aws-sdk-wafv2 1.55.0 → 1.57.0

Sign up to get free protection for your applications and to get access to all the features.
@@ -381,7 +381,8 @@ module Aws::WAFV2
381
381
  # Associates a web ACL with a regional application resource, to protect
382
382
  # the resource. A regional application can be an Application Load
383
383
  # Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL
384
- # API, an Amazon Cognito user pool, or an App Runner service.
384
+ # API, an Amazon Cognito user pool, an App Runner service, or an Amazon
385
+ # Web Services Verified Access instance.
385
386
  #
386
387
  # For Amazon CloudFront, don't use this call. Instead, use your
387
388
  # CloudFront distribution configuration. To associate a web ACL, in the
@@ -435,6 +436,10 @@ module Aws::WAFV2
435
436
  # `arn:partition:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
436
437
  # `
437
438
  #
439
+ # * For an Amazon Web Services Verified Access instance:
440
+ # `arn:partition:ec2:region:account-id:verified-access-instance/instance-id
441
+ # `
442
+ #
438
443
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
439
444
  #
440
445
  # @example Request syntax with placeholder values
@@ -474,7 +479,8 @@ module Aws::WAFV2
474
479
  # Specifies whether this is for an Amazon CloudFront distribution or for
475
480
  # a regional application. A regional application can be an Application
476
481
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
477
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
482
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
483
+ # Amazon Web Services Verified Access instance.
478
484
  #
479
485
  # To work with CloudFront, you must also specify the Region US East (N.
480
486
  # Virginia) as follows:
@@ -876,7 +882,7 @@ module Aws::WAFV2
876
882
  # },
877
883
  # rate_based_statement: {
878
884
  # limit: 1, # required
879
- # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
885
+ # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP, CUSTOM_KEYS, CONSTANT
880
886
  # scope_down_statement: {
881
887
  # # recursive Statement
882
888
  # },
@@ -884,6 +890,54 @@ module Aws::WAFV2
884
890
  # header_name: "ForwardedIPHeaderName", # required
885
891
  # fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
886
892
  # },
893
+ # custom_keys: [
894
+ # {
895
+ # header: {
896
+ # name: "FieldToMatchData", # required
897
+ # text_transformations: [ # required
898
+ # {
899
+ # priority: 1, # required
900
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
901
+ # },
902
+ # ],
903
+ # },
904
+ # cookie: {
905
+ # name: "FieldToMatchData", # required
906
+ # text_transformations: [ # required
907
+ # {
908
+ # priority: 1, # required
909
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
910
+ # },
911
+ # ],
912
+ # },
913
+ # query_argument: {
914
+ # name: "FieldToMatchData", # required
915
+ # text_transformations: [ # required
916
+ # {
917
+ # priority: 1, # required
918
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
919
+ # },
920
+ # ],
921
+ # },
922
+ # query_string: {
923
+ # text_transformations: [ # required
924
+ # {
925
+ # priority: 1, # required
926
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
927
+ # },
928
+ # ],
929
+ # },
930
+ # http_method: {
931
+ # },
932
+ # forwarded_ip: {
933
+ # },
934
+ # ip: {
935
+ # },
936
+ # label_namespace: {
937
+ # namespace: "LabelNamespace", # required
938
+ # },
939
+ # },
940
+ # ],
887
941
  # },
888
942
  # and_statement: {
889
943
  # statements: [ # required
@@ -1191,17 +1245,17 @@ module Aws::WAFV2
1191
1245
  req.send_request(options)
1192
1246
  end
1193
1247
 
1194
- # Creates an API key for use in the integration of the CAPTCHA API in
1195
- # your JavaScript client applications. The integration lets you
1196
- # customize the placement and characteristics of the CAPTCHA puzzle for
1197
- # your end users. For more information about the CAPTCHA JavaScript
1198
- # integration, see [WAF client application integration][1] in the *WAF
1199
- # Developer Guide*.
1248
+ # Creates an API key that contains a set of token domains.
1249
+ #
1250
+ # API keys are required for the integration of the CAPTCHA API in your
1251
+ # JavaScript client applications. The API lets you customize the
1252
+ # placement and characteristics of the CAPTCHA puzzle for your end
1253
+ # users. For more information about the CAPTCHA JavaScript integration,
1254
+ # see [WAF client application integration][1] in the *WAF Developer
1255
+ # Guide*.
1200
1256
  #
1201
- # The CAPTCHA API requires a key that authorizes CAPTCHA use from the
1202
- # client application domain. You can use a single key for up to 5
1203
- # domains. After you generate a key, you can copy it for use in your
1204
- # JavaScript integration.
1257
+ # You can use a single key for up to 5 domains. After you generate a
1258
+ # key, you can copy it for use in your JavaScript integration.
1205
1259
  #
1206
1260
  #
1207
1261
  #
@@ -1211,7 +1265,8 @@ module Aws::WAFV2
1211
1265
  # Specifies whether this is for an Amazon CloudFront distribution or for
1212
1266
  # a regional application. A regional application can be an Application
1213
1267
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1214
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
1268
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
1269
+ # Amazon Web Services Verified Access instance.
1215
1270
  #
1216
1271
  # To work with CloudFront, you must also specify the Region US East (N.
1217
1272
  # Virginia) as follows:
@@ -1224,6 +1279,11 @@ module Aws::WAFV2
1224
1279
  # @option params [required, Array<String>] :token_domains
1225
1280
  # The client application domains that you want to use this API key for.
1226
1281
  #
1282
+ # Example JSON: `"TokenDomains": ["abc.com", "store.abc.com"]`
1283
+ #
1284
+ # Public suffixes aren't allowed. For example, you can't use `usa.gov`
1285
+ # or `co.uk` as token domains.
1286
+ #
1227
1287
  # @return [Types::CreateAPIKeyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
1228
1288
  #
1229
1289
  # * {Types::CreateAPIKeyResponse#api_key #api_key} => String
@@ -1262,7 +1322,8 @@ module Aws::WAFV2
1262
1322
  # Specifies whether this is for an Amazon CloudFront distribution or for
1263
1323
  # a regional application. A regional application can be an Application
1264
1324
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1265
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
1325
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
1326
+ # Amazon Web Services Verified Access instance.
