aws-sdk-wafv2 1.44.0 → 1.45.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8c05d7793d3fcb6bb2e4627179e64e49e824590c653ce343b644ecef67d066be
-  data.tar.gz: da795548b382ce98b06f76556b40ef6c46bdb6deca1366cc06ff42a620488998
+  metadata.gz: 54da821c1d4dcf409e62899dbe4b01df619d2e5d6f1d7a96d35061adbec205cd
+  data.tar.gz: 45129a1f5293aa98093c264facb0d2106897f5d885d454700f17ba991a635c2c
 SHA512:
-  metadata.gz: 99a36d9699c0c6943c62789a067a171c6834172513c737a8e1426653d5216ab471d9fab57ebdc477753bfd9ce239d2c35ecd72142b02b56726d11c8773d6c937
-  data.tar.gz: a59b5d55d971198954bd4501e1b3fe5a50c4723078b5a7f8599aac3f8cabcae3c0f7c676f725ea1a57b7d9fd5c5b7373796d9a652d26c5e4b6aa364962f33903
+  metadata.gz: 6b9a2c54275691ea555d65a0cd43dbc759a6edbb12de7cabb71eeeef1739126fe7050f8104fbf631281362b665cea26fa02154cd96542282599ab66607d5eb87
+  data.tar.gz: 83c8f9abe4447cf0762691a1f24c06d50cbb538e0eb5d159f408dca2f9536d87926e98b45752c2e9e81f30824f05ef0f7c52797b76062278e50d3a622b716bf7

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.45.0 (2022-11-07)
+------------------
+
+* Feature - The geo match statement now adds labels for country and region. You can match requests at the region level by combining a geo match statement with label match statements.
+
 1.44.0 (2022-10-27)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.44.0
+1.45.0

data/lib/aws-sdk-wafv2/client.rb

@@ -9021,7 +9021,7 @@ module Aws::WAFV2
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-wafv2'
-      context[:gem_version] = '1.44.0'
+      context[:gem_version] = '1.45.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-wafv2/types.rb

@@ -5191,8 +5191,41 @@ module Aws::WAFV2
       include Aws::Structure
     end
 
-    # A rule statement used to identify web requests based on country of
-    # origin.
+    # A rule statement that labels web requests by country and region and
+    # that matches against web requests based on country code. A geo match
+    # rule labels every request that it inspects regardless of whether it
+    # finds a match.
+    #
+    # * To manage requests only by country, you can use this statement by
+    #   itself and specify the countries that you want to match against in
+    #   the `CountryCodes` array.
+    #
+    # * Otherwise, configure your geo match rule with Count action so that
+    #   it only labels requests. Then, add one or more label match rules to
+    #   run after the geo match rule and configure them to match against the
+    #   geographic labels and handle the requests as needed.
+    #
+    # WAF labels requests using the alpha-2 country and region codes from
+    # the International Organization for Standardization (ISO) 3166
+    # standard. WAF determines the codes using either the IP address in the
+    # web request origin or, if you specify it, the address in the geo match
+    # `ForwardedIPConfig`.
+    #
+    # If you use the web request origin, the label formats are
+    # `awswaf:clientip:geo:region:<ISO country code>-<ISO region code>` and
+    # `awswaf:clientip:geo:country:<ISO country code>`.
+    #
+    # If you use a forwarded IP address, the label formats are
+    # `awswaf:forwardedip:geo:region:<ISO country code>-<ISO region code>`
+    # and `awswaf:forwardedip:geo:country:<ISO country code>`.
+    #
+    # For additional details, see [Geographic match rule statement][1] in
+    # the [WAF Developer Guide][2].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-geo-match.html
+    # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html
     #
     # @note When making an API call, you may pass GeoMatchStatement
     #   data as a hash:
@@ -5206,9 +5239,17 @@ module Aws::WAFV2
     #       }
     #
     # @!attribute [rw] country_codes
-    #   An array of two-character country codes, for example, `[ "US", "CN"
-    #   ]`, from the alpha-2 country ISO codes of the ISO 3166 international
-    #   standard.
+    #   An array of two-character country codes that you want to match
+    #   against, for example, `[ "US", "CN" ]`, from the alpha-2 country ISO
+    #   codes of the ISO 3166 international standard.
+    #
+    #   When you use a geo match statement just for the region and country
+    #   labels that it adds to requests, you still have to supply a country
+    #   code for the rule to evaluate. In this case, you configure the rule
+    #   to only count matching requests, but it will still generate logging
+    #   and count metrics for any matches. You can reduce the logging and
+    #   metrics that the rule produces by specifying a country that's
+    #   unlikely to be a source of traffic to your site.
     #   @return [Array<String>]
     #
     # @!attribute [rw] forwarded_ip_config
@@ -6608,9 +6649,8 @@ module Aws::WAFV2
       include Aws::Structure
     end
 
