aws-sdk-wafv2 1.51.0 → 1.53.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +10 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-wafv2/client.rb +84 -148
- data/lib/aws-sdk-wafv2/client_api.rb +0 -17
- data/lib/aws-sdk-wafv2/types.rb +193 -353
- data/lib/aws-sdk-wafv2.rb +1 -1
- metadata +2 -2
data/lib/aws-sdk-wafv2/client.rb
CHANGED
@@ -381,13 +381,13 @@ module Aws::WAFV2
|
|
381
381
|
# Associates a web ACL with a regional application resource, to protect
|
382
382
|
# the resource. A regional application can be an Application Load
|
383
383
|
# Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL
|
384
|
-
# API,
|
384
|
+
# API, a Amazon Cognito user pool, or an App Runner service.
|
385
385
|
#
|
386
386
|
# For Amazon CloudFront, don't use this call. Instead, use your
|
387
387
|
# CloudFront distribution configuration. To associate a web ACL, in the
|
388
388
|
# CloudFront call `UpdateDistribution`, set the web ACL ID to the Amazon
|
389
389
|
# Resource Name (ARN) of the web ACL. For information, see
|
390
|
-
# [UpdateDistribution][1]
|
390
|
+
# [UpdateDistribution][1].
|
391
391
|
#
|
392
392
|
# When you make changes to web ACLs or web ACL components, like rules
|
393
393
|
# and rule groups, WAF propagates the changes everywhere that the web
|
@@ -418,21 +418,20 @@ module Aws::WAFV2
|
|
418
418
|
# The ARN must be in one of the following formats:
|
419
419
|
#
|
420
420
|
# * For an Application Load Balancer:
|
421
|
-
# `arn:
|
421
|
+
# `arn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
|
422
422
|
# `
|
423
423
|
#
|
424
424
|
# * For an Amazon API Gateway REST API:
|
425
|
-
# `arn:
|
426
|
-
# `
|
425
|
+
# `arn:aws:apigateway:region::/restapis/api-id/stages/stage-name `
|
427
426
|
#
|
428
427
|
# * For an AppSync GraphQL API:
|
429
|
-
# `arn:
|
428
|
+
# `arn:aws:appsync:region:account-id:apis/GraphQLApiId `
|
430
429
|
#
|
431
430
|
# * For an Amazon Cognito user pool:
|
432
|
-
# `arn:
|
431
|
+
# `arn:aws:cognito-idp:region:account-id:userpool/user-pool-id `
|
433
432
|
#
|
434
433
|
# * For an App Runner service:
|
435
|
-
# `arn:
|
434
|
+
# `arn:aws:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
|
436
435
|
# `
|
437
436
|
#
|
438
437
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
@@ -463,18 +462,13 @@ module Aws::WAFV2
|
|
463
462
|
# of each rule. Simple rules that cost little to run use fewer WCUs than
|
464
463
|
# more complex rules that use more processing power. Rule group capacity
|
465
464
|
# is fixed at creation, which helps users plan their web ACL WCU usage
|
466
|
-
# when they use a rule group.
|
467
|
-
# capacity units (WCU)][1] in the *WAF Developer Guide*.
|
468
|
-
#
|
469
|
-
#
|
470
|
-
#
|
471
|
-
# [1]: https://docs.aws.amazon.com/waf/latest/developerguide/aws-waf-capacity-units.html
|
465
|
+
# when they use a rule group. The WCU limit for web ACLs is 1,500.
|
472
466
|
#
|
473
467
|
# @option params [required, String] :scope
|
474
468
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
475
469
|
# a regional application. A regional application can be an Application
|
476
470
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
477
|
-
# GraphQL API,
|
471
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
478
472
|
#
|
479
473
|
# To work with CloudFront, you must also specify the Region US East (N.
|
480
474
|
# Virginia) as follows:
|
@@ -1205,7 +1199,7 @@ module Aws::WAFV2
|
|
1205
1199
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
1206
1200
|
# a regional application. A regional application can be an Application
|
1207
1201
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
1208
|
-
# GraphQL API,
|
1202
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
1209
1203
|
#
|
1210
1204
|
# To work with CloudFront, you must also specify the Region US East (N.
|
1211
1205
|
# Virginia) as follows:
|
@@ -1315,7 +1309,7 @@ module Aws::WAFV2
|
|
1315
1309
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
1316
1310
|
# a regional application. A regional application can be an Application
|
1317
1311
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
1318
|
-
# GraphQL API,
|
1312
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
1319
1313
|
#
|
1320
1314
|