1266
1327
  #
1267
1328
  # To work with CloudFront, you must also specify the Region US East (N.
1268
1329
  # Virginia) as follows:
@@ -1372,7 +1433,8 @@ module Aws::WAFV2
1372
1433
  # Specifies whether this is for an Amazon CloudFront distribution or for
1373
1434
  # a regional application. A regional application can be an Application
1374
1435
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1375
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
1436
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
1437
+ # Amazon Web Services Verified Access instance.
1376
1438
  #
1377
1439
  # To work with CloudFront, you must also specify the Region US East (N.
1378
1440
  # Virginia) as follows:
@@ -1447,7 +1509,8 @@ module Aws::WAFV2
1447
1509
  # Specifies whether this is for an Amazon CloudFront distribution or for
1448
1510
  # a regional application. A regional application can be an Application
1449
1511
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
1450
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
1512
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
1513
+ # Amazon Web Services Verified Access instance.
1451
1514
  #
1452
1515
  # To work with CloudFront, you must also specify the Region US East (N.
1453
1516
  # Virginia) as follows:
@@ -1904,7 +1967,7 @@ module Aws::WAFV2
1904
1967
  # },
1905
1968
  # rate_based_statement: {
1906
1969
  # limit: 1, # required
1907
- # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
1970
+ # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP, CUSTOM_KEYS, CONSTANT
1908
1971
  # scope_down_statement: {
1909
1972
  # # recursive Statement
1910
1973
  # },
@@ -1912,6 +1975,54 @@ module Aws::WAFV2
1912
1975
  # header_name: "ForwardedIPHeaderName", # required
1913
1976
  # fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
1914
1977
  # },
1978
+ # custom_keys: [
1979
+ # {
1980
+ # header: {
1981
+ # name: "FieldToMatchData", # required
1982
+ # text_transformations: [ # required
1983
+ # {
1984
+ # priority: 1, # required
1985
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
1986
+ # },
1987
+ # ],
1988
+ # },
1989
+ # cookie: {
1990
+ # name: "FieldToMatchData", # required
1991
+ # text_transformations: [ # required
1992
+ # {
1993
+ # priority: 1, # required
1994
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
1995
+ # },
1996
+ # ],
1997
+ # },
1998
+ # query_argument: {
1999
+ # name: "FieldToMatchData", # required
2000
+ # text_transformations: [ # required
2001
+ # {
2002
+ # priority: 1, # required
2003
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
2004
+ # },
2005
+ # ],
2006
+ # },
2007
+ # query_string: {
2008
+ # text_transformations: [ # required
2009
+ # {
2010
+ # priority: 1, # required
2011
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
2012
+ # },
2013
+ # ],
2014
+ # },
2015
+ # http_method: {
2016
+ # },
2017
+ # forwarded_ip: {
2018
+ # },
2019
+ # ip: {
2020
+ # },
2021
+ # label_namespace: {
2022
+ # namespace: "LabelNamespace", # required
2023
+ # },
2024
+ # },
2025
+ # ],
1915
2026
  # },
1916
2027
  # and_statement: {
1917
2028
  # statements: [ # required
@@ -2251,7 +2362,8 @@ module Aws::WAFV2
2251
2362
  # can associate a web ACL with one or more Amazon Web Services resources
2252
2363
  # to protect. The resources can be an Amazon CloudFront distribution, an
2253
2364
  # Amazon API Gateway REST API, an Application Load Balancer, an AppSync
2254
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
2365
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
2366
+ # Amazon Web Services Verified Access instance.
2255
2367
  #
2256
2368
  # @option params [required, String] :name
2257
2369
  # The name of the web ACL. You cannot change the name of a web ACL after
@@ -2261,7 +2373,8 @@ module Aws::WAFV2
2261
2373
  # Specifies whether this is for an Amazon CloudFront distribution or for
2262
2374
  # a regional application. A regional application can be an Application
2263
2375
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
2264
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
2376
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
2377
+ # Amazon Web Services Verified Access instance.
2265
2378
  #
2266
2379
  # To work with CloudFront, you must also specify the Region US East (N.
2267
2380
  # Virginia) as follows:
@@ -2768,7 +2881,7 @@ module Aws::WAFV2
2768
2881
  # },
2769
2882
  # rate_based_statement: {
2770
2883
  # limit: 1, # required
2771
- # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
2884
+ # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP, CUSTOM_KEYS, CONSTANT
2772
2885
  # scope_down_statement: {
2773
2886
  # # recursive Statement
2774
2887
  # },
@@ -2776,6 +2889,54 @@ module Aws::WAFV2
2776
2889
  # header_name: "ForwardedIPHeaderName", # required
2777
2890
  # fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
2778
2891
  # },
2892
+ # custom_keys: [
2893
+ # {
2894
+ # header: {
2895
+ # name: "FieldToMatchData", # required
2896
+ # text_transformations: [ # required
2897
+ # {
2898
+ # priority: 1, # required
2899
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
2900
+ # },
2901
+ # ],
2902
+ # },
2903
+ # cookie: {
2904
+ # name: "FieldToMatchData", # required
2905
+ # text_transformations: [ # required
2906
+ # {
2907
+ # priority: 1, # required
2908
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
2909
+ # },
2910
+ # ],
2911
+ # },
2912
+ # query_argument: {
2913
+ # name: "FieldToMatchData", # required
2914
+ # text_transformations: [ # required
2915
+ # {
2916
+ # priority: 1, # required
2917
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
2918
+ # },
2919
+ # ],
2920
+ # },
2921
+ # query_string: {
2922
+ # text_transformations: [ # required
2923
+ # {
2924
+ # priority: 1, # required
2925
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
2926
+ # },
2927
+ # ],
2928
+ # },
2929
+ # http_method: {
2930
+ # },
2931
+ # forwarded_ip: {
2932
+ # },
2933
+ # ip: {
2934
+ # },
2935
+ # label_namespace: {
2936
+ # namespace: "LabelNamespace", # required
2937
+ # },
2938
+ # },
2939
+ # ],
2779
2940
  # },
2780
2941
  # and_statement: {
2781
2942
  # statements: [ # required
@@ -3175,7 +3336,8 @@ module Aws::WAFV2
3175
3336
  # Specifies whether this is for an Amazon CloudFront distribution or for
3176
3337
  # a regional application. A regional application can be an Application
3177
3338
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3178
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3339
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
3340
+ # Amazon Web Services Verified Access instance.
