@aws-sdk/client-waf-regional 3.379.1 → 3.382.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -29,6 +29,7 @@ export type WafActionType = (typeof WafActionType)[keyof typeof WafActionType];
29
29
  */
30
30
  export interface WafAction {
31
31
  /**
32
+ * @public
32
33
  * <p>Specifies how you want AWS WAF to respond to requests that match the settings in a <code>Rule</code>. Valid settings include the following:</p>
33
34
  * <ul>
34
35
  * <li>
@@ -65,6 +66,7 @@ export interface WafAction {
65
66
  */
66
67
  export interface ExcludedRule {
67
68
  /**
69
+ * @public
68
70
  * <p>The unique identifier for the rule to exclude from the rule group.</p>
69
71
  */
70
72
  RuleId: string | undefined;
@@ -95,6 +97,7 @@ export type WafOverrideActionType = (typeof WafOverrideActionType)[keyof typeof
95
97
  */
96
98
  export interface WafOverrideAction {
97
99
  /**
100
+ * @public
98
101
  * <p>
99
102
  * <code>COUNT</code> overrides the action specified by the individual rule within a <code>RuleGroup</code> . If set to <code>NONE</code>, the rule's action will take place.</p>
100
103
  */
@@ -130,12 +133,14 @@ export type WafRuleType = (typeof WafRuleType)[keyof typeof WafRuleType];
130
133
  */
131
134
  export interface ActivatedRule {
132
135
  /**
136
+ * @public
133
137
  * <p>Specifies the order in which the <code>Rules</code> in a <code>WebACL</code> are evaluated. Rules with a lower value for
134
138
  * <code>Priority</code> are evaluated before <code>Rules</code> with a higher value. The value must be a unique integer. If you add multiple
135
139
  * <code>Rules</code> to a <code>WebACL</code>, the values don't need to be consecutive.</p>
136
140
  */
137
141
  Priority: number | undefined;
138
142
  /**
143
+ * @public
139
144
  * <p>The <code>RuleId</code> for a <code>Rule</code>. You use <code>RuleId</code> to get more information about a <code>Rule</code> (see <a>GetRule</a>),
140
145
  * update a <code>Rule</code> (see <a>UpdateRule</a>), insert a <code>Rule</code> into a <code>WebACL</code> or delete a
141
146
  * one from a <code>WebACL</code> (see <a>UpdateWebACL</a>), or delete a <code>Rule</code> from AWS WAF (see <a>DeleteRule</a>).</p>
@@ -144,6 +149,7 @@ export interface ActivatedRule {
144
149
  */
145
150
  RuleId: string | undefined;
146
151
  /**
152
+ * @public
147
153
  * <p>Specifies the action that CloudFront or AWS WAF takes when a web request matches the conditions in the <code>Rule</code>.
148
154
  * Valid values for <code>Action</code> include the following:</p>
149
155
  * <ul>
@@ -171,6 +177,7 @@ export interface ActivatedRule {
171
177
  */
172
178
  Action?: WafAction;
173
179
  /**
180
+ * @public
174
181
  * <p>Use the <code>OverrideAction</code> to test your <code>RuleGroup</code>.</p>
175
182
  * <p>Any rule in a <code>RuleGroup</code> can potentially block a request. If you set the <code>OverrideAction</code> to <code>None</code>, the <code>RuleGroup</code> will block a request if any individual rule in the <code>RuleGroup</code> matches the request and is configured to block that request. However if you first want to test the <code>RuleGroup</code>, set the <code>OverrideAction</code> to <code>Count</code>. The <code>RuleGroup</code> will then override any block action specified by individual rules contained within the group. Instead of blocking matching requests, those requests will be counted. You can view a record of counted requests using <a>GetSampledRequests</a>. </p>
176
183
  * <p>
@@ -178,11 +185,13 @@ export interface ActivatedRule {
178
185
  */
179
186
  OverrideAction?: WafOverrideAction;
180
187
  /**
188
+ * @public
181
189
  * <p>The rule type, either <code>REGULAR</code>, as defined by <a>Rule</a>, <code>RATE_BASED</code>, as defined by <a>RateBasedRule</a>, or <code>GROUP</code>, as defined by <a>RuleGroup</a>. The default is REGULAR. Although this field is optional, be aware that if you try to add a RATE_BASED rule to a web ACL without setting the type, the <a>UpdateWebACL</a> request will fail because the request tries to add a REGULAR rule with the specified ID, which does not exist.
182
190
  * </p>
183
191
  */
184
192
  Type?: WafRuleType | string;
185
193
  /**
194
+ * @public
186
195
  * <p>An array of rules to exclude from a rule group. This is applicable only when the <code>ActivatedRule</code> refers to a <code>RuleGroup</code>.</p>
187
196
  * <p>Sometimes it is necessary to troubleshoot rule groups that are blocking traffic
188
197
  * unexpectedly (false positives). One troubleshooting technique is to identify the specific
@@ -232,10 +241,12 @@ export interface ActivatedRule {
232
241
  */
233
242
  export interface AssociateWebACLRequest {
234
243
  /**
244
+ * @public
235
245
  * <p>A unique identifier (ID) for the web ACL. </p>
236
246
  */
237
247
  WebACLId: string | undefined;
238
248
  /**
249
+ * @public
239
250
  * <p>The ARN (Amazon Resource Name) of the resource to be protected, either an application load balancer or Amazon API Gateway stage. </p>
240
251
  * <p>The ARN should be in one of the following formats:</p>
241
252
  * <ul>
@@ -406,11 +417,13 @@ export declare class WAFUnavailableEntityException extends __BaseException {
406
417
  */
407
418
  export interface CreateByteMatchSetRequest {
408
419
  /**
420
+ * @public
409
421
  * <p>A friendly name or description of the <a>ByteMatchSet</a>. You can't change <code>Name</code> after you create a
410
422
  * <code>ByteMatchSet</code>.</p>
411
423
  */
412
424
  Name: string | undefined;
413
425
  /**
426
+ * @public
414
427
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
415
428
  */
416
429
  ChangeToken: string | undefined;
@@ -446,6 +459,7 @@ export type MatchFieldType = (typeof MatchFieldType)[keyof typeof MatchFieldType
446
459
  */
447
460
  export interface FieldToMatch {
448
461
  /**
462
+ * @public
449
463
  * <p>The part of the web request that you want AWS WAF to search for a specified string. Parts of a request that you can search include the following:</p>
450
464
  * <ul>
451
465
  * <li>
@@ -488,6 +502,7 @@ export interface FieldToMatch {
488
502
  */
489
503
  Type: MatchFieldType | string | undefined;
490
504
  /**
505
+ * @public
491
506
  * <p>When the value of <code>Type</code> is <code>HEADER</code>, enter the name of the header that you want AWS WAF to search,
492
507
  * for example, <code>User-Agent</code> or <code>Referer</code>. The name of the header is not case sensitive.</p>
493
508
  * <p>When the value of <code>Type</code> is <code>SINGLE_QUERY_ARG</code>, enter the name of the parameter that you want AWS WAF to search,
@@ -541,11 +556,13 @@ export type TextTransformation = (typeof TextTransformation)[keyof typeof TextTr
541
556
  */
542
557
  export interface ByteMatchTuple {
543
558
  /**
559
+ * @public
544
560
  * <p>The part of a web request that you want AWS WAF to search, such as a specified header or a query string. For more information, see
545
561
  * <a>FieldToMatch</a>.</p>
546
562
  */
547
563
  FieldToMatch: FieldToMatch | undefined;
548
564
  /**
565
+ * @public
549
566
  * <p>The value that you want AWS WAF to search for. AWS WAF searches for the specified string in the part of web requests that you
550
567
  * specified in <code>FieldToMatch</code>. The maximum length of the value is 50 bytes.</p>
551
568
  * <p>Valid values depend on the values that you specified for <code>FieldToMatch</code>:</p>
@@ -611,6 +628,7 @@ export interface ByteMatchTuple {
611
628
  */
612
629
  TargetString: Uint8Array | undefined;
613
630
  /**
631
+ * @public
614
632
  * <p>Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass AWS WAF.
615
633
  * If you specify a transformation, AWS WAF performs the transformation on <code>FieldToMatch</code> before inspecting it for a match.</p>
616
634
  * <p>You can only specify a single type of TextTransformation.</p>
@@ -708,6 +726,7 @@ export interface ByteMatchTuple {
708
726
  */
709
727
  TextTransformation: TextTransformation | string | undefined;
710
728
  /**
729
+ * @public
711
730
  * <p>Within the portion of a web request that you want to search (for example, in the query string, if any), specify where you want AWS WAF to search. Valid values include the following:</p>
712
731
  * <p>
713
732
  * <b>CONTAINS</b>
@@ -775,6 +794,7 @@ export interface ByteMatchTuple {
775
794
  */
776
795
  export interface ByteMatchSet {
777
796
  /**
797
+ * @public
778
798
  * <p>The <code>ByteMatchSetId</code> for a <code>ByteMatchSet</code>. You use <code>ByteMatchSetId</code> to get information about a
779
799
  * <code>ByteMatchSet</code> (see <a>GetByteMatchSet</a>), update a <code>ByteMatchSet</code> (see <a>UpdateByteMatchSet</a>),
780
800
  * insert a <code>ByteMatchSet</code> into a <code>Rule</code> or delete one from a <code>Rule</code> (see <a>UpdateRule</a>), and
@@ -784,10 +804,12 @@ export interface ByteMatchSet {
784
804
  */
785
805
  ByteMatchSetId: string | undefined;
786
806
  /**
807
+ * @public
787
808
  * <p>A friendly name or description of the <a>ByteMatchSet</a>. You can't change <code>Name</code> after you create a <code>ByteMatchSet</code>.</p>
788
809
  */
789
810
  Name?: string;
790
811
  /**
812
+ * @public
791
813
  * <p>Specifies the bytes (typically a string that corresponds with ASCII characters) that you want AWS WAF to search for in web requests, the location in requests that you want AWS WAF to search, and other settings.</p>
792
814
  */
793
815
  ByteMatchTuples: ByteMatchTuple[] | undefined;
@@ -797,10 +819,12 @@ export interface ByteMatchSet {
797
819
  */
798
820
  export interface CreateByteMatchSetResponse {
799
821
  /**
822
+ * @public
800
823
  * <p>A <a>ByteMatchSet</a> that contains no <code>ByteMatchTuple</code> objects.</p>
801
824
  */
802
825
  ByteMatchSet?: ByteMatchSet;
803
826
  /**
827
+ * @public
804
828
  * <p>The <code>ChangeToken</code> that you used to submit the <code>CreateByteMatchSet</code> request. You can also use this value
805
829
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
806
830
  */
@@ -849,10 +873,12 @@ export declare class WAFStaleDataException extends __BaseException {
849
873
  */
850
874
  export interface CreateGeoMatchSetRequest {
851
875
  /**
876
+ * @public
852
877
  * <p>A friendly name or description of the <a>GeoMatchSet</a>. You can't change <code>Name</code> after you create the <code>GeoMatchSet</code>.</p>
853
878
  */
854
879
  Name: string | undefined;
855
880
  /**
881
+ * @public
856
882
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
857
883
  */
858
884
  ChangeToken: string | undefined;
@@ -1141,10 +1167,12 @@ export type GeoMatchConstraintValue = (typeof GeoMatchConstraintValue)[keyof typ
1141
1167
  */
1142
1168
  export interface GeoMatchConstraint {
1143
1169
  /**
1170
+ * @public
1144
1171
  * <p>The type of geographical area you want AWS WAF to search for. Currently <code>Country</code> is the only valid value.</p>
1145
1172
  */
1146
1173
  Type: GeoMatchConstraintType | string | undefined;
1147
1174
  /**
1175
+ * @public
1148
1176
  * <p>The country that you want AWS WAF to search for.</p>
1149
1177
  */
1150
1178
  Value: GeoMatchConstraintValue | string | undefined;
@@ -1163,6 +1191,7 @@ export interface GeoMatchConstraint {
1163
1191
  */
1164
1192
  export interface GeoMatchSet {
1165
1193
  /**
1194
+ * @public
1166
1195
  * <p>The <code>GeoMatchSetId</code> for an <code>GeoMatchSet</code>. You use <code>GeoMatchSetId</code> to get information about a
1167
1196
  * <code>GeoMatchSet</code> (see <a>GeoMatchSet</a>), update a <code>GeoMatchSet</code> (see <a>UpdateGeoMatchSet</a>), insert a <code>GeoMatchSet</code> into a <code>Rule</code> or delete one from a <code>Rule</code> (see <a>UpdateRule</a>), and delete a <code>GeoMatchSet</code> from AWS WAF (see <a>DeleteGeoMatchSet</a>).</p>
1168
1197
  * <p>
@@ -1170,10 +1199,12 @@ export interface GeoMatchSet {
1170
1199
  */
1171
1200
  GeoMatchSetId: string | undefined;
1172
1201
  /**
1202
+ * @public
1173
1203
  * <p>A friendly name or description of the <a>GeoMatchSet</a>. You can't change the name of an <code>GeoMatchSet</code> after you create it.</p>
1174
1204
  */
1175
1205
  Name?: string;
1176
1206
  /**
1207
+ * @public
1177
1208
  * <p>An array of <a>GeoMatchConstraint</a> objects, which contain the country that you want AWS WAF to search for.</p>
1178
1209
  */
1179
1210
  GeoMatchConstraints: GeoMatchConstraint[] | undefined;
@@ -1183,10 +1214,12 @@ export interface GeoMatchSet {
1183
1214
  */
1184
1215
  export interface CreateGeoMatchSetResponse {
1185
1216
  /**
1217
+ * @public
1186
1218
  * <p>The <a>GeoMatchSet</a> returned in the <code>CreateGeoMatchSet</code> response. The <code>GeoMatchSet</code> contains no <code>GeoMatchConstraints</code>.</p>
1187
1219
  */
1188
1220
  GeoMatchSet?: GeoMatchSet;
1189
1221
  /**
1222
+ * @public
1190
1223
  * <p>The <code>ChangeToken</code> that you used to submit the <code>CreateGeoMatchSet</code> request. You can also use this value
1191
1224
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
1192
1225
  */
@@ -1197,10 +1230,12 @@ export interface CreateGeoMatchSetResponse {
1197
1230
  */
1198
1231
  export interface CreateIPSetRequest {
1199
1232
  /**
1233
+ * @public
1200
1234
  * <p>A friendly name or description of the <a>IPSet</a>. You can't change <code>Name</code> after you create the <code>IPSet</code>.</p>
1201
1235
  */
1202
1236
  Name: string | undefined;
1203
1237
  /**
1238
+ * @public
1204
1239
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
1205
1240
  */
1206
1241
  ChangeToken: string | undefined;
@@ -1231,10 +1266,12 @@ export type IPSetDescriptorType = (typeof IPSetDescriptorType)[keyof typeof IPSe
1231
1266
  */
1232
1267
  export interface IPSetDescriptor {
1233
1268
  /**
1269
+ * @public
1234
1270
  * <p>Specify <code>IPV4</code> or <code>IPV6</code>.</p>
1235
1271
  */
1236
1272
  Type: IPSetDescriptorType | string | undefined;
1237
1273
  /**
1274
+ * @public
1238
1275
  * <p>Specify an IPv4 address by using CIDR notation. For example:</p>
1239
1276
  * <ul>
1240
1277
  * <li>
@@ -1279,6 +1316,7 @@ export interface IPSetDescriptor {
1279
1316
  */
1280
1317
  export interface IPSet {
1281
1318
  /**
1319
+ * @public
1282
1320
  * <p>The <code>IPSetId</code> for an <code>IPSet</code>. You use <code>IPSetId</code> to get information about an
1283
1321
  * <code>IPSet</code> (see <a>GetIPSet</a>), update an <code>IPSet</code> (see <a>UpdateIPSet</a>),
1284
1322
  * insert an <code>IPSet</code> into a <code>Rule</code> or delete one from a <code>Rule</code> (see <a>UpdateRule</a>), and
@@ -1288,10 +1326,12 @@ export interface IPSet {
1288
1326
  */
1289
1327
  IPSetId: string | undefined;
1290
1328
  /**
1329
+ * @public
1291
1330
  * <p>A friendly name or description of the <a>IPSet</a>. You can't change the name of an <code>IPSet</code> after you create it.</p>
1292
1331
  */
1293
1332
  Name?: string;
1294
1333
  /**
1334
+ * @public
1295
1335
  * <p>The IP address type (<code>IPV4</code> or <code>IPV6</code>) and the IP address range (in CIDR notation) that web requests originate from.