# To work with CloudFront, you must also specify the Region US East (N.
|
1321
1315
|
# Virginia) as follows:
|
@@ -1390,7 +1384,7 @@ module Aws::WAFV2
|
|
1390
1384
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
1391
1385
|
# a regional application. A regional application can be an Application
|
1392
1386
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
1393
|
-
# GraphQL API,
|
1387
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
1394
1388
|
#
|
1395
1389
|
# To work with CloudFront, you must also specify the Region US East (N.
|
1396
1390
|
# Virginia) as follows:
|
@@ -1414,12 +1408,7 @@ module Aws::WAFV2
|
|
1414
1408
|
# of each rule. Simple rules that cost little to run use fewer WCUs than
|
1415
1409
|
# more complex rules that use more processing power. Rule group capacity
|
1416
1410
|
# is fixed at creation, which helps users plan their web ACL WCU usage
|
1417
|
-
# when they use a rule group.
|
1418
|
-
# capacity units (WCU)][1] in the *WAF Developer Guide*.
|
1419
|
-
#
|
1420
|
-
#
|
1421
|
-
#
|
1422
|
-
# [1]: https://docs.aws.amazon.com/waf/latest/developerguide/aws-waf-capacity-units.html
|
1411
|
+
# when they use a rule group. The WCU limit for web ACLs is 1,500.
|
1423
1412
|
#
|
1424
1413
|
# @option params [String] :description
|
1425
1414
|
# A description of the rule group that helps with identification.
|
@@ -1444,17 +1433,18 @@ module Aws::WAFV2
|
|
1444
1433
|
# rules that you define in the rule group.
|
1445
1434
|
#
|
1446
1435
|
# For information about customizing web requests and responses, see
|
1447
|
-
# [Customizing web requests and responses in WAF][1] in the
|
1448
|
-
# Developer Guide
|
1436
|
+
# [Customizing web requests and responses in WAF][1] in the [WAF
|
1437
|
+
# Developer Guide][2].
|
1449
1438
|
#
|
1450
1439
|
# For information about the limits on count and size for custom request
|
1451
|
-
# and response settings, see [WAF quotas][
|
1452
|
-
# Guide
|
1440
|
+
# and response settings, see [WAF quotas][3] in the [WAF Developer
|
1441
|
+
# Guide][2].
|
1453
1442
|
#
|
1454
1443
|
#
|
1455
1444
|
#
|
1456
1445
|
# [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html
|
1457
|
-
# [2]: https://docs.aws.amazon.com/waf/latest/developerguide/
|
1446
|
+
# [2]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html
|
1447
|
+
# [3]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
|
1458
1448
|
#
|
1459
1449
|
# @return [Types::CreateRuleGroupResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
1460
1450
|
#
|
@@ -2194,7 +2184,7 @@ module Aws::WAFV2
|
|
2194
2184
|
# can associate a web ACL with one or more Amazon Web Services resources
|
2195
2185
|
# to protect. The resources can be an Amazon CloudFront distribution, an
|
2196
2186
|
# Amazon API Gateway REST API, an Application Load Balancer, an AppSync
|
2197
|
-
# GraphQL API,
|
2187
|
+
# GraphQL API, Amazon Cognito user pool, or an App Runner service.
|
2198
2188
|
#
|
2199
2189
|
# @option params [required, String] :name
|
2200
2190
|
# The name of the web ACL. You cannot change the name of a web ACL after
|
@@ -2204,7 +2194,7 @@ module Aws::WAFV2
|
|
2204
2194
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
2205
2195
|
# a regional application. A regional application can be an Application
|
2206
2196
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
2207
|
-
# GraphQL API,
|
2197
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
2208
2198
|
#
|
2209
2199
|
# To work with CloudFront, you must also specify the Region US East (N.
|
2210
2200
|
# Virginia) as follows:
|
@@ -2241,17 +2231,18 @@ module Aws::WAFV2
|
|
2241
2231
|
# rules and default actions that you define in the web ACL.
|
2242
2232
|
#
|
2243
2233
|
# For information about customizing web requests and responses, see
|
2244
|
-
# [Customizing web requests and responses in WAF][1] in the
|
2245
|
-
# Developer Guide
|
2234
|
+
# [Customizing web requests and responses in WAF][1] in the [WAF
|
2235
|
+
# Developer Guide][2].
|
2246
2236
|
#
|
2247
2237
|
# For information about the limits on count and size for custom request
|
2248
|
-
# and response settings, see [WAF quotas][
|
2249
|
-
# Guide
|
2238
|
+
# and response settings, see [WAF quotas][3] in the [WAF Developer
|
2239
|
+
# Guide][2].
|
2250