3179
3341
  #
3180
3342
  # To work with CloudFront, you must also specify the Region US East (N.
3181
3343
  # Virginia) as follows:
@@ -3280,7 +3442,8 @@ module Aws::WAFV2
3280
3442
  # Specifies whether this is for an Amazon CloudFront distribution or for
3281
3443
  # a regional application. A regional application can be an Application
3282
3444
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3283
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3445
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
3446
+ # Amazon Web Services Verified Access instance.
3284
3447
  #
3285
3448
  # To work with CloudFront, you must also specify the Region US East (N.
3286
3449
  # Virginia) as follows:
@@ -3335,7 +3498,8 @@ module Aws::WAFV2
3335
3498
  # Specifies whether this is for an Amazon CloudFront distribution or for
3336
3499
  # a regional application. A regional application can be an Application
3337
3500
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3338
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3501
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
3502
+ # Amazon Web Services Verified Access instance.
3339
3503
  #
3340
3504
  # To work with CloudFront, you must also specify the Region US East (N.
3341
3505
  # Virginia) as follows:
@@ -3420,7 +3584,8 @@ module Aws::WAFV2
3420
3584
  # Specifies whether this is for an Amazon CloudFront distribution or for
3421
3585
  # a regional application. A regional application can be an Application
3422
3586
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3423
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3587
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
3588
+ # Amazon Web Services Verified Access instance.
3424
3589
  #
3425
3590
  # To work with CloudFront, you must also specify the Region US East (N.
3426
3591
  # Virginia) as follows:
@@ -3480,7 +3645,8 @@ module Aws::WAFV2
3480
3645
  # Specifies whether this is for an Amazon CloudFront distribution or for
3481
3646
  # a regional application. A regional application can be an Application
3482
3647
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3483
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3648
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
3649
+ # Amazon Web Services Verified Access instance.
3484
3650
  #
3485
3651
  # To work with CloudFront, you must also specify the Region US East (N.
3486
3652
  # Virginia) as follows:
@@ -3557,7 +3723,8 @@ module Aws::WAFV2
3557
3723
  # existing web ACL association. A resource can have at most one web ACL
3558
3724
  # association. A regional application can be an Application Load
3559
3725
  # Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL
3560
- # API, an Amazon Cognito user pool, or an App Runner service.
3726
+ # API, an Amazon Cognito user pool, an App Runner service, or an Amazon
3727
+ # Web Services Verified Access instance.
3561
3728
  #
3562
3729
  # For Amazon CloudFront, don't use this call. Instead, use your
3563
3730
  # CloudFront distribution configuration. To disassociate a web ACL,
@@ -3593,6 +3760,10 @@ module Aws::WAFV2
3593
3760
  # `arn:partition:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
3594
3761
  # `
3595
3762
  #
3763
+ # * For an Amazon Web Services Verified Access instance:
3764
+ # `arn:partition:ec2:region:account-id:verified-access-instance/instance-id
3765
+ # `
3766
+ #
3596
3767
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
3597
3768
  #
3598
3769
  # @example Request syntax with placeholder values
@@ -3657,11 +3828,23 @@ module Aws::WAFV2
3657
3828
  # Returns your API key in decrypted form. Use this to check the token
3658
3829
  # domains that you have defined for the key.
3659
3830
  #
3831
+ # API keys are required for the integration of the CAPTCHA API in your
3832
+ # JavaScript client applications. The API lets you customize the
3833
+ # placement and characteristics of the CAPTCHA puzzle for your end
3834
+ # users. For more information about the CAPTCHA JavaScript integration,
3835
+ # see [WAF client application integration][1] in the *WAF Developer
3836
+ # Guide*.
3837
+ #
3838
+ #
3839
+ #
3840
+ # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-application-integration.html
3841
+ #
3660
3842
  # @option params [required, String] :scope
3661
3843
  # Specifies whether this is for an Amazon CloudFront distribution or for
3662
3844
  # a regional application. A regional application can be an Application
3663
3845
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3664
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3846
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
3847
+ # Amazon Web Services Verified Access instance.
3665
3848
  #
3666
3849
  # To work with CloudFront, you must also specify the Region US East (N.
3667
3850
  # Virginia) as follows:
@@ -3711,7 +3894,8 @@ module Aws::WAFV2
3711
3894
  # Specifies whether this is for an Amazon CloudFront distribution or for
3712
3895
  # a regional application. A regional application can be an Application
3713
3896
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3714
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
3897
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
3898
+ # Amazon Web Services Verified Access instance.
3715
3899
  #
3716
3900
  # To work with CloudFront, you must also specify the Region US East (N.
3717
3901
  # Virginia) as follows:
@@ -3843,7 +4027,8 @@ module Aws::WAFV2
3843
4027
  # Specifies whether this is for an Amazon CloudFront distribution or for
3844
4028
  # a regional application. A regional application can be an Application
3845
4029
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
3846
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
4030
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4031
+ # Amazon Web Services Verified Access instance.
3847
4032
  #
3848
4033
  # To work with CloudFront, you must also specify the Region US East (N.
3849
4034
  # Virginia) as follows:
@@ -3977,11 +4162,13 @@ module Aws::WAFV2
3977
4162
  req.send_request(options)
3978
4163
  end
3979
4164
 
3980
- # Retrieves the keys that are currently blocked by a rate-based rule
3981
- # instance. The maximum number of managed keys that can be blocked for a
3982
- # single rate-based rule instance is 10,000. If more than 10,000
3983
- # addresses exceed the rate limit, those with the highest rates are
3984
- # blocked.