1296
1336
  * If the <code>WebACL</code> is associated with a CloudFront distribution and the viewer did not use an HTTP proxy or a load balancer to send the request, this is the value of the c-ip field in the CloudFront access logs.</p>
1297
1337
  */
@@ -1302,10 +1342,12 @@ export interface IPSet {
1302
1342
  */
1303
1343
  export interface CreateIPSetResponse {
1304
1344
  /**
1345
+ * @public
1305
1346
  * <p>The <a>IPSet</a> returned in the <code>CreateIPSet</code> response.</p>
1306
1347
  */
1307
1348
  IPSet?: IPSet;
1308
1349
  /**
1350
+ * @public
1309
1351
  * <p>The <code>ChangeToken</code> that you used to submit the <code>CreateIPSet</code> request. You can also use this value
1310
1352
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
1311
1353
  */
@@ -1337,10 +1379,12 @@ export type RateKey = (typeof RateKey)[keyof typeof RateKey];
1337
1379
  */
1338
1380
  export interface Tag {
1339
1381
  /**
1382
+ * @public
1340
1383
  * <p></p>
1341
1384
  */
1342
1385
  Key: string | undefined;
1343
1386
  /**
1387
+ * @public
1344
1388
  * <p></p>
1345
1389
  */
1346
1390
  Value: string | undefined;
@@ -1350,11 +1394,13 @@ export interface Tag {
1350
1394
  */
1351
1395
  export interface CreateRateBasedRuleRequest {
1352
1396
  /**
1397
+ * @public
1353
1398
  * <p>A friendly name or description of the <a>RateBasedRule</a>. You can't
1354
1399
  * change the name of a <code>RateBasedRule</code> after you create it.</p>
1355
1400
  */
1356
1401
  Name: string | undefined;
1357
1402
  /**
1403
+ * @public
1358
1404
  * <p>A friendly name or description for the metrics for this <code>RateBasedRule</code>.
1359
1405
  * The name can contain only alphanumeric characters (A-Z, a-z, 0-9), with maximum length 128 and minimum length one. It can't contain
1360
1406
  * whitespace or metric names reserved for AWS WAF, including "All" and "Default_Action." You can't change the name of the metric after you create the
@@ -1362,6 +1408,7 @@ export interface CreateRateBasedRuleRequest {
1362
1408
  */
1363
1409
  MetricName: string | undefined;
1364
1410
  /**
1411
+ * @public
1365
1412
  * <p>The field that AWS WAF uses to determine if requests are likely arriving from a single
1366
1413
  * source and thus subject to rate monitoring. The only valid value for <code>RateKey</code>
1367
1414
  * is <code>IP</code>. <code>IP</code> indicates that requests that arrive from the same IP
@@ -1370,6 +1417,7 @@ export interface CreateRateBasedRuleRequest {
1370
1417
  */
1371
1418
  RateKey: RateKey | string | undefined;
1372
1419
  /**
1420
+ * @public
1373
1421
  * <p>The maximum number of requests, which have an identical value in the field that is
1374
1422
  * specified by <code>RateKey</code>, allowed in a five-minute period. If the number of
1375
1423
  * requests exceeds the <code>RateLimit</code> and the other predicates specified in the rule
@@ -1377,12 +1425,14 @@ export interface CreateRateBasedRuleRequest {
1377
1425
  */
1378
1426
  RateLimit: number | undefined;
1379
1427
  /**
1428
+ * @public
1380
1429
  * <p>The <code>ChangeToken</code> that you used to submit the
1381
1430
  * <code>CreateRateBasedRule</code> request. You can also use this value to query the
1382
1431
  * status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
1383
1432
  */
1384
1433
  ChangeToken: string | undefined;
1385
1434
  /**
1435
+ * @public
1386
1436
  * <p></p>
1387
1437
  */
1388
1438
  Tags?: Tag[];
@@ -1420,6 +1470,7 @@ export type PredicateType = (typeof PredicateType)[keyof typeof PredicateType];
1420
1470
  */
1421
1471
  export interface Predicate {
1422
1472
  /**
1473
+ * @public
1423
1474
  * <p>Set <code>Negated</code> to <code>False</code> if you want AWS WAF to allow, block, or count requests based on the settings in the
1424
1475
  * specified <a>ByteMatchSet</a>, <a>IPSet</a>, <a>SqlInjectionMatchSet</a>, <a>XssMatchSet</a>, <a>RegexMatchSet</a>, <a>GeoMatchSet</a>, or <a>SizeConstraintSet</a>.
1425
1476
  * For example, if an <code>IPSet</code> includes the IP address <code>192.0.2.44</code>, AWS WAF will allow or block requests based on that IP address.</p>
@@ -1431,10 +1482,12 @@ export interface Predicate {
1431
1482
  */
1432
1483
  Negated: boolean | undefined;
1433
1484
  /**
1485
+ * @public
1434
1486
  * <p>The type of predicate in a <code>Rule</code>, such as <code>ByteMatch</code> or <code>IPSet</code>.</p>
1435
1487
  */
1436
1488
  Type: PredicateType | string | undefined;
1437
1489
  /**
1490
+ * @public
1438
1491
  * <p>A unique identifier for a predicate in a <code>Rule</code>, such as <code>ByteMatchSetId</code> or <code>IPSetId</code>.
1439
1492
  * The ID is returned by the corresponding <code>Create</code> or <code>List</code> command.</p>
1440
1493
  */
@@ -1471,29 +1524,34 @@ export interface Predicate {
1471
1524
  */
1472
1525
  export interface RateBasedRule {
1473
1526
  /**
1527
+ * @public
1474
1528
  * <p>A unique identifier for a <code>RateBasedRule</code>. You use <code>RuleId</code> to
1475
1529
  * get more information about a <code>RateBasedRule</code> (see <a>GetRateBasedRule</a>), update a <code>RateBasedRule</code> (see <a>UpdateRateBasedRule</a>), insert a <code>RateBasedRule</code> into a
1476
1530
  * <code>WebACL</code> or delete one from a <code>WebACL</code> (see <a>UpdateWebACL</a>), or delete a <code>RateBasedRule</code> from AWS WAF (see <a>DeleteRateBasedRule</a>).</p>
1477
1531
  */
1478
1532
  RuleId: string | undefined;
1479
1533
  /**
1534
+ * @public
1480
1535
  * <p>A friendly name or description for a <code>RateBasedRule</code>. You can't change the
1481
1536
  * name of a <code>RateBasedRule</code> after you create it.</p>
1482
1537
  */
1483
1538
  Name?: string;
1484
1539
  /**
1540
+ * @public
1485
1541
  * <p>A friendly name or description for the metrics for a <code>RateBasedRule</code>. The name can contain only alphanumeric characters (A-Z, a-z, 0-9), with maximum length 128 and minimum length one. It can't contain
1486
1542
  * whitespace or metric names reserved for AWS WAF, including "All" and "Default_Action." You can't change the name of the metric after you create the
1487
1543
  * <code>RateBasedRule</code>.</p>
1488
1544
  */
1489
1545
  MetricName?: string;
1490
1546
  /**
1547
+ * @public
1491
1548
  * <p>The <code>Predicates</code> object contains one <code>Predicate</code> element for
1492
1549
  * each <a>ByteMatchSet</a>, <a>IPSet</a>, or <a>SqlInjectionMatchSet</a> object that you want to include in a
1493
1550
  * <code>RateBasedRule</code>.</p>
1494
1551
  */
1495
1552
  MatchPredicates: Predicate[] | undefined;
1496
1553
  /**
1554
+ * @public
1497
1555
  * <p>The field that AWS WAF uses to determine if requests are likely arriving from single
1498
1556
  * source and thus subject to rate monitoring. The only valid value for <code>RateKey</code>
1499
1557
  * is <code>IP</code>. <code>IP</code> indicates that requests arriving from the same IP
@@ -1502,6 +1560,7 @@ export interface RateBasedRule {
1502
1560
  */
1503
1561
  RateKey: RateKey | string | undefined;
1504
1562
  /**
1563
+ * @public
1505
1564
  * <p>The maximum number of requests, which have an identical value in the field specified
1506
1565
  * by the <code>RateKey</code>, allowed in a five-minute period. If the number of requests
1507
1566
  * exceeds the <code>RateLimit</code> and the other predicates specified in the rule are also
@@ -1514,11 +1573,13 @@ export interface RateBasedRule {
1514
1573
  */
1515
1574
  export interface CreateRateBasedRuleResponse {
1516
1575
  /**
1576
+ * @public
1517
1577
  * <p>The <a>RateBasedRule</a>
1518
1578
  * that is returned in the <code>CreateRateBasedRule</code> response.</p>
1519
1579
  */
1520
1580
  Rule?: RateBasedRule;
1521
1581
  /**
1582
+ * @public
1522
1583
  * <p>The <code>ChangeToken</code> that you used to submit the
1523
1584
  * <code>CreateRateBasedRule</code> request. You can also use this value to query the
1524
1585
  * status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
@@ -1566,11 +1627,13 @@ export declare class WAFTagOperationInternalErrorException extends __BaseExcepti
1566
1627
  */
1567
1628
  export interface CreateRegexMatchSetRequest {
1568
1629
  /**
1630
+ * @public
1569
1631
  * <p>A friendly name or description of the <a>RegexMatchSet</a>. You can't change <code>Name</code> after you create a
1570
1632
  * <code>RegexMatchSet</code>.</p>
1571
1633
  */
1572
1634
  Name: string | undefined;
1573
1635
  /**
1636
+ * @public
1574
1637
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
1575
1638
  */
1576
1639
  ChangeToken: string | undefined;
@@ -1600,10 +1663,12 @@ export interface CreateRegexMatchSetRequest {
1600
1663
  */
1601
1664
  export interface RegexMatchTuple {
1602
1665
  /**
1666
+ * @public
1603
1667
  * <p>Specifies where in a web request to look for the <code>RegexPatternSet</code>.</p>
1604
1668
  */
1605
1669
  FieldToMatch: FieldToMatch | undefined;
1606
1670
  /**
1671
+ * @public
1607
1672
  * <p>Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass AWS WAF.
