aws-sdk-wafv2 1.51.0 → 1.53.0

Sign up to get free protection for your applications and to get access to all the features.
@@ -381,13 +381,13 @@ module Aws::WAFV2
381
381
  # Associates a web ACL with a regional application resource, to protect
382
382
  # the resource. A regional application can be an Application Load
383
383
  # Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL
384
- # API, an Amazon Cognito user pool, or an App Runner service.
384
+ # API, a Amazon Cognito user pool, or an App Runner service.
385
385
  #
386
386
  # For Amazon CloudFront, don't use this call. Instead, use your
387
387
  # CloudFront distribution configuration. To associate a web ACL, in the
388
388
  # CloudFront call `UpdateDistribution`, set the web ACL ID to the Amazon
389
389
  # Resource Name (ARN) of the web ACL. For information, see
390
- # [UpdateDistribution][1] in the *Amazon CloudFront Developer Guide*.
390
+ # [UpdateDistribution][1].
391
391
  #
392
392
  # When you make changes to web ACLs or web ACL components, like rules
393
393
  # and rule groups, WAF propagates the changes everywhere that the web
@@ -418,21 +418,20 @@ module Aws::WAFV2
418
418
  # The ARN must be in one of the following formats:
419
419
  #
420
420
  # * For an Application Load Balancer:
421
- # `arn:partition:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
421
+ # `arn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
422
422
  # `
423
423
  #
424
424
  # * For an Amazon API Gateway REST API:
425
- # `arn:partition:apigateway:region::/restapis/api-id/stages/stage-name
426
- # `
425
+ # `arn:aws:apigateway:region::/restapis/api-id/stages/stage-name `
427
426
  #
428
427
  # * For an AppSync GraphQL API:
429
- # `arn:partition:appsync:region:account-id:apis/GraphQLApiId `
428
+ # `arn:aws:appsync:region:account-id:apis/GraphQLApiId `
430
429
  #
431
430
  # * For an Amazon Cognito user pool:
432
- # `arn:partition:cognito-idp:region:account-id:userpool/user-pool-id `
431
+ # `arn:aws:cognito-idp:region:account-id:userpool/user-pool-id `
433
432
  #
434
433
  # * For an App Runner service:
435
- # `arn:partition:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
434
+ # `arn:aws:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
436
435
  # `
437
436
  #
438
437
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
@@ -463,18 +462,13 @@ module Aws::WAFV2
463
462
  # of each rule. Simple rules that cost little to run use fewer WCUs than
464
463
  # more complex rules that use more processing power. Rule group capacity
465
464
  # is fixed at creation, which helps users plan their web ACL WCU usage
466
- # when they use a rule group. For more information, see [WAF web ACL
467
- # capacity units (WCU)][1] in the *WAF Developer Guide*.
468
- #
469
- #
470
- #
471
- # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/aws-waf-capacity-units.html
465
+ # when they use a rule group. The WCU limit for web ACLs is 1,500.