4165
+ # Retrieves the IP addresses that are currently blocked by a rate-based
4166
+ # rule instance. This is only available for rate-based rules that
4167
+ # aggregate solely on the IP address or on the forwarded IP address.
4168
+ #
4169
+ # The maximum number of addresses that can be blocked for a single
4170
+ # rate-based rule instance is 10,000. If more than 10,000 addresses
4171
+ # exceed the rate limit, those with the highest rates are blocked.
3985
4172
  #
3986
4173
  # For a rate-based rule that you've defined inside a rule group,
3987
4174
  # provide the name of the rule group reference statement in your
@@ -4000,7 +4187,8 @@ module Aws::WAFV2
4000
4187
  # Specifies whether this is for an Amazon CloudFront distribution or for
4001
4188
  # a regional application. A regional application can be an Application
4002
4189
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4003
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
4190
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4191
+ # Amazon Web Services Verified Access instance.
4004
4192
  #
4005
4193
  # To work with CloudFront, you must also specify the Region US East (N.
4006
4194
  # Virginia) as follows:
@@ -4073,7 +4261,8 @@ module Aws::WAFV2
4073
4261
  # Specifies whether this is for an Amazon CloudFront distribution or for
4074
4262
  # a regional application. A regional application can be an Application
4075
4263
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4076
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
4264
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4265
+ # Amazon Web Services Verified Access instance.
4077
4266
  #
4078
4267
  # To work with CloudFront, you must also specify the Region US East (N.
4079
4268
  # Virginia) as follows:
@@ -4130,7 +4319,8 @@ module Aws::WAFV2
4130
4319
  # Specifies whether this is for an Amazon CloudFront distribution or for
4131
4320
  # a regional application. A regional application can be an Application
4132
4321
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4133
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
4322
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4323
+ # Amazon Web Services Verified Access instance.
4134
4324
  #
4135
4325
  # To work with CloudFront, you must also specify the Region US East (N.
4136
4326
  # Virginia) as follows:
@@ -4324,10 +4514,27 @@ module Aws::WAFV2
4324
4514
  # resp.rule_group.rules[0].statement.regex_pattern_set_reference_statement.text_transformations[0].priority #=> Integer
4325
4515
  # resp.rule_group.rules[0].statement.regex_pattern_set_reference_statement.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
4326
4516
  # resp.rule_group.rules[0].statement.rate_based_statement.limit #=> Integer
4327
- # resp.rule_group.rules[0].statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP"
4517
+ # resp.rule_group.rules[0].statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP", "CUSTOM_KEYS", "CONSTANT"
4328
4518
  # resp.rule_group.rules[0].statement.rate_based_statement.scope_down_statement #=> Types::Statement
4329
4519
  # resp.rule_group.rules[0].statement.rate_based_statement.forwarded_ip_config.header_name #=> String
4330
4520
  # resp.rule_group.rules[0].statement.rate_based_statement.forwarded_ip_config.fallback_behavior #=> String, one of "MATCH", "NO_MATCH"
4521
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys #=> Array
4522
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].header.name #=> String
4523
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].header.text_transformations #=> Array
4524
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].header.text_transformations[0].priority #=> Integer
4525
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].header.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
4526
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].cookie.name #=> String
4527
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].cookie.text_transformations #=> Array
4528
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].priority #=> Integer
4529
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
4530
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.name #=> String
4531
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.text_transformations #=> Array
4532
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].priority #=> Integer
4533
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
4534
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].query_string.text_transformations #=> Array
4535
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].priority #=> Integer
4536
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
4537
+ # resp.rule_group.rules[0].statement.rate_based_statement.custom_keys[0].label_namespace.namespace #=> String
4331
4538
  # resp.rule_group.rules[0].statement.and_statement.statements #=> Array
4332
4539
  # resp.rule_group.rules[0].statement.and_statement.statements[0] #=> Types::Statement
4333
4540
  # resp.rule_group.rules[0].statement.or_statement.statements #=> Array
@@ -4486,7 +4693,8 @@ module Aws::WAFV2
4486
4693
  # Specifies whether this is for an Amazon CloudFront distribution or for
4487
4694
  # a regional application. A regional application can be an Application
4488
4695
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4489
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
4696
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4697
+ # Amazon Web Services Verified Access instance.
4490
4698
  #
4491
4699
  # To work with CloudFront, you must also specify the Region US East (N.
4492
4700
  # Virginia) as follows:
@@ -4582,7 +4790,8 @@ module Aws::WAFV2
4582
4790
  # Specifies whether this is for an Amazon CloudFront distribution or for
4583
4791
  # a regional application. A regional application can be an Application
4584
4792
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
4585
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
4793
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
4794
+ # Amazon Web Services Verified Access instance.