1608
1673
  * If you specify a transformation, AWS WAF performs the transformation on <code>RegexPatternSet</code> before inspecting a request for a match.</p>
1609
1674
  * <p>You can only specify a single type of TextTransformation.</p>
@@ -1699,6 +1764,7 @@ export interface RegexMatchTuple {
1699
1764
  */
1700
1765
  TextTransformation: TextTransformation | string | undefined;
1701
1766
  /**
1767
+ * @public
1702
1768
  * <p>The <code>RegexPatternSetId</code> for a <code>RegexPatternSet</code>. You use <code>RegexPatternSetId</code> to get information about a
1703
1769
  * <code>RegexPatternSet</code> (see <a>GetRegexPatternSet</a>), update a <code>RegexPatternSet</code> (see <a>UpdateRegexPatternSet</a>),
1704
1770
  * insert a <code>RegexPatternSet</code> into a <code>RegexMatchSet</code> or delete one from a <code>RegexMatchSet</code> (see <a>UpdateRegexMatchSet</a>), and
@@ -1726,6 +1792,7 @@ export interface RegexMatchTuple {
1726
1792
  */
1727
1793
  export interface RegexMatchSet {
1728
1794
  /**
1795
+ * @public
1729
1796
  * <p>The <code>RegexMatchSetId</code> for a <code>RegexMatchSet</code>. You use <code>RegexMatchSetId</code> to get information about a
1730
1797
  * <code>RegexMatchSet</code> (see <a>GetRegexMatchSet</a>), update a <code>RegexMatchSet</code> (see <a>UpdateRegexMatchSet</a>),
1731
1798
  * insert a <code>RegexMatchSet</code> into a <code>Rule</code> or delete one from a <code>Rule</code> (see <a>UpdateRule</a>), and
@@ -1735,11 +1802,13 @@ export interface RegexMatchSet {
1735
1802
  */
1736
1803
  RegexMatchSetId?: string;
1737
1804
  /**
1805
+ * @public
1738
1806
  * <p>A friendly name or description of the <a>RegexMatchSet</a>. You can't change <code>Name</code> after you create a
1739
1807
  * <code>RegexMatchSet</code>.</p>
1740
1808
  */
1741
1809
  Name?: string;
1742
1810
  /**
1811
+ * @public
1743
1812
  * <p>Contains an array of <a>RegexMatchTuple</a> objects. Each <code>RegexMatchTuple</code>
1744
1813
  * object contains: </p>
1745
1814
  * <ul>
@@ -1761,10 +1830,12 @@ export interface RegexMatchSet {
1761
1830
  */
1762
1831
  export interface CreateRegexMatchSetResponse {
1763
1832
  /**
1833
+ * @public
1764
1834
  * <p>A <a>RegexMatchSet</a> that contains no <code>RegexMatchTuple</code> objects.</p>
1765
1835
  */
1766
1836
  RegexMatchSet?: RegexMatchSet;
1767
1837
  /**
1838
+ * @public
1768
1839
  * <p>The <code>ChangeToken</code> that you used to submit the <code>CreateRegexMatchSet</code> request. You can also use this value
1769
1840
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
1770
1841
  */
@@ -1775,11 +1846,13 @@ export interface CreateRegexMatchSetResponse {
1775
1846
  */
1776
1847
  export interface CreateRegexPatternSetRequest {
1777
1848
  /**
1849
+ * @public
1778
1850
  * <p>A friendly name or description of the <a>RegexPatternSet</a>. You can't change <code>Name</code> after you create a
1779
1851
  * <code>RegexPatternSet</code>.</p>
1780
1852
  */
1781
1853
  Name: string | undefined;
1782
1854
  /**
1855
+ * @public
1783
1856
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
1784
1857
  */
1785
1858
  ChangeToken: string | undefined;
@@ -1798,6 +1871,7 @@ export interface CreateRegexPatternSetRequest {
1798
1871
  */
1799
1872
  export interface RegexPatternSet {
1800
1873
  /**
1874
+ * @public
1801
1875
  * <p>The identifier for the <code>RegexPatternSet</code>. You use <code>RegexPatternSetId</code> to get information about a <code>RegexPatternSet</code>,
1802
1876
  * update a <code>RegexPatternSet</code>, remove a <code>RegexPatternSet</code> from a <code>RegexMatchSet</code>, and delete a <code>RegexPatternSet</code> from AWS WAF.</p>
1803
1877
  * <p>
@@ -1805,10 +1879,12 @@ export interface RegexPatternSet {
1805
1879
  */
1806
1880
  RegexPatternSetId: string | undefined;
1807
1881
  /**
1882
+ * @public
1808
1883
  * <p>A friendly name or description of the <a>RegexPatternSet</a>. You can't change <code>Name</code> after you create a <code>RegexPatternSet</code>.</p>
1809
1884
  */
1810
1885
  Name?: string;
1811
1886
  /**
1887
+ * @public
1812
1888
  * <p>Specifies the regular expression (regex) patterns that you want AWS WAF to search for, such as <code>B[a@]dB[o0]t</code>.</p>
1813
1889
  */
1814
1890
  RegexPatternStrings: string[] | undefined;
@@ -1818,10 +1894,12 @@ export interface RegexPatternSet {
1818
1894
  */
1819
1895
  export interface CreateRegexPatternSetResponse {
1820
1896
  /**
1897
+ * @public
1821
1898
  * <p>A <a>RegexPatternSet</a> that contains no objects.</p>
1822
1899
  */
1823
1900
  RegexPatternSet?: RegexPatternSet;
1824
1901
  /**
1902
+ * @public
1825
1903
  * <p>The <code>ChangeToken</code> that you used to submit the <code>CreateRegexPatternSet</code> request. You can also use this value
1826
1904
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
1827
1905
  */
@@ -1832,20 +1910,24 @@ export interface CreateRegexPatternSetResponse {
1832
1910
  */
1833
1911
  export interface CreateRuleRequest {
1834
1912
  /**
1913
+ * @public
1835
1914
  * <p>A friendly name or description of the <a>Rule</a>. You can't change the name of a <code>Rule</code> after you create it.</p>
1836
1915
  */
1837
1916
  Name: string | undefined;
1838
1917
  /**
1918
+ * @public
1839
1919
  * <p>A friendly name or description for the metrics for this <code>Rule</code>. The name can contain only alphanumeric characters (A-Z, a-z, 0-9), with maximum length 128 and minimum length one. It can't contain
1840
1920
  * whitespace or metric names reserved for AWS WAF, including "All" and "Default_Action." You can't change the name of the metric after you create the
1841
1921
  * <code>Rule</code>.</p>
1842
1922
  */
1843
1923
  MetricName: string | undefined;
1844
1924
  /**
1925
+ * @public
1845
1926
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
1846
1927
  */
1847
1928
  ChangeToken: string | undefined;
1848
1929
  /**
1930
+ * @public
1849
1931
  * <p></p>
1850
1932
  */
1851
1933
  Tags?: Tag[];
@@ -1877,6 +1959,7 @@ export interface CreateRuleRequest {
1877
1959
  */
1878
1960
  export interface Rule {
1879
1961
  /**
1962
+ * @public
1880
1963
  * <p>A unique identifier for a <code>Rule</code>. You use <code>RuleId</code> to get more information about a <code>Rule</code> (see <a>GetRule</a>),
1881
1964
  * update a <code>Rule</code> (see <a>UpdateRule</a>), insert a <code>Rule</code> into a <code>WebACL</code> or delete a
1882
1965
  * one from a <code>WebACL</code> (see <a>UpdateWebACL</a>), or delete a <code>Rule</code> from AWS WAF (see <a>DeleteRule</a>).</p>
@@ -1885,15 +1968,18 @@ export interface Rule {
1885
1968
  */
1886
1969
  RuleId: string | undefined;
1887
1970
  /**
1971
+ * @public
1888
1972
  * <p>The friendly name or description for the <code>Rule</code>. You can't change the name of a <code>Rule</code> after you create it.</p>
1889
1973
  */
1890
1974
  Name?: string;
1891
1975
  /**
1976
+ * @public
1892
1977
  * <p>A friendly name or description for the metrics for this <code>Rule</code>. The name can contain only alphanumeric characters (A-Z, a-z, 0-9), with maximum length 128 and minimum length one. It can't contain
1893
1978
  * whitespace or metric names reserved for AWS WAF, including "All" and "Default_Action." You can't change <code>MetricName</code> after you create the <code>Rule</code>.</p>
1894
1979
  */
1895
1980
  MetricName?: string;
1896
1981
  /**
1982
+ * @public
1897
1983
  * <p>The <code>Predicates</code> object contains one <code>Predicate</code> element for each <a>ByteMatchSet</a>, <a>IPSet</a>, or
1898
1984
  * <a>SqlInjectionMatchSet</a> object that you want to include in a <code>Rule</code>.</p>
1899
1985
  */
@@ -1904,10 +1990,12 @@ export interface Rule {
1904
1990
  */
1905
1991
  export interface CreateRuleResponse {
1906
1992
  /**
1993
+ * @public
1907
1994
  * <p>The <a>Rule</a> returned in the <code>CreateRule</code> response.</p>
1908
1995
  */
1909
1996
  Rule?: Rule;
1910
1997
  /**
1998
+ * @public
1911
1999
  * <p>The <code>ChangeToken</code> that you used to submit the <code>CreateRule</code> request. You can also use this value
1912
2000
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
1913
2001
  */
@@ -1918,20 +2006,24 @@ export interface CreateRuleResponse {
1918
2006
  */
1919
2007
  export interface CreateRuleGroupRequest {
1920
2008
  /**
2009
+ * @public
1921
2010
  * <p>A friendly name or description of the <a>RuleGroup</a>. You can't change <code>Name</code> after you create a
1922
2011
  * <code>RuleGroup</code>.</p>
1923
2012
  */
1924
2013
  Name: string | undefined;
1925
2014
  /**
2015
+ * @public
1926
2016
  * <p>A friendly name or description for the metrics for this <code>RuleGroup</code>. The name can contain only alphanumeric characters (A-Z, a-z, 0-9), with maximum length 128 and minimum length one. It can't contain
1927
2017
  * whitespace or metric names reserved for AWS WAF, including "All" and "Default_Action." You can't change the name of the metric after you create the <code>RuleGroup</code>.</p>
1928
2018
  */
1929
2019
  MetricName: string | undefined;
1930
2020
  /**
2021
+ * @public
1931
2022
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
1932
2023
  */
1933
2024
  ChangeToken: string | undefined;
1934
2025
  /**
2026
+ * @public
1935
2027
  * <p></p>
1936
2028
  */
1937
2029
  Tags?: Tag[];
@@ -1962,6 +2054,7 @@ export interface CreateRuleGroupRequest {
1962
2054
  */
1963
2055
  export interface RuleGroup {
1964
2056
  /**
2057
+ * @public
1965
2058
  * <p>A unique identifier for a <code>RuleGroup</code>. You use <code>RuleGroupId</code> to get more information about a <code>RuleGroup</code> (see <a>GetRuleGroup</a>),
1966
2059
  * update a <code>RuleGroup</code> (see <a>UpdateRuleGroup</a>), insert a <code>RuleGroup</code> into a <code>WebACL</code> or delete a
1967
2060
  * one from a <code>WebACL</code> (see <a>UpdateWebACL</a>), or delete a <code>RuleGroup</code> from AWS WAF (see <a>DeleteRuleGroup</a>).</p>
@@ -1970,10 +2063,12 @@ export interface RuleGroup {
1970
2063
  */
1971
2064
  RuleGroupId: string | undefined;
1972
2065
  /**
2066
+ * @public
1973
2067
  * <p>The friendly name or description for the <code>RuleGroup</code>. You can't change the name of a <code>RuleGroup</code> after you create it.</p>
1974
2068
  */
1975
2069
  Name?: string;
1976
2070
  /**
2071
+ * @public
1977
2072
  * <p>A friendly name or description for the metrics for this <code>RuleGroup</code>. The name can contain only alphanumeric characters (A-Z, a-z, 0-9), with maximum length 128 and minimum length one. It can't contain
1978
2073
  * whitespace or metric names reserved for AWS WAF, including "All" and "Default_Action." You can't change the name of the metric after you create the <code>RuleGroup</code>.</p>
1979
2074
  */
@@ -1984,10 +2079,12 @@ export interface RuleGroup {
1984
2079
  */
1985
2080
  export interface CreateRuleGroupResponse {
1986
2081
  /**
2082
+ * @public
1987
2083
  * <p>An empty <a>RuleGroup</a>.</p>
1988
2084
  */
1989
2085
  RuleGroup?: RuleGroup;
1990
2086
  /**
2087
+ * @public
1991
2088
  * <p>The <code>ChangeToken</code> that you used to submit the <code>CreateRuleGroup</code> request. You can also use this value
1992
2089
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
1993
2090
  */
@@ -1998,11 +2095,13 @@ export interface CreateRuleGroupResponse {
1998
2095
  */
1999
2096
  export interface CreateSizeConstraintSetRequest {
2000
2097
  /**
2098
+ * @public
2001
2099
  * <p>A friendly name or description of the <a>SizeConstraintSet</a>. You can't change <code>Name</code> after you create a
2002
2100
  * <code>SizeConstraintSet</code>.</p>
2003
2101
  */
2004
2102
  Name: string | undefined;
2005
2103
  /**
2104
+ * @public
2006
2105
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
2007
2106
  */
2008
2107
  ChangeToken: string | undefined;
@@ -2040,10 +2139,12 @@ export type ComparisonOperator = (typeof ComparisonOperator)[keyof typeof Compar
2040
2139
  */
2041
2140
  export interface SizeConstraint {
2042
2141
  /**
2142
+ * @public
2043
2143
  * <p>Specifies where in a web request to look for the size constraint.</p>
2044
2144
  */
2045
2145
  FieldToMatch: FieldToMatch | undefined;
2046
2146
  /**
2147
+ * @public
2047
2148
  * <p>Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass AWS WAF.
2048
2149
  * If you specify a transformation, AWS WAF performs the transformation on <code>FieldToMatch</code> before inspecting it for a match.</p>
2049
2150
  * <p>You can only specify a single type of TextTransformation.</p>
@@ -2140,6 +2241,7 @@ export interface SizeConstraint {
2140
2241
  */
2141
2242
  TextTransformation: TextTransformation | string | undefined;
2142
2243
  /**
2244
+ * @public
2143
2245
  * <p>The type of comparison you want AWS WAF to perform. AWS WAF uses this in combination with the provided <code>Size</code> and <code>FieldToMatch</code>
2144
2246
  * to build an expression in the form of "<code>Size</code>
2145
2247
  * <code>ComparisonOperator</code> size in bytes of <code>FieldToMatch</code>". If that expression
@@ -2165,6 +2267,7 @@ export interface SizeConstraint {
2165
2267
  */
2166
2268
  ComparisonOperator: ComparisonOperator | string | undefined;
2167
2269
  /**
2270
+ * @public
2168
2271
  * <p>The size in bytes that you want AWS WAF to compare against the size of the specified <code>FieldToMatch</code>. AWS WAF uses this in combination
2169
2272
  * with <code>ComparisonOperator</code> and <code>FieldToMatch</code> to build an expression in the form of "<code>Size</code>
2170
2273
  * <code>ComparisonOperator</code> size
@@ -2191,6 +2294,7 @@ export interface SizeConstraint {
2191
2294
  */
2192
2295
  export interface SizeConstraintSet {
2193
2296
  /**
2297
+ * @public
2194
2298
  * <p>A unique identifier for a <code>SizeConstraintSet</code>. You use <code>SizeConstraintSetId</code> to get information about a
2195
2299
  * <code>SizeConstraintSet</code> (see <a>GetSizeConstraintSet</a>), update a <code>SizeConstraintSet</code>
2196
2300
  * (see <a>UpdateSizeConstraintSet</a>), insert a <code>SizeConstraintSet</code> into a <code>Rule</code> or
@@ -2201,10 +2305,12 @@ export interface SizeConstraintSet {
2201
2305
  */
2202
2306
  SizeConstraintSetId: string | undefined;
2203
2307
  /**
2308
+ * @public
2204
2309
  * <p>The name, if any, of the <code>SizeConstraintSet</code>.</p>
2205
2310
  */
2206
2311
  Name?: string;
2207
2312
  /**
2313
+ * @public
2208
2314
  * <p>Specifies the parts of web requests that you want to inspect the size of.</p>
2209
2315
  */
2210
2316
  SizeConstraints: SizeConstraint[] | undefined;
@@ -2214,10 +2320,12 @@ export interface SizeConstraintSet {
2214
2320
  */
2215
2321
  export interface CreateSizeConstraintSetResponse {
2216
2322
  /**
2323
+ * @public
2217
2324
  * <p>A <a>SizeConstraintSet</a> that contains no <code>SizeConstraint</code> objects.</p>
2218
2325
  */
2219
2326
  SizeConstraintSet?: SizeConstraintSet;
2220
2327
  /**
2328
+ * @public
2221
2329
  * <p>The <code>ChangeToken</code> that you used to submit the <code>CreateSizeConstraintSet</code> request. You can also use this value
2222
2330
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
2223
2331
  */
@@ -2229,11 +2337,13 @@ export interface CreateSizeConstraintSetResponse {
2229
2337
  */
2230
2338
  export interface CreateSqlInjectionMatchSetRequest {
2231
2339
  /**
2340
+ * @public
2232
2341
  * <p>A friendly name or description for the <a>SqlInjectionMatchSet</a> that you're creating. You can't change <code>Name</code>
2233
2342
  * after you create the <code>SqlInjectionMatchSet</code>.</p>
2234
2343
  */
2235
2344
  Name: string | undefined;
2236
2345
  /**
2346
+ * @public
2237
2347
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
2238
2348
  */
2239
2349
  ChangeToken: string | undefined;
@@ -2252,10 +2362,12 @@ export interface CreateSqlInjectionMatchSetRequest {
2252
2362
  */
2253
2363
  export interface SqlInjectionMatchTuple {
2254
2364
  /**
2365
+ * @public
2255
2366
  * <p>Specifies where in a web request to look for snippets of malicious SQL code.</p>
2256
2367
  */
2257
2368
  FieldToMatch: FieldToMatch | undefined;
2258
2369
  /**
2370
+ * @public
2259
2371
  * <p>Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass AWS WAF.
