, Amazon Cognito user pool, or an App Runner service.
2198
2188
  #
2199
2189
  # @option params [required, String] :name
2200
2190
  # The name of the web ACL. You cannot change the name of a web ACL after
@@ -2204,7 +2194,7 @@ module Aws::WAFV2
2204
2194
  # Specifies whether this is for an Amazon CloudFront distribution or for
2205
2195
  # a regional application. A regional application can be an Application
2206
2196
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
2207
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
2197
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
2208
2198
  #
2209
2199
  # To work with CloudFront, you must also specify the Region US East (N.
2210
2200
  # Virginia) as follows:
@@ -2241,17 +2231,18 @@ module Aws::WAFV2
2241
2231
  # rules and default actions that you define in the web ACL.
2242
2232
  #
2243
2233
  # For information about customizing web requests and responses, see
2244
- # [Customizing web requests and responses in WAF][1] in the *WAF
2245
- # Developer Guide*.
2234
+ # [Customizing web requests and responses in WAF][1] in the [WAF
2235
+ # Developer Guide][2].
2246
2236
  #
2247
2237
  # For information about the limits on count and size for custom request
2248
- # and response settings, see [WAF quotas][2] in the *WAF Developer
2249
- # Guide*.
2238
+ # and response settings, see [WAF quotas][3] in the [WAF Developer
2239
+ # Guide][2].
2250
2240
  #
2251
2241
  #
2252
2242
  #
2253
2243
  # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html
2254
- # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
2244
+ # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html
2245
+ # [3]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
2255
2246
  #
2256
2247
  # @option params [Types::CaptchaConfig] :captcha_config
2257
2248
  # Specifies how WAF should handle `CAPTCHA` evaluations for rules that
@@ -2279,24 +2270,6 @@ module Aws::WAFV2
2279
2270
  # Public suffixes aren't allowed. For example, you can't use `usa.gov`
2280
2271
  # or `co.uk` as token domains.
2281
2272
  #
2282
- # @option params [Types::AssociationConfig] :association_config
2283
- # Specifies custom configurations for the associations between the web
2284
- # ACL and protected resources.
2285
- #
2286
- # Use this to customize the maximum size of the request body that your
2287
- # protected CloudFront distributions forward to WAF for inspection. The
2288
- # default is 16 KB (16,384 kilobytes).
2289
- #
2290
- # <note markdown="1"> You are charged additional fees when your protected resources forward
2291
- # body sizes that are larger than the default. For more information, see
2292
- # [WAF Pricing][1].
2293
- #
2294
- # </note>
2295
- #
2296
- #
2297
- #
2298
- # [1]: http://aws.amazon.com/waf/pricing/
2299
- #
2300
2273
  # @return [Types::CreateWebACLResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
2301
2274
  #
2302
2275
  # * {Types::CreateWebACLResponse#summary #summary} => Types::WebACLSummary
@@ -3039,13 +3012,6 @@ module Aws::WAFV2
3039
3012
  # },
3040
3013
  # },
3041
3014
  # token_domains: ["TokenDomain"],
3042
- # association_config: {
3043
- # request_body: {
3044
- # "CLOUDFRONT" => {
3045
- # default_size_inspection_limit: "KB_16", # required, accepts KB_16, KB_32, KB_48, KB_64