4586
4795
  #
4587
4796
  # To work with CloudFront, you must also specify the Region US East (N.
4588
4797
  # Virginia) as follows:
@@ -4780,10 +4989,27 @@ module Aws::WAFV2
4780
4989
  # resp.web_acl.rules[0].statement.regex_pattern_set_reference_statement.text_transformations[0].priority #=> Integer
4781
4990
  # resp.web_acl.rules[0].statement.regex_pattern_set_reference_statement.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
4782
4991
  # resp.web_acl.rules[0].statement.rate_based_statement.limit #=> Integer
4783
- # resp.web_acl.rules[0].statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP"
4992
+ # resp.web_acl.rules[0].statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP", "CUSTOM_KEYS", "CONSTANT"
4784
4993
  # resp.web_acl.rules[0].statement.rate_based_statement.scope_down_statement #=> Types::Statement
4785
4994
  # resp.web_acl.rules[0].statement.rate_based_statement.forwarded_ip_config.header_name #=> String
4786
4995
  # resp.web_acl.rules[0].statement.rate_based_statement.forwarded_ip_config.fallback_behavior #=> String, one of "MATCH", "NO_MATCH"
4996
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys #=> Array
4997
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].header.name #=> String
4998
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].header.text_transformations #=> Array
4999
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].header.text_transformations[0].priority #=> Integer
5000
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].header.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5001
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].cookie.name #=> String
5002
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].cookie.text_transformations #=> Array
5003
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].priority #=> Integer
5004
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5005
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.name #=> String
5006
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.text_transformations #=> Array
5007
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].priority #=> Integer
5008
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5009
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_string.text_transformations #=> Array
5010
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].priority #=> Integer
5011
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5012
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].label_namespace.namespace #=> String
4787
5013
  # resp.web_acl.rules[0].statement.and_statement.statements #=> Array
4788
5014
  # resp.web_acl.rules[0].statement.and_statement.statements[0] #=> Types::Statement
4789
5015
  # resp.web_acl.rules[0].statement.or_statement.statements #=> Array
@@ -5059,10 +5285,27 @@ module Aws::WAFV2
5059
5285
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.regex_pattern_set_reference_statement.text_transformations[0].priority #=> Integer
5060
5286
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.regex_pattern_set_reference_statement.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5061
5287
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.limit #=> Integer
5062
- # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP"
5288
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP", "CUSTOM_KEYS", "CONSTANT"
5063
5289
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.scope_down_statement #=> Types::Statement
5064
5290
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.forwarded_ip_config.header_name #=> String
5065
5291
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.forwarded_ip_config.fallback_behavior #=> String, one of "MATCH", "NO_MATCH"
5292
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys #=> Array
5293
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.name #=> String
5294
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations #=> Array
5295
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations[0].priority #=> Integer
5296
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5297
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.name #=> String
5298
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations #=> Array
5299
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].priority #=> Integer
5300
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5301
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.name #=> String
5302
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations #=> Array
5303
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].priority #=> Integer
5304
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5305
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations #=> Array
5306
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].priority #=> Integer
5307
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5308
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].label_namespace.namespace #=> String
5066
5309
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.and_statement.statements #=> Array
5067
5310
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.and_statement.statements[0] #=> Types::Statement
5068
5311
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.or_statement.statements #=> Array
@@ -5330,10 +5573,27 @@ module Aws::WAFV2
5330
5573
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.regex_pattern_set_reference_statement.text_transformations[0].priority #=> Integer
5331
5574
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.regex_pattern_set_reference_statement.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5332
5575
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.limit #=> Integer
5333
- # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP"
5576
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP", "CUSTOM_KEYS", "CONSTANT"
5334
5577
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.scope_down_statement #=> Types::Statement
5335
5578
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.forwarded_ip_config.header_name #=> String
5336
5579
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.forwarded_ip_config.fallback_behavior #=> String, one of "MATCH", "NO_MATCH"
5580
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys #=> Array
5581
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.name #=> String
5582
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations #=> Array
5583
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations[0].priority #=> Integer
5584
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5585
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.name #=> String
5586
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations #=> Array
5587
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].priority #=> Integer
5588
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5589
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.name #=> String
5590
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations #=> Array
5591
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].priority #=> Integer
5592
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5593
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations #=> Array
5594
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].priority #=> Integer
5595
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5596
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].label_namespace.namespace #=> String
5337
5597
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.and_statement.statements #=> Array
5338
5598
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.and_statement.statements[0] #=> Types::Statement
5339
5599
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.or_statement.statements #=> Array
@@ -5490,6 +5750,10 @@ module Aws::WAFV2
5490
5750
  # `arn:partition:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
5491
5751
  # `
5492
5752
  #
5753
+ # * For an Amazon Web Services Verified Access instance:
5754
+ # `arn:partition:ec2:region:account-id:verified-access-instance/instance-id
5755
+ # `
5756
+ #
5493
5757
  # @return [Types::GetWebACLForResourceResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
5494
5758
  #
5495
5759
  # * {Types::GetWebACLForResourceResponse#web_acl #web_acl} => Types::WebACL
@@ -5669,10 +5933,27 @@ module Aws::WAFV2
5669
5933
  # resp.web_acl.rules[0].statement.regex_pattern_set_reference_statement.text_transformations[0].priority #=> Integer
5670
5934
  # resp.web_acl.rules[0].statement.regex_pattern_set_reference_statement.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5671
5935
  # resp.web_acl.rules[0].statement.rate_based_statement.limit #=> Integer
5672
- # resp.web_acl.rules[0].statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP"
5936
+ # resp.web_acl.rules[0].statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP", "CUSTOM_KEYS", "CONSTANT"
5673
5937
  # resp.web_acl.rules[0].statement.rate_based_statement.scope_down_statement #=> Types::Statement
5674
5938
  # resp.web_acl.rules[0].statement.rate_based_statement.forwarded_ip_config.header_name #=> String
5675
5939
  # resp.web_acl.rules[0].statement.rate_based_statement.forwarded_ip_config.fallback_behavior #=> String, one of "MATCH", "NO_MATCH"
5940
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys #=> Array
5941
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].header.name #=> String
5942
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].header.text_transformations #=> Array
5943
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].header.text_transformations[0].priority #=> Integer
5944
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].header.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5945
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].cookie.name #=> String
5946
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].cookie.text_transformations #=> Array
5947
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].priority #=> Integer
5948
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5949