2260
2372
  * If you specify a transformation, AWS WAF performs the transformation on <code>FieldToMatch</code> before inspecting it for a match.</p>
2261
2373
  * <p>You can only specify a single type of TextTransformation.</p>
@@ -2369,6 +2481,7 @@ export interface SqlInjectionMatchTuple {
2369
2481
  */
2370
2482
  export interface SqlInjectionMatchSet {
2371
2483
  /**
2484
+ * @public
2372
2485
  * <p>A unique identifier for a <code>SqlInjectionMatchSet</code>. You use <code>SqlInjectionMatchSetId</code> to get information about a
2373
2486
  * <code>SqlInjectionMatchSet</code> (see <a>GetSqlInjectionMatchSet</a>), update a <code>SqlInjectionMatchSet</code>
2374
2487
  * (see <a>UpdateSqlInjectionMatchSet</a>), insert a <code>SqlInjectionMatchSet</code> into a <code>Rule</code> or
@@ -2379,10 +2492,12 @@ export interface SqlInjectionMatchSet {
2379
2492
  */
2380
2493
  SqlInjectionMatchSetId: string | undefined;
2381
2494
  /**
2495
+ * @public
2382
2496
  * <p>The name, if any, of the <code>SqlInjectionMatchSet</code>.</p>
2383
2497
  */
2384
2498
  Name?: string;
2385
2499
  /**
2500
+ * @public
2386
2501
  * <p>Specifies the parts of web requests that you want to inspect for snippets of malicious SQL code.</p>
2387
2502
  */
2388
2503
  SqlInjectionMatchTuples: SqlInjectionMatchTuple[] | undefined;
@@ -2393,10 +2508,12 @@ export interface SqlInjectionMatchSet {
2393
2508
  */
2394
2509
  export interface CreateSqlInjectionMatchSetResponse {
2395
2510
  /**
2511
+ * @public
2396
2512
  * <p>A <a>SqlInjectionMatchSet</a>.</p>
2397
2513
  */
2398
2514
  SqlInjectionMatchSet?: SqlInjectionMatchSet;
2399
2515
  /**
2516
+ * @public
2400
2517
  * <p>The <code>ChangeToken</code> that you used to submit the <code>CreateSqlInjectionMatchSet</code> request. You can also use this value
2401
2518
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
2402
2519
  */
@@ -2407,25 +2524,30 @@ export interface CreateSqlInjectionMatchSetResponse {
2407
2524
  */
2408
2525
  export interface CreateWebACLRequest {
2409
2526
  /**
2527
+ * @public
2410
2528
  * <p>A friendly name or description of the <a>WebACL</a>. You can't change <code>Name</code> after you create the <code>WebACL</code>.</p>
2411
2529
  */
2412
2530
  Name: string | undefined;
2413
2531
  /**
2532
+ * @public
2414
2533
  * <p>A friendly name or description for the metrics for this <code>WebACL</code>.The name can contain only alphanumeric characters (A-Z, a-z, 0-9), with maximum length 128 and minimum length one. It can't contain
2415
2534
  * whitespace or metric names reserved for AWS WAF, including "All" and "Default_Action." You can't change <code>MetricName</code> after you create the
2416
2535
  * <code>WebACL</code>.</p>
2417
2536
  */
2418
2537
  MetricName: string | undefined;
2419
2538
  /**
2539
+ * @public
2420
2540
  * <p>The action that you want AWS WAF to take when a request doesn't match the criteria specified in any of the <code>Rule</code>
2421
2541
  * objects that are associated with the <code>WebACL</code>.</p>
2422
2542
  */
2423
2543
  DefaultAction: WafAction | undefined;
2424
2544
  /**
2545
+ * @public
2425
2546
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
2426
2547
  */
2427
2548
  ChangeToken: string | undefined;
2428
2549
  /**
2550
+ * @public
2429
2551
  * <p></p>
2430
2552
  */
2431
2553
  Tags?: Tag[];
@@ -2449,6 +2571,7 @@ export interface CreateWebACLRequest {
2449
2571
  */
2450
2572
  export interface WebACL {
2451
2573
  /**
2574
+ * @public
2452
2575
  * <p>A unique identifier for a <code>WebACL</code>. You use <code>WebACLId</code> to get information about a <code>WebACL</code>
2453
2576
  * (see <a>GetWebACL</a>), update a <code>WebACL</code> (see <a>UpdateWebACL</a>), and delete a <code>WebACL</code> from AWS WAF
2454
2577
  * (see <a>DeleteWebACL</a>).</p>
@@ -2457,25 +2580,30 @@ export interface WebACL {
2457
2580
  */
2458
2581
  WebACLId: string | undefined;
2459
2582
  /**
2583
+ * @public
2460
2584
  * <p>A friendly name or description of the <code>WebACL</code>. You can't change the name of a <code>WebACL</code> after you create it.</p>
2461
2585
  */
2462
2586
  Name?: string;
2463
2587
  /**
2588
+ * @public
2464
2589
  * <p>A friendly name or description for the metrics for this <code>WebACL</code>. The name can contain only alphanumeric characters (A-Z, a-z, 0-9), with maximum length 128 and minimum length one. It can't contain
2465
2590
  * whitespace or metric names reserved for AWS WAF, including "All" and "Default_Action." You can't change <code>MetricName</code> after you create the <code>WebACL</code>.</p>
2466
2591
  */
2467
2592
  MetricName?: string;
2468
2593
  /**
2594
+ * @public
2469
2595
  * <p>The action to perform if none of the <code>Rules</code> contained in the <code>WebACL</code> match. The action is specified by the
2470
2596
  * <a>WafAction</a> object.</p>
2471
2597
  */
2472
2598
  DefaultAction: WafAction | undefined;
2473
2599
  /**
2600
+ * @public
2474
2601
  * <p>An array that contains the action for each <code>Rule</code> in a <code>WebACL</code>, the priority of the <code>Rule</code>,
2475
2602
  * and the ID of the <code>Rule</code>.</p>
2476
2603
  */
2477
2604
  Rules: ActivatedRule[] | undefined;
2478
2605
  /**
2606
+ * @public
2479
2607
  * <p>Tha Amazon Resource Name (ARN) of the web ACL.</p>
2480
2608
  */
2481
2609
  WebACLArn?: string;
@@ -2485,10 +2613,12 @@ export interface WebACL {
2485
2613
  */
2486
2614
  export interface CreateWebACLResponse {
2487
2615
  /**
2616
+ * @public
2488
2617
  * <p>The <a>WebACL</a> returned in the <code>CreateWebACL</code> response.</p>
2489
2618
  */
2490
2619
  WebACL?: WebACL;
2491
2620
  /**
2621
+ * @public
2492
2622
  * <p>The <code>ChangeToken</code> that you used to submit the <code>CreateWebACL</code> request. You can also use this value
2493
2623
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
2494
2624
  */
@@ -2499,10 +2629,12 @@ export interface CreateWebACLResponse {
2499
2629
  */
2500
2630
  export interface CreateWebACLMigrationStackRequest {
2501
2631
  /**
2632
+ * @public
2502
2633
  * <p>The UUID of the WAF Classic web ACL that you want to migrate to WAF v2.</p>
2503
2634
  */
2504
2635
  WebACLId: string | undefined;
2505
2636
  /**
2637
+ * @public
2506
2638
  * <p>The name of the Amazon S3 bucket to store the CloudFormation template in. The S3 bucket must be
2507
2639
  * configured as follows for the migration: </p>
2508
2640
  * <ul>
@@ -2520,6 +2652,7 @@ export interface CreateWebACLMigrationStackRequest {
2520
2652
  */
2521
2653
  S3BucketName: string | undefined;
2522
2654
  /**
2655
+ * @public
2523
2656
  * <p>Indicates whether to exclude entities that can't be migrated or to stop the migration.
2524
2657
  * Set this to true to ignore unsupported entities in the web ACL during the migration. Otherwise, if AWS WAF encounters unsupported
2525
2658
  * entities, it stops the process and throws an exception. </p>
@@ -2531,6 +2664,7 @@ export interface CreateWebACLMigrationStackRequest {
2531
2664
  */
2532
2665
  export interface CreateWebACLMigrationStackResponse {
2533
2666
  /**
2667
+ * @public
2534
2668
  * <p>The URL of the template created in Amazon S3. </p>
2535
2669
  */
2536
2670
  S3ObjectUrl: string | undefined;
@@ -2634,11 +2768,13 @@ export declare class WAFInvalidOperationException extends __BaseException {
2634
2768
  */
2635
2769
  export interface CreateXssMatchSetRequest {
2636
2770
  /**
2771
+ * @public
2637
2772
  * <p>A friendly name or description for the <a>XssMatchSet</a> that you're creating. You can't change <code>Name</code>
2638
2773
  * after you create the <code>XssMatchSet</code>.</p>
2639
2774
  */
2640
2775
  Name: string | undefined;
2641
2776
  /**
2777
+ * @public
2642
2778
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
2643
2779
  */
2644
2780
  ChangeToken: string | undefined;
@@ -2657,10 +2793,12 @@ export interface CreateXssMatchSetRequest {
2657
2793
  */
2658
2794
  export interface XssMatchTuple {
2659
2795
  /**
2796
+ * @public
2660
2797
  * <p>Specifies where in a web request to look for cross-site scripting attacks.</p>
2661
2798
  */
2662
2799
  FieldToMatch: FieldToMatch | undefined;
2663
2800
  /**
2801
+ * @public
2664
2802
  * <p>Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass AWS WAF.
2665
2803
  * If you specify a transformation, AWS WAF performs the transformation on <code>FieldToMatch</code> before inspecting it for a match.</p>
2666
2804
  * <p>You can only specify a single type of TextTransformation.</p>
@@ -2774,6 +2912,7 @@ export interface XssMatchTuple {
2774
2912
  */
2775
2913
  export interface XssMatchSet {
2776
2914
  /**
2915
+ * @public
2777
2916
  * <p>A unique identifier for an <code>XssMatchSet</code>. You use <code>XssMatchSetId</code> to get information about an
2778
2917
  * <code>XssMatchSet</code> (see <a>GetXssMatchSet</a>), update an <code>XssMatchSet</code>
2779
2918
  * (see <a>UpdateXssMatchSet</a>), insert an <code>XssMatchSet</code> into a <code>Rule</code> or
@@ -2784,10 +2923,12 @@ export interface XssMatchSet {
2784
2923
  */
2785
2924
  XssMatchSetId: string | undefined;
2786
2925
  /**
2926
+ * @public
2787
2927
  * <p>The name, if any, of the <code>XssMatchSet</code>.</p>
2788
2928
  */
2789
2929
  Name?: string;
2790
2930
  /**
2931
+ * @public
2791
2932
  * <p>Specifies the parts of web requests that you want to inspect for cross-site scripting attacks.</p>
2792
2933
  */
2793
2934
  XssMatchTuples: XssMatchTuple[] | undefined;
@@ -2798,10 +2939,12 @@ export interface XssMatchSet {
2798
2939
  */
2799
2940
  export interface CreateXssMatchSetResponse {
2800
2941
  /**
2942
+ * @public
2801
2943
  * <p>An <a>XssMatchSet</a>.</p>
2802
2944
  */
2803
2945
  XssMatchSet?: XssMatchSet;
2804
2946
  /**
2947
+ * @public
2805
2948
  * <p>The <code>ChangeToken</code> that you used to submit the <code>CreateXssMatchSet</code> request. You can also use this value
2806
2949
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
2807
2950
  */
@@ -2812,11 +2955,13 @@ export interface CreateXssMatchSetResponse {
2812
2955
  */
2813
2956
  export interface DeleteByteMatchSetRequest {
2814
2957
  /**
2958
+ * @public
2815
2959
  * <p>The <code>ByteMatchSetId</code> of the <a>ByteMatchSet</a> that you want to delete. <code>ByteMatchSetId</code> is returned by <a>CreateByteMatchSet</a> and by
2816
2960
  * <a>ListByteMatchSets</a>.</p>
2817
2961
  */
2818
2962
  ByteMatchSetId: string | undefined;
2819
2963
  /**
2964
+ * @public
2820
2965
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
2821
2966
  */
2822
2967
  ChangeToken: string | undefined;
@@ -2826,6 +2971,7 @@ export interface DeleteByteMatchSetRequest {
2826
2971
  */
2827
2972
  export interface DeleteByteMatchSetResponse {
2828
2973
  /**
2974
+ * @public
2829
2975
  * <p>The <code>ChangeToken</code> that you used to submit the <code>DeleteByteMatchSet</code> request. You can also use this value
2830
2976
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
2831
2977
  */
@@ -2883,11 +3029,13 @@ export declare class WAFReferencedItemException extends __BaseException {
2883
3029
  */
2884
3030
  export interface DeleteGeoMatchSetRequest {
2885
3031
  /**
3032
+ * @public
2886
3033
  * <p>The <code>GeoMatchSetID</code> of the <a>GeoMatchSet</a> that you want to delete. <code>GeoMatchSetId</code> is returned by <a>CreateGeoMatchSet</a> and by
2887
3034
  * <a>ListGeoMatchSets</a>.</p>
2888
3035
  */
2889
3036
  GeoMatchSetId: string | undefined;
2890
3037
  /**
3038
+ * @public
2891
3039
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
2892
3040
  */
2893
3041
  ChangeToken: string | undefined;
@@ -2897,6 +3045,7 @@ export interface DeleteGeoMatchSetRequest {
2897
3045
  */
2898
3046
  export interface DeleteGeoMatchSetResponse {
2899
3047
  /**
3048
+ * @public
2900
3049
  * <p>The <code>ChangeToken</code> that you used to submit the <code>DeleteGeoMatchSet</code> request. You can also use this value
2901
3050
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
2902
3051
  */
@@ -2907,11 +3056,13 @@ export interface DeleteGeoMatchSetResponse {
2907
3056
  */
2908
3057
  export interface DeleteIPSetRequest {
2909
3058
  /**
3059
+ * @public
2910
3060
  * <p>The <code>IPSetId</code> of the <a>IPSet</a> that you want to delete. <code>IPSetId</code> is returned by <a>CreateIPSet</a> and by
2911
3061
  * <a>ListIPSets</a>.</p>
2912
3062
  */
2913
3063
  IPSetId: string | undefined;
2914
3064
  /**
3065
+ * @public
2915
3066
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
2916
3067
  */
2917
3068
  ChangeToken: string | undefined;
@@ -2921,6 +3072,7 @@ export interface DeleteIPSetRequest {
2921
3072
  */
2922
3073
  export interface DeleteIPSetResponse {
2923
3074
  /**
3075
+ * @public
2924
3076
  * <p>The <code>ChangeToken</code> that you used to submit the <code>DeleteIPSet</code> request. You can also use this value
2925
3077
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
2926
3078
  */
@@ -2931,6 +3083,7 @@ export interface DeleteIPSetResponse {
2931
3083
  */
2932
3084
  export interface DeleteLoggingConfigurationRequest {
2933
3085
  /**
3086
+ * @public
2934
3087
  * <p>The Amazon Resource Name (ARN) of the web ACL from which you want to delete the <a>LoggingConfiguration</a>.</p>
2935
3088
  */
2936
3089
  ResourceArn: string | undefined;
@@ -2945,6 +3098,7 @@ export interface DeleteLoggingConfigurationResponse {
2945
3098
  */
2946
3099
  export interface DeletePermissionPolicyRequest {
2947
3100
  /**
3101
+ * @public
2948
3102
  * <p>The Amazon Resource Name (ARN) of the RuleGroup from which you want to delete the policy.</p>
2949
3103
  * <p>The user making the request must be the owner of the RuleGroup.</p>
2950
3104
  */
@@ -2960,12 +3114,14 @@ export interface DeletePermissionPolicyResponse {
2960
3114
  */
2961
3115
  export interface DeleteRateBasedRuleRequest {
2962
3116
  /**
3117
+ * @public
2963
3118
  * <p>The <code>RuleId</code> of the <a>RateBasedRule</a> that you want to
2964
3119
  * delete. <code>RuleId</code> is returned by <a>CreateRateBasedRule</a> and by
2965
3120
  * <a>ListRateBasedRules</a>.</p>
2966
3121
  */
2967
3122
  RuleId: string | undefined;
2968
3123
  /**
3124
+ * @public
2969
3125
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
2970
3126
  */
2971
3127
  ChangeToken: string | undefined;
@@ -2975,6 +3131,7 @@ export interface DeleteRateBasedRuleRequest {
2975
3131
  */
2976
3132
  export interface DeleteRateBasedRuleResponse {
2977
3133
  /**
3134
+ * @public
2978
3135