2240
|
#
|
2251
2241
|
#
|
2252
2242
|
#
|
2253
2243
|
# [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html
|
2254
|
-
# [2]: https://docs.aws.amazon.com/waf/latest/developerguide/
|
2244
|
+
# [2]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html
|
2245
|
+
# [3]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
|
2255
2246
|
#
|
2256
2247
|
# @option params [Types::CaptchaConfig] :captcha_config
|
2257
2248
|
# Specifies how WAF should handle `CAPTCHA` evaluations for rules that
|
@@ -2279,24 +2270,6 @@ module Aws::WAFV2
|
|
2279
2270
|
# Public suffixes aren't allowed. For example, you can't use `usa.gov`
|
2280
2271
|
# or `co.uk` as token domains.
|
2281
2272
|
#
|
2282
|
-
# @option params [Types::AssociationConfig] :association_config
|
2283
|
-
# Specifies custom configurations for the associations between the web
|
2284
|
-
# ACL and protected resources.
|
2285
|
-
#
|
2286
|
-
# Use this to customize the maximum size of the request body that your
|
2287
|
-
# protected CloudFront distributions forward to WAF for inspection. The
|
2288
|
-
# default is 16 KB (16,384 kilobytes).
|
2289
|
-
#
|
2290
|
-
# <note markdown="1"> You are charged additional fees when your protected resources forward
|
2291
|
-
# body sizes that are larger than the default. For more information, see
|
2292
|
-
# [WAF Pricing][1].
|
2293
|
-
#
|
2294
|
-
# </note>
|
2295
|
-
#
|
2296
|
-
#
|
2297
|
-
#
|
2298
|
-
# [1]: http://aws.amazon.com/waf/pricing/
|
2299
|
-
#
|
2300
2273
|
# @return [Types::CreateWebACLResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
2301
2274
|
#
|
2302
2275
|
# * {Types::CreateWebACLResponse#summary #summary} => Types::WebACLSummary
|
@@ -3039,13 +3012,6 @@ module Aws::WAFV2
|
|
3039
3012
|
# },
|
3040
3013
|
# },
|
3041
3014
|
# token_domains: ["TokenDomain"],
|
3042
|
-
# association_config: {
|
3043
|
-
# request_body: {
|
3044
|
-
# "CLOUDFRONT" => {
|
3045
|
-
# default_size_inspection_limit: "KB_16", # required, accepts KB_16, KB_32, KB_48, KB_64
|
3046
|
-
# },
|
3047
|
-
# },
|
3048
|
-
# },
|
3049
3015
|
# })
|
3050
3016
|
#
|
3051
3017
|
# @example Response structure
|
@@ -3118,7 +3084,7 @@ module Aws::WAFV2
|
|
3118
3084
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
3119
3085
|
# a regional application. A regional application can be an Application
|
3120
3086
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
3121
|
-
# GraphQL API,
|
3087
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
3122
3088
|
#
|
3123
3089
|
# To work with CloudFront, you must also specify the Region US East (N.
|
3124
3090
|
# Virginia) as follows:
|
@@ -3223,7 +3189,7 @@ module Aws::WAFV2
|
|
3223
3189
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
3224
3190
|
# a regional application. A regional application can be an Application
|
3225
3191
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
3226
|
-
# GraphQL API,
|
3192
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
3227
3193
|
#
|
3228
3194
|
# To work with CloudFront, you must also specify the Region US East (N.
|
3229
3195
|
# Virginia) as follows:
|
@@ -3278,7 +3244,7 @@ module Aws::WAFV2
|
|
3278
3244
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
3279
3245
|
# a regional application. A regional application can be an Application
|
3280
3246
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
3281
|
-
# GraphQL API,
|
3247
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
3282
3248
|
#
|
3283
3249
|
# To work with CloudFront, you must also specify the Region US East (N.
|
3284
3250
|
# Virginia) as follows:
|
@@ -3337,8 +3303,7 @@ module Aws::WAFV2
|
|
3337
3303
|
#
|
3338
3304
|
# * For Amazon CloudFront distributions, use the CloudFront call
|
3339
3305
|
# `ListDistributionsByWebACLId`. For information, see
|
3340
|
-
# [ListDistributionsByWebACLId][1]
|
3341
|
-
# Reference*.
|
3306
|
+
# [ListDistributionsByWebACLId][1].
|
3342
3307
|
#
|
3343
3308
|
# * To disassociate a resource from a web ACL, use the following calls:
|
3344
3309
|
#
|
@@ -3346,7 +3311,7 @@ module Aws::WAFV2
|
|
3346
3311
|
#
|
3347
3312
|
# * For Amazon CloudFront distributions, provide an empty web ACL ID
|
3348
3313
|
# in the CloudFront call `UpdateDistribution`. For information, see
|
3349