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.name #=> String
5950
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.text_transformations #=> Array
5951
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].priority #=> Integer
5952
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5953
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_string.text_transformations #=> Array
5954
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].priority #=> Integer
5955
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5956
+ # resp.web_acl.rules[0].statement.rate_based_statement.custom_keys[0].label_namespace.namespace #=> String
5676
5957
  # resp.web_acl.rules[0].statement.and_statement.statements #=> Array
5677
5958
  # resp.web_acl.rules[0].statement.and_statement.statements[0] #=> Types::Statement
5678
5959
  # resp.web_acl.rules[0].statement.or_statement.statements #=> Array
@@ -5948,10 +6229,27 @@ module Aws::WAFV2
5948
6229
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.regex_pattern_set_reference_statement.text_transformations[0].priority #=> Integer
5949
6230
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.regex_pattern_set_reference_statement.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
5950
6231
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.limit #=> Integer
5951
- # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP"
6232
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP", "CUSTOM_KEYS", "CONSTANT"
5952
6233
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.scope_down_statement #=> Types::Statement
5953
6234
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.forwarded_ip_config.header_name #=> String
5954
6235
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.forwarded_ip_config.fallback_behavior #=> String, one of "MATCH", "NO_MATCH"
6236
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys #=> Array
6237
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.name #=> String
6238
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations #=> Array
6239
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations[0].priority #=> Integer
6240
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
6241
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.name #=> String
6242
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations #=> Array
6243
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].priority #=> Integer
6244
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
6245
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.name #=> String
6246
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations #=> Array
6247
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].priority #=> Integer
6248
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
6249
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations #=> Array
6250
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].priority #=> Integer
6251
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
6252
+ # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].label_namespace.namespace #=> String
5955
6253
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.and_statement.statements #=> Array
5956
6254
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.and_statement.statements[0] #=> Types::Statement
5957
6255
  # resp.web_acl.pre_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.or_statement.statements #=> Array
@@ -6219,10 +6517,27 @@ module Aws::WAFV2
6219
6517
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.regex_pattern_set_reference_statement.text_transformations[0].priority #=> Integer
6220
6518
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.regex_pattern_set_reference_statement.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
6221
6519
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.limit #=> Integer
6222
- # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP"
6520
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.aggregate_key_type #=> String, one of "IP", "FORWARDED_IP", "CUSTOM_KEYS", "CONSTANT"
6223
6521
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.scope_down_statement #=> Types::Statement
6224
6522
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.forwarded_ip_config.header_name #=> String
6225
6523
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.forwarded_ip_config.fallback_behavior #=> String, one of "MATCH", "NO_MATCH"
6524
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys #=> Array
6525
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.name #=> String
6526
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations #=> Array
6527
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations[0].priority #=> Integer
6528
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].header.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
6529
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.name #=> String
6530
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations #=> Array
6531
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].priority #=> Integer
6532
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].cookie.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
6533
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.name #=> String
6534
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations #=> Array
6535
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].priority #=> Integer
6536
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_argument.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
6537
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations #=> Array
6538
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].priority #=> Integer
6539
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].query_string.text_transformations[0].type #=> String, one of "NONE", "COMPRESS_WHITE_SPACE", "HTML_ENTITY_DECODE", "LOWERCASE", "CMD_LINE", "URL_DECODE", "BASE64_DECODE", "HEX_DECODE", "MD5", "REPLACE_COMMENTS", "ESCAPE_SEQ_DECODE", "SQL_HEX_DECODE", "CSS_DECODE", "JS_DECODE", "NORMALIZE_PATH", "NORMALIZE_PATH_WIN", "REMOVE_NULLS", "REPLACE_NULLS", "BASE64_DECODE_EXT", "URL_DECODE_UNI", "UTF8_TO_UNICODE"
6540
+ # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.rate_based_statement.custom_keys[0].label_namespace.namespace #=> String
6226
6541
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.and_statement.statements #=> Array
6227
6542
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.and_statement.statements[0] #=> Types::Statement
6228
6543
  # resp.web_acl.post_process_firewall_manager_rule_groups[0].firewall_manager_statement.managed_rule_group_statement.scope_down_statement.or_statement.statements #=> Array
@@ -6354,11 +6669,23 @@ module Aws::WAFV2
6354
6669
  # Retrieves a list of the API keys that you've defined for the
6355
6670
  # specified scope.
6356
6671
  #
6672
+ # API keys are required for the integration of the CAPTCHA API in your
6673
+ # JavaScript client applications. The API lets you customize the
6674
+ # placement and characteristics of the CAPTCHA puzzle for your end
6675
+ # users. For more information about the CAPTCHA JavaScript integration,
6676
+ # see [WAF client application integration][1] in the *WAF Developer
6677
+ # Guide*.
6678
+ #
6679
+ #
6680
+ #
6681
+ # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-application-integration.html
6682
+ #
6357
6683
  # @option params [required, String] :scope
6358
6684
  # Specifies whether this is for an Amazon CloudFront distribution or for
6359
6685
  # a regional application. A regional application can be an Application
6360
6686
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6361
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6687
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
6688
+ # Amazon Web Services Verified Access instance.
6362
6689
  #
6363
6690
  # To work with CloudFront, you must also specify the Region US East (N.
6364
6691
  # Virginia) as follows:
@@ -6430,7 +6757,8 @@ module Aws::WAFV2
6430
6757
  # Specifies whether this is for an Amazon CloudFront distribution or for
6431
6758
  # a regional application. A regional application can be an Application
6432
6759
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6433
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6760
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
6761
+ # Amazon Web Services Verified Access instance.
6434
6762
  #
6435
6763
  # To work with CloudFront, you must also specify the Region US East (N.
6436
6764
  # Virginia) as follows:
@@ -6495,7 +6823,8 @@ module Aws::WAFV2
6495
6823
  # Specifies whether this is for an Amazon CloudFront distribution or for
6496
6824
  # a regional application. A regional application can be an Application
6497
6825
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6498
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6826
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
6827
+ # Amazon Web Services Verified Access instance.
6499
6828
  #
6500
6829
  # To work with CloudFront, you must also specify the Region US East (N.
6501
6830
  # Virginia) as follows:
@@ -6556,7 +6885,8 @@ module Aws::WAFV2
6556
6885
  # Specifies whether this is for an Amazon CloudFront distribution or for
6557
6886
  # a regional application. A regional application can be an Application
6558
6887
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6559
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6888
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
6889
+ # Amazon Web Services Verified Access instance.
6560
6890
  #
6561
6891
  # To work with CloudFront, you must also specify the Region US East (N.
6562
6892
  # Virginia) as follows:
@@ -6617,7 +6947,8 @@ module Aws::WAFV2
6617
6947
  # Specifies whether this is for an Amazon CloudFront distribution or for
6618
6948
  # a regional application. A regional application can be an Application
6619
6949
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6620
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
6950
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
6951
+ # Amazon Web Services Verified Access instance.
