aws-sdk-wafv2 1.55.0 → 1.57.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -381,7 +381,8 @@ module Aws::WAFV2
381
381
  # Associates a web ACL with a regional application resource, to protect
382
382
  # the resource. A regional application can be an Application Load
383
383
  # Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL
384
- # API, an Amazon Cognito user pool, or an App Runner service.
384
+ # API, an Amazon Cognito user pool, an App Runner service, or an Amazon
385
+ # Web Services Verified Access instance.
385
386
  #
386
387
  # For Amazon CloudFront, don't use this call. Instead, use your
387
388
  # CloudFront distribution configuration. To associate a web ACL, in the
@@ -435,6 +436,10 @@ module Aws::WAFV2
435
436
  # `arn:partition:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
436
437
  # `
437
438
  #
439
+ # * For an Amazon Web Services Verified Access instance:
440
+ # `arn:partition:ec2:region:account-id:verified-access-instance/instance-id
441
+ # `
442
+ #
438
443
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
439
444
  #
440
445
  # @example Request syntax with placeholder values
@@ -474,7 +479,8 @@ module Aws::WAFV2
474
479
  # Specifies whether this is for an Amazon CloudFront distribution or for
475
480
  # a regional application. A regional application can be an Application
476
481
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
477
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
482
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
483
+ # Amazon Web Services Verified Access instance.
478
484
  #
479
485
  # To work with CloudFront, you must also specify the Region US East (N.
480
486
  # Virginia) as follows:
@@ -876,7 +882,7 @@ module Aws::WAFV2
876
882
  # },
877
883
  # rate_based_statement: {
878
884
  # limit: 1, # required
879
- # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
885
+ # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP, CUSTOM_KEYS, CONSTANT
880
886
  # scope_down_statement: {
881
887
  # # recursive Statement
882
888
  # },
@@ -884,6 +890,54 @@ module Aws::WAFV2
884
890
  # header_name: "ForwardedIPHeaderName", # required
885
891
  # fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
886
892
  # },
893
+ # custom_keys: [
894
+ # {
895
+ # header: {
896
+ # name: "FieldToMatchData", # required
897
+ # text_transformations: [ # required
898
+ # {
899
+ # priority: 1, # required
900
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
901
+ # },
902
+ # ],
903
+ # },
904
+ # cookie: {
905
+ # name: "FieldToMatchData", # required
906
+ # text_transformations: [ # required
907
+ # {
908
+ # priority: 1, # required
909
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
910
+ # },
911
+ # ],
912
+ # },
913
+ # query_argument: {
914
+ # name: "FieldToMatchData", # required
915
+ # text_transformations: [ # required
916
+ # {
917
+ # priority: 1, # required
918
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
919
+ # },
920
+ # ],
921
+ # },
922
+ # query_string: {
923
+ # text_transformations: [ # required
924
+ # {
925
+ # priority: 1, # required
926
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
927
+ # },
928
+ # ],
929
+ # },
930
+ # http_method: {
931
+ # },
932
+ # forwarded_ip: {
933
+ # },
934
+ # ip: {
935
+ # },
936
+ # label_namespace: {
937
+ # namespace: "LabelNamespace", # required
938
+ # },
939
+ # },
940
+ # ],
887
941
  # },
888
942
  # and_statement: {
889
943
  # statements: [ # required
@@ -1191,17 +1245,17 @@ module Aws::WAFV2
1191
1245
  req.send_request(options)
1192
1246
  end
1193
1247
 
1194
- # Creates an API key for use in the integration of the CAPTCHA API in
1195
- # your JavaScript client applications. The integration lets you
1196
- # customize the placement and characteristics of the CAPTCHA puzzle for
1197
- # your end users. For more information about the CAPTCHA JavaScript
1198
- # integration, see [WAF client application integration][1] in the *WAF
1199
- # Developer Guide*.
1248
+ # Creates an API key that contains a set of token domains.
1249
+ #
1250
+ # API keys are required for the integration of the CAPTCHA API in your
1251
+ # JavaScript client applications. The API lets you customize the
1252
+ # placement and characteristics of the CAPTCHA puzzle for your end
1253
+ # users. For more information about the CAPTCHA JavaScript integration,
1254
+ # see [WAF client application integration][1] in the *WAF Developer
1255
+ # Guide*.
1200
1256
  #
1201
- # The CAPTCHA API requires a key that authorizes CAPTCHA use from the
1202
- # client application domain. You can use a single key for up to 5
1203
- # domains. After you generate a key, you can copy it for use in your
1204
- # JavaScript integration.
1257
+ # You can use a single key for up to 5 domains. After you generate a
1258
+ # key, you can copy it for use in your JavaScript integration.
1205
1259
  #
1206
1260
  #
1207
1261
  #
@@ -1211,7 +1265,8 @@ module Aws::WAFV2
1211
1265
  # Specifies whether this is for an Amazon CloudFront distribution or for
1212
1266
  # a regional application. A regional application can be an Application
1213
1267
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1214
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
1268
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
1269
+ # Amazon Web Services Verified Access instance.
1215
1270
  #
1216
1271
  # To work with CloudFront, you must also specify the Region US East (N.
1217
1272
  # Virginia) as follows:
@@ -1224,6 +1279,11 @@ module Aws::WAFV2
1224
1279
  # @option params [required, Array<String>] :token_domains
1225
1280
  # The client application domains that you want to use this API key for.
1226
1281
  #
1282
+ # Example JSON: `"TokenDomains": ["abc.com", "store.abc.com"]`
1283
+ #
1284
+ # Public suffixes aren't allowed. For example, you can't use `usa.gov`
1285
+ # or `co.uk` as token domains.