  * <p>The <code>ChangeToken</code> that you used to submit the
2979
3136
  * <code>DeleteRateBasedRule</code> request. You can also use this value to query the
2980
3137
  * status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
@@ -2986,11 +3143,13 @@ export interface DeleteRateBasedRuleResponse {
2986
3143
  */
2987
3144
  export interface DeleteRegexMatchSetRequest {
2988
3145
  /**
3146
+ * @public
2989
3147
  * <p>The <code>RegexMatchSetId</code> of the <a>RegexMatchSet</a> that you want to delete. <code>RegexMatchSetId</code> is returned by <a>CreateRegexMatchSet</a> and by
2990
3148
  * <a>ListRegexMatchSets</a>.</p>
2991
3149
  */
2992
3150
  RegexMatchSetId: string | undefined;
2993
3151
  /**
3152
+ * @public
2994
3153
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
2995
3154
  */
2996
3155
  ChangeToken: string | undefined;
@@ -3000,6 +3159,7 @@ export interface DeleteRegexMatchSetRequest {
3000
3159
  */
3001
3160
  export interface DeleteRegexMatchSetResponse {
3002
3161
  /**
3162
+ * @public
3003
3163
  * <p>The <code>ChangeToken</code> that you used to submit the <code>DeleteRegexMatchSet</code> request. You can also use this value
3004
3164
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
3005
3165
  */
@@ -3010,11 +3170,13 @@ export interface DeleteRegexMatchSetResponse {
3010
3170
  */
3011
3171
  export interface DeleteRegexPatternSetRequest {
3012
3172
  /**
3173
+ * @public
3013
3174
  * <p>The <code>RegexPatternSetId</code> of the <a>RegexPatternSet</a> that you want to delete. <code>RegexPatternSetId</code> is returned by <a>CreateRegexPatternSet</a> and by
3014
3175
  * <a>ListRegexPatternSets</a>.</p>
3015
3176
  */
3016
3177
  RegexPatternSetId: string | undefined;
3017
3178
  /**
3179
+ * @public
3018
3180
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
3019
3181
  */
3020
3182
  ChangeToken: string | undefined;
@@ -3024,6 +3186,7 @@ export interface DeleteRegexPatternSetRequest {
3024
3186
  */
3025
3187
  export interface DeleteRegexPatternSetResponse {
3026
3188
  /**
3189
+ * @public
3027
3190
  * <p>The <code>ChangeToken</code> that you used to submit the <code>DeleteRegexPatternSet</code> request. You can also use this value
3028
3191
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
3029
3192
  */
@@ -3034,11 +3197,13 @@ export interface DeleteRegexPatternSetResponse {
3034
3197
  */
3035
3198
  export interface DeleteRuleRequest {
3036
3199
  /**
3200
+ * @public
3037
3201
  * <p>The <code>RuleId</code> of the <a>Rule</a> that you want to delete. <code>RuleId</code> is returned by <a>CreateRule</a> and by
3038
3202
  * <a>ListRules</a>.</p>
3039
3203
  */
3040
3204
  RuleId: string | undefined;
3041
3205
  /**
3206
+ * @public
3042
3207
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
3043
3208
  */
3044
3209
  ChangeToken: string | undefined;
@@ -3048,6 +3213,7 @@ export interface DeleteRuleRequest {
3048
3213
  */
3049
3214
  export interface DeleteRuleResponse {
3050
3215
  /**
3216
+ * @public
3051
3217
  * <p>The <code>ChangeToken</code> that you used to submit the <code>DeleteRule</code> request. You can also use this value
3052
3218
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
3053
3219
  */
@@ -3058,11 +3224,13 @@ export interface DeleteRuleResponse {
3058
3224
  */
3059
3225
  export interface DeleteRuleGroupRequest {
3060
3226
  /**
3227
+ * @public
3061
3228
  * <p>The <code>RuleGroupId</code> of the <a>RuleGroup</a> that you want to delete. <code>RuleGroupId</code> is returned by <a>CreateRuleGroup</a> and by
3062
3229
  * <a>ListRuleGroups</a>.</p>
3063
3230
  */
3064
3231
  RuleGroupId: string | undefined;
3065
3232
  /**
3233
+ * @public
3066
3234
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
3067
3235
  */
3068
3236
  ChangeToken: string | undefined;
@@ -3072,6 +3240,7 @@ export interface DeleteRuleGroupRequest {
3072
3240
  */
3073
3241
  export interface DeleteRuleGroupResponse {
3074
3242
  /**
3243
+ * @public
3075
3244
  * <p>The <code>ChangeToken</code> that you used to submit the <code>DeleteRuleGroup</code> request. You can also use this value
3076
3245
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
3077
3246
  */
@@ -3082,11 +3251,13 @@ export interface DeleteRuleGroupResponse {
3082
3251
  */
3083
3252
  export interface DeleteSizeConstraintSetRequest {
3084
3253
  /**
3254
+ * @public
3085
3255
  * <p>The <code>SizeConstraintSetId</code> of the <a>SizeConstraintSet</a> that you want to delete. <code>SizeConstraintSetId</code>
3086
3256
  * is returned by <a>CreateSizeConstraintSet</a> and by <a>ListSizeConstraintSets</a>.</p>
3087
3257
  */
3088
3258
  SizeConstraintSetId: string | undefined;
3089
3259
  /**
3260
+ * @public
3090
3261
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
3091
3262
  */
3092
3263
  ChangeToken: string | undefined;
@@ -3096,6 +3267,7 @@ export interface DeleteSizeConstraintSetRequest {
3096
3267
  */
3097
3268
  export interface DeleteSizeConstraintSetResponse {
3098
3269
  /**
3270
+ * @public
3099
3271
  * <p>The <code>ChangeToken</code> that you used to submit the <code>DeleteSizeConstraintSet</code> request. You can also use this value
3100
3272
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
3101
3273
  */
@@ -3107,11 +3279,13 @@ export interface DeleteSizeConstraintSetResponse {
3107
3279
  */
3108
3280
  export interface DeleteSqlInjectionMatchSetRequest {
3109
3281
  /**
3282
+ * @public
3110
3283
  * <p>The <code>SqlInjectionMatchSetId</code> of the <a>SqlInjectionMatchSet</a> that you want to delete.
3111
3284
  * <code>SqlInjectionMatchSetId</code> is returned by <a>CreateSqlInjectionMatchSet</a> and by <a>ListSqlInjectionMatchSets</a>.</p>
3112
3285
  */
3113
3286
  SqlInjectionMatchSetId: string | undefined;
3114
3287
  /**
3288
+ * @public
3115
3289
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
3116
3290
  */
3117
3291
  ChangeToken: string | undefined;
@@ -3122,6 +3296,7 @@ export interface DeleteSqlInjectionMatchSetRequest {
3122
3296
  */
3123
3297
  export interface DeleteSqlInjectionMatchSetResponse {
3124
3298
  /**
3299
+ * @public
3125
3300
  * <p>The <code>ChangeToken</code> that you used to submit the <code>DeleteSqlInjectionMatchSet</code> request. You can also use this value
3126
3301
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
3127
3302
  */
@@ -3132,11 +3307,13 @@ export interface DeleteSqlInjectionMatchSetResponse {
3132
3307
  */
3133
3308
  export interface DeleteWebACLRequest {
3134
3309
  /**
3310
+ * @public
3135
3311
  * <p>The <code>WebACLId</code> of the <a>WebACL</a> that you want to delete. <code>WebACLId</code> is returned by <a>CreateWebACL</a> and by
3136
3312
  * <a>ListWebACLs</a>.</p>
3137
3313
  */
3138
3314
  WebACLId: string | undefined;
3139
3315
  /**
3316
+ * @public
3140
3317
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
3141
3318
  */
3142
3319
  ChangeToken: string | undefined;
@@ -3146,6 +3323,7 @@ export interface DeleteWebACLRequest {
3146
3323
  */
3147
3324
  export interface DeleteWebACLResponse {
3148
3325
  /**
3326
+ * @public
3149
3327
  * <p>The <code>ChangeToken</code> that you used to submit the <code>DeleteWebACL</code> request. You can also use this value
3150
3328
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
3151
3329
  */
@@ -3157,11 +3335,13 @@ export interface DeleteWebACLResponse {
3157
3335
  */
3158
3336
  export interface DeleteXssMatchSetRequest {
3159
3337
  /**
3338
+ * @public
3160
3339
  * <p>The <code>XssMatchSetId</code> of the <a>XssMatchSet</a> that you want to delete.
3161
3340
  * <code>XssMatchSetId</code> is returned by <a>CreateXssMatchSet</a> and by <a>ListXssMatchSets</a>.</p>
3162
3341
  */
3163
3342
  XssMatchSetId: string | undefined;
3164
3343
  /**
3344
+ * @public
3165
3345
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
3166
3346
  */
3167
3347
  ChangeToken: string | undefined;
@@ -3172,6 +3352,7 @@ export interface DeleteXssMatchSetRequest {
3172
3352
  */
3173
3353
  export interface DeleteXssMatchSetResponse {
3174
3354
  /**
3355
+ * @public
3175
3356
  * <p>The <code>ChangeToken</code> that you used to submit the <code>DeleteXssMatchSet</code> request. You can also use this value
3176
3357
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
3177
3358
  */
@@ -3182,6 +3363,7 @@ export interface DeleteXssMatchSetResponse {
3182
3363
  */
3183
3364
  export interface DisassociateWebACLRequest {
3184
3365
  /**
3366
+ * @public
3185
3367
  * <p>The ARN (Amazon Resource Name) of the resource from which the web ACL is being removed, either an application load balancer or Amazon API Gateway stage.</p>
3186
3368
  * <p>The ARN should be in one of the following formats:</p>
3187
3369
  * <ul>
@@ -3209,6 +3391,7 @@ export interface DisassociateWebACLResponse {
3209
3391
  */
3210
3392
  export interface GetByteMatchSetRequest {
3211
3393
  /**
3394
+ * @public
3212
3395
  * <p>The <code>ByteMatchSetId</code> of the <a>ByteMatchSet</a> that you want to get. <code>ByteMatchSetId</code> is returned by
3213
3396
  * <a>CreateByteMatchSet</a> and by <a>ListByteMatchSets</a>.</p>
3214
3397
  */
@@ -3219,6 +3402,7 @@ export interface GetByteMatchSetRequest {
3219
3402
  */
3220
3403
  export interface GetByteMatchSetResponse {
3221
3404
  /**
3405
+ * @public
3222
3406
  * <p>Information about the <a>ByteMatchSet</a> that you specified in the <code>GetByteMatchSet</code> request. For more information, see the
3223
3407
  * following topics:</p>
3224
3408
  * <ul>
@@ -3253,6 +3437,7 @@ export interface GetChangeTokenRequest {
3253
3437
  */
3254
3438
  export interface GetChangeTokenResponse {
3255
3439
  /**
3440
+ * @public
3256
3441
  * <p>The <code>ChangeToken</code> that you used in the request. Use this value in a <code>GetChangeTokenStatus</code> request
3257
3442
  * to get the current status of the request. </p>
3258
3443
  */
@@ -3263,6 +3448,7 @@ export interface GetChangeTokenResponse {
3263
3448
  */
3264
3449
  export interface GetChangeTokenStatusRequest {
3265
3450
  /**
3451
+ * @public
3266
3452
  * <p>The change token for which you want to get the status. This change token was previously returned in the <code>GetChangeToken</code> response.</p>
3267
3453
  */
3268
3454
  ChangeToken: string | undefined;
@@ -3285,6 +3471,7 @@ export type ChangeTokenStatus = (typeof ChangeTokenStatus)[keyof typeof ChangeTo
3285
3471
  */
3286
3472
  export interface GetChangeTokenStatusResponse {
3287
3473
  /**
3474
+ * @public
3288
3475
  * <p>The status of the change token.</p>
3289
3476
  */
3290
3477
  ChangeTokenStatus?: ChangeTokenStatus | string;
@@ -3294,6 +3481,7 @@ export interface GetChangeTokenStatusResponse {
3294
3481
  */
3295
3482
  export interface GetGeoMatchSetRequest {
3296
3483
  /**
3484
+ * @public
3297
3485
  * <p>The <code>GeoMatchSetId</code> of the <a>GeoMatchSet</a> that you want to get. <code>GeoMatchSetId</code> is returned by <a>CreateGeoMatchSet</a> and by
3298
3486
  * <a>ListGeoMatchSets</a>.</p>
3299
3487
  */
@@ -3304,6 +3492,7 @@ export interface GetGeoMatchSetRequest {
3304
3492
  */
3305
3493
  export interface GetGeoMatchSetResponse {
3306
3494
  /**
3495
+ * @public
3307
3496
  * <p>Information about the <a>GeoMatchSet</a> that you specified in the <code>GetGeoMatchSet</code> request. This includes the <code>Type</code>, which for a <code>GeoMatchContraint</code> is always <code>Country</code>, as well as the <code>Value</code>, which is the identifier for a specific country.</p>
3308
3497
  */
3309
3498
  GeoMatchSet?: GeoMatchSet;
@@ -3313,6 +3502,7 @@ export interface GetGeoMatchSetResponse {
3313
3502
  */
3314
3503
  export interface GetIPSetRequest {
3315
3504
  /**
3505
+ * @public
3316
3506
  * <p>The <code>IPSetId</code> of the <a>IPSet</a> that you want to get. <code>IPSetId</code> is returned by <a>CreateIPSet</a> and by
3317
3507
  * <a>ListIPSets</a>.</p>
3318
3508
  */
@@ -3323,6 +3513,7 @@ export interface GetIPSetRequest {
3323
3513
  */
3324
3514
  export interface GetIPSetResponse {
3325
3515
  /**
3516
+ * @public
3326
3517
  * <p>Information about the <a>IPSet</a> that you specified in the <code>GetIPSet</code> request. For more information, see the
3327
3518
  * following topics:</p>
3328
3519
  * <ul>
@@ -3346,6 +3537,7 @@ export interface GetIPSetResponse {
3346
3537
  */
3347
3538
  export interface GetLoggingConfigurationRequest {
3348
3539
  /**
3540
+ * @public
3349
3541
  * <p>The Amazon Resource Name (ARN) of the web ACL for which you want to get the <a>LoggingConfiguration</a>.</p>
3350
3542
  */
3351
3543
  ResourceArn: string | undefined;
@@ -3365,15 +3557,18 @@ export interface GetLoggingConfigurationRequest {
3365
3557
  */
3366
3558
  export interface LoggingConfiguration {
3367
3559
  /**
3560
+ * @public
3368
3561
  * <p>The Amazon Resource Name (ARN) of the web ACL that you want to associate with
3369
3562
  * <code>LogDestinationConfigs</code>.</p>
3370
3563
  */
3371
3564
  ResourceArn: string | undefined;
3372
3565
  /**
3566
+ * @public
3373
3567
  * <p>An array of Amazon Kinesis Data Firehose ARNs.</p>
3374
3568
  */
3375
3569
  LogDestinationConfigs: string[] | undefined;
3376
3570
  /**
3571
+ * @public
3377
3572
  * <p>The parts of the request that you want redacted from the logs. For
3378
3573
  * example,
3379
3574
  * if you redact the cookie field, the cookie field in the firehose will be
@@ -3386,6 +3581,7 @@ export interface LoggingConfiguration {
3386
3581
  */
3387
3582
  export interface GetLoggingConfigurationResponse {
3388
3583
  /**
3584
+ * @public
3389
3585
  * <p>The <a>LoggingConfiguration</a> for the specified web ACL.</p>
3390
3586
  */
3391
3587
  LoggingConfiguration?: LoggingConfiguration;
@@ -3395,6 +3591,7 @@ export interface GetLoggingConfigurationResponse {
3395
3591
  */
3396
3592
  export interface GetPermissionPolicyRequest {
3397
3593
  /**
3594
+ * @public
3398
3595
  * <p>The Amazon Resource Name (ARN) of the RuleGroup for which you want to get the policy.</p>
3399
3596
  */
3400
3597
  ResourceArn: string | undefined;
@@ -3404,6 +3601,7 @@ export interface GetPermissionPolicyRequest {
3404
3601
  */
3405
3602
  export interface GetPermissionPolicyResponse {
3406
3603
  /**
3604
+ * @public
3407
3605
  * <p>The IAM policy attached to the specified RuleGroup.</p>
3408
3606
  */
3409
3607
  Policy?: string;
@@ -3413,6 +3611,7 @@ export interface GetPermissionPolicyResponse {
3413
3611
  */
3414
3612
  export interface GetRateBasedRuleRequest {
3415
3613
  /**
3614
+ * @public
3416
3615
  * <p>The <code>RuleId</code> of the <a>RateBasedRule</a> that you want to get.