6621
6952
  #
6622
6953
  # To work with CloudFront, you must also specify the Region US East (N.
6623
6954
  # Virginia) as follows:
@@ -6716,7 +7047,8 @@ module Aws::WAFV2
6716
7047
  # Specifies whether this is for an Amazon CloudFront distribution or for
6717
7048
  # a regional application. A regional application can be an Application
6718
7049
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6719
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7050
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
7051
+ # Amazon Web Services Verified Access instance.
6720
7052
  #
6721
7053
  # To work with CloudFront, you must also specify the Region US East (N.
6722
7054
  # Virginia) as follows:
@@ -6837,7 +7169,8 @@ module Aws::WAFV2
6837
7169
  # Specifies whether this is for an Amazon CloudFront distribution or for
6838
7170
  # a regional application. A regional application can be an Application
6839
7171
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6840
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7172
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
7173
+ # Amazon Web Services Verified Access instance.
6841
7174
  #
6842
7175
  # To work with CloudFront, you must also specify the Region US East (N.
6843
7176
  # Virginia) as follows:
@@ -6904,7 +7237,8 @@ module Aws::WAFV2
6904
7237
  # Used for web ACLs that are scoped for regional applications. A
6905
7238
  # regional application can be an Application Load Balancer (ALB), an
6906
7239
  # Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito
6907
- # user pool, or an App Runner service.
7240
+ # user pool, an App Runner service, or an Amazon Web Services Verified
7241
+ # Access instance.
6908
7242
  #
6909
7243
  # <note markdown="1"> If you don't provide a resource type, the call uses the resource type
6910
7244
  # `APPLICATION_LOAD_BALANCER`.
@@ -6921,7 +7255,7 @@ module Aws::WAFV2
6921
7255
  #
6922
7256
  # resp = client.list_resources_for_web_acl({
6923
7257
  # web_acl_arn: "ResourceArn", # required
6924
- # resource_type: "APPLICATION_LOAD_BALANCER", # accepts APPLICATION_LOAD_BALANCER, API_GATEWAY, APPSYNC, COGNITO_USER_POOL, APP_RUNNER_SERVICE
7258
+ # resource_type: "APPLICATION_LOAD_BALANCER", # accepts APPLICATION_LOAD_BALANCER, API_GATEWAY, APPSYNC, COGNITO_USER_POOL, APP_RUNNER_SERVICE, VERIFIED_ACCESS_INSTANCE
6925
7259
  # })
6926
7260
  #
6927
7261
  # @example Response structure
@@ -6945,7 +7279,8 @@ module Aws::WAFV2
6945
7279
  # Specifies whether this is for an Amazon CloudFront distribution or for
6946
7280
  # a regional application. A regional application can be an Application
6947
7281
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
6948
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7282
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
7283
+ # Amazon Web Services Verified Access instance.
6949
7284
  #
6950
7285
  # To work with CloudFront, you must also specify the Region US East (N.
6951
7286
  # Virginia) as follows:
@@ -7064,7 +7399,8 @@ module Aws::WAFV2
7064
7399
  # Specifies whether this is for an Amazon CloudFront distribution or for
7065
7400
  # a regional application. A regional application can be an Application
7066
7401
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7067
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7402
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
7403
+ # Amazon Web Services Verified Access instance.
7068
7404
  #
7069
7405
  # To work with CloudFront, you must also specify the Region US East (N.
7070
7406
  # Virginia) as follows:
@@ -7341,7 +7677,8 @@ module Aws::WAFV2
7341
7677
  # Specifies whether this is for an Amazon CloudFront distribution or for
7342
7678
  # a regional application. A regional application can be an Application
7343
7679
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7344
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7680
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
7681
+ # Amazon Web Services Verified Access instance.
7345
7682
  #
7346
7683
  # To work with CloudFront, you must also specify the Region US East (N.
7347
7684
  # Virginia) as follows:
@@ -7579,7 +7916,8 @@ module Aws::WAFV2
7579
7916
  # Specifies whether this is for an Amazon CloudFront distribution or for
7580
7917
  # a regional application. A regional application can be an Application
7581
7918
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7582
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
7919
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
7920
+ # Amazon Web Services Verified Access instance.
7583
7921
  #
7584
7922
  # To work with CloudFront, you must also specify the Region US East (N.
7585
7923
  # Virginia) as follows:
@@ -7704,7 +8042,8 @@ module Aws::WAFV2
7704
8042
  # Specifies whether this is for an Amazon CloudFront distribution or for
7705
8043
  # a regional application. A regional application can be an Application
7706
8044
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7707
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
8045
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
8046
+ # Amazon Web Services Verified Access instance.
7708
8047
  #
7709
8048
  # To work with CloudFront, you must also specify the Region US East (N.
7710
8049
  # Virginia) as follows:
@@ -7810,7 +8149,8 @@ module Aws::WAFV2
7810
8149
  # Specifies whether this is for an Amazon CloudFront distribution or for
7811
8150
  # a regional application. A regional application can be an Application
7812
8151
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7813
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
8152
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
8153
+ # Amazon Web Services Verified Access instance.
7814
8154
  #
7815
8155
  # To work with CloudFront, you must also specify the Region US East (N.
7816
8156
  # Virginia) as follows:
@@ -7916,7 +8256,8 @@ module Aws::WAFV2
7916
8256
  # Specifies whether this is for an Amazon CloudFront distribution or for
7917
8257
  # a regional application. A regional application can be an Application
7918
8258
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
7919
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
8259
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
8260
+ # Amazon Web Services Verified Access instance.