472
466
  #
473
467
  # @option params [required, String] :scope
474
468
  # Specifies whether this is for an Amazon CloudFront distribution or for
475
469
  # a regional application. A regional application can be an Application
476
470
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
477
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
471
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
478
472
  #
479
473
  # To work with CloudFront, you must also specify the Region US East (N.
480
474
  # Virginia) as follows:
@@ -1205,7 +1199,7 @@ module Aws::WAFV2
1205
1199
  # Specifies whether this is for an Amazon CloudFront distribution or for
1206
1200
  # a regional application. A regional application can be an Application
1207
1201
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1208
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
1202
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
1209
1203
  #
1210
1204
  # To work with CloudFront, you must also specify the Region US East (N.
1211
1205
  # Virginia) as follows:
@@ -1315,7 +1309,7 @@ module Aws::WAFV2
1315
1309
  # Specifies whether this is for an Amazon CloudFront distribution or for
1316
1310
  # a regional application. A regional application can be an Application
1317
1311
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1318
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
1312
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
1319
1313
  #
1320
1314
  # To work with CloudFront, you must also specify the Region US East (N.
1321
1315
  # Virginia) as follows:
@@ -1390,7 +1384,7 @@ module Aws::WAFV2
1390
1384
  # Specifies whether this is for an Amazon CloudFront distribution or for
1391
1385
  # a regional application. A regional application can be an Application
1392
1386
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1393
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
1387
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
1394
1388
  #
1395
1389
  # To work with CloudFront, you must also specify the Region US East (N.
1396
1390
  # Virginia) as follows:
@@ -1414,12 +1408,7 @@ module Aws::WAFV2
1414
1408
  # of each rule. Simple rules that cost little to run use fewer WCUs than
1415
1409
  # more complex rules that use more processing power. Rule group capacity
1416
1410
  # is fixed at creation, which helps users plan their web ACL WCU usage
1417
- # when they use a rule group. For more information, see [WAF web ACL
1418
- # capacity units (WCU)][1] in the *WAF Developer Guide*.
1419
- #
1420
- #
1421
- #
1422
- # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/aws-waf-capacity-units.html
1411
+ # when they use a rule group. The WCU limit for web ACLs is 1,500.
1423
1412
  #
1424
1413
  # @option params [String] :description
1425
1414
  # A description of the rule group that helps with identification.
@@ -1444,17 +1433,18 @@ module Aws::WAFV2
1444
1433
  # rules that you define in the rule group.
1445
1434
  #
1446
1435
  # For information about customizing web requests and responses, see
1447
- # [Customizing web requests and responses in WAF][1] in the *WAF
1448
- # Developer Guide*.
1436
+ # [Customizing web requests and responses in WAF][1] in the [WAF
1437
+ # Developer Guide][2].
1449
1438
  #
1450
1439
  # For information about the limits on count and size for custom request
1451
- # and response settings, see [WAF quotas][2] in the *WAF Developer
1452
- # Guide*.
1440
+ # and response settings, see [WAF quotas][3] in the [WAF Developer
1441
+ # Guide][2].
1453
1442
  #
1454
1443
  #
1455
1444
  #
1456
1445
  # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html
1457
- # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
1446
+ # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html
1447
+ # [3]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
1458
1448
  #
1459
1449
  # @return [Types::CreateRuleGroupResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
1460
1450
  #
@@ -2194,7 +2184,7 @@ module Aws::WAFV2
2194
2184
  # can associate a web ACL with one or more Amazon Web Services resources
2195
2185
  # to protect. The resources can be an Amazon CloudFront distribution, an
2196
2186
  # Amazon API Gateway REST API, an Application Load Balancer, an AppSync
2197
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
2187
+ # GraphQL API, Amazon Cognito user pool, or an App Runner service.
2198
2188
  #
2199
2189
  # @option params [required, String] :name
2200
2190
  # The name of the web ACL. You cannot change the name of a web ACL after
@@ -2204,7 +2194,7 @@ module Aws::WAFV2
2204
2194
  # Specifies whether this is for an Amazon CloudFront distribution or for
2205
2195
  # a regional application. A regional application can be an Application
2206
2196
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
2207
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
2197
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
2208
2198
  #
2209
2199
  # To work with CloudFront, you must also specify the Region US East (N.
2210
2200
  # Virginia) as follows:
@@ -2241,17 +2231,18 @@ module Aws::WAFV2
2241
2231
  # rules and default actions that you define in the web ACL.
2242
2232
  #
2243
2233
  # For information about customizing web requests and responses, see
2244
- # [Customizing web requests and responses in WAF][1] in the *WAF
2245
- # Developer Guide*.
2234
+ # [Customizing web requests and responses in WAF][1] in the [WAF
2235
+ # Developer Guide][2].
2246
2236
  #
2247
2237
  # For information about the limits on count and size for custom request
2248
- # and response settings, see [WAF quotas][2] in the *WAF Developer
2249
- # Guide*.
2238
+ # and response settings, see [WAF quotas][3] in the [WAF Developer
2239
+ # Guide][2].