|
-
# [UpdateDistribution][2]
|
3314
|
+
# [UpdateDistribution][2].
|
3350
3315
|
#
|
3351
3316
|
# </note>
|
3352
3317
|
#
|
@@ -3363,7 +3328,7 @@ module Aws::WAFV2
|
|
3363
3328
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
3364
3329
|
# a regional application. A regional application can be an Application
|
3365
3330
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
3366
|
-
# GraphQL API,
|
3331
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
3367
3332
|
#
|
3368
3333
|
# To work with CloudFront, you must also specify the Region US East (N.
|
3369
3334
|
# Virginia) as follows:
|
@@ -3423,7 +3388,7 @@ module Aws::WAFV2
|
|
3423
3388
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
3424
3389
|
# a regional application. A regional application can be an Application
|
3425
3390
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
3426
|
-
# GraphQL API,
|
3391
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
3427
3392
|
#
|
3428
3393
|
# To work with CloudFront, you must also specify the Region US East (N.
|
3429
3394
|
# Virginia) as follows:
|
@@ -3500,13 +3465,12 @@ module Aws::WAFV2
|
|
3500
3465
|
# existing web ACL association. A resource can have at most one web ACL
|
3501
3466
|
# association. A regional application can be an Application Load
|
3502
3467
|
# Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL
|
3503
|
-
# API,
|
3468
|
+
# API, a Amazon Cognito user pool, or an App Runner service.
|
3504
3469
|
#
|
3505
3470
|
# For Amazon CloudFront, don't use this call. Instead, use your
|
3506
3471
|
# CloudFront distribution configuration. To disassociate a web ACL,
|
3507
3472
|
# provide an empty web ACL ID in the CloudFront call
|
3508
|
-
# `UpdateDistribution`. For information, see [UpdateDistribution][1]
|
3509
|
-
# the *Amazon CloudFront API Reference*.
|
3473
|
+
# `UpdateDistribution`. For information, see [UpdateDistribution][1].
|
3510
3474
|
#
|
3511
3475
|
#
|
3512
3476
|
#
|
@@ -3519,21 +3483,20 @@ module Aws::WAFV2
|
|
3519
3483
|
# The ARN must be in one of the following formats:
|
3520
3484
|
#
|
3521
3485
|
# * For an Application Load Balancer:
|
3522
|
-
# `arn:
|
3486
|
+
# `arn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
|
3523
3487
|
# `
|
3524
3488
|
#
|
3525
3489
|
# * For an Amazon API Gateway REST API:
|
3526
|
-
# `arn:
|
3527
|
-
# `
|
3490
|
+
# `arn:aws:apigateway:region::/restapis/api-id/stages/stage-name `
|
3528
3491
|
#
|
3529
3492
|
# * For an AppSync GraphQL API:
|
3530
|
-
# `arn:
|
3493
|
+
# `arn:aws:appsync:region:account-id:apis/GraphQLApiId `
|
3531
3494
|
#
|
3532
3495
|
# * For an Amazon Cognito user pool:
|
3533
|
-
# `arn:
|
3496
|
+
# `arn:aws:cognito-idp:region:account-id:userpool/user-pool-id `
|
3534
3497
|
#
|
3535
3498
|
# * For an App Runner service:
|
3536
|
-
# `arn:
|
3499
|
+
# `arn:aws:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
|
3537
3500
|
# `
|
3538
3501
|
#
|
3539
3502
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
@@ -3607,7 +3570,7 @@ module Aws::WAFV2
|
|
3607
3570
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
3608
3571
|
# a regional application. A regional application can be an Application
|
3609
3572
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
3610
|
-
# GraphQL API,
|
3573
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
3611
3574
|
#
|
3612
3575
|
# To work with CloudFront, you must also specify the Region US East (N.
|
3613
3576
|
# Virginia) as follows:
|
@@ -3739,7 +3702,7 @@ module Aws::WAFV2
|
|
3739
3702
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
3740
3703
|
# a regional application. A regional application can be an Application
|
3741
3704
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
3742
|
-
# GraphQL API,
|
3705
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
3743
3706
|
#
|
3744
3707
|
# To work with CloudFront, you must also specify the Region US East (N.
|
3745
3708
|
# Virginia) as follows:
|
@@ -3896,7 +3859,7 @@ module Aws::WAFV2
|
|
3896
3859
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
3897
3860
|
# a regional application. A regional application can be an Application
|
3898
3861
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
3899
|
-
# GraphQL API,
|
3862