1286
+ #
1227
1287
  # @return [Types::CreateAPIKeyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
1228
1288
  #
1229
1289
  # * {Types::CreateAPIKeyResponse#api_key #api_key} => String
@@ -1262,7 +1322,8 @@ module Aws::WAFV2
1262
1322
  # Specifies whether this is for an Amazon CloudFront distribution or for
1263
1323
  # a regional application. A regional application can be an Application
1264
1324
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1265
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
1325
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
1326
+ # Amazon Web Services Verified Access instance.
1266
1327
  #
1267
1328
  # To work with CloudFront, you must also specify the Region US East (N.
1268
1329
  # Virginia) as follows:
@@ -1372,7 +1433,8 @@ module Aws::WAFV2
1372
1433
  # Specifies whether this is for an Amazon CloudFront distribution or for
1373
1434
  # a regional application. A regional application can be an Application
1374
1435
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1375
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
1436
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
1437
+ # Amazon Web Services Verified Access instance.
1376
1438
  #
1377
1439
  # To work with CloudFront, you must also specify the Region US East (N.
1378
1440
  # Virginia) as follows:
@@ -1447,7 +1509,8 @@ module Aws::WAFV2
1447
1509
  # Specifies whether this is for an Amazon CloudFront distribution or for
1448
1510
  # a regional application. A regional application can be an Application
1449
1511
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1450
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
1512
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
1513
+ # Amazon Web Services Verified Access instance.
1451
1514
  #
1452
1515
  # To work with CloudFront, you must also specify the Region US East (N.
1453
1516
  # Virginia) as follows:
@@ -1904,7 +1967,7 @@ module Aws::WAFV2
1904
1967
  # },
1905
1968
  # rate_based_statement: {
1906
1969
  # limit: 1, # required
1907
- # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
1970
+ # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP, CUSTOM_KEYS, CONSTANT
1908
1971
  # scope_down_statement: {
1909
1972
  # # recursive Statement
1910
1973
  # },
@@ -1912,6 +1975,54 @@ module Aws::WAFV2
1912
1975
  # header_name: "ForwardedIPHeaderName", # required
1913
1976
  # fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
1914
1977
  # },
1978
+ # custom_keys: [
1979
+ # {
1980
+ # header: {
1981
+ # name: "FieldToMatchData", # required
1982
+ # text_transformations: [ # required
1983
+ # {
1984
+ # priority: 1, # required
1985
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
1986
+ # },
1987
+ # ],
1988
+ # },
1989
+ # cookie: {
1990
+ # name: "FieldToMatchData", # required
1991
+ # text_transformations: [ # required
1992
+ # {
1993
+ # priority: 1, # required
1994
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
1995
+ # },
1996
+ # ],
1997
+ # },
1998
+ # query_argument: {
1999
+ # name: "FieldToMatchData", # required
2000
+ # text_transformations: [ # required
2001
+ # {
2002
+ # priority: 1, # required
2003
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
2004
+ # },
2005
+ # ],
2006
+ # },
2007
+ # query_string: {
2008
+ # text_transformations: [ # required
2009
+ # {
2010
+ # priority: 1, # required
2011
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
2012
+ # },
2013
+ # ],
2014
+ # },
2015
+ # http_method: {
2016
+ # },
2017
+ # forwarded_ip: {
2018
+ # },
2019
+ # ip: {
2020
+ # },
2021
+ # label_namespace: {
2022
+ # namespace: "LabelNamespace", # required
2023
+ # },
2024
+ # },
2025
+ # ],
1915
2026
  # },
1916
2027
  # and_statement: {
1917
2028
  # statements: [ # required
@@ -2251,7 +2362,8 @@ module Aws::WAFV2
2251
2362
  # can associate a web ACL with one or more Amazon Web Services resources
2252
2363
  # to protect. The resources can be an Amazon CloudFront distribution, an
2253
2364
  # Amazon API Gateway REST API, an Application Load Balancer, an AppSync
2254
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
2365
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
2366
+ # Amazon Web Services Verified Access instance.
2255
2367
  #
2256
2368
  # @option params [required, String] :name
2257
2369
  # The name of the web ACL. You cannot change the name of a web ACL after
@@ -2261,7 +2373,8 @@ module Aws::WAFV2
2261
2373
  # Specifies whether this is for an Amazon CloudFront distribution or for
2262
2374
  # a regional application. A regional application can be an Application
2263
2375
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
2264
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
2376
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
2377
+ # Amazon Web Services Verified Access instance.
2265
2378
  #
2266
2379
  # To work with CloudFront, you must also specify the Region US East (N.
2267
2380
  # Virginia) as follows:
@@ -2768,7 +2881,7 @@ module Aws::WAFV2
2768
2881
  # },
2769
2882
  # rate_based_statement: {
2770
2883
  # limit: 1, # required
2771
- # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
2884
+ # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP, CUSTOM_KEYS, CONSTANT
2772
2885
  # scope_down_statement: {
2773
2886
  # # recursive Statement
2774
2887
  # },
@@ -2776,6 +2889,54 @@ module Aws::WAFV2
2776
2889
  # header_name: "ForwardedIPHeaderName", # required
2777
2890
  # fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
2778
2891
  # },
2892
+ # custom_keys: [
2893
+ # {
2894
+ # header: {
2895
+ # name: "FieldToMatchData", # required
2896
+ # text_transformations: [ # required
2897
+ # {
2898
+ # priority: 1, # required
2899
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
2900
+ # },
2901
+ # ],
2902
+ # },
2903
+ # cookie: {
2904
+ # name: "FieldToMatchData", # required
2905
+ # text_transformations: [ # required
2906
+ # {
2907
+ # priority: 1, # required
2908
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
2909
+ # },
2910
+ # ],
2911
+ # },
2912
+ # query_argument: {
2913
+ # name: "FieldToMatchData", # required
2914
+ # text_transformations: [ # required
2915
+ # {
2916
+ # priority: 1, # required
2917
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
2918
+ # },
2919
+ # ],
2920
+ # },
2921
+ # query_string: {
2922
+ # text_transformations: [ # required
2923
+ # {
2924
+ # priority: 1, # required
2925
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
2926
+ # },
2927
+ # ],
2928
+ # },
2929
+ # http_method: {
2930
+ # },
2931
+ # forwarded_ip: {
2932
+ # },
2933
+ # ip: {
2934
+ # },
2935
+ # label_namespace: {
2936
+ # namespace: "LabelNamespace", # required
2937
+ # },
2938
+ # },
2939
+ # ],
2779
2940
  # },
2780
2941
  # and_statement: {
2781
2942
  # statements: [ # required
@@ -3175,7 +3336,8 @@ module Aws::WAFV2
3175
3336
  # Specifies whether this is for an Amazon CloudFront distribution or for
3176
3337
  # a regional application. A regional application can be an Application
3177
3338
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3178
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3339
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
3340
+ # Amazon Web Services Verified Access instance.