3417
3616
  * <code>RuleId</code> is returned by <a>CreateRateBasedRule</a> and by <a>ListRateBasedRules</a>.</p>
3418
3617
  */
@@ -3423,6 +3622,7 @@ export interface GetRateBasedRuleRequest {
3423
3622
  */
3424
3623
  export interface GetRateBasedRuleResponse {
3425
3624
  /**
3625
+ * @public
3426
3626
  * <p>Information about the <a>RateBasedRule</a> that you specified in the
3427
3627
  * <code>GetRateBasedRule</code> request.</p>
3428
3628
  */
@@ -3433,11 +3633,13 @@ export interface GetRateBasedRuleResponse {
3433
3633
  */
3434
3634
  export interface GetRateBasedRuleManagedKeysRequest {
3435
3635
  /**
3636
+ * @public
3436
3637
  * <p>The <code>RuleId</code> of the <a>RateBasedRule</a> for which you want to
3437
3638
  * get a list of <code>ManagedKeys</code>. <code>RuleId</code> is returned by <a>CreateRateBasedRule</a> and by <a>ListRateBasedRules</a>.</p>
3438
3639
  */
3439
3640
  RuleId: string | undefined;
3440
3641
  /**
3642
+ * @public
3441
3643
  * <p>A null value and not currently used. Do not include this in your request.</p>
3442
3644
  */
3443
3645
  NextMarker?: string;
@@ -3447,10 +3649,12 @@ export interface GetRateBasedRuleManagedKeysRequest {
3447
3649
  */
3448
3650
  export interface GetRateBasedRuleManagedKeysResponse {
3449
3651
  /**
3652
+ * @public
3450
3653
  * <p>An array of IP addresses that currently are blocked by the specified <a>RateBasedRule</a>. </p>
3451
3654
  */
3452
3655
  ManagedKeys?: string[];
3453
3656
  /**
3657
+ * @public
3454
3658
  * <p>A null value and not currently used.</p>
3455
3659
  */
3456
3660
  NextMarker?: string;
@@ -3460,6 +3664,7 @@ export interface GetRateBasedRuleManagedKeysResponse {
3460
3664
  */
3461
3665
  export interface GetRegexMatchSetRequest {
3462
3666
  /**
3667
+ * @public
3463
3668
  * <p>The <code>RegexMatchSetId</code> of the <a>RegexMatchSet</a> that you want to get. <code>RegexMatchSetId</code> is returned by
3464
3669
  * <a>CreateRegexMatchSet</a> and by <a>ListRegexMatchSets</a>.</p>
3465
3670
  */
@@ -3470,6 +3675,7 @@ export interface GetRegexMatchSetRequest {
3470
3675
  */
3471
3676
  export interface GetRegexMatchSetResponse {
3472
3677
  /**
3678
+ * @public
3473
3679
  * <p>Information about the <a>RegexMatchSet</a> that you specified in the <code>GetRegexMatchSet</code> request. For more information, see <a>RegexMatchTuple</a>.</p>
3474
3680
  */
3475
3681
  RegexMatchSet?: RegexMatchSet;
@@ -3479,6 +3685,7 @@ export interface GetRegexMatchSetResponse {
3479
3685
  */
3480
3686
  export interface GetRegexPatternSetRequest {
3481
3687
  /**
3688
+ * @public
3482
3689
  * <p>The <code>RegexPatternSetId</code> of the <a>RegexPatternSet</a> that you want to get. <code>RegexPatternSetId</code> is returned by
3483
3690
  * <a>CreateRegexPatternSet</a> and by <a>ListRegexPatternSets</a>.</p>
3484
3691
  */
@@ -3489,6 +3696,7 @@ export interface GetRegexPatternSetRequest {
3489
3696
  */
3490
3697
  export interface GetRegexPatternSetResponse {
3491
3698
  /**
3699
+ * @public
3492
3700
  * <p>Information about the <a>RegexPatternSet</a> that you specified in the <code>GetRegexPatternSet</code> request, including the identifier of the pattern set and the regular expression patterns you want AWS WAF to search for. </p>
3493
3701
  */
3494
3702
  RegexPatternSet?: RegexPatternSet;
@@ -3498,6 +3706,7 @@ export interface GetRegexPatternSetResponse {
3498
3706
  */
3499
3707
  export interface GetRuleRequest {
3500
3708
  /**
3709
+ * @public
3501
3710
  * <p>The <code>RuleId</code> of the <a>Rule</a> that you want to get. <code>RuleId</code> is returned by <a>CreateRule</a> and by
3502
3711
  * <a>ListRules</a>.</p>
3503
3712
  */
@@ -3508,6 +3717,7 @@ export interface GetRuleRequest {
3508
3717
  */
3509
3718
  export interface GetRuleResponse {
3510
3719
  /**
3720
+ * @public
3511
3721
  * <p>Information about the <a>Rule</a> that you specified in the <code>GetRule</code> request.
3512
3722
  * For more information, see the following topics:</p>
3513
3723
  * <ul>
@@ -3532,6 +3742,7 @@ export interface GetRuleResponse {
3532
3742
  */
3533
3743
  export interface GetRuleGroupRequest {
3534
3744
  /**
3745
+ * @public
3535
3746
  * <p>The <code>RuleGroupId</code> of the <a>RuleGroup</a> that you want to get. <code>RuleGroupId</code> is returned by <a>CreateRuleGroup</a> and by
3536
3747
  * <a>ListRuleGroups</a>.</p>
3537
3748
  */
@@ -3542,6 +3753,7 @@ export interface GetRuleGroupRequest {
3542
3753
  */
3543
3754
  export interface GetRuleGroupResponse {
3544
3755
  /**
3756
+ * @public
3545
3757
  * <p>Information about the <a>RuleGroup</a> that you specified in the <code>GetRuleGroup</code> request. </p>
3546
3758
  */
3547
3759
  RuleGroup?: RuleGroup;
@@ -3568,6 +3780,7 @@ export interface GetRuleGroupResponse {
3568
3780
  */
3569
3781
  export interface TimeWindow {
3570
3782
  /**
3783
+ * @public
3571
3784
  * <p>The beginning of the time range from which you want <code>GetSampledRequests</code> to return a sample of the
3572
3785
  * requests that your AWS resource received. You must specify the date and time in Coordinated Universal Time (UTC) format.
3573
3786
  * UTC format includes the special designator, <code>Z</code>. For example, <code>"2016-09-27T14:50Z"</code>.
@@ -3575,6 +3788,7 @@ export interface TimeWindow {
3575
3788
  */
3576
3789
  StartTime: Date | undefined;
3577
3790
  /**
3791
+ * @public
3578
3792
  * <p>The end of the time range from which you want <code>GetSampledRequests</code> to return a sample of the
3579
3793
  * requests that your AWS resource received. You must specify the date and time in Coordinated Universal Time (UTC) format.
3580
3794
  * UTC format includes the special designator, <code>Z</code>. For example, <code>"2016-09-27T14:50Z"</code>.
@@ -3587,10 +3801,12 @@ export interface TimeWindow {
3587
3801
  */
3588
3802
  export interface GetSampledRequestsRequest {
3589
3803
  /**
3804
+ * @public
3590
3805
  * <p>The <code>WebACLId</code> of the <code>WebACL</code> for which you want <code>GetSampledRequests</code> to return a sample of requests.</p>
3591
3806
  */
3592
3807
  WebAclId: string | undefined;
3593
3808
  /**
3809
+ * @public
3594
3810
  * <p>
3595
3811
  * <code>RuleId</code> is one of three values:</p>
3596
3812
  * <ul>
@@ -3606,12 +3822,14 @@ export interface GetSampledRequestsRequest {
3606
3822
  */
3607
3823
  RuleId: string | undefined;
3608
3824
  /**
3825
+ * @public
3609
3826
  * <p>The start date and time and the end date and time of the range for which you want <code>GetSampledRequests</code> to return a
3610
3827
  * sample of requests. You must specify the times in Coordinated Universal Time (UTC) format. UTC format includes the special
3611
3828
  * designator, <code>Z</code>. For example, <code>"2016-09-27T14:50Z"</code>. You can specify any time range in the previous three hours.</p>
3612
3829
  */
3613
3830
  TimeWindow: TimeWindow | undefined;
3614
3831
  /**
3832
+ * @public
3615
3833
  * <p>The number of requests that you want AWS WAF to return from among the first 5,000 requests that your AWS resource received
3616
3834
  * during the time range. If your resource received fewer requests than the value of <code>MaxItems</code>, <code>GetSampledRequests</code>
3617
3835
  * returns information about all of them. </p>
@@ -3634,10 +3852,12 @@ export interface GetSampledRequestsRequest {
3634
3852
  */
3635
3853
  export interface HTTPHeader {
3636
3854
  /**
3855
+ * @public
3637
3856
  * <p>The name of one of the headers in the sampled web request.</p>
3638
3857
  */
3639
3858
  Name?: string;
3640
3859
  /**
3860
+ * @public
3641
3861
  * <p>The value of one of the headers in the sampled web request.</p>
3642
3862
  */
3643
3863
  Value?: string;
@@ -3658,6 +3878,7 @@ export interface HTTPHeader {
3658
3878
  */
3659
3879
  export interface HTTPRequest {
3660
3880
  /**
3881
+ * @public
3661
3882
  * <p>The IP address that the request originated from. If the <code>WebACL</code> is associated with a CloudFront distribution,
3662
3883
  * this is the value of one of the following fields in CloudFront access logs:</p>
3663
3884
  * <ul>
@@ -3673,24 +3894,29 @@ export interface HTTPRequest {
3673
3894
  */
3674
3895
  ClientIP?: string;
3675
3896
  /**
3897
+ * @public
3676
3898
  * <p>The two-letter country code for the country that the request originated from. For a current list of country codes,
3677
3899
  * see the Wikipedia entry <a href="https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2">ISO 3166-1 alpha-2</a>.</p>
3678
3900
  */
3679
3901
  Country?: string;
3680
3902
  /**
3903
+ * @public
3681
3904
  * <p>The part of a web request that identifies the resource, for example, <code>/images/daily-ad.jpg</code>.</p>
3682
3905
  */
3683
3906
  URI?: string;
3684
3907
  /**
3908
+ * @public
3685
3909
  * <p>The HTTP method specified in the sampled web request. CloudFront supports the following methods: <code>DELETE</code>,
3686
3910
  * <code>GET</code>, <code>HEAD</code>, <code>OPTIONS</code>, <code>PATCH</code>, <code>POST</code>, and <code>PUT</code>. </p>
3687
3911
  */
3688
3912
  Method?: string;
3689
3913
  /**
3914
+ * @public
3690
3915
  * <p>The HTTP version specified in the sampled web request, for example, <code>HTTP/1.1</code>.</p>
3691
3916
  */
3692
3917
  HTTPVersion?: string;
3693
3918
  /**
3919
+ * @public
3694
3920
  * <p>A complex type that contains two values for each header in the sampled web request: the name of the header and the value of the header.</p>
3695
3921
  */
3696
3922
  Headers?: HTTPHeader[];
@@ -3711,24 +3937,29 @@ export interface HTTPRequest {
3711
3937
  */
3712
3938
  export interface SampledHTTPRequest {
3713
3939
  /**
3940
+ * @public
3714
3941
  * <p>A complex type that contains detailed information about the request.</p>
3715
3942
  */
3716
3943
  Request: HTTPRequest | undefined;
3717
3944
  /**
3945
+ * @public
3718
3946
  * <p>A value that indicates how one result in the response relates proportionally to other results in the response.
3719
3947
  * A result that has a weight of <code>2</code> represents roughly twice as many CloudFront web requests as a result
3720
3948
  * that has a weight of <code>1</code>.</p>
3721
3949
  */
3722
3950
  Weight: number | undefined;
3723
3951
  /**
3952
+ * @public
3724
3953
  * <p>The time at which AWS WAF received the request from your AWS resource, in Unix time format (in seconds).</p>
3725
3954
  */
3726
3955
  Timestamp?: Date;
3727
3956
  /**
3957
+ * @public
3728
3958
  * <p>The action for the <code>Rule</code> that the request matched: <code>ALLOW</code>, <code>BLOCK</code>, or <code>COUNT</code>.</p>
3729
3959
  */
3730
3960
  Action?: string;
3731
3961
  /**
3962
+ * @public
3732
3963
  * <p>This value is returned if the <code>GetSampledRequests</code> request specifies the ID of a <code>RuleGroup</code> rather than the ID of an individual rule. <code>RuleWithinRuleGroup</code> is the rule within the specified <code>RuleGroup</code> that matched the request listed in the response.</p>
3733
3964
  */
3734
3965
  RuleWithinRuleGroup?: string;
@@ -3738,16 +3969,19 @@ export interface SampledHTTPRequest {
3738
3969
  */
3739
3970
  export interface GetSampledRequestsResponse {
3740
3971
  /**
3972
+ * @public
3741
3973
  * <p>A complex type that contains detailed information about each of the requests in the sample.</p>
3742
3974
  */
3743
3975
  SampledRequests?: SampledHTTPRequest[];
3744
3976
  /**
3977
+ * @public
3745
3978
  * <p>The total number of requests from which <code>GetSampledRequests</code> got a sample of <code>MaxItems</code> requests.