3046
- # },
3047
- # },
3048
- # },
3049
3015
  # })
3050
3016
  #
3051
3017
  # @example Response structure
@@ -3118,7 +3084,7 @@ module Aws::WAFV2
3118
3084
  # Specifies whether this is for an Amazon CloudFront distribution or for
3119
3085
  # a regional application. A regional application can be an Application
3120
3086
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3121
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3087
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
3122
3088
  #
3123
3089
  # To work with CloudFront, you must also specify the Region US East (N.
3124
3090
  # Virginia) as follows:
@@ -3223,7 +3189,7 @@ module Aws::WAFV2
3223
3189
  # Specifies whether this is for an Amazon CloudFront distribution or for
3224
3190
  # a regional application. A regional application can be an Application
3225
3191
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3226
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3192
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
3227
3193
  #
3228
3194
  # To work with CloudFront, you must also specify the Region US East (N.
3229
3195
  # Virginia) as follows:
@@ -3278,7 +3244,7 @@ module Aws::WAFV2
3278
3244
  # Specifies whether this is for an Amazon CloudFront distribution or for
3279
3245
  # a regional application. A regional application can be an Application
3280
3246
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3281
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3247
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
3282
3248
  #
3283
3249
  # To work with CloudFront, you must also specify the Region US East (N.
3284
3250
  # Virginia) as follows:
@@ -3337,8 +3303,7 @@ module Aws::WAFV2
3337
3303
  #
3338
3304
  # * For Amazon CloudFront distributions, use the CloudFront call
3339
3305
  # `ListDistributionsByWebACLId`. For information, see
3340
- # [ListDistributionsByWebACLId][1] in the *Amazon CloudFront API
3341
- # Reference*.
3306
+ # [ListDistributionsByWebACLId][1].
3342
3307
  #
3343
3308
  # * To disassociate a resource from a web ACL, use the following calls:
3344
3309
  #
@@ -3346,7 +3311,7 @@ module Aws::WAFV2
3346
3311
  #
3347
3312
  # * For Amazon CloudFront distributions, provide an empty web ACL ID
3348
3313
  # in the CloudFront call `UpdateDistribution`. For information, see
3349
- # [UpdateDistribution][2] in the *Amazon CloudFront API Reference*.
3314
+ # [UpdateDistribution][2].
3350
3315
  #
3351
3316
  # </note>
3352
3317
  #
@@ -3363,7 +3328,7 @@ module Aws::WAFV2
3363
3328
  # Specifies whether this is for an Amazon CloudFront distribution or for
3364
3329
  # a regional application. A regional application can be an Application
3365
3330
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3366
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3331
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
3367
3332
  #
3368
3333
  # To work with CloudFront, you must also specify the Region US East (N.
3369
3334
  # Virginia) as follows:
@@ -3423,7 +3388,7 @@ module Aws::WAFV2
3423
3388
  # Specifies whether this is for an Amazon CloudFront distribution or for
3424
3389
  # a regional application. A regional application can be an Application
3425
3390
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3426
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3391
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
3427
3392
  #
3428
3393
  # To work with CloudFront, you must also specify the Region US East (N.
3429
3394
  # Virginia) as follows:
@@ -3500,13 +3465,12 @@ module Aws::WAFV2
3500
3465
  # existing web ACL association. A resource can have at most one web ACL
3501
3466
  # association. A regional application can be an Application Load
3502
3467
  # Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL
3503
- # API, an Amazon Cognito user pool, or an App Runner service.
3468
+ # API, a Amazon Cognito user pool, or an App Runner service.
3504
3469
  #
3505
3470
  # For Amazon CloudFront, don't use this call. Instead, use your
3506
3471
  # CloudFront distribution configuration. To disassociate a web ACL,
3507
3472
  # provide an empty web ACL ID in the CloudFront call
3508
- # `UpdateDistribution`. For information, see [UpdateDistribution][1] in
3509
- # the *Amazon CloudFront API Reference*.
3473
+ # `UpdateDistribution`. For information, see [UpdateDistribution][1].