2250
2240
  #
2251
2241
  #
2252
2242
  #
2253
2243
  # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html
2254
- # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
2244
+ # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html
2245
+ # [3]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
2255
2246
  #
2256
2247
  # @option params [Types::CaptchaConfig] :captcha_config
2257
2248
  # Specifies how WAF should handle `CAPTCHA` evaluations for rules that
@@ -2279,24 +2270,6 @@ module Aws::WAFV2
2279
2270
  # Public suffixes aren't allowed. For example, you can't use `usa.gov`
2280
2271
  # or `co.uk` as token domains.
2281
2272
  #
2282
- # @option params [Types::AssociationConfig] :association_config
2283
- # Specifies custom configurations for the associations between the web
2284
- # ACL and protected resources.
2285
- #
2286
- # Use this to customize the maximum size of the request body that your
2287
- # protected CloudFront distributions forward to WAF for inspection. The
2288
- # default is 16 KB (16,384 kilobytes).
2289
- #
2290
- # <note markdown="1"> You are charged additional fees when your protected resources forward
2291
- # body sizes that are larger than the default. For more information, see
2292
- # [WAF Pricing][1].
2293
- #
2294
- # </note>
2295
- #
2296
- #
2297
- #
2298
- # [1]: http://aws.amazon.com/waf/pricing/
2299
- #
2300
2273
  # @return [Types::CreateWebACLResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
2301
2274
  #
2302
2275
  # * {Types::CreateWebACLResponse#summary #summary} => Types::WebACLSummary
@@ -3039,13 +3012,6 @@ module Aws::WAFV2
3039
3012
  # },
3040
3013
  # },
3041
3014
  # token_domains: ["TokenDomain"],
3042
- # association_config: {
3043
- # request_body: {
3044
- # "CLOUDFRONT" => {
3045
- # default_size_inspection_limit: "KB_16", # required, accepts KB_16, KB_32, KB_48, KB_64
3046
- # },
3047
- # },
3048
- # },
3049
3015
  # })
3050
3016
  #
3051
3017
  # @example Response structure
@@ -3118,7 +3084,7 @@ module Aws::WAFV2
3118
3084
  # Specifies whether this is for an Amazon CloudFront distribution or for
3119
3085
  # a regional application. A regional application can be an Application
3120
3086
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3121
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3087
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
3122
3088
  #
3123
3089
  # To work with CloudFront, you must also specify the Region US East (N.
3124
3090
  # Virginia) as follows:
@@ -3223,7 +3189,7 @@ module Aws::WAFV2
3223
3189
  # Specifies whether this is for an Amazon CloudFront distribution or for
3224
3190
  # a regional application. A regional application can be an Application
3225
3191
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3226
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3192
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
3227
3193
  #
3228
3194
  # To work with CloudFront, you must also specify the Region US East (N.
3229
3195
  # Virginia) as follows:
@@ -3278,7 +3244,7 @@ module Aws::WAFV2
3278
3244
  # Specifies whether this is for an Amazon CloudFront distribution or for
3279
3245
  # a regional application. A regional application can be an Application
3280
3246
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3281
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3247
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
3282
3248
  #
3283
3249
  # To work with CloudFront, you must also specify the Region US East (N.
3284
3250
  # Virginia) as follows:
@@ -3337,8 +3303,7 @@ module Aws::WAFV2
3337
3303
  #
3338
3304
  # * For Amazon CloudFront distributions, use the CloudFront call
3339
3305
  # `ListDistributionsByWebACLId`. For information, see
3340
- # [ListDistributionsByWebACLId][1] in the *Amazon CloudFront API
3341
- # Reference*.
3306
+ # [ListDistributionsByWebACLId][1].
3342
3307
  #
3343
3308
  # * To disassociate a resource from a web ACL, use the following calls:
3344
3309
  #
@@ -3346,7 +3311,7 @@ module Aws::WAFV2
3346
3311
  #
3347
3312
  # * For Amazon CloudFront distributions, provide an empty web ACL ID
3348
3313
  # in the CloudFront call `UpdateDistribution`. For information, see
3349
- # [UpdateDistribution][2] in the *Amazon CloudFront API Reference*.
