aws-sdk-wafv2 1.70.0 → 1.71.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 709fa74d545a9bd5a3313ce44f8e5d2598cbcf703eb04f1cc41e28cd60125506
-  data.tar.gz: bb19fdda06d4593e0cb4423c85f934918d6b6176cf789cfb4a5f7180ce91b279
+  metadata.gz: 8e00844559f62d3387cf55af655844eb473e4b8d134a25f3fcbdee6d9b072d86
+  data.tar.gz: d7c3714c5b20ade977f2c47fa619ef9bea79546a3da83ef62ed859b19f24e627
 SHA512:
-  metadata.gz: ba7f965bdadb365aabcf1763dd783dedc8c95d0e76d3674962e28452a598dcf2777c24bed0c862e903f649052b60fb61db8b3f71106c81bd28d16da612af5059
-  data.tar.gz: b255ec9c6c0c478e56f92d62708273fc2ff0e5988ebb606d2fc4cbb1246b3c40bcd9a9a0d1b4d5a31901171ecaee1d4be0e31a012ffe95393e1306a77ffe19fa
+  metadata.gz: 73d56cd51cc562735ce5c627059b683f1dd121fd3de2d45b321ebc40447ba192dceca247ec83b100f5a380e9fdafa691935f09a98297a6de3116fbc7a4eff81b
+  data.tar.gz: d8824365f71c77f8245c903abcad4f13ad000d67b52ea5e73bd7d217ee574a88db024a11094040036bf194185b27bcd3a162332d524027b68ff2ba5bdb989ec6

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.71.0 (2023-09-28)
+------------------
+
+* Feature - Correct and improve the documentation for the FieldToMatch option JA3 fingerprint.
+
 1.70.0 (2023-09-27)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.70.0
+1.71.0

data/lib/aws-sdk-wafv2/client.rb

@@ -8922,7 +8922,7 @@ module Aws::WAFV2
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-wafv2'
-      context[:gem_version] = '1.70.0'
+      context[:gem_version] = '1.71.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-wafv2/types.rb

@@ -542,9 +542,17 @@ module Aws::WAFV2
     #   * `UriPath`: The value that you want WAF to search for in the URI
     #     path, for example, `/images/daily-ad.jpg`.
     #
-    #   * `JA3Fingerprint`: The string to match against the web request's
-    #     JA3 fingerprint header. The header contains a hash fingerprint of
-    #     the TLS Client Hello packet for the request.
+    #   * `JA3Fingerprint`: Match against the request's JA3 fingerprint.
+    #     The JA3 fingerprint is a 32-character hash derived from the TLS
+    #     Client Hello of an incoming request. This fingerprint serves as a
+    #     unique identifier for the client's TLS configuration. You can use
+    #     this choice only with a string match `ByteMatchStatement` with the
+    #     `PositionalConstraint` set to `EXACTLY`.
+    #
+    #     You can obtain the JA3 fingerprint for client requests from the
+    #     web ACL logs. If WAF is able to calculate the fingerprint, it
+    #     includes it in the logs. For information about the logging fields,
+    #     see [Log fields][1] in the *WAF Developer Guide*.
     #
     #   * `HeaderOrder`: The comma-separated list of header names to match
     #     for. WAF creates a string that contains the ordered list of header
@@ -569,6 +577,10 @@ module Aws::WAFV2
     #
     #   The value that you want WAF to search for. The SDK automatically
     #   base64 encodes the value.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/waf/latest/developerguide/logging-fields.html
     #   @return [String]
     #
     # @!attribute [rw] field_to_match
@@ -2397,15 +2409,32 @@ module Aws::WAFV2
     #   @return [Types::HeaderOrder]
     #
     # @!attribute [rw] ja3_fingerprint
-    #   Match against the request's JA3 fingerprint header. The header
-    #   contains a hash fingerprint of the TLS Client Hello packet for the
-    #   request.
+    #   Match against the request's JA3 fingerprint. The JA3 fingerprint is
+    #   a 32-character hash derived from the TLS Client Hello of an incoming
+    #   request. This fingerprint serves as a unique identifier for the
+    #   client's TLS configuration. WAF calculates and logs this
+    #   fingerprint for each request that has enough TLS Client Hello
+    #   information for the calculation. Almost all web requests include
+    #   this information.
     #
     #   <note markdown="1"> You can use this choice only with a string match
     #   `ByteMatchStatement` with the `PositionalConstraint` set to
     #   `EXACTLY`.
     #
     #    </note>
+    #
+    #   You can obtain the JA3 fingerprint for client requests from the web
+    #   ACL logs. If WAF is able to calculate the fingerprint, it includes
+    #   it in the logs. For information about the logging fields, see [Log
+    #   fields][1] in the *WAF Developer Guide*.
+    #
+    #   Provide the JA3 fingerprint string from the logs in your string
+    #   match statement specification, to match with any future requests
+    #   that have the same TLS configuration.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/waf/latest/developerguide/logging-fields.html
     #   @return [Types::JA3Fingerprint]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/wafv2-2019-07-29/FieldToMatch AWS API Documentation
@@ -3832,15 +3861,31 @@ module Aws::WAFV2
       include Aws::Structure
     end
 
-    # Match against the request's JA3 fingerprint header. The header
-    # contains a hash fingerprint of the TLS Client Hello packet for the
-    # request.
+    # Match against the request's JA3 fingerprint. The JA3 fingerprint is a
+    # 32-character hash derived from the TLS Client Hello of an incoming
+    # request. This fingerprint serves as a unique identifier for the
+    # client's TLS configuration. WAF calculates and logs this fingerprint
+    # for each request that has enough TLS Client Hello information for the
+    # calculation. Almost all web requests include this information.
     #
     # <note markdown="1"> You can use this choice only with a string match `ByteMatchStatement`
     # with the `PositionalConstraint` set to `EXACTLY`.
     #
     #  </note>
     #
+    # You can obtain the JA3 fingerprint for client requests from the web
+    # ACL logs. If WAF is able to calculate the fingerprint, it includes it
+    # in the logs. For information about the logging fields, see [Log
+    # fields][1] in the *WAF Developer Guide*.
+    #
+    # Provide the JA3 fingerprint string from the logs in your string match
+    # statement specification, to match with any future requests that have
+    # the same TLS configuration.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/logging-fields.html
+    #
     # @!attribute [rw] fallback_behavior
     #   The match status to assign to the web request if the request
     #   doesn't have a JA3 fingerprint.

data/lib/aws-sdk-wafv2.rb

@@ -52,6 +52,6 @@ require_relative 'aws-sdk-wafv2/customizations'
 # @!group service
 module Aws::WAFV2
 
-  GEM_VERSION = '1.70.0'
+  GEM_VERSION = '1.71.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-wafv2
 version: !ruby/object:Gem::Version
-  version: 1.70.0
+  version: 1.71.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-09-27 00:00:00.000000000 Z
+date: 2023-09-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core