3179
3341
  #
3180
3342
  # To work with CloudFront, you must also specify the Region US East (N.
3181
3343
  # Virginia) as follows:
@@ -3280,7 +3442,8 @@ module Aws::WAFV2
3280
3442
  # Specifies whether this is for an Amazon CloudFront distribution or for
3281
3443
  # a regional application. A regional application can be an Application
3282
3444
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3283
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3445
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
3446
+ # Amazon Web Services Verified Access instance.
3284
3447
  #
3285
3448
  # To work with CloudFront, you must also specify the Region US East (N.
3286
3449
  # Virginia) as follows:
@@ -3335,7 +3498,8 @@ module Aws::WAFV2
3335
3498
  # Specifies whether this is for an Amazon CloudFront distribution or for
3336
3499
  # a regional application. A regional application can be an Application
3337
3500
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3338
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3501
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
3502
+ # Amazon Web Services Verified Access instance.
3339
3503
  #
3340
3504
  # To work with CloudFront, you must also specify the Region US East (N.
3341
3505
  # Virginia) as follows:
@@ -3420,7 +3584,8 @@ module Aws::WAFV2
3420
3584
  # Specifies whether this is for an Amazon CloudFront distribution or for
3421
3585
  # a regional application. A regional application can be an Application
3422
3586
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3423
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3587
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
3588
+ # Amazon Web Services Verified Access instance.
3424
3589
  #
3425
3590
  # To work with CloudFront, you must also specify the Region US East (N.
3426
3591
  # Virginia) as follows:
@@ -3480,7 +3645,8 @@ module Aws::WAFV2
3480
3645
  # Specifies whether this is for an Amazon CloudFront distribution or for
3481
3646
  # a regional application. A regional application can be an Application
3482
3647
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3483
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3648
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
3649
+ # Amazon Web Services Verified Access instance.
3484
3650
  #
3485
3651
  # To work with CloudFront, you must also specify the Region US East (N.
3486
3652
  # Virginia) as follows:
@@ -3557,7 +3723,8 @@ module Aws::WAFV2
3557
3723
  # existing web ACL association. A resource can have at most one web ACL
3558
3724
  # association. A regional application can be an Application Load
3559
3725
  # Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL
3560
- # API, an Amazon Cognito user pool, or an App Runner service.
3726
+ # API, an Amazon Cognito user pool, an App Runner service, or an Amazon
3727
+ # Web Services Verified Access instance.
3561
3728
  #
3562
3729
  # For Amazon CloudFront, don't use this call. Instead, use your
3563
3730
  # CloudFront distribution configuration. To disassociate a web ACL,
@@ -3593,6 +3760,10 @@ module Aws::WAFV2
3593
3760
  # `arn:partition:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
3594
3761
  # `
3595
3762
  #
3763
+ # * For an Amazon Web Services Verified Access instance:
3764
+ # `arn:partition:ec2:region:account-id:verified-access-instance/instance-id
3765
+ # `
3766
+ #
3596
3767
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
3597
3768
  #
3598
3769
  # @example Request syntax with placeholder values
@@ -3657,11 +3828,23 @@ module Aws::WAFV2
3657
3828
  # Returns your API key in decrypted form. Use this to check the token
3658
3829
  # domains that you have defined for the key.
3659
3830
  #
3831
+ # API keys are required for the integration of the CAPTCHA API in your
3832
+ # JavaScript client applications. The API lets you customize the
3833
+ # placement and characteristics of the CAPTCHA puzzle for your end
3834
+ # users. For more information about the CAPTCHA JavaScript integration,
3835
+ # see [WAF client application integration][1] in the *WAF Developer
3836
+ # Guide*.
3837
+ #
3838
+ #
3839
+ #
3840
+ # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-application-integration.html
3841
+ #
3660
3842
  # @option params [required, String] :scope
3661
3843
  # Specifies whether this is for an Amazon CloudFront distribution or for
3662
3844
  # a regional application. A regional application can be an Application
3663
3845
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3664
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3846
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
3847
+ # Amazon Web Services Verified Access instance.
3665
3848
  #
3666
3849
  # To work with CloudFront, you must also specify the Region US East (N.
3667
3850
  # Virginia) as follows:
@@ -3711,7 +3894,8 @@ module Aws::WAFV2
3711
3894
  # Specifies whether this is for an Amazon CloudFront distribution or for
3712
3895
  # a regional application. A regional application can be an Application
3713
3896
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3714
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3897
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
3898
+ # Amazon Web Services Verified Access instance.
3715
3899
  #
3716
3900
  # To work with CloudFront, you must also specify the Region US East (N.
3717
3901
  # Virginia) as follows:
@@ -3843,7 +4027,8 @@ module Aws::WAFV2
3843
4027
  # Specifies whether this is for an Amazon CloudFront distribution or for
3844
4028
  # a regional application. A regional application can be an Application
3845
4029
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3846
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
4030
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4031
+ # Amazon Web Services Verified Access instance.