3314
+ # [UpdateDistribution][2].
3350
3315
  #
3351
3316
  # </note>
3352
3317
  #
@@ -3363,7 +3328,7 @@ module Aws::WAFV2
3363
3328
  # Specifies whether this is for an Amazon CloudFront distribution or for
3364
3329
  # a regional application. A regional application can be an Application
3365
3330
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3366
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3331
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
3367
3332
  #
3368
3333
  # To work with CloudFront, you must also specify the Region US East (N.
3369
3334
  # Virginia) as follows:
@@ -3423,7 +3388,7 @@ module Aws::WAFV2
3423
3388
  # Specifies whether this is for an Amazon CloudFront distribution or for
3424
3389
  # a regional application. A regional application can be an Application
3425
3390
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3426
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3391
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
3427
3392
  #
3428
3393
  # To work with CloudFront, you must also specify the Region US East (N.
3429
3394
  # Virginia) as follows:
@@ -3500,13 +3465,12 @@ module Aws::WAFV2
3500
3465
  # existing web ACL association. A resource can have at most one web ACL
3501
3466
  # association. A regional application can be an Application Load
3502
3467
  # Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL
3503
- # API, an Amazon Cognito user pool, or an App Runner service.
3468
+ # API, a Amazon Cognito user pool, or an App Runner service.
3504
3469
  #
3505
3470
  # For Amazon CloudFront, don't use this call. Instead, use your
3506
3471
  # CloudFront distribution configuration. To disassociate a web ACL,
3507
3472
  # provide an empty web ACL ID in the CloudFront call
3508
- # `UpdateDistribution`. For information, see [UpdateDistribution][1] in
3509
- # the *Amazon CloudFront API Reference*.
3473
+ # `UpdateDistribution`. For information, see [UpdateDistribution][1].