-    # A rule statement that defines a string match search against labels
-    # that have been added to the web request by rules that have already run
-    # in the web ACL.
+    # A rule statement to match against labels that have been added to the
+    # web request by rules that have already run in the web ACL.
     #
     # The label match statement provides the label or namespace string to
     # search for. The label string can represent a part or all of the fully
@@ -16217,8 +16257,41 @@ module Aws::WAFV2
     #   @return [Types::SizeConstraintStatement]
     #
     # @!attribute [rw] geo_match_statement
-    #   A rule statement used to identify web requests based on country of
-    #   origin.
+    #   A rule statement that labels web requests by country and region and
+    #   that matches against web requests based on country code. A geo match
+    #   rule labels every request that it inspects regardless of whether it
+    #   finds a match.
+    #
+    #   * To manage requests only by country, you can use this statement by
+    #     itself and specify the countries that you want to match against in
+    #     the `CountryCodes` array.
+    #
+    #   * Otherwise, configure your geo match rule with Count action so that
+    #     it only labels requests. Then, add one or more label match rules
+    #     to run after the geo match rule and configure them to match
+    #     against the geographic labels and handle the requests as needed.
+    #
+    #   WAF labels requests using the alpha-2 country and region codes from
+    #   the International Organization for Standardization (ISO) 3166
+    #   standard. WAF determines the codes using either the IP address in
+    #   the web request origin or, if you specify it, the address in the geo
+    #   match `ForwardedIPConfig`.
+    #
+    #   If you use the web request origin, the label formats are
+    #   `awswaf:clientip:geo:region:<ISO country code>-<ISO region code>`
+    #   and `awswaf:clientip:geo:country:<ISO country code>`.
+    #
+    #   If you use a forwarded IP address, the label formats are
+    #   `awswaf:forwardedip:geo:region:<ISO country code>-<ISO region code>`
+    #   and `awswaf:forwardedip:geo:country:<ISO country code>`.
+    #
+    #   For additional details, see [Geographic match rule statement][1] in
+    #   the [WAF Developer Guide][2].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-geo-match.html
+    #   [2]: https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html
     #   @return [Types::GeoMatchStatement]
     #
     # @!attribute [rw] rule_group_reference_statement
@@ -16345,9 +16418,8 @@ module Aws::WAFV2
     #   @return [Types::ManagedRuleGroupStatement]
     #
     # @!attribute [rw] label_match_statement
-    #   A rule statement that defines a string match search against labels
-    #   that have been added to the web request by rules that have already
-    #   run in the web ACL.
+    #   A rule statement to match against labels that have been added to the
+    #   web request by rules that have already run in the web ACL.
     #
     #   The label match statement provides the label or namespace string to
     #   search for. The label string can represent a part or all of the

data/lib/aws-sdk-wafv2.rb

@@ -52,6 +52,6 @@ require_relative 'aws-sdk-wafv2/customizations'
 # @!group service
 module Aws::WAFV2
 
-  GEM_VERSION = '1.44.0'
+  GEM_VERSION = '1.45.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-wafv2
 version: !ruby/object:Gem::Version
-  version: 1.44.0
+  version: 1.45.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-10-27 00:00:00.000000000 Z
+date: 2022-11-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core