3510
3474
  #
3511
3475
  #
3512
3476
  #
@@ -3519,21 +3483,20 @@ module Aws::WAFV2
3519
3483
  # The ARN must be in one of the following formats:
3520
3484
  #
3521
3485
  # * For an Application Load Balancer:
3522
- # `arn:partition:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
3486
+ # `arn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
3523
3487
  # `
3524
3488
  #
3525
3489
  # * For an Amazon API Gateway REST API:
3526
- # `arn:partition:apigateway:region::/restapis/api-id/stages/stage-name
3527
- # `
3490
+ # `arn:aws:apigateway:region::/restapis/api-id/stages/stage-name `
3528
3491
  #
3529
3492
  # * For an AppSync GraphQL API:
3530
- # `arn:partition:appsync:region:account-id:apis/GraphQLApiId `
3493
+ # `arn:aws:appsync:region:account-id:apis/GraphQLApiId `
3531
3494
  #
3532
3495
  # * For an Amazon Cognito user pool:
3533
- # `arn:partition:cognito-idp:region:account-id:userpool/user-pool-id `
3496
+ # `arn:aws:cognito-idp:region:account-id:userpool/user-pool-id `
3534
3497
  #
3535
3498
  # * For an App Runner service:
3536
- # `arn:partition:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
3499
+ # `arn:aws:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
3537
3500
  # `
3538
3501
  #
3539
3502
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
@@ -3607,7 +3570,7 @@ module Aws::WAFV2
3607
3570
  # Specifies whether this is for an Amazon CloudFront distribution or for
3608
3571
  # a regional application. A regional application can be an Application
3609
3572
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3610
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3573
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
3611
3574
  #
3612
3575
  # To work with CloudFront, you must also specify the Region US East (N.
3613
3576
  # Virginia) as follows:
@@ -3739,7 +3702,7 @@ module Aws::WAFV2
3739
3702
  # Specifies whether this is for an Amazon CloudFront distribution or for
3740
3703
  # a regional application. A regional application can be an Application
3741
3704
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3742
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3705
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
3743
3706
  #
3744
3707
  # To work with CloudFront, you must also specify the Region US East (N.
3745
3708
  # Virginia) as follows:
@@ -3896,7 +3859,7 @@ module Aws::WAFV2
3896
3859
  # Specifies whether this is for an Amazon CloudFront distribution or for
3897
3860
  # a regional application. A regional application can be an Application
3898
3861
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3899
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3862
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
3900
3863
  #
3901
3864
  # To work with CloudFront, you must also specify the Region US East (N.
3902
3865
  # Virginia) as follows:
@@ -3969,7 +3932,7 @@ module Aws::WAFV2
3969
3932
  # Specifies whether this is for an Amazon CloudFront distribution or for
3970
3933
  # a regional application. A regional application can be an Application
3971
3934
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3972
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3935
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
3973
3936
  #
3974
3937
  # To work with CloudFront, you must also specify the Region US East (N.
3975
3938
  # Virginia) as follows:
@@ -4026,7 +3989,7 @@ module Aws::WAFV2
4026
3989
  # Specifies whether this is for an Amazon CloudFront distribution or for
4027
3990
  # a regional application. A regional application can be an Application
4028
3991
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4029
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3992
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
4030
3993
  #
4031
3994
  # To work with CloudFront, you must also specify the Region US East (N.
4032
3995
  # Virginia) as follows:
@@ -4382,7 +4345,7 @@ module Aws::WAFV2
4382
4345
  # Specifies whether this is for an Amazon CloudFront distribution or for
4383
4346
  # a regional application. A regional application can be an Application
4384
4347
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4385
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
4348
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
4386
4349
  #
4387
4350
  # To work with CloudFront, you must also specify the Region US East (N.
4388
4351
  # Virginia) as follows:
@@ -4478,7 +4441,7 @@ module Aws::WAFV2
4478
4441
  # Specifies whether this is for an Amazon CloudFront distribution or for
4479
4442
  # a regional application. A regional application can be an Application
4480
4443
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4481
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
4444
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
4482
4445
  #
4483
4446
  # To work with CloudFront, you must also specify the Region US East (N.
4484
4447
  # Virginia) as follows:
@@ -5346,8 +5309,6 @@ module Aws::WAFV2
5346
5309
  # resp.web_acl.challenge_config.immunity_time_property.immunity_time #=> Integer
5347
5310
  # resp.web_acl.token_domains #=> Array
5348
5311
  # resp.web_acl.token_domains[0] #=> String
5349
- # resp.web_acl.association_config.request_body #=> Hash
5350
- # resp.web_acl.association_config.request_body["AssociatedResourceType"].default_size_inspection_limit #=> String, one of "KB_16", "KB_32", "KB_48", "KB_64"
5351
5312
  # resp.lock_token #=> String
5352
5313
  # resp.application_integration_url #=> String
5353
5314
  #
@@ -5369,21 +5330,20 @@ module Aws::WAFV2
5369
5330
  # The ARN must be in one of the following formats:
5370
5331
  #
5371
5332
  # * For an Application Load Balancer:
5372
- # `arn:partition:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
5333
+ # `arn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
5373
5334
  # `
5374
5335
  #
5375
5336
  # * For an Amazon API Gateway REST API:
5376
- # `arn:partition:apigateway:region::/restapis/api-id/stages/stage-name
5377
- # `
5337
+ # `arn:aws:apigateway:region::/restapis/api-id/stages/stage-name `
5378
5338
  #
5379
5339
  # * For an AppSync GraphQL API:
5380
- # `arn:partition:appsync:region:account-id:apis/GraphQLApiId `
5340
+ # `arn:aws:appsync:region:account-id:apis/GraphQLApiId `
5381
5341
  #
5382
5342
  # * For an Amazon Cognito user pool:
5383
- # `arn:partition:cognito-idp:region:account-id:userpool/user-pool-id `
5343
+ # `arn:aws:cognito-idp:region:account-id:userpool/user-pool-id `
5384
5344
  #
5385
5345
  # * For an App Runner service:
5386
- # `arn:partition:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
5346
+ # `arn:aws:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
5387
5347
  # `
5388
5348
  #
5389
5349
  # @return [Types::GetWebACLForResourceResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
@@ -6235,8 +6195,6 @@ module Aws::WAFV2
6235
6195
  # resp.web_acl.challenge_config.immunity_time_property.immunity_time #=> Integer
6236
6196
  # resp.web_acl.token_domains #=> Array
6237
6197
  # resp.web_acl.token_domains[0] #=> String
6238
- # resp.web_acl.association_config.request_body #=> Hash
6239
- # resp.web_acl.association_config.request_body["AssociatedResourceType"].default_size_inspection_limit #=> String, one of "KB_16", "KB_32", "KB_48", "KB_64"
6240
6198
  #
6241
6199
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/GetWebACLForResource AWS API Documentation