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
3900
3863
|
#
|
3901
3864
|
# To work with CloudFront, you must also specify the Region US East (N.
|
3902
3865
|
# Virginia) as follows:
|
@@ -3969,7 +3932,7 @@ module Aws::WAFV2
|
|
3969
3932
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
3970
3933
|
# a regional application. A regional application can be an Application
|
3971
3934
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
3972
|
-
# GraphQL API,
|
3935
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
3973
3936
|
#
|
3974
3937
|
# To work with CloudFront, you must also specify the Region US East (N.
|
3975
3938
|
# Virginia) as follows:
|
@@ -4026,7 +3989,7 @@ module Aws::WAFV2
|
|
4026
3989
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
4027
3990
|
# a regional application. A regional application can be an Application
|
4028
3991
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
4029
|
-
# GraphQL API,
|
3992
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
4030
3993
|
#
|
4031
3994
|
# To work with CloudFront, you must also specify the Region US East (N.
|
4032
3995
|
# Virginia) as follows:
|
@@ -4382,7 +4345,7 @@ module Aws::WAFV2
|
|
4382
4345
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
4383
4346
|
# a regional application. A regional application can be an Application
|
4384
4347
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
4385
|
-
# GraphQL API,
|
4348
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
4386
4349
|
#
|
4387
4350
|
# To work with CloudFront, you must also specify the Region US East (N.
|
4388
4351
|
# Virginia) as follows:
|
@@ -4478,7 +4441,7 @@ module Aws::WAFV2
|
|
4478
4441
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
4479
4442
|
# a regional application. A regional application can be an Application
|
4480
4443
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
4481
|
-
# GraphQL API,
|
4444
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
4482
4445
|
#
|
4483
4446
|
# To work with CloudFront, you must also specify the Region US East (N.
|
4484
4447
|
# Virginia) as follows:
|
@@ -5346,8 +5309,6 @@ module Aws::WAFV2
|
|
5346
5309
|
# resp.web_acl.challenge_config.immunity_time_property.immunity_time #=> Integer
|
5347
5310
|
# resp.web_acl.token_domains #=> Array
|
5348
5311
|
# resp.web_acl.token_domains[0] #=> String
|
5349
|
-
# resp.web_acl.association_config.request_body #=> Hash
|
5350
|
-
# resp.web_acl.association_config.request_body["AssociatedResourceType"].default_size_inspection_limit #=> String, one of "KB_16", "KB_32", "KB_48", "KB_64"
|
5351
5312
|
# resp.lock_token #=> String
|
5352
5313
|
# resp.application_integration_url #=> String
|
5353
5314
|
#
|
@@ -5369,21 +5330,20 @@ module Aws::WAFV2
|
|
5369
5330
|
# The ARN must be in one of the following formats:
|
5370
5331
|
#
|
5371
5332
|
# * For an Application Load Balancer:
|
5372
|
-
# `arn:
|
5333
|
+
# `arn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
|
5373
5334
|
# `
|
5374
5335
|
#
|
5375
5336
|
# * For an Amazon API Gateway REST API:
|
5376
|
-
# `arn:
|
5377
|
-
# `
|
5337
|
+
# `arn:aws:apigateway:region::/restapis/api-id/stages/stage-name `
|
5378
5338
|
#
|
5379
5339
|
# * For an AppSync GraphQL API:
|
5380
|
-
# `arn:
|
5340
|
+
# `arn:aws:appsync:region:account-id:apis/GraphQLApiId `
|
5381
5341
|
#
|
5382
5342
|
# * For an Amazon Cognito user pool:
|
5383
|
-
# `arn:
|
5343
|
+
# `arn:aws:cognito-idp:region:account-id:userpool/user-pool-id `
|
5384
5344
|
#
|
5385
5345
|
# * For an App Runner service:
|
5386
|
-
# `arn:
|
5346
|
+
# `arn:aws:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
|
5387
5347
|
# `
|
5388
5348
|
#
|
5389
5349
|
# @return [Types::GetWebACLForResourceResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
@@ -6235,8 +6195,6 @@ module Aws::WAFV2
|
|
6235
6195
|
# resp.web_acl.challenge_config.immunity_time_property.immunity_time #=> Integer
|
6236
6196
|
# resp.web_acl.token_domains #=> Array
|
6237
6197
|
# resp.web_acl.token_domains[0] #=> String
|
6238
|
-
# resp.web_acl.association_config.request_body #=> Hash
|
6239
|
-
# resp.web_acl.association_config.request_body["AssociatedResourceType"].default_size_inspection_limit #=> String, one of "KB_16", "KB_32", "KB_48", "KB_64"