3847
4032
  #
3848
4033
  # To work with CloudFront, you must also specify the Region US East (N.
3849
4034
  # Virginia) as follows:
@@ -3977,11 +4162,13 @@ module Aws::WAFV2
3977
4162
  req.send_request(options)
3978
4163
  end
3979
4164
 
3980
- # Retrieves the keys that are currently blocked by a rate-based rule
3981
- # instance. The maximum number of managed keys that can be blocked for a
3982
- # single rate-based rule instance is 10,000. If more than 10,000
3983
- # addresses exceed the rate limit, those with the highest rates are
3984
- # blocked.
4165
+ # Retrieves the IP addresses that are currently blocked by a rate-based
4166
+ # rule instance. This is only available for rate-based rules that
4167
+ # aggregate solely on the IP address or on the forwarded IP address.
4168
+ #
4169
+ # The maximum number of addresses that can be blocked for a single
4170
+ # rate-based rule instance is 10,000. If more than 10,000 addresses
4171
+ # exceed the rate limit, those with the highest rates are blocked.
3985
4172
  #
3986
4173
  # For a rate-based rule that you've defined inside a rule group,
3987
4174
  # provide the name of the rule group reference statement in your
@@ -4000,7 +4187,8 @@ module Aws::WAFV2
4000
4187
  # Specifies whether this is for an Amazon CloudFront distribution or for
4001
4188
  # a regional application. A regional application can be an Application
4002
4189
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4003
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
4190
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4191
+ # Amazon Web Services Verified Access instance.
4004
4192
  #
4005
4193
  # To work with CloudFront, you must also specify the Region US East (N.
4006
4194
  # Virginia) as follows:
@@ -4073,7 +4261,8 @@ module Aws::WAFV2
4073
4261
  # Specifies whether this is for an Amazon CloudFront distribution or for
4074
4262
  # a regional application. A regional application can be an Application
4075
4263
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4076
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
4264
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4265
+ # Amazon Web Services Verified Access instance.
4077
4266
  #
4078
4267
  # To work with CloudFront, you must also specify the Region US East (N.
4079
4268
  # Virginia) as follows:
@@ -4130,7 +4319,8 @@ module Aws::WAFV2
4130
4319
  # Specifies whether this is for an Amazon CloudFront distribution or for
4131
4320
  # a regional application. A regional application can be an Application
4132
4321
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4133
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
4322
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4323
+ # Amazon Web Services Verified Access instance.
4134
4324
  #
4135
4325
  # To work with CloudFront, you must also specify the Region US East (N.
4136
4326
  # Virginia) as follows:
@@ -4324,10 +4514,27 @@ module Aws::WAFV2
4324
4514
  # resp.rule_group.rules[0].statement.regex_pattern_set_reference_statement.text_transformations[0].priority #=> Integer
4325
4515
  # resp.rule_group.rules[0].statement.regex_pattern_set_reference_statement.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
4326
4516
  # resp.rule_group.rules[0].statement.rate_based_statement.limit #=> Integer
4327
- # resp.rule_group.rules[0].statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP"
4517
+ # resp.rule_group.rules[0].statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP", "CUSTOM_KEYS", "CONSTANT"
4328
4518
  # resp.rule_group.rules[0].statement.rate_based_statement.scope_down_statement #=> Types::Statement
4329
4519
  # resp.rule_group.rules[0].statement.rate_based_statement.forwarded_ip_config.header_name #=> String
4330
4520
  # resp.rule_group.rules[0].statement.rate_based_statement.forwarded_ip_config.fallback_behavior #=> String, one of "MATCH", "NO_MATCH"
4521
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys #=> Array
4522
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].header.name #=> String
4523
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].header.text_transformations #=> Array
4524
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].header.text_transformations[0].priority #=> Integer
4525
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].header.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
4526
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].cookie.name #=> String
4527
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].cookie.text_transformations #=> Array
4528
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].priority #=> Integer
4529
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
4530
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.name #=> String
4531
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.text_transformations #=> Array
4532
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].priority #=> Integer
4533
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
4534
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].query_string.text_transformations #=> Array
4535
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].priority #=> Integer
4536
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
4537
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].label_namespace.namespace #=> String
4331
4538
  # resp.rule_group.rules[0].statement.and_statement.statements #=> Array
4332
4539
  # resp.rule_group.rules[0].statement.and_statement.statements[0] #=> Types::Statement
4333
4540
  # resp.rule_group.rules[0].statement.or_statement.statements #=> Array
@@ -4486,7 +4693,8 @@ module Aws::WAFV2
4486
4693
  # Specifies whether this is for an Amazon CloudFront distribution or for
4487
4694
  # a regional application. A regional application can be an Application
4488
4695
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4489
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
4696
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4697
+ # Amazon Web Services Verified Access instance.
4490
4698
  #
4491
4699
  # To work with CloudFront, you must also specify the Region US East (N.
4492
4700
  # Virginia) as follows:
@@ -4582,7 +4790,8 @@ module Aws::WAFV2
4582
4790
  # Specifies whether this is for an Amazon CloudFront distribution or for
4583
4791
  # a regional application. A regional application can be an Application
4584
4792
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4585
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
4793
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4794
+ # Amazon Web Services Verified Access instance.