6242
6200
  #
@@ -6262,7 +6220,7 @@ module Aws::WAFV2
6262
6220
  # Specifies whether this is for an Amazon CloudFront distribution or for
6263
6221
  # a regional application. A regional application can be an Application
6264
6222
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6265
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6223
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
6266
6224
  #
6267
6225
  # To work with CloudFront, you must also specify the Region US East (N.
6268
6226
  # Virginia) as follows:
@@ -6327,7 +6285,7 @@ module Aws::WAFV2
6327
6285
  # Specifies whether this is for an Amazon CloudFront distribution or for
6328
6286
  # a regional application. A regional application can be an Application
6329
6287
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6330
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6288
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
6331
6289
  #
6332
6290
  # To work with CloudFront, you must also specify the Region US East (N.
6333
6291
  # Virginia) as follows:
@@ -6388,7 +6346,7 @@ module Aws::WAFV2
6388
6346
  # Specifies whether this is for an Amazon CloudFront distribution or for
6389
6347
  # a regional application. A regional application can be an Application
6390
6348
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6391
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6349
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
6392
6350
  #
6393
6351
  # To work with CloudFront, you must also specify the Region US East (N.
6394
6352
  # Virginia) as follows:
@@ -6449,7 +6407,7 @@ module Aws::WAFV2
6449
6407
  # Specifies whether this is for an Amazon CloudFront distribution or for
6450
6408
  # a regional application. A regional application can be an Application
6451
6409
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6452
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6410
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
6453
6411
  #
6454
6412
  # To work with CloudFront, you must also specify the Region US East (N.
6455
6413
  # Virginia) as follows:
@@ -6548,7 +6506,7 @@ module Aws::WAFV2
6548
6506
  # Specifies whether this is for an Amazon CloudFront distribution or for
6549
6507
  # a regional application. A regional application can be an Application
6550
6508
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6551
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6509
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
6552
6510
  #
6553
6511
  # To work with CloudFront, you must also specify the Region US East (N.
6554
6512
  # Virginia) as follows:
@@ -6669,7 +6627,7 @@ module Aws::WAFV2
6669
6627
  # Specifies whether this is for an Amazon CloudFront distribution or for
6670
6628
  # a regional application. A regional application can be an Application
6671
6629
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6672
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6630
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
6673
6631
  #
6674
6632
  # To work with CloudFront, you must also specify the Region US East (N.
6675
6633
  # Virginia) as follows:
@@ -6735,7 +6693,7 @@ module Aws::WAFV2
6735
6693
  # @option params [String] :resource_type
6736
6694
  # Used for web ACLs that are scoped for regional applications. A
6737
6695
  # regional application can be an Application Load Balancer (ALB), an
6738
- # Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito
6696
+ # Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito
6739
6697
  # user pool, or an App Runner service.
6740
6698
  #
6741
6699
  # <note markdown="1"> If you don't provide a resource type, the call uses the resource type
@@ -6777,7 +6735,7 @@ module Aws::WAFV2
6777
6735
  # Specifies whether this is for an Amazon CloudFront distribution or for
6778
6736
  # a regional application. A regional application can be an Application
6779
6737
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6780
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6738
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
6781
6739
  #
6782
6740
  # To work with CloudFront, you must also specify the Region US East (N.
6783
6741
  # Virginia) as follows:
@@ -6896,7 +6854,7 @@ module Aws::WAFV2