3746
3979
  * If <code>PopulationSize</code> is less than <code>MaxItems</code>, the sample includes every request that your AWS resource
3747
3980
  * received during the specified time range.</p>
3748
3981
  */
3749
3982
  PopulationSize?: number;
3750
3983
  /**
3984
+ * @public
3751
3985
  * <p>Usually, <code>TimeWindow</code> is the time range that you specified in the <code>GetSampledRequests</code> request. However,
3752
3986
  * if your AWS resource received more than 5,000 requests during the time range that you specified in the request,
3753
3987
  * <code>GetSampledRequests</code> returns the time range for the first 5,000 requests. Times are in Coordinated Universal Time (UTC) format.</p>
@@ -3759,6 +3993,7 @@ export interface GetSampledRequestsResponse {
3759
3993
  */
3760
3994
  export interface GetSizeConstraintSetRequest {
3761
3995
  /**
3996
+ * @public
3762
3997
  * <p>The <code>SizeConstraintSetId</code> of the <a>SizeConstraintSet</a> that you want to get. <code>SizeConstraintSetId</code> is returned by
3763
3998
  * <a>CreateSizeConstraintSet</a> and by <a>ListSizeConstraintSets</a>.</p>
3764
3999
  */
@@ -3769,6 +4004,7 @@ export interface GetSizeConstraintSetRequest {
3769
4004
  */
3770
4005
  export interface GetSizeConstraintSetResponse {
3771
4006
  /**
4007
+ * @public
3772
4008
  * <p>Information about the <a>SizeConstraintSet</a> that you specified in the <code>GetSizeConstraintSet</code> request. For more information, see the
3773
4009
  * following topics:</p>
3774
4010
  * <ul>
@@ -3799,6 +4035,7 @@ export interface GetSizeConstraintSetResponse {
3799
4035
  */
3800
4036
  export interface GetSqlInjectionMatchSetRequest {
3801
4037
  /**
4038
+ * @public
3802
4039
  * <p>The <code>SqlInjectionMatchSetId</code> of the <a>SqlInjectionMatchSet</a> that you want to get. <code>SqlInjectionMatchSetId</code>
3803
4040
  * is returned by <a>CreateSqlInjectionMatchSet</a> and by <a>ListSqlInjectionMatchSets</a>.</p>
3804
4041
  */
@@ -3810,6 +4047,7 @@ export interface GetSqlInjectionMatchSetRequest {
3810
4047
  */
3811
4048
  export interface GetSqlInjectionMatchSetResponse {
3812
4049
  /**
4050
+ * @public
3813
4051
  * <p>Information about the <a>SqlInjectionMatchSet</a> that you specified in the <code>GetSqlInjectionMatchSet</code> request.
3814
4052
  * For more information, see the following topics:</p>
3815
4053
  * <ul>
@@ -3838,6 +4076,7 @@ export interface GetSqlInjectionMatchSetResponse {
3838
4076
  */
3839
4077
  export interface GetWebACLRequest {
3840
4078
  /**
4079
+ * @public
3841
4080
  * <p>The <code>WebACLId</code> of the <a>WebACL</a> that you want to get. <code>WebACLId</code> is returned by <a>CreateWebACL</a> and by
3842
4081
  * <a>ListWebACLs</a>.</p>
3843
4082
  */
@@ -3848,6 +4087,7 @@ export interface GetWebACLRequest {
3848
4087
  */
3849
4088
  export interface GetWebACLResponse {
3850
4089
  /**
4090
+ * @public
3851
4091
  * <p>Information about the <a>WebACL</a> that you specified in the <code>GetWebACL</code> request.
3852
4092
  * For more information, see the following topics:</p>
3853
4093
  * <ul>
@@ -3882,6 +4122,7 @@ export interface GetWebACLResponse {
3882
4122
  */
3883
4123
  export interface GetWebACLForResourceRequest {
3884
4124
  /**
4125
+ * @public
3885
4126
  * <p>The ARN (Amazon Resource Name) of the resource for which to get the web ACL, either an application load balancer or Amazon API Gateway stage.</p>
3886
4127
  * <p>The ARN should be in one of the following formats:</p>
3887
4128
  * <ul>
@@ -3913,6 +4154,7 @@ export interface GetWebACLForResourceRequest {
3913
4154
  */
3914
4155
  export interface WebACLSummary {
3915
4156
  /**
4157
+ * @public
3916
4158
  * <p>A unique identifier for a <code>WebACL</code>. You use <code>WebACLId</code> to get information about a <code>WebACL</code>
3917
4159
  * (see <a>GetWebACL</a>), update a <code>WebACL</code> (see <a>UpdateWebACL</a>), and delete a <code>WebACL</code> from AWS WAF
3918
4160
  * (see <a>DeleteWebACL</a>).</p>
@@ -3921,6 +4163,7 @@ export interface WebACLSummary {
3921
4163
  */
3922
4164
  WebACLId: string | undefined;
3923
4165
  /**
4166
+ * @public
3924
4167
  * <p>A friendly name or description of the <a>WebACL</a>. You can't change the name of a <code>WebACL</code> after you create it.</p>
3925
4168
  */
3926
4169
  Name: string | undefined;
@@ -3930,6 +4173,7 @@ export interface WebACLSummary {
3930
4173
  */
3931
4174
  export interface GetWebACLForResourceResponse {
3932
4175
  /**
4176
+ * @public
3933
4177
  * <p>Information about the web ACL that you specified in the <code>GetWebACLForResource</code> request. If there is no associated resource, a null WebACLSummary is returned.</p>
3934
4178
  */
3935
4179
  WebACLSummary?: WebACLSummary;
@@ -3940,6 +4184,7 @@ export interface GetWebACLForResourceResponse {
3940
4184
  */
3941
4185
  export interface GetXssMatchSetRequest {
3942
4186
  /**
4187
+ * @public
3943
4188
  * <p>The <code>XssMatchSetId</code> of the <a>XssMatchSet</a> that you want to get. <code>XssMatchSetId</code>
3944
4189
  * is returned by <a>CreateXssMatchSet</a> and by <a>ListXssMatchSets</a>.</p>
3945
4190
  */
@@ -3951,6 +4196,7 @@ export interface GetXssMatchSetRequest {
3951
4196
  */
3952
4197
  export interface GetXssMatchSetResponse {
3953
4198
  /**
4199
+ * @public
3954
4200
  * <p>Information about the <a>XssMatchSet</a> that you specified in the <code>GetXssMatchSet</code> request.
3955
4201
  * For more information, see the following topics:</p>
3956
4202
  * <ul>
@@ -3979,10 +4225,12 @@ export interface GetXssMatchSetResponse {
3979
4225
  */
3980
4226
  export interface ListActivatedRulesInRuleGroupRequest {
3981
4227
  /**
4228
+ * @public
3982
4229
  * <p>The <code>RuleGroupId</code> of the <a>RuleGroup</a> for which you want to get a list of <a>ActivatedRule</a> objects.</p>
3983
4230
  */
3984
4231
  RuleGroupId?: string;
3985
4232
  /**
4233
+ * @public
3986
4234
  * <p>If you specify a value for <code>Limit</code> and you have more <code>ActivatedRules</code> than the value of <code>Limit</code>,
3987
4235
  * AWS WAF returns a <code>NextMarker</code> value in the response that allows you to list another group of <code>ActivatedRules</code>.
3988
4236
  * For the second and subsequent <code>ListActivatedRulesInRuleGroup</code> requests, specify the value of <code>NextMarker</code>
@@ -3990,6 +4238,7 @@ export interface ListActivatedRulesInRuleGroupRequest {
3990
4238
  */
3991
4239
  NextMarker?: string;
3992
4240
  /**
4241
+ * @public
3993
4242
  * <p>Specifies the number of <code>ActivatedRules</code> that you want AWS WAF to return for this request. If you have more <code>ActivatedRules</code> than the number that you specify for <code>Limit</code>, the response includes a
3994
4243
  * <code>NextMarker</code> value that you can use to get another batch of <code>ActivatedRules</code>.</p>
3995
4244
  */
@@ -4000,10 +4249,12 @@ export interface ListActivatedRulesInRuleGroupRequest {
4000
4249
  */
4001
4250
  export interface ListActivatedRulesInRuleGroupResponse {
4002
4251
  /**
4252
+ * @public
4003
4253
  * <p>If you have more <code>ActivatedRules</code> than the number that you specified for <code>Limit</code> in the request, the response includes a <code>NextMarker</code> value. To list more <code>ActivatedRules</code>, submit another <code>ListActivatedRulesInRuleGroup</code> request, and specify the <code>NextMarker</code> value from the response in the <code>NextMarker</code> value in the next request.</p>
4004
4254
  */
4005
4255
  NextMarker?: string;
4006
4256
  /**
4257
+ * @public
4007
4258
  * <p>An array of <code>ActivatedRules</code> objects.</p>
4008
4259
  */
4009
4260
  ActivatedRules?: ActivatedRule[];
@@ -4013,6 +4264,7 @@ export interface ListActivatedRulesInRuleGroupResponse {
4013
4264
  */
4014
4265
  export interface ListByteMatchSetsRequest {
4015
4266
  /**
4267
+ * @public
4016
4268
  * <p>If you specify a value for <code>Limit</code> and you have more <code>ByteMatchSets</code> than the value of <code>Limit</code>,
4017
4269
  * AWS WAF returns a <code>NextMarker</code> value in the response that allows you to list another group of <code>ByteMatchSets</code>.
4018
4270
  * For the second and subsequent <code>ListByteMatchSets</code> requests, specify the value of <code>NextMarker</code>
@@ -4020,6 +4272,7 @@ export interface ListByteMatchSetsRequest {
4020
4272
  */
4021
4273
  NextMarker?: string;
4022
4274
  /**
4275
+ * @public
4023
4276
  * <p>Specifies the number of <code>ByteMatchSet</code> objects that you want AWS WAF to return for this request. If you have more
4024
4277
  * <code>ByteMatchSets</code> objects than the number you specify for <code>Limit</code>, the response includes a
4025
4278
  * <code>NextMarker</code> value that you can use to get another batch of <code>ByteMatchSet</code> objects.</p>
@@ -4041,6 +4294,7 @@ export interface ListByteMatchSetsRequest {
4041
4294
  */
4042
4295
  export interface ByteMatchSetSummary {
4043
4296
  /**
4297
+ * @public
4044
4298
  * <p>The <code>ByteMatchSetId</code> for a <code>ByteMatchSet</code>. You use <code>ByteMatchSetId</code> to get information about a <code>ByteMatchSet</code>,
4045
4299
  * update a <code>ByteMatchSet</code>, remove a <code>ByteMatchSet</code> from a <code>Rule</code>, and delete a <code>ByteMatchSet</code> from AWS WAF.</p>
4046
4300
  * <p>
@@ -4048,6 +4302,7 @@ export interface ByteMatchSetSummary {
4048
4302
  */
4049
4303
  ByteMatchSetId: string | undefined;
4050
4304
  /**
4305
+ * @public
4051
4306
  * <p>A friendly name or description of the <a>ByteMatchSet</a>. You can't change <code>Name</code> after you create a <code>ByteMatchSet</code>.</p>
4052
4307
  */
4053
4308
  Name: string | undefined;
@@ -4057,6 +4312,7 @@ export interface ByteMatchSetSummary {
4057
4312
  */
4058
4313
  export interface ListByteMatchSetsResponse {
4059
4314
  /**
4315
+ * @public
4060
4316
  * <p>If you have more <code>ByteMatchSet</code> objects than the number that you specified for <code>Limit</code> in the request,
4061
4317
  * the response includes a <code>NextMarker</code> value. To list more <code>ByteMatchSet</code> objects, submit another
4062
4318
  * <code>ListByteMatchSets</code> request, and specify the <code>NextMarker</code> value from the response in the
@@ -4064,6 +4320,7 @@ export interface ListByteMatchSetsResponse {
4064
4320
  */
4065
4321
  NextMarker?: string;
4066
4322
  /**
4323
+ * @public
4067
4324
  * <p>An array of <a>ByteMatchSetSummary</a> objects.</p>
4068
4325
  */
4069
4326
  ByteMatchSets?: ByteMatchSetSummary[];
@@ -4073,6 +4330,7 @@ export interface ListByteMatchSetsResponse {
4073
4330
  */
4074
4331
  export interface ListGeoMatchSetsRequest {
4075
4332
  /**
4333
+ * @public
4076
4334
  * <p>If you specify a value for <code>Limit</code> and you have more <code>GeoMatchSet</code>s than the value of <code>Limit</code>,
4077
4335
  * AWS WAF returns a <code>NextMarker</code> value in the response that allows you to list another group of <code>GeoMatchSet</code> objects.