4586
4795
  #
4587
4796
  # To work with CloudFront, you must also specify the Region US East (N.
4588
4797
  # Virginia) as follows:
@@ -4780,10 +4989,27 @@ module Aws::WAFV2
4780
4989
  # resp.web_acl.rules[0].statement.regex_pattern_set_reference_statement.text_transformations[0].priority #=> Integer
4781
4990
  # resp.web_acl.rules[0].statement.regex_pattern_set_reference_statement.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
4782
4991
  # resp.web_acl.rules[0].statement.rate_based_statement.limit #=> Integer
4783
- # resp.web_acl.rules[0].statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP"
4992
+ # resp.web_acl.rules[0].statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP", "CUSTOM_KEYS", "CONSTANT"
4784
4993
  # resp.web_acl.rules[0].statement.rate_based_statement.scope_down_statement #=> Types::Statement
4785
4994
  # resp.web_acl.rules[0].statement.rate_based_statement.forwarded_ip_config.header_name #=> String
4786
4995
  # resp.web_acl.rules[0].statement.rate_based_statement.forwarded_ip_config.fallback_behavior #=> String, one of "MATCH", "NO_MATCH"
4996
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys #=> Array
4997
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].header.name #=> String
4998
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].header.text_transformations #=> Array
4999
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].header.text_transformations[0].priority #=> Integer
5000
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].header.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5001
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].cookie.name #=> String
5002
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].cookie.text_transformations #=> Array
5003
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].priority #=> Integer
5004
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5005
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.name #=> String
5006
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.text_transformations #=> Array
5007
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].priority #=> Integer
5008
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5009
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_string.text_transformations #=> Array
5010
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].priority #=> Integer
5011
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5012
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].label_namespace.namespace #=> String
4787
5013
  # resp.web_acl.rules[0].statement.and_statement.statements #=> Array
4788
5014
  # resp.web_acl.rules[0].statement.and_statement.statements[0] #=> Types::Statement
4789
5015
  # resp.web_acl.rules[0].statement.or_statement.statements #=> Array
@@ -5059,10 +5285,27 @@ module Aws::WAFV2
5059
5285
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.regex_pattern_set_reference_statement.text_transformations[0].priority #=> Integer
5060
5286
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.regex_pattern_set_reference_statement.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5061
5287
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.limit #=> Integer
5062
- # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP"
5288
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP", "CUSTOM_KEYS", "CONSTANT"
5063
5289
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.scope_down_statement #=> Types::Statement
5064
5290
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.forwarded_ip_config.header_name #=> String
5065
5291
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.forwarded_ip_config.fallback_behavior #=> String, one of "MATCH", "NO_MATCH"
5292
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys #=> Array
5293
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.name #=> String
5294
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations #=> Array
5295
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations[0].priority #=> Integer
5296
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5297
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.name #=> String
5298
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations #=> Array
5299
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].priority #=> Integer
5300
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5301
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.name #=> String
5302
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations #=> Array
5303
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].priority #=> Integer
5304
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5305
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations #=> Array
5306
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].priority #=> Integer
5307
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5308
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].label_namespace.namespace #=> String
5066
5309
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.and_statement.statements #=> Array
5067
5310
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.and_statement.statements[0] #=> Types::Statement
5068
5311
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.or_statement.statements #=> Array
@@ -5330,10 +5573,27 @@ module Aws::WAFV2
5330
5573
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.regex_pattern_set_reference_statement.text_transformations[0].priority #=> Integer
5331
5574
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.regex_pattern_set_reference_statement.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5332
5575
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.limit #=> Integer
5333
- # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP"
5576
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP", "CUSTOM_KEYS", "CONSTANT"
5334
5577
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.scope_down_statement #=> Types::Statement
5335
5578
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.forwarded_ip_config.header_name #=> String
5336
5579
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.forwarded_ip_config.fallback_behavior #=> String, one of "MATCH", "NO_MATCH"
5580
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys #=> Array
5581
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.name #=> String
5582
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations #=> Array
5583
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations[0].priority #=> Integer
5584
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5585
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.name #=> String
5586
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations #=> Array
5587
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].priority #=> Integer
5588
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5589
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.name #=> String
5590
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations #=> Array
5591
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].priority #=> Integer
5592
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5593
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations #=> Array
5594
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].priority #=> Integer
5595
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5596
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].label_namespace.namespace #=> String
5337
5597
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.and_statement.statements #=> Array
5338
5598
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.and_statement.statements[0] #=> Types::Statement
5339
5599
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.or_statement.statements #=> Array
@@ -5490,6 +5750,10 @@ module Aws::WAFV2
5490
5750
  # `arn:partition:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
5491
5751
  # `
5492
5752
  #
5753
+ # * For an Amazon Web Services Verified Access instance:
5754
+ # `arn:partition:ec2:region:account-id:verified-access-instance/instance-id
5755
+ # `
5756
+ #
5493
5757
  # @return [Types::GetWebACLForResourceResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
5494
5758
  #
5495
5759
  # * {Types::GetWebACLForResourceResponse#web_acl #web_acl} => Types::WebACL
@@ -5669,10 +5933,27 @@ module Aws::WAFV2
5669
5933
  # resp.web_acl.rules[0].statement.regex_pattern_set_reference_statement.text_transformations[0].priority #=> Integer
5670
5934
  # resp.web_acl.rules[0].statement.regex_pattern_set_reference_statement.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5671
5935
  # resp.web_acl.rules[0].statement.rate_based_statement.limit #=> Integer
5672
- # resp.web_acl.rules[0].statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP"
5936
+ # resp.web_acl.rules[0].statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP", "CUSTOM_KEYS", "CONSTANT"
5673
5937
  # resp.web_acl.rules[0].statement.rate_based_statement.scope_down_statement #=> Types::Statement
5674
5938
  # resp.web_acl.rules[0].statement.rate_based_statement.forwarded_ip_config.header_name #=> String
5675
5939
  # resp.web_acl.rules[0].statement.rate_based_statement.forwarded_ip_config.fallback_behavior #=> String, one of "MATCH", "NO_MATCH"
5940
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys #=> Array
5941
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].header.name #=> String