|
6240
6198
|
#
|
6241
6199
|
# @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/GetWebACLForResource AWS API Documentation
|
6242
6200
|
#
|
@@ -6262,7 +6220,7 @@ module Aws::WAFV2
|
|
6262
6220
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
6263
6221
|
# a regional application. A regional application can be an Application
|
6264
6222
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
6265
|
-
# GraphQL API,
|
6223
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
6266
6224
|
#
|
6267
6225
|
# To work with CloudFront, you must also specify the Region US East (N.
|
6268
6226
|
# Virginia) as follows:
|
@@ -6327,7 +6285,7 @@ module Aws::WAFV2
|
|
6327
6285
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
6328
6286
|
# a regional application. A regional application can be an Application
|
6329
6287
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
6330
|
-
# GraphQL API,
|
6288
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
6331
6289
|
#
|
6332
6290
|
# To work with CloudFront, you must also specify the Region US East (N.
|
6333
6291
|
# Virginia) as follows:
|
@@ -6388,7 +6346,7 @@ module Aws::WAFV2
|
|
6388
6346
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
6389
6347
|
# a regional application. A regional application can be an Application
|
6390
6348
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
6391
|
-
# GraphQL API,
|
6349
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
6392
6350
|
#
|
6393
6351
|
# To work with CloudFront, you must also specify the Region US East (N.
|
6394
6352
|
# Virginia) as follows:
|
@@ -6449,7 +6407,7 @@ module Aws::WAFV2
|
|
6449
6407
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
6450
6408
|
# a regional application. A regional application can be an Application
|
6451
6409
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
6452
|
-
# GraphQL API,
|
6410
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
6453
6411
|
#
|
6454
6412
|
# To work with CloudFront, you must also specify the Region US East (N.
|
6455
6413
|
# Virginia) as follows:
|
@@ -6548,7 +6506,7 @@ module Aws::WAFV2
|
|
6548
6506
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
6549
6507
|
# a regional application. A regional application can be an Application
|
6550
6508
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
6551
|
-
# GraphQL API,
|
6509
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
6552
6510
|
#
|
6553
6511
|
# To work with CloudFront, you must also specify the Region US East (N.
|
6554
6512
|
# Virginia) as follows:
|
@@ -6669,7 +6627,7 @@ module Aws::WAFV2
|
|
6669
6627
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
6670
6628
|
# a regional application. A regional application can be an Application
|
6671
6629
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
6672
|
-
# GraphQL API,
|
6630
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
6673
6631
|
#
|
6674
6632
|
# To work with CloudFront, you must also specify the Region US East (N.
|
6675
6633
|
# Virginia) as follows:
|
@@ -6735,7 +6693,7 @@ module Aws::WAFV2
|
|
6735
6693
|
# @option params [String] :resource_type
|
6736
6694
|
# Used for web ACLs that are scoped for regional applications. A
|
6737
6695
|
# regional application can be an Application Load Balancer (ALB), an
|
6738
|
-
# Amazon API Gateway REST API, an AppSync GraphQL API,
|
6696
|
+
# Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito
|
6739
6697
|
# user pool, or an App Runner service.
|
6740
6698
|
#
|
6741
6699
|
# <note markdown="1"> If you don't provide a resource type, the call uses the resource type
|
@@ -6777,7 +6735,7 @@ module Aws::WAFV2
|
|
6777
6735
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
6778
6736
|
# a regional application. A regional application can be an Application
|
6779
6737
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
6780
|
-
# GraphQL API,
|
6738
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
6781
6739
|
#
|
6782
6740
|
# To work with CloudFront, you must also specify the Region US East (N.
|
6783
6741
|
# Virginia) as follows:
|
@@ -6896,7 +6854,7 @@ module Aws::WAFV2
|
|
6896
6854
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
6897
6855
|
# a regional application. A regional application can be an Application
|
6898
6856