3510
3474
  #
3511
3475
  #
3512
3476
  #
@@ -3519,21 +3483,20 @@ module Aws::WAFV2
3519
3483
  # The ARN must be in one of the following formats:
3520
3484
  #
3521
3485
  # * For an Application Load Balancer:
3522
- # `arn:partition:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
3486
+ # `arn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
3523
3487
  # `
3524
3488
  #
3525
3489
  # * For an Amazon API Gateway REST API:
3526
- # `arn:partition:apigateway:region::/restapis/api-id/stages/stage-name
3527
- # `
3490
+ # `arn:aws:apigateway:region::/restapis/api-id/stages/stage-name `
3528
3491
  #
3529
3492
  # * For an AppSync GraphQL API:
3530
- # `arn:partition:appsync:region:account-id:apis/GraphQLApiId `
3493
+ # `arn:aws:appsync:region:account-id:apis/GraphQLApiId `
3531
3494
  #
3532
3495
  # * For an Amazon Cognito user pool:
3533
- # `arn:partition:cognito-idp:region:account-id:userpool/user-pool-id `
3496
+ # `arn:aws:cognito-idp:region:account-id:userpool/user-pool-id `
3534
3497
  #
3535
3498
  # * For an App Runner service:
3536
- # `arn:partition:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
3499
+ # `arn:aws:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
3537
3500
  # `
3538
3501
  #
3539
3502
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
@@ -3607,7 +3570,7 @@ module Aws::WAFV2
3607
3570
  # Specifies whether this is for an Amazon CloudFront distribution or for
3608
3571
  # a regional application. A regional application can be an Application
3609
3572
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3610
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3573
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
3611
3574
  #
3612
3575
  # To work with CloudFront, you must also specify the Region US East (N.
3613
3576
  # Virginia) as follows:
@@ -3739,7 +3702,7 @@ module Aws::WAFV2
3739
3702
  # Specifies whether this is for an Amazon CloudFront distribution or for
3740
3703
  # a regional application. A regional application can be an Application
3741
3704
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3742
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3705
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
3743
3706
  #
3744
3707
  # To work with CloudFront, you must also specify the Region US East (N.
3745
3708
  # Virginia) as follows:
@@ -3896,7 +3859,7 @@ module Aws::WAFV2
3896
3859
  # Specifies whether this is for an Amazon CloudFront distribution or for
3897
3860
  # a regional application. A regional application can be an Application
3898
3861
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3899
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3862
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
3900
3863
  #
3901
3864
  # To work with CloudFront, you must also specify the Region US East (N.
3902
3865
  # Virginia) as follows:
@@ -3969,7 +3932,7 @@ module Aws::WAFV2
3969
3932
  # Specifies whether this is for an Amazon CloudFront distribution or for
3970
3933
  # a regional application. A regional application can be an Application
3971
3934
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3972
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3935
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
3973
3936
  #
3974
3937
  # To work with CloudFront, you must also specify the Region US East (N.
3975
3938
  # Virginia) as follows:
@@ -4026,7 +3989,7 @@ module Aws::WAFV2
4026
3989
  # Specifies whether this is for an Amazon CloudFront distribution or for
4027
3990
  # a regional application. A regional application can be an Application
4028
3991
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4029
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3992
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
4030
3993
  #
4031
3994
  # To work with CloudFront, you must also specify the Region US East (N.
4032
3995
  # Virginia) as follows:
@@ -4382,7 +4345,7 @@ module Aws::WAFV2
4382
4345
  # Specifies whether this is for an Amazon CloudFront distribution or for
4383
4346
  # a regional application. A regional application can be an Application
4384
4347
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4385
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
4348
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
4386
4349
  #
4387
4350
  # To work with CloudFront, you must also specify the Region US East (N.
4388
4351
  # Virginia) as follows:
@@ -4478,7 +4441,7 @@ module Aws::WAFV2
4478
4441
  # Specifies whether this is for an Amazon CloudFront distribution or for
4479
4442
  # a regional application. A regional application can be an Application
4480
4443
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4481
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
4444
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
4482
4445
  #
4483
4446
  # To work with CloudFront, you must also specify the Region US East (N.
4484
4447
  # Virginia) as follows:
@@ -5346,8 +5309,6 @@ module Aws::WAFV2
5346
5309
  # resp.web_acl.challenge_config.immunity_time_property.immunity_time #=> Integer
5347
5310
  # resp.web_acl.token_domains #=> Array
5348
5311
  # resp.web_acl.token_domains[0] #=> String
5349
- # resp.web_acl.association_config.request_body #=> Hash
5350
- # resp.web_acl.association_config.request_body["AssociatedResourceType"].default_size_inspection_limit #=> String, one of "KB_16", "KB_32", "KB_48", "KB_64"
5351
5312
  # resp.lock_token #=> String
5352
5313
  # resp.application_integration_url #=> String
5353
5314
  #
@@ -5369,21 +5330,20 @@ module Aws::WAFV2
5369
5330
  # The ARN must be in one of the following formats:
5370
5331
  #
5371
5332
  # * For an Application Load Balancer:
5372
- # `arn:partition:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
5333
+ # `arn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
5373
5334
  # `
5374
5335
  #
5375
5336
  # * For an Amazon API Gateway REST API:
5376
- # `arn:partition:apigateway:region::/restapis/api-id/stages/stage-name
5377
- # `
5337
+ # `arn:aws:apigateway:region::/restapis/api-id/stages/stage-name `
5378
5338
  #
5379
5339
  # * For an AppSync GraphQL API:
5380
- # `arn:partition:appsync:region:account-id:apis/GraphQLApiId `
5340
+ # `arn:aws:appsync:region:account-id:apis/GraphQLApiId `
5381
5341
  #
5382
5342
  # * For an Amazon Cognito user pool:
5383
- # `arn:partition:cognito-idp:region:account-id:userpool/user-pool-id `
5343
+ # `arn:aws:cognito-idp:region:account-id:userpool/user-pool-id `
5384
5344
  #
5385
5345
  # * For an App Runner service:
5386
- # `arn:partition:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
5346
+ # `arn:aws:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
5387
5347
  # `
5388
5348
  #
5389
5349
  # @return [Types::GetWebACLForResourceResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
@@ -6235,8 +6195,6 @@ module Aws::WAFV2
6235
6195
  # resp.web_acl.challenge_config.immunity_time_property.immunity_time #=> Integer
6236
6196
  # resp.web_acl.token_domains #=> Array
6237
6197
  # resp.web_acl.token_domains[0] #=> String
6238
- # resp.web_acl.association_config.request_body #=> Hash
6239
- # resp.web_acl.association_config.request_body["AssociatedResourceType"].default_size_inspection_limit #=> String, one of "KB_16", "KB_32", "KB_48", "KB_64"
6240
6198
  #
6241
6199
  # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/GetWebACLForResource AWS API Documentation