5942
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].header.text_transformations #=> Array
5943
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].header.text_transformations[0].priority #=> Integer
5944
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].header.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5945
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].cookie.name #=> String
5946
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].cookie.text_transformations #=> Array
5947
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].priority #=> Integer
5948
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5949
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.name #=> String
5950
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.text_transformations #=> Array
5951
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].priority #=> Integer
5952
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5953
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_string.text_transformations #=> Array
5954
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].priority #=> Integer
5955
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5956
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].label_namespace.namespace #=> String
5676
5957
  # resp.web_acl.rules[0].statement.and_statement.statements #=> Array
5677
5958
  # resp.web_acl.rules[0].statement.and_statement.statements[0] #=> Types::Statement
5678
5959
  # resp.web_acl.rules[0].statement.or_statement.statements #=> Array
@@ -5948,10 +6229,27 @@ module Aws::WAFV2
5948
6229
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.regex_pattern_set_reference_statement.text_transformations[0].priority #=> Integer
5949
6230
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.regex_pattern_set_reference_statement.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5950
6231
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.limit #=> Integer
5951
- # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP"
6232
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP", "CUSTOM_KEYS", "CONSTANT"
5952
6233
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.scope_down_statement #=> Types::Statement
5953
6234
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.forwarded_ip_config.header_name #=> String
5954
6235
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.forwarded_ip_config.fallback_behavior #=> String, one of "MATCH", "NO_MATCH"
6236
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys #=> Array
6237
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.name #=> String
6238
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations #=> Array
6239
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations[0].priority #=> Integer
6240
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
6241
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.name #=> String
6242
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations #=> Array
6243
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].priority #=> Integer
6244
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
6245
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.name #=> String
6246
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations #=> Array
6247
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].priority #=> Integer
6248
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
6249
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations #=> Array
6250
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].priority #=> Integer
6251
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
6252
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].label_namespace.namespace #=> String
5955
6253
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.and_statement.statements #=> Array
5956
6254
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.and_statement.statements[0] #=> Types::Statement
5957
6255
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.or_statement.statements #=> Array
@@ -6219,10 +6517,27 @@ module Aws::WAFV2
6219
6517
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.regex_pattern_set_reference_statement.text_transformations[0].priority #=> Integer
6220
6518
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.regex_pattern_set_reference_statement.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
6221
6519
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.limit #=> Integer
6222
- # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP"
6520
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP", "CUSTOM_KEYS", "CONSTANT"
6223
6521
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.scope_down_statement #=> Types::Statement
6224
6522
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.forwarded_ip_config.header_name #=> String
6225
6523
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.forwarded_ip_config.fallback_behavior #=> String, one of "MATCH", "NO_MATCH"
6524
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys #=> Array
6525
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.name #=> String
6526
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations #=> Array
6527
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations[0].priority #=> Integer
6528
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
6529
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.name #=> String
6530
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations #=> Array
6531
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].priority #=> Integer
6532
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
6533
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.name #=> String
6534
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations #=> Array
6535
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].priority #=> Integer
6536
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
6537
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations #=> Array
6538
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].priority #=> Integer
6539
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
6540
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].label_namespace.namespace #=> String
6226
6541
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.and_statement.statements #=> Array
6227
6542
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.and_statement.statements[0] #=> Types::Statement
6228
6543
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.or_statement.statements #=> Array
@@ -6354,11 +6669,23 @@ module Aws::WAFV2
6354
6669
  # Retrieves a list of the API keys that you've defined for the
6355
6670
  # specified scope.
6356
6671
  #
6672
+ # API keys are required for the integration of the CAPTCHA API in your
6673
+ # JavaScript client applications. The API lets you customize the
6674
+ # placement and characteristics of the CAPTCHA puzzle for your end
6675
+ # users. For more information about the CAPTCHA JavaScript integration,
6676
+ # see [WAF client application integration][1] in the *WAF Developer
6677
+ # Guide*.
6678
+ #
6679
+ #
6680
+ #
6681
+ # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-application-integration.html
6682
+ #
6357
6683
  # @option params [required, String] :scope
6358
6684
  # Specifies whether this is for an Amazon CloudFront distribution or for
6359
6685
  # a regional application. A regional application can be an Application
6360
6686
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6361
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6687
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
6688
+ # Amazon Web Services Verified Access instance.
6362
6689
  #
6363
6690
  # To work with CloudFront, you must also specify the Region US East (N.
6364
6691
  # Virginia) as follows:
@@ -6430,7 +6757,8 @@ module Aws::WAFV2
6430
6757
  # Specifies whether this is for an Amazon CloudFront distribution or for
6431
6758
  # a regional application. A regional application can be an Application
6432
6759
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6433
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6760
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
6761
+ # Amazon Web Services Verified Access instance.
6434
6762
  #
6435
6763
  # To work with CloudFront, you must also specify the Region US East (N.
6436
6764
  # Virginia) as follows:
@@ -6495,7 +6823,8 @@ module Aws::WAFV2
6495
6823
  # Specifies whether this is for an Amazon CloudFront distribution or for
6496
6824
  # a regional application. A regional application can be an Application
6497
6825
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6498
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6826
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
6827
+ # Amazon Web Services Verified Access instance.
6499
6828
  #
6500
6829
  # To work with CloudFront, you must also specify the Region US East (N.
6501
6830
  # Virginia) as follows:
@@ -6556,7 +6885,8 @@ module Aws::WAFV2
6556
6885
  # Specifies whether this is for an Amazon CloudFront distribution or for
6557
6886
  # a regional application. A regional application can be an Application
6558
6887
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6559
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6888
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
6889
+ # Amazon Web Services Verified Access instance.