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
6899
|
-
# GraphQL API,
|
6857
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
6900
6858
|
#
|
6901
6859
|
# To work with CloudFront, you must also specify the Region US East (N.
|
6902
6860
|
# Virginia) as follows:
|
@@ -7173,7 +7131,7 @@ module Aws::WAFV2
|
|
7173
7131
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
7174
7132
|
# a regional application. A regional application can be an Application
|
7175
7133
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
7176
|
-
# GraphQL API,
|
7134
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
7177
7135
|
#
|
7178
7136
|
# To work with CloudFront, you must also specify the Region US East (N.
|
7179
7137
|
# Virginia) as follows:
|
@@ -7263,7 +7221,8 @@ module Aws::WAFV2
|
|
7263
7221
|
#
|
7264
7222
|
# The policy specifications must conform to the following:
|
7265
7223
|
#
|
7266
|
-
# * The policy must be composed using IAM Policy version 2012-10-17
|
7224
|
+
# * The policy must be composed using IAM Policy version 2012-10-17 or
|
7225
|
+
# version 2015-01-01.
|
7267
7226
|
#
|
7268
7227
|
# * The policy must include specifications for `Effect`, `Action`, and
|
7269
7228
|
# `Principal`.
|
@@ -7411,7 +7370,7 @@ module Aws::WAFV2
|
|
7411
7370
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
7412
7371
|
# a regional application. A regional application can be an Application
|
7413
7372
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
7414
|
-
# GraphQL API,
|
7373
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
7415
7374
|
#
|
7416
7375
|
# To work with CloudFront, you must also specify the Region US East (N.
|
7417
7376
|
# Virginia) as follows:
|
@@ -7536,7 +7495,7 @@ module Aws::WAFV2
|
|
7536
7495
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
7537
7496
|
# a regional application. A regional application can be an Application
|
7538
7497
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
7539
|
-
# GraphQL API,
|
7498
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
7540
7499
|
#
|
7541
7500
|
# To work with CloudFront, you must also specify the Region US East (N.
|
7542
7501
|
# Virginia) as follows:
|
@@ -7642,7 +7601,7 @@ module Aws::WAFV2
|
|
7642
7601
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
7643
7602
|
# a regional application. A regional application can be an Application
|
7644
7603
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
7645
|
-
# GraphQL API,
|
7604
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
7646
7605
|
#
|
7647
7606
|
# To work with CloudFront, you must also specify the Region US East (N.
|
7648
7607
|
# Virginia) as follows:
|
@@ -7748,7 +7707,7 @@ module Aws::WAFV2
|
|
7748
7707
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
7749
7708
|
# a regional application. A regional application can be an Application
|
7750
7709
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
7751
|
-
# GraphQL API,
|
7710
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
7752
7711
|
#
|
7753
7712
|
# To work with CloudFront, you must also specify the Region US East (N.
|
7754
7713
|
# Virginia) as follows:
|
@@ -7793,17 +7752,18 @@ module Aws::WAFV2
|
|
7793
7752
|
# rules that you define in the rule group.
|
7794
7753
|
#
|
7795
7754
|
# For information about customizing web requests and responses, see
|
7796
|
-
# [Customizing web requests and responses in WAF][1] in the
|
7797
|
-
# Developer Guide
|
7755
|
+
# [Customizing web requests and responses in WAF][1] in the [WAF
|
7756
|
+
# Developer Guide][2].
|
7798
7757
|
#
|
7799
7758
|
# For information about the limits on count and size for custom request
|
7800
|
-
# and response settings, see [WAF quotas][
|
7801
|
-
# Guide
|
7759
|
+
# and response settings, see [WAF quotas][3] in the [WAF Developer
|
7760
|
+
# Guide][2].
|
7802
7761
|
#
|
7803
7762
|
#
|
7804
7763
|
#
|
7805
7764
|
# [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html
|
7806
|
-
# [2]: https://docs.aws.amazon.com/waf/latest/developerguide/
|
7765
|
+
# [2]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html
|
7766
|
+
# [3]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
|
7807
7767
|
#
|
7808
7768
|
# @return [Types::UpdateRuleGroupResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
7809