6242
6200
  #
@@ -6262,7 +6220,7 @@ module Aws::WAFV2
6262
6220
  # Specifies whether this is for an Amazon CloudFront distribution or for
6263
6221
  # a regional application. A regional application can be an Application
6264
6222
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6265
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6223
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
6266
6224
  #
6267
6225
  # To work with CloudFront, you must also specify the Region US East (N.
6268
6226
  # Virginia) as follows:
@@ -6327,7 +6285,7 @@ module Aws::WAFV2
6327
6285
  # Specifies whether this is for an Amazon CloudFront distribution or for
6328
6286
  # a regional application. A regional application can be an Application
6329
6287
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6330
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6288
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
6331
6289
  #
6332
6290
  # To work with CloudFront, you must also specify the Region US East (N.
6333
6291
  # Virginia) as follows:
@@ -6388,7 +6346,7 @@ module Aws::WAFV2
6388
6346
  # Specifies whether this is for an Amazon CloudFront distribution or for
6389
6347
  # a regional application. A regional application can be an Application
6390
6348
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6391
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6349
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
6392
6350
  #
6393
6351
  # To work with CloudFront, you must also specify the Region US East (N.
6394
6352
  # Virginia) as follows:
@@ -6449,7 +6407,7 @@ module Aws::WAFV2
6449
6407
  # Specifies whether this is for an Amazon CloudFront distribution or for
6450
6408
  # a regional application. A regional application can be an Application
6451
6409
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6452
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6410
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
6453
6411
  #
6454
6412
  # To work with CloudFront, you must also specify the Region US East (N.
6455
6413
  # Virginia) as follows:
@@ -6548,7 +6506,7 @@ module Aws::WAFV2
6548
6506
  # Specifies whether this is for an Amazon CloudFront distribution or for
6549
6507
  # a regional application. A regional application can be an Application
6550
6508
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6551
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6509
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
6552
6510
  #
6553
6511
  # To work with CloudFront, you must also specify the Region US East (N.
6554
6512
  # Virginia) as follows:
@@ -6669,7 +6627,7 @@ module Aws::WAFV2
6669
6627
  # Specifies whether this is for an Amazon CloudFront distribution or for
6670
6628
  # a regional application. A regional application can be an Application
6671
6629
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6672
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6630
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
6673
6631
  #
6674
6632
  # To work with CloudFront, you must also specify the Region US East (N.
6675
6633
  # Virginia) as follows:
@@ -6735,7 +6693,7 @@ module Aws::WAFV2
6735
6693
  # @option params [String] :resource_type
6736
6694
  # Used for web ACLs that are scoped for regional applications. A
6737
6695
  # regional application can be an Application Load Balancer (ALB), an
6738
- # Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito
6696
+ # Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito
6739
6697
  # user pool, or an App Runner service.
6740
6698
  #
6741
6699
  # <note markdown="1"> If you don't provide a resource type, the call uses the resource type
@@ -6777,7 +6735,7 @@ module Aws::WAFV2
6777
6735
  # Specifies whether this is for an Amazon CloudFront distribution or for
6778
6736
  # a regional application. A regional application can be an Application
6779
6737
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6780
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6738
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
6781
6739
  #
6782
6740
  # To work with CloudFront, you must also specify the Region US East (N.
6783
6741
  # Virginia) as follows:
@@ -6896,7 +6854,7 @@ module Aws::WAFV2
6896
6854
  # Specifies whether this is for an Amazon CloudFront distribution or for
6897
6855
  # a regional application. A regional application can be an Application
6898
6856
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6899
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6857
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
6900
6858
  #
6901
6859