6560
6890
  #
6561
6891
  # To work with CloudFront, you must also specify the Region US East (N.
6562
6892
  # Virginia) as follows:
@@ -6617,7 +6947,8 @@ module Aws::WAFV2
6617
6947
  # Specifies whether this is for an Amazon CloudFront distribution or for
6618
6948
  # a regional application. A regional application can be an Application
6619
6949
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6620
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6950
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
6951
+ # Amazon Web Services Verified Access instance.
6621
6952
  #
6622
6953
  # To work with CloudFront, you must also specify the Region US East (N.
6623
6954
  # Virginia) as follows:
@@ -6716,7 +7047,8 @@ module Aws::WAFV2
6716
7047
  # Specifies whether this is for an Amazon CloudFront distribution or for
6717
7048
  # a regional application. A regional application can be an Application
6718
7049
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6719
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7050
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
7051
+ # Amazon Web Services Verified Access instance.
6720
7052
  #
6721
7053
  # To work with CloudFront, you must also specify the Region US East (N.
6722
7054
  # Virginia) as follows:
@@ -6837,7 +7169,8 @@ module Aws::WAFV2
6837
7169
  # Specifies whether this is for an Amazon CloudFront distribution or for
6838
7170
  # a regional application. A regional application can be an Application
6839
7171
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6840
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7172
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
7173
+ # Amazon Web Services Verified Access instance.
6841
7174
  #
6842
7175
  # To work with CloudFront, you must also specify the Region US East (N.
6843
7176
  # Virginia) as follows:
@@ -6904,7 +7237,8 @@ module Aws::WAFV2
6904
7237
  # Used for web ACLs that are scoped for regional applications. A
6905
7238
  # regional application can be an Application Load Balancer (ALB), an
6906
7239
  # Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito
6907
- # user pool, or an App Runner service.
7240
+ # user pool, an App Runner service, or an Amazon Web Services Verified
7241
+ # Access instance.
6908
7242
  #
6909
7243
  # <note markdown="1"> If you don't provide a resource type, the call uses the resource type
6910
7244
  # `APPLICATION_LOAD_BALANCER`.
@@ -6921,7 +7255,7 @@ module Aws::WAFV2
6921
7255
  #
6922
7256
  # resp = client.list_resources_for_web_acl({
6923
7257
  # web_acl_arn: "ResourceArn", # required
6924
- # resource_type: "APPLICATION_LOAD_BALANCER", # accepts APPLICATION_LOAD_BALANCER, API_GATEWAY, APPSYNC, COGNITO_USER_POOL, APP_RUNNER_SERVICE
7258
+ # resource_type: "APPLICATION_LOAD_BALANCER", # accepts APPLICATION_LOAD_BALANCER, API_GATEWAY, APPSYNC, COGNITO_USER_POOL, APP_RUNNER_SERVICE, VERIFIED_ACCESS_INSTANCE
6925
7259
  # })
6926
7260
  #
6927
7261
  # @example Response structure
@@ -6945,7 +7279,8 @@ module Aws::WAFV2
6945
7279
  # Specifies whether this is for an Amazon CloudFront distribution or for
6946
7280
  # a regional application. A regional application can be an Application
6947
7281
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6948
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7282
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
7283
+ # Amazon Web Services Verified Access instance.
6949
7284
  #
6950
7285
  # To work with CloudFront, you must also specify the Region US East (N.
6951
7286
  # Virginia) as follows:
@@ -7064,7 +7399,8 @@ module Aws::WAFV2
7064
7399
  # Specifies whether this is for an Amazon CloudFront distribution or for
7065
7400
  # a regional application. A regional application can be an Application
7066
7401
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7067
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7402
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
7403
+ # Amazon Web Services Verified Access instance.
7068
7404
  #
7069
7405
  # To work with CloudFront, you must also specify the Region US East (N.
7070
7406
  # Virginia) as follows:
@@ -7341,7 +7677,8 @@ module Aws::WAFV2
7341
7677
  # Specifies whether this is for an Amazon CloudFront distribution or for
7342
7678
  # a regional application. A regional application can be an Application
7343
7679
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7344
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7680
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
7681
+ # Amazon Web Services Verified Access instance.
7345
7682
  #
7346
7683
  # To work with CloudFront, you must also specify the Region US East (N.
7347
7684
  # Virginia) as follows:
@@ -7579,7 +7916,8 @@ module Aws::WAFV2
7579
7916
  # Specifies whether this is for an Amazon CloudFront distribution or for
7580
7917
  # a regional application. A regional application can be an Application
7581
7918
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7582
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7919
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
7920
+ # Amazon Web Services Verified Access instance.
7583
7921
  #
7584
7922
  # To work with CloudFront, you must also specify the Region US East (N.
7585
7923
  # Virginia) as follows:
@@ -7704,7 +8042,8 @@ module Aws::WAFV2
7704
8042
  # Specifies whether this is for an Amazon CloudFront distribution or for
7705
8043
  # a regional application. A regional application can be an Application
7706
8044
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7707
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
8045
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
8046
+ # Amazon Web Services Verified Access instance.
7708
8047
  #
7709
8048
  # To work with CloudFront, you must also specify the Region US East (N.
7710
8049
  # Virginia) as follows:
@@ -7810,7 +8149,8 @@ module Aws::WAFV2
7810
8149
  # Specifies whether this is for an Amazon CloudFront distribution or for
7811
8150
  # a regional application. A regional application can be an Application
7812
8151
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7813
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
8152
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
8153
+ # Amazon Web Services Verified Access instance.
7814
8154
  #
7815
8155
  # To work with CloudFront, you must also specify the Region US East (N.
7816
8156
  # Virginia) as follows:
@@ -7916,7 +8256,8 @@ module Aws::WAFV2
7916
8256
  # Specifies whether this is for an Amazon CloudFront distribution or for
7917
8257
  # a regional application. A regional application can be an Application
7918
8258
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7919
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
8259
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
8260
+ # Amazon Web Services Verified Access instance.