6896
6854
  # Specifies whether this is for an Amazon CloudFront distribution or for
6897
6855
  # a regional application. A regional application can be an Application
6898
6856
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6899
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6857
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
6900
6858
  #
6901
6859
  # To work with CloudFront, you must also specify the Region US East (N.
6902
6860
  # Virginia) as follows:
@@ -7173,7 +7131,7 @@ module Aws::WAFV2
7173
7131
  # Specifies whether this is for an Amazon CloudFront distribution or for
7174
7132
  # a regional application. A regional application can be an Application
7175
7133
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7176
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7134
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
7177
7135
  #
7178
7136
  # To work with CloudFront, you must also specify the Region US East (N.
7179
7137
  # Virginia) as follows:
@@ -7263,7 +7221,8 @@ module Aws::WAFV2
7263
7221
  #
7264
7222
  # The policy specifications must conform to the following:
7265
7223
  #
7266
- # * The policy must be composed using IAM Policy version 2012-10-17.
7224
+ # * The policy must be composed using IAM Policy version 2012-10-17 or
7225
+ # version 2015-01-01.
7267
7226
  #
7268
7227
  # * The policy must include specifications for `Effect`, `Action`, and
7269
7228
  # `Principal`.
@@ -7411,7 +7370,7 @@ module Aws::WAFV2
7411
7370
  # Specifies whether this is for an Amazon CloudFront distribution or for
7412
7371
  # a regional application. A regional application can be an Application
7413
7372
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7414
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7373
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
7415
7374
  #
7416
7375
  # To work with CloudFront, you must also specify the Region US East (N.
7417
7376
  # Virginia) as follows:
@@ -7536,7 +7495,7 @@ module Aws::WAFV2
7536
7495
  # Specifies whether this is for an Amazon CloudFront distribution or for
7537
7496
  # a regional application. A regional application can be an Application
7538
7497
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7539
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7498
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
7540
7499
  #
7541
7500
  # To work with CloudFront, you must also specify the Region US East (N.
7542
7501
  # Virginia) as follows:
@@ -7642,7 +7601,7 @@ module Aws::WAFV2
7642
7601
  # Specifies whether this is for an Amazon CloudFront distribution or for
7643
7602
  # a regional application. A regional application can be an Application
7644
7603
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7645
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7604
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
7646
7605
  #
7647
7606
  # To work with CloudFront, you must also specify the Region US East (N.
7648
7607
  # Virginia) as follows:
@@ -7748,7 +7707,7 @@ module Aws::WAFV2
7748
7707
  # Specifies whether this is for an Amazon CloudFront distribution or for
7749
7708
  # a regional application. A regional application can be an Application
7750
7709
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7751
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7710
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
7752
7711
  #
7753
7712
  # To work with CloudFront, you must also specify the Region US East (N.
7754
7713
  # Virginia) as follows:
@@ -7793,17 +7752,18 @@ module Aws::WAFV2
7793
7752
  # rules that you define in the rule group.
7794
7753
  #
7795
7754
  # For information about customizing web requests and responses, see
7796
- # [Customizing web requests and responses in WAF][1] in the *WAF
7797
- # Developer Guide*.
7755
+ # [Customizing web requests and responses in WAF][1] in the [WAF
7756
+ # Developer Guide][2].
7798
7757
  #
7799
7758
  # For information about the limits on count and size for custom request
7800
- # and response settings, see [WAF quotas][2] in the *WAF Developer
7801
- # Guide*.
7759
+ # and response settings, see [WAF quotas][3] in the [WAF Developer
7760
+ # Guide][2].