  # To work with CloudFront, you must also specify the Region US East (N.
6902
6860
  # Virginia) as follows:
@@ -7173,7 +7131,7 @@ module Aws::WAFV2
7173
7131
  # Specifies whether this is for an Amazon CloudFront distribution or for
7174
7132
  # a regional application. A regional application can be an Application
7175
7133
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7176
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7134
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
7177
7135
  #
7178
7136
  # To work with CloudFront, you must also specify the Region US East (N.
7179
7137
  # Virginia) as follows:
@@ -7263,7 +7221,8 @@ module Aws::WAFV2
7263
7221
  #
7264
7222
  # The policy specifications must conform to the following:
7265
7223
  #
7266
- # * The policy must be composed using IAM Policy version 2012-10-17.
7224
+ # * The policy must be composed using IAM Policy version 2012-10-17 or
7225
+ # version 2015-01-01.
7267
7226
  #
7268
7227
  # * The policy must include specifications for `Effect`, `Action`, and
7269
7228
  # `Principal`.
@@ -7411,7 +7370,7 @@ module Aws::WAFV2
7411
7370
  # Specifies whether this is for an Amazon CloudFront distribution or for
7412
7371
  # a regional application. A regional application can be an Application
7413
7372
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7414
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7373
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
7415
7374
  #
7416
7375
  # To work with CloudFront, you must also specify the Region US East (N.
7417
7376
  # Virginia) as follows:
@@ -7536,7 +7495,7 @@ module Aws::WAFV2
7536
7495
  # Specifies whether this is for an Amazon CloudFront distribution or for
7537
7496
  # a regional application. A regional application can be an Application
7538
7497
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7539
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7498
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
7540
7499
  #
7541
7500
  # To work with CloudFront, you must also specify the Region US East (N.
7542
7501
  # Virginia) as follows:
@@ -7642,7 +7601,7 @@ module Aws::WAFV2
7642
7601
  # Specifies whether this is for an Amazon CloudFront distribution or for
7643
7602
  # a regional application. A regional application can be an Application
7644
7603
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7645
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7604
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
7646
7605
  #
7647
7606
  # To work with CloudFront, you must also specify the Region US East (N.
7648
7607
  # Virginia) as follows:
@@ -7748,7 +7707,7 @@ module Aws::WAFV2
7748
7707
  # Specifies whether this is for an Amazon CloudFront distribution or for
7749
7708
  # a regional application. A regional application can be an Application
7750
7709
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7751
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7710
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
7752
7711
  #
7753
7712
  # To work with CloudFront, you must also specify the Region US East (N.
7754
7713
  # Virginia) as follows:
@@ -7793,17 +7752,18 @@ module Aws::WAFV2
7793
7752
  # rules that you define in the rule group.
7794
7753
  #
7795
7754
  # For information about customizing web requests and responses, see
7796
- # [Customizing web requests and responses in WAF][1] in the *WAF
7797
- # Developer Guide*.
7755
+ # [Customizing web requests and responses in WAF][1] in the [WAF
7756
+ # Developer Guide][2].
7798
7757
  #
7799
7758
  # For information about the limits on count and size for custom request
7800
- # and response settings, see [WAF quotas][2] in the *WAF Developer
7801
- # Guide*.
7759
+ # and response settings, see [WAF quotas][3] in the [WAF Developer
7760
+ # Guide][2].
7802
7761
  #
7803
7762
  #
7804
7763
  #
7805
7764
  # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html
7806
- # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
7765
+ # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html
7766
+ # [3]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
7807
7767
  #
7808
7768
  # @return [Types::UpdateRuleGroupResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
7809
7769
  #
@@ -8564,7 +8524,7 @@ module Aws::WAFV2
8564
8524
  # can associate a web ACL with one or more Amazon Web Services resources
8565
8525
  # to protect. The resources can be an Amazon CloudFront distribution, an
8566
8526
  # Amazon API Gateway REST API, an Application Load Balancer, an AppSync
8567
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
8527
+ # GraphQL API, Amazon Cognito user pool, or an App Runner service.