7769
|
#
|
@@ -8564,7 +8524,7 @@ module Aws::WAFV2
|
|
8564
8524
|
# can associate a web ACL with one or more Amazon Web Services resources
|
8565
8525
|
# to protect. The resources can be an Amazon CloudFront distribution, an
|
8566
8526
|
# Amazon API Gateway REST API, an Application Load Balancer, an AppSync
|
8567
|
-
# GraphQL API,
|
8527
|
+
# GraphQL API, Amazon Cognito user pool, or an App Runner service.
|
8568
8528
|
#
|
8569
8529
|
# @option params [required, String] :name
|
8570
8530
|
# The name of the web ACL. You cannot change the name of a web ACL after
|
@@ -8574,7 +8534,7 @@ module Aws::WAFV2
|
|
8574
8534
|
# Specifies whether this is for an Amazon CloudFront distribution or for
|
8575
8535
|
# a regional application. A regional application can be an Application
|
8576
8536
|
# Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
|
8577
|
-
# GraphQL API,
|
8537
|
+
# GraphQL API, a Amazon Cognito user pool, or an App Runner service.
|
8578
8538
|
#
|
8579
8539
|
# To work with CloudFront, you must also specify the Region US East (N.
|
8580
8540
|
# Virginia) as follows:
|
@@ -8623,17 +8583,18 @@ module Aws::WAFV2
|
|
8623
8583
|
# rules and default actions that you define in the web ACL.
|
8624
8584
|
#
|
8625
8585
|
# For information about customizing web requests and responses, see
|
8626
|
-
# [Customizing web requests and responses in WAF][1] in the
|
8627
|
-
# Developer Guide
|
8586
|
+
# [Customizing web requests and responses in WAF][1] in the [WAF
|
8587
|
+
# Developer Guide][2].
|
8628
8588
|
#
|
8629
8589
|
# For information about the limits on count and size for custom request
|
8630
|
-
# and response settings, see [WAF quotas][
|
8631
|
-
# Guide
|
8590
|
+
# and response settings, see [WAF quotas][3] in the [WAF Developer
|
8591
|
+
# Guide][2].
|
8632
8592
|
#
|
8633
8593
|
#
|
8634
8594
|
#
|
8635
8595
|
# [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html
|
8636
|
-
# [2]: https://docs.aws.amazon.com/waf/latest/developerguide/
|
8596
|
+
# [2]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html
|
8597
|
+
# [3]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
|
8637
8598
|
#
|
8638
8599
|
# @option params [Types::CaptchaConfig] :captcha_config
|
8639
8600
|
# Specifies how WAF should handle `CAPTCHA` evaluations for rules that
|
@@ -8661,24 +8622,6 @@ module Aws::WAFV2
|
|
8661
8622
|
# Public suffixes aren't allowed. For example, you can't use `usa.gov`
|
8662
8623
|
# or `co.uk` as token domains.
|
8663
8624
|
#
|
8664
|
-
# @option params [Types::AssociationConfig] :association_config
|
8665
|
-
# Specifies custom configurations for the associations between the web
|
8666
|
-
# ACL and protected resources.
|
8667
|
-
#
|
8668
|
-
# Use this to customize the maximum size of the request body that your
|
8669
|
-
# protected CloudFront distributions forward to WAF for inspection. The
|
8670
|
-
# default is 16 KB (16,384 kilobytes).
|
8671
|
-
#
|
8672
|
-
# <note markdown="1"> You are charged additional fees when your protected resources forward
|
8673
|
-
# body sizes that are larger than the default. For more information, see
|
8674
|
-
# [WAF Pricing][1].
|
8675
|
-
#
|
8676
|
-
# </note>
|
8677
|
-
#
|
8678
|
-
#
|
8679
|
-
#
|
8680
|
-
# [1]: http://aws.amazon.com/waf/pricing/
|
8681
|
-
#
|
8682
8625
|
# @return [Types::UpdateWebACLResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
8683
8626
|
#
|
8684
8627
|
# * {Types::UpdateWebACLResponse#next_lock_token #next_lock_token} => String
|
@@ -9417,13 +9360,6 @@ module Aws::WAFV2
|
|
9417
9360
|
# },
|
9418
9361
|
# },
|
9419
9362
|
# token_domains: ["TokenDomain"],
|
9420
|
-
# association_config: {
|
9421
|
-
# request_body: {
|
9422
|
-
# "CLOUDFRONT" => {
|
9423
|
-
# default_size_inspection_limit: "KB_16", # required, accepts KB_16, KB_32, KB_48, KB_64
|
9424
|
-
# },
|
9425
|
-
# },
|
9426
|
-
# },
|
9427
9363
|
# })
|
9428
9364
|
#
|
9429
9365
|
# @example Response structure
|
@@ -9452,7 +9388,7 @@ module Aws::WAFV2
|
|
9452
9388
|
params: params,
|
9453
9389
|
config: config)
|
9454
9390
|
context[:gem_name] = 'aws-sdk-wafv2'
|
9455
|
-
context[:gem_version] = '1.
|
9391
|
+
context[:gem_version] = '1.53.0'
|
9456
9392
|
Seahorse::Client::Request.new(handlers, context)
|
9457
9393
|
end
|
9458
9394
|
|