7802
7761
  #
7803
7762
  #
7804
7763
  #
7805
7764
  # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html
7806
- # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
7765
+ # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html
7766
+ # [3]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
7807
7767
  #
7808
7768
  # @return [Types::UpdateRuleGroupResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
7809
7769
  #
@@ -8564,7 +8524,7 @@ module Aws::WAFV2
8564
8524
  # can associate a web ACL with one or more Amazon Web Services resources
8565
8525
  # to protect. The resources can be an Amazon CloudFront distribution, an
8566
8526
  # Amazon API Gateway REST API, an Application Load Balancer, an AppSync
8567
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
8527
+ # GraphQL API, Amazon Cognito user pool, or an App Runner service.
8568
8528
  #
8569
8529
  # @option params [required, String] :name
8570
8530
  # The name of the web ACL. You cannot change the name of a web ACL after
@@ -8574,7 +8534,7 @@ module Aws::WAFV2
8574
8534
  # Specifies whether this is for an Amazon CloudFront distribution or for
8575
8535
  # a regional application. A regional application can be an Application
8576
8536
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
8577
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
8537
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
8578
8538
  #
8579
8539
  # To work with CloudFront, you must also specify the Region US East (N.
8580
8540
  # Virginia) as follows:
@@ -8623,17 +8583,18 @@ module Aws::WAFV2
8623
8583
  # rules and default actions that you define in the web ACL.
8624
8584
  #
8625
8585
  # For information about customizing web requests and responses, see
8626
- # [Customizing web requests and responses in WAF][1] in the *WAF
8627
- # Developer Guide*.
8586
+ # [Customizing web requests and responses in WAF][1] in the [WAF
8587
+ # Developer Guide][2].
8628
8588
  #
8629
8589
  # For information about the limits on count and size for custom request
8630
- # and response settings, see [WAF quotas][2] in the *WAF Developer
8631
- # Guide*.
8590
+ # and response settings, see [WAF quotas][3] in the [WAF Developer
8591
+ # Guide][2].
8632
8592
  #
8633
8593
  #
8634
8594
  #
8635
8595
  # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html
8636
- # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
8596
+ # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html
8597
+ # [3]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
8637
8598
  #
8638
8599
  # @option params [Types::CaptchaConfig] :captcha_config
8639
8600
  # Specifies how WAF should handle `CAPTCHA` evaluations for rules that
@@ -8661,24 +8622,6 @@ module Aws::WAFV2
8661
8622
  # Public suffixes aren't allowed. For example, you can't use `usa.gov`
8662
8623
  # or `co.uk` as token domains.
8663
8624
  #
8664
- # @option params [Types::AssociationConfig] :association_config
8665
- # Specifies custom configurations for the associations between the web
8666
- # ACL and protected resources.
8667
- #
8668
- # Use this to customize the maximum size of the request body that your
8669
- # protected CloudFront distributions forward to WAF for inspection. The
8670
- # default is 16 KB (16,384 kilobytes).
8671
- #
8672
- # <note markdown="1"> You are charged additional fees when your protected resources forward
8673
- # body sizes that are larger than the default. For more information, see
8674
- # [WAF Pricing][1].
8675
- #
8676
- # </note>
8677
- #
8678
- #
8679
- #
8680
- # [1]: http://aws.amazon.com/waf/pricing/
8681
- #
8682
8625
  # @return [Types::UpdateWebACLResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
8683
8626
  #
8684
8627
  # * {Types::UpdateWebACLResponse#next_lock_token #next_lock_token} => String
@@ -9417,13 +9360,6 @@ module Aws::WAFV2
9417
9360
  # },
9418
9361
  # },
9419
9362
  # token_domains: ["TokenDomain"],
9420
- # association_config: {
9421
- # request_body: {
9422
- # "CLOUDFRONT" => {
9423
- # default_size_inspection_limit: "KB_16", # required, accepts KB_16, KB_32, KB_48, KB_64
9424
- # },
9425
- # },
9426
- # },
9427
9363
  # })
9428
9364
  #
9429
9365
  # @example Response structure
@@ -9452,7 +9388,7 @@ module Aws::WAFV2
9452
9388
  params: params,
9453
9389
  config: config)
9454
9390
  context[:gem_name] = 'aws-sdk-wafv2'
9455
- context[:gem_version] = '1.51.0'
9391
+ context[:gem_version] = '1.53.0'
9456
9392
  Seahorse::Client::Request.new(handlers, context)
9457
9393
  end
9458
9394