7920
8261
  #
7921
8262
  # To work with CloudFront, you must also specify the Region US East (N.
7922
8263
  # Virginia) as follows:
@@ -8364,7 +8705,7 @@ module Aws::WAFV2
8364
8705
  # },
8365
8706
  # rate_based_statement: {
8366
8707
  # limit: 1, # required
8367
- # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
8708
+ # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP, CUSTOM_KEYS, CONSTANT
8368
8709
  # scope_down_statement: {
8369
8710
  # # recursive Statement
8370
8711
  # },
@@ -8372,6 +8713,54 @@ module Aws::WAFV2
8372
8713
  # header_name: "ForwardedIPHeaderName", # required
8373
8714
  # fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
8374
8715
  # },
8716
+ # custom_keys: [
8717
+ # {
8718
+ # header: {
8719
+ # name: "FieldToMatchData", # required
8720
+ # text_transformations: [ # required
8721
+ # {
8722
+ # priority: 1, # required
8723
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8724
+ # },
8725
+ # ],
8726
+ # },
8727
+ # cookie: {
8728
+ # name: "FieldToMatchData", # required
8729
+ # text_transformations: [ # required
8730
+ # {
8731
+ # priority: 1, # required
8732
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8733
+ # },
8734
+ # ],
8735
+ # },
8736
+ # query_argument: {
8737
+ # name: "FieldToMatchData", # required
8738
+ # text_transformations: [ # required
8739
+ # {
8740
+ # priority: 1, # required
8741
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8742
+ # },
8743
+ # ],
8744
+ # },
8745
+ # query_string: {
8746
+ # text_transformations: [ # required
8747
+ # {
8748
+ # priority: 1, # required
8749
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8750
+ # },
8751
+ # ],
8752
+ # },
8753
+ # http_method: {
8754
+ # },
8755
+ # forwarded_ip: {
8756
+ # },
8757
+ # ip: {
8758
+ # },
8759
+ # label_namespace: {
8760
+ # namespace: "LabelNamespace", # required
8761
+ # },
8762
+ # },
8763
+ # ],
8375
8764
  # },
8376
8765
  # and_statement: {
8377
8766
  # statements: [ # required
@@ -8732,7 +9121,8 @@ module Aws::WAFV2
8732
9121
  # can associate a web ACL with one or more Amazon Web Services resources
8733
9122
  # to protect. The resources can be an Amazon CloudFront distribution, an
8734
9123
  # Amazon API Gateway REST API, an Application Load Balancer, an AppSync
8735
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
9124
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
9125
+ # Amazon Web Services Verified Access instance.
8736
9126
  #
8737
9127
  # @option params [required, String] :name
8738
9128
  # The name of the web ACL. You cannot change the name of a web ACL after
@@ -8742,7 +9132,8 @@ module Aws::WAFV2
8742
9132
  # Specifies whether this is for an Amazon CloudFront distribution or for
8743
9133
  # a regional application. A regional application can be an Application
8744
9134
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
8745
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
9135
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
9136
+ # Amazon Web Services Verified Access instance.
8746
9137
  #
8747
9138
  # To work with CloudFront, you must also specify the Region US East (N.
8748
9139
  # Virginia) as follows:
@@ -9262,7 +9653,7 @@ module Aws::WAFV2
9262
9653
  # },
9263
9654
  # rate_based_statement: {
9264
9655
  # limit: 1, # required
9265
- # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
9656
+ # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP, CUSTOM_KEYS, CONSTANT
9266
9657
  # scope_down_statement: {
9267
9658
  # # recursive Statement
9268
9659
  # },
@@ -9270,6 +9661,54 @@ module Aws::WAFV2
9270
9661
  # header_name: "ForwardedIPHeaderName", # required
9271
9662
  # fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
9272
9663
  # },
9664
+ # custom_keys: [
9665
+ # {
9666
+ # header: {
9667
+ # name: "FieldToMatchData", # required
9668
+ # text_transformations: [ # required
9669
+ # {
9670
+ # priority: 1, # required
9671
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
9672
+ # },
9673
+ # ],
9674
+ # },
9675
+ # cookie: {
9676
+ # name: "FieldToMatchData", # required
9677
+ # text_transformations: [ # required
9678
+ # {
9679
+ # priority: 1, # required
9680
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
9681
+ # },
9682
+ # ],
9683
+ # },
9684
+ # query_argument: {
9685
+ # name: "FieldToMatchData", # required
9686
+ # text_transformations: [ # required
9687
+ # {
9688
+ # priority: 1, # required
9689
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
9690
+ # },
9691
+ # ],
9692
+ # },
9693
+ # query_string: {
9694
+ # text_transformations: [ # required
9695
+ # {
9696
+ # priority: 1, # required
9697
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
9698
+ # },
9699
+ # ],
9700
+ # },
9701
+ # http_method: {
9702
+ # },
9703
+ # forwarded_ip: {
9704
+ # },
9705
+ # ip: {
9706
+ # },
9707
+ # label_namespace: {
9708
+ # namespace: "LabelNamespace", # required
9709
+ # },
9710
+ # },
9711
+ # ],
9273
9712
  # },
9274
9713
  # and_statement: {
9275
9714
  # statements: [ # required
@@ -9620,7 +10059,7 @@ module Aws::WAFV2
9620
10059
  params: params,
9621
10060
  config: config)
9622
10061
  context[:gem_name] = 'aws-sdk-wafv2'
9623
- context[:gem_version] = '1.55.0'
10062
+ context[:gem_version] = '1.57.0'
9624
10063
  Seahorse::Client::Request.new(handlers, context)
9625
10064
  end
9626
10065