8568
8528
  #
8569
8529
  # @option params [required, String] :name
8570
8530
  # The name of the web ACL. You cannot change the name of a web ACL after
@@ -8574,7 +8534,7 @@ module Aws::WAFV2
8574
8534
  # Specifies whether this is for an Amazon CloudFront distribution or for
8575
8535
  # a regional application. A regional application can be an Application
8576
8536
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
8577
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
8537
+ # GraphQL API, a Amazon Cognito user pool, or an App Runner service.
8578
8538
  #
8579
8539
  # To work with CloudFront, you must also specify the Region US East (N.
8580
8540
  # Virginia) as follows:
@@ -8623,17 +8583,18 @@ module Aws::WAFV2
8623
8583
  # rules and default actions that you define in the web ACL.
8624
8584
  #
8625
8585
  # For information about customizing web requests and responses, see
8626
- # [Customizing web requests and responses in WAF][1] in the *WAF
8627
- # Developer Guide*.
8586
+ # [Customizing web requests and responses in WAF][1] in the [WAF
8587
+ # Developer Guide][2].
8628
8588
  #
8629
8589
  # For information about the limits on count and size for custom request
8630
- # and response settings, see [WAF quotas][2] in the *WAF Developer
8631
- # Guide*.
8590
+ # and response settings, see [WAF quotas][3] in the [WAF Developer
8591
+ # Guide][2].
8632
8592
  #
8633
8593
  #
8634
8594
  #
8635
8595
  # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html
8636
- # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
8596
+ # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html
8597
+ # [3]: https://docs.aws.amazon.com/waf/latest/developerguide/limits.html
8637
8598
  #
8638
8599
  # @option params [Types::CaptchaConfig] :captcha_config
8639
8600
  # Specifies how WAF should handle `CAPTCHA` evaluations for rules that
@@ -8661,24 +8622,6 @@ module Aws::WAFV2
8661
8622
  # Public suffixes aren't allowed. For example, you can't use `usa.gov`
8662
8623
  # or `co.uk` as token domains.
8663
8624
  #
8664
- # @option params [Types::AssociationConfig] :association_config
8665
- # Specifies custom configurations for the associations between the web
8666
- # ACL and protected resources.
8667
- #
8668
- # Use this to customize the maximum size of the request body that your
8669
- # protected CloudFront distributions forward to WAF for inspection. The
8670
- # default is 16 KB (16,384 kilobytes).
8671
- #
8672
- # <note markdown="1"> You are charged additional fees when your protected resources forward
8673
- # body sizes that are larger than the default. For more information, see
8674
- # [WAF Pricing][1].
8675
- #
8676
- # </note>
8677
- #
8678
- #
8679
- #
8680
- # [1]: http://aws.amazon.com/waf/pricing/
8681
- #
8682
8625
  # @return [Types::UpdateWebACLResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
8683
8626
  #
8684
8627
  # * {Types::UpdateWebACLResponse#next_lock_token #next_lock_token} => String
@@ -9417,13 +9360,6 @@ module Aws::WAFV2
9417
9360
  # },
9418
9361
  # },
9419
9362
  # token_domains: ["TokenDomain"],
9420
- # association_config: {
9421
- # request_body: {
9422
- # "CLOUDFRONT" => {
9423
- # default_size_inspection_limit: "KB_16", # required, accepts KB_16, KB_32, KB_48, KB_64
9424
- # },
9425
- # },
9426
- # },
9427
9363
  # })
9428
9364
  #
9429
9365
  # @example Response structure
@@ -9452,7 +9388,7 @@ module Aws::WAFV2
9452
9388
  params: params,
9453
9389
  config: config)
9454
9390
  context[:gem_name] = 'aws-sdk-wafv2'
9455
- context[:gem_version] = '1.51.0'
9391
+ context[:gem_version] = '1.53.0'
9456
9392
  Seahorse::Client::Request.new(handlers, context)
9457
9393
  end
9458
9394