7920
8261
  #
7921
8262
  # To work with CloudFront, you must also specify the Region US East (N.
7922
8263
  # Virginia) as follows:
@@ -8364,7 +8705,7 @@ module Aws::WAFV2
8364
8705
  # },
8365
8706
  # rate_based_statement: {
8366
8707
  # limit: 1, # required
8367
- # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
8708
+ # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP, CUSTOM_KEYS, CONSTANT
8368
8709
  # scope_down_statement: {
8369
8710
  # # recursive Statement
8370
8711
  # },
@@ -8372,6 +8713,54 @@ module Aws::WAFV2
8372
8713
  # header_name: "ForwardedIPHeaderName", # required
8373
8714
  # fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
8374
8715
  # },
8716
+ # custom_keys: [
8717
+ # {
8718
+ # header: {
8719
+ # name: "FieldToMatchData", # required
8720
+ # text_transformations: [ # required
8721
+ # {
8722
+ # priority: 1, # required
8723
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8724
+ # },
8725
+ # ],
8726
+ # },
8727
+ # cookie: {
8728
+ # name: "FieldToMatchData", # required
8729
+ # text_transformations: [ # required
8730
+ # {
8731
+ # priority: 1, # required
8732
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8733
+ # },
8734
+ # ],
8735
+ # },
8736
+ # query_argument: {
8737
+ # name: "FieldToMatchData", # required
8738
+ # text_transformations: [ # required
8739
+ # {
8740
+ # priority: 1, # required
8741
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8742
+ # },
8743
+ # ],
8744
+ # },
8745
+ # query_string: {
8746
+ # text_transformations: [ # required
8747
+ # {
8748
+ # priority: 1, # required
8749
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
8750
+ # },
8751
+ # ],
8752
+ # },
8753
+ # http_method: {
8754
+ # },
8755
+ # forwarded_ip: {
8756
+ # },
8757
+ # ip: {
8758
+ # },
8759
+ # label_namespace: {
8760
+ # namespace: "LabelNamespace", # required
8761
+ # },
8762
+ # },
8763
+ # ],
8375
8764
  # },
8376
8765
  # and_statement: {
8377
8766
  # statements: [ # required
@@ -8732,7 +9121,8 @@ module Aws::WAFV2
8732
9121
  # can associate a web ACL with one or more Amazon Web Services resources
8733
9122
  # to protect. The resources can be an Amazon CloudFront distribution, an
8734
9123
  # Amazon API Gateway REST API, an Application Load Balancer, an AppSync
8735
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
9124
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
9125
+ # Amazon Web Services Verified Access instance.
8736
9126
  #
8737
9127
  # @option params [required, String] :name
8738
9128
  # The name of the web ACL. You cannot change the name of a web ACL after
@@ -8742,7 +9132,8 @@ module Aws::WAFV2
8742
9132
  # Specifies whether this is for an Amazon CloudFront distribution or for
8743
9133
  # a regional application. A regional application can be an Application
8744
9134
  # Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
8745
- # GraphQL API, an Amazon Cognito user pool, or an App Runner service.
9135
+ # GraphQL API, an Amazon Cognito user pool, an App Runner service, or an
9136
+ # Amazon Web Services Verified Access instance.
8746
9137
  #
8747
9138
  # To work with CloudFront, you must also specify the Region US East (N.
8748
9139
  # Virginia) as follows:
@@ -9262,7 +9653,7 @@ module Aws::WAFV2
9262
9653
  # },
9263
9654
  # rate_based_statement: {
9264
9655
  # limit: 1, # required
9265
- # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP
9656
+ # aggregate_key_type: "IP", # required, accepts IP, FORWARDED_IP, CUSTOM_KEYS, CONSTANT
9266
9657
  # scope_down_statement: {
9267
9658
  # # recursive Statement
9268
9659
  # },
@@ -9270,6 +9661,54 @@ module Aws::WAFV2
9270
9661
  # header_name: "ForwardedIPHeaderName", # required
9271
9662
  # fallback_behavior: "MATCH", # required, accepts MATCH, NO_MATCH
9272
9663
  # },
9664
+ # custom_keys: [
9665
+ # {
9666
+ # header: {
9667
+ # name: "FieldToMatchData", # required
9668
+ # text_transformations: [ # required
9669
+ # {
9670
+ # priority: 1, # required
9671
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
9672
+ # },
9673
+ # ],
9674
+ # },
9675
+ # cookie: {
9676
+ # name: "FieldToMatchData", # required
9677
+ # text_transformations: [ # required
9678
+ # {
9679
+ # priority: 1, # required
9680
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
9681
+ # },
9682
+ # ],
9683
+ # },
9684
+ # query_argument: {
9685
+ # name: "FieldToMatchData", # required
9686
+ # text_transformations: [ # required
9687
+ # {
9688
+ # priority: 1, # required
9689
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
9690
+ # },
9691
+ # ],
9692
+ # },
9693
+ # query_string: {
9694
+ # text_transformations: [ # required
9695
+ # {
9696
+ # priority: 1, # required
9697
+ # type: "NONE", # required, accepts NONE, COMPRESS_WHITE_SPACE, HTML_ENTITY_DECODE, LOWERCASE, CMD_LINE, URL_DECODE, BASE64_DECODE, HEX_DECODE, MD5, REPLACE_COMMENTS, ESCAPE_SEQ_DECODE, SQL_HEX_DECODE, CSS_DECODE, JS_DECODE, NORMALIZE_PATH, NORMALIZE_PATH_WIN, REMOVE_NULLS, REPLACE_NULLS, BASE64_DECODE_EXT, URL_DECODE_UNI, UTF8_TO_UNICODE
9698
+ # },
9699
+ # ],
9700
+ # },
9701
+ # http_method: {
9702
+ # },
9703
+ # forwarded_ip: {
9704
+ # },
9705
+ # ip: {
9706
+ # },
9707
+ # label_namespace: {
9708
+ # namespace: "LabelNamespace", # required
9709
+ # },
9710
+ # },
9711
+ # ],
9273
9712
  # },
9274
9713
  # and_statement: {
9275
9714
  # statements: [ # required
@@ -9620,7 +10059,7 @@ module Aws::WAFV2
9620
10059
  params: params,
9621
10060
  config: config)
9622
10061
  context[:gem_name] = 'aws-sdk-wafv2'
9623
- context[:gem_version] = '1.55.0'
10062
+ context[:gem_version] = '1.57.0'
9624
10063
  Seahorse::Client::Request.new(handlers, context)
9625
10064
  end
9626
10065