4078
4336
  * For the second and subsequent <code>ListGeoMatchSets</code> requests, specify the value of <code>NextMarker</code>
@@ -4080,6 +4338,7 @@ export interface ListGeoMatchSetsRequest {
4080
4338
  */
4081
4339
  NextMarker?: string;
4082
4340
  /**
4341
+ * @public
4083
4342
  * <p>Specifies the number of <code>GeoMatchSet</code> objects that you want AWS WAF to return for this request. If you have more
4084
4343
  * <code>GeoMatchSet</code> objects than the number you specify for <code>Limit</code>, the response includes a
4085
4344
  * <code>NextMarker</code> value that you can use to get another batch of <code>GeoMatchSet</code> objects.</p>
@@ -4100,10 +4359,12 @@ export interface ListGeoMatchSetsRequest {
4100
4359
  */
4101
4360
  export interface GeoMatchSetSummary {
4102
4361
  /**
4362
+ * @public
4103
4363
  * <p>The <code>GeoMatchSetId</code> for an <a>GeoMatchSet</a>. You can use <code>GeoMatchSetId</code> in a <a>GetGeoMatchSet</a> request to get detailed information about an <a>GeoMatchSet</a>.</p>
4104
4364
  */
4105
4365
  GeoMatchSetId: string | undefined;
4106
4366
  /**
4367
+ * @public
4107
4368
  * <p>A friendly name or description of the <a>GeoMatchSet</a>. You can't change the name of an <code>GeoMatchSet</code> after you create it.</p>
4108
4369
  */
4109
4370
  Name: string | undefined;
@@ -4113,6 +4374,7 @@ export interface GeoMatchSetSummary {
4113
4374
  */
4114
4375
  export interface ListGeoMatchSetsResponse {
4115
4376
  /**
4377
+ * @public
4116
4378
  * <p>If you have more <code>GeoMatchSet</code> objects than the number that you specified for <code>Limit</code> in the request,
4117
4379
  * the response includes a <code>NextMarker</code> value. To list more <code>GeoMatchSet</code> objects, submit another
4118
4380
  * <code>ListGeoMatchSets</code> request, and specify the <code>NextMarker</code> value from the response in the
@@ -4120,6 +4382,7 @@ export interface ListGeoMatchSetsResponse {
4120
4382
  */
4121
4383
  NextMarker?: string;
4122
4384
  /**
4385
+ * @public
4123
4386
  * <p>An array of <a>GeoMatchSetSummary</a> objects.</p>
4124
4387
  */
4125
4388
  GeoMatchSets?: GeoMatchSetSummary[];
@@ -4129,6 +4392,7 @@ export interface ListGeoMatchSetsResponse {
4129
4392
  */
4130
4393
  export interface ListIPSetsRequest {
4131
4394
  /**
4395
+ * @public
4132
4396
  * <p>AWS WAF returns a <code>NextMarker</code> value in the response that allows you to
4133
4397
  * list another group of <code>IPSets</code>. For the second and subsequent
4134
4398
  * <code>ListIPSets</code> requests, specify the value of <code>NextMarker</code> from the
@@ -4136,6 +4400,7 @@ export interface ListIPSetsRequest {
4136
4400
  */
4137
4401
  NextMarker?: string;
4138
4402
  /**
4403
+ * @public
4139
4404
  * <p>Specifies the number of <code>IPSet</code> objects that you want AWS WAF to return for this request. If you have more
4140
4405
  * <code>IPSet</code> objects than the number you specify for <code>Limit</code>, the response includes a
4141
4406
  * <code>NextMarker</code> value that you can use to get another batch of <code>IPSet</code> objects.</p>
@@ -4156,11 +4421,13 @@ export interface ListIPSetsRequest {
4156
4421
  */
4157
4422
  export interface IPSetSummary {
4158
4423
  /**
4424
+ * @public
4159
4425
  * <p>The <code>IPSetId</code> for an <a>IPSet</a>. You can use <code>IPSetId</code> in a <a>GetIPSet</a> request to get detailed
4160
4426
  * information about an <a>IPSet</a>.</p>
4161
4427
  */
4162
4428
  IPSetId: string | undefined;
4163
4429
  /**
4430
+ * @public
4164
4431
  * <p>A friendly name or description of the <a>IPSet</a>. You can't change the name of an <code>IPSet</code> after you create it.</p>
4165
4432
  */
4166
4433
  Name: string | undefined;
@@ -4170,12 +4437,14 @@ export interface IPSetSummary {
4170
4437
  */
4171
4438
  export interface ListIPSetsResponse {
4172
4439
  /**
4440
+ * @public
4173
4441
  * <p>To list more <code>IPSet</code> objects, submit another <code>ListIPSets</code>
4174
4442
  * request, and in the next request use the <code>NextMarker</code> response value as the
4175
4443
  * <code>NextMarker</code> value.</p>
4176
4444
  */
4177
4445
  NextMarker?: string;
4178
4446
  /**
4447
+ * @public
4179
4448
  * <p>An array of <a>IPSetSummary</a> objects.</p>
4180
4449
  */
4181
4450
  IPSets?: IPSetSummary[];
@@ -4185,6 +4454,7 @@ export interface ListIPSetsResponse {
4185
4454
  */
4186
4455
  export interface ListLoggingConfigurationsRequest {
4187
4456
  /**
4457
+ * @public
4188
4458
  * <p>If you specify a value for <code>Limit</code> and you have more <code>LoggingConfigurations</code> than the value of <code>Limit</code>,
4189
4459
  * AWS WAF returns a <code>NextMarker</code> value in the response that allows you to list another group of <code>LoggingConfigurations</code>.
4190
4460
  * For the second and subsequent <code>ListLoggingConfigurations</code> requests, specify the value of <code>NextMarker</code>
@@ -4192,6 +4462,7 @@ export interface ListLoggingConfigurationsRequest {
4192
4462
  */
4193
4463
  NextMarker?: string;
4194
4464
  /**
4465
+ * @public
4195
4466
  * <p>Specifies the number of <code>LoggingConfigurations</code> that you want AWS WAF to return for this request. If you have more <code>LoggingConfigurations</code> than the number that you specify for <code>Limit</code>, the response includes a <code>NextMarker</code> value that you can use to get another batch of <code>LoggingConfigurations</code>.</p>
4196
4467
  */
4197
4468
  Limit?: number;
@@ -4201,10 +4472,12 @@ export interface ListLoggingConfigurationsRequest {
4201
4472
  */
4202
4473
  export interface ListLoggingConfigurationsResponse {
4203
4474
  /**
4475
+ * @public
4204
4476
  * <p>An array of <a>LoggingConfiguration</a> objects.</p>
4205
4477
  */
4206
4478
  LoggingConfigurations?: LoggingConfiguration[];
4207
4479
  /**
4480
+ * @public
4208
4481
  * <p>If you have more <code>LoggingConfigurations</code> than the number that you specified for <code>Limit</code> in the request, the response includes a <code>NextMarker</code> value. To list more <code>LoggingConfigurations</code>, submit another <code>ListLoggingConfigurations</code> request, and specify the <code>NextMarker</code> value from the response in the <code>NextMarker</code> value in the next request.</p>
4209
4482
  */
4210
4483
  NextMarker?: string;
@@ -4214,6 +4487,7 @@ export interface ListLoggingConfigurationsResponse {
4214
4487
  */
4215
4488
  export interface ListRateBasedRulesRequest {
4216
4489
  /**
4490
+ * @public
4217
4491
  * <p>If you specify a value for <code>Limit</code> and you have more <code>Rules</code>
4218
4492
  * than the value of <code>Limit</code>, AWS WAF returns a <code>NextMarker</code> value in the
4219
4493
  * response that allows you to list another group of <code>Rules</code>. For the second and
@@ -4223,6 +4497,7 @@ export interface ListRateBasedRulesRequest {
4223
4497
  */
4224
4498
  NextMarker?: string;
4225
4499
  /**
4500
+ * @public
4226
4501
  * <p>Specifies the number of <code>Rules</code> that you want AWS WAF to return for this
4227
4502
  * request. If you have more <code>Rules</code> than the number that you specify for
4228
4503
  * <code>Limit</code>, the response includes a <code>NextMarker</code> value that you can
@@ -4244,6 +4519,7 @@ export interface ListRateBasedRulesRequest {
4244
4519
  */
4245
4520
  export interface RuleSummary {
4246
4521
  /**
4522
+ * @public
4247
4523
  * <p>A unique identifier for a <code>Rule</code>. You use <code>RuleId</code> to get more information about a <code>Rule</code> (see <a>GetRule</a>),
4248
4524
  * update a <code>Rule</code> (see <a>UpdateRule</a>), insert a <code>Rule</code> into a <code>WebACL</code> or delete
4249
4525
  * one from a <code>WebACL</code> (see <a>UpdateWebACL</a>), or delete a <code>Rule</code> from AWS WAF (see <a>DeleteRule</a>).</p>
@@ -4252,6 +4528,7 @@ export interface RuleSummary {
4252
4528
  */
4253
4529
  RuleId: string | undefined;
4254
4530
  /**
4531
+ * @public
4255
4532
  * <p>A friendly name or description of the <a>Rule</a>. You can't change the name of a <code>Rule</code> after you create it.</p>
4256
4533
  */
4257
4534
  Name: string | undefined;
@@ -4261,6 +4538,7 @@ export interface RuleSummary {
4261
4538
  */
4262
4539
  export interface ListRateBasedRulesResponse {
4263
4540
  /**
4541
+ * @public
4264
4542
  * <p>If you have more <code>Rules</code> than the number that you specified for
4265
4543
  * <code>Limit</code> in the request, the response includes a <code>NextMarker</code>
4266
4544
  * value. To list more <code>Rules</code>, submit another <code>ListRateBasedRules</code>
@@ -4269,6 +4547,7 @@ export interface ListRateBasedRulesResponse {
4269
4547
  */
4270
4548
  NextMarker?: string;
4271
4549
  /**
4550
+ * @public
4272
4551
  * <p>An array of <a>RuleSummary</a> objects.</p>
4273
4552
  */
4274
4553
  Rules?: RuleSummary[];
@@ -4278,6 +4557,7 @@ export interface ListRateBasedRulesResponse {
4278
4557
  */
4279
4558
  export interface ListRegexMatchSetsRequest {
4280
4559
  /**
4560
+ * @public
4281
4561
  * <p>If you specify a value for <code>Limit</code> and you have more <code>RegexMatchSet</code> objects than the value of <code>Limit</code>,
4282
4562
  * AWS WAF returns a <code>NextMarker</code> value in the response that allows you to list another group of <code>ByteMatchSets</code>.
4283
4563
  * For the second and subsequent <code>ListRegexMatchSets</code> requests, specify the value of <code>NextMarker</code>
@@ -4285,6 +4565,7 @@ export interface ListRegexMatchSetsRequest {
4285
4565
  */
4286
4566
  NextMarker?: string;
4287
4567
  /**
4568
+ * @public
4288
4569
  * <p>Specifies the number of <code>RegexMatchSet</code> objects that you want AWS WAF to return for this request. If you have more
4289
4570
  * <code>RegexMatchSet</code> objects than the number you specify for <code>Limit</code>, the response includes a
4290
4571
  * <code>NextMarker</code> value that you can use to get another batch of <code>RegexMatchSet</code> objects.</p>
@@ -4306,6 +4587,7 @@ export interface ListRegexMatchSetsRequest {
4306
4587
  */
4307
4588
  export interface RegexMatchSetSummary {
4308
4589
  /**
4590
+ * @public
4309
4591
  * <p>The <code>RegexMatchSetId</code> for a <code>RegexMatchSet</code>. You use <code>RegexMatchSetId</code> to get information about a <code>RegexMatchSet</code>,
4310
4592
  * update a <code>RegexMatchSet</code>, remove a <code>RegexMatchSet</code> from a <code>Rule</code>, and delete a <code>RegexMatchSet</code> from AWS WAF.</p>
4311
4593
  * <p>
@@ -4313,6 +4595,7 @@ export interface RegexMatchSetSummary {
4313
4595
  */
4314
4596
  RegexMatchSetId: string | undefined;
4315
4597
  /**
4598
+ * @public
4316
4599
  * <p>A friendly name or description of the <a>RegexMatchSet</a>. You can't change <code>Name</code> after you create a <code>RegexMatchSet</code>.</p>
4317
4600
  */
4318
4601
  Name: string | undefined;
@@ -4322,6 +4605,7 @@ export interface RegexMatchSetSummary {
4322
4605
  */
4323
4606
  export interface ListRegexMatchSetsResponse {
4324
4607
  /**
4608
+ * @public
4325
4609
  * <p>If you have more <code>RegexMatchSet</code> objects than the number that you specified for <code>Limit</code> in the request,
4326
4610
  * the response includes a <code>NextMarker</code> value. To list more <code>RegexMatchSet</code> objects, submit another
4327
4611
  * <code>ListRegexMatchSets</code> request, and specify the <code>NextMarker</code> value from the response in the
@@ -4329,6 +4613,7 @@ export interface ListRegexMatchSetsResponse {
4329
4613
  */
4330
4614
  NextMarker?: string;
4331
4615
  /**
4616
+ * @public
4332
4617
  * <p>An array of <a>RegexMatchSetSummary</a> objects.</p>
4333
4618
  */
4334
4619
  RegexMatchSets?: RegexMatchSetSummary[];
@@ -4338,6 +4623,7 @@ export interface ListRegexMatchSetsResponse {
4338
4623
  */
4339
4624
  export interface ListRegexPatternSetsRequest {
4340
4625
  /**
4626
+ * @public
4341
4627
  * <p>If you specify a value for <code>Limit</code> and you have more <code>RegexPatternSet</code> objects than the value of <code>Limit</code>,
4342
4628
  * AWS WAF returns a <code>NextMarker</code> value in the response that allows you to list another group of <code>RegexPatternSet</code> objects.
4343
4629
  * For the second and subsequent <code>ListRegexPatternSets</code> requests, specify the value of <code>NextMarker</code>
@@ -4345,6 +4631,7 @@ export interface ListRegexPatternSetsRequest {
4345
4631
  */
4346
4632
  NextMarker?: string;
4347
4633
  /**
4634
+ * @public
4348
4635
  * <p>Specifies the number of <code>RegexPatternSet</code> objects that you want AWS WAF to return for this request. If you have more
4349
4636
  * <code>RegexPatternSet</code> objects than the number you specify for <code>Limit</code>, the response includes a
4350
4637
  * <code>NextMarker</code> value that you can use to get another batch of <code>RegexPatternSet</code> objects.</p>
@@ -4366,6 +4653,7 @@ export interface ListRegexPatternSetsRequest {
4366
4653
  */
4367
4654
  export interface RegexPatternSetSummary {
4368
4655
  /**
4656
+ * @public
4369
4657
  * <p>The <code>RegexPatternSetId</code> for a <code>RegexPatternSet</code>. You use <code>RegexPatternSetId</code> to get information about a <code>RegexPatternSet</code>,
4370
4658
  * update a <code>RegexPatternSet</code>, remove a <code>RegexPatternSet</code> from a <code>RegexMatchSet</code>, and delete a <code>RegexPatternSet</code> from AWS WAF.</p>
4371
4659
  * <p>
@@ -4373,6 +4661,7 @@ export interface RegexPatternSetSummary {
4373
4661
  */
4374
4662
  RegexPatternSetId: string | undefined;
4375
4663
  /**
4664
+ * @public
4376
4665
  * <p>A friendly name or description of the <a>RegexPatternSet</a>. You can't change <code>Name</code> after you create a <code>RegexPatternSet</code>.</p>
4377
4666
  */
4378
4667
  Name: string | undefined;
@@ -4382,6 +4671,7 @@ export interface RegexPatternSetSummary {
4382
4671
  */
4383
4672
  export interface ListRegexPatternSetsResponse {
4384
4673
  /**
4674
+ * @public
4385
4675
  * <p>If you have more <code>RegexPatternSet</code> objects than the number that you specified for <code>Limit</code> in the request,
4386
4676
  * the response includes a <code>NextMarker</code> value. To list more <code>RegexPatternSet</code> objects, submit another
4387
4677
  * <code>ListRegexPatternSets</code> request, and specify the <code>NextMarker</code> value from the response in the
@@ -4389,6 +4679,7 @@ export interface ListRegexPatternSetsResponse {
4389
4679
  */
4390
4680
  NextMarker?: string;
4391
4681
  /**
4682
+ * @public
4392
4683
  * <p>An array of <a>RegexPatternSetSummary</a> objects.</p>
4393
4684
  */
4394
4685
  RegexPatternSets?: RegexPatternSetSummary[];
@@ -4410,10 +4701,12 @@ export type ResourceType = (typeof ResourceType)[keyof typeof ResourceType];
4410
4701
  */
4411
4702
  export interface ListResourcesForWebACLRequest {
4412
4703
  /**
4704
+ * @public
4413
4705
  * <p>The unique identifier (ID) of the web ACL for which to list the associated resources.</p>
4414
4706
  */
4415
4707
  WebACLId: string | undefined;
4416
4708
  /**
4709
+ * @public
4417
4710
  * <p>The type of resource to list, either an application load balancer or Amazon API Gateway.</p>
4418
4711
  */
4419
4712
  ResourceType?: ResourceType | string;
@@ -4423,6 +4716,7 @@ export interface ListResourcesForWebACLRequest {
4423
4716
  */
4424
4717
  export interface ListResourcesForWebACLResponse {
4425
4718
  /**
4719
+ * @public
4426
4720
  * <p>An array of ARNs (Amazon Resource Names) of the resources associated with the specified web ACL. An array with zero elements is returned if there are no resources associated with the web ACL.</p>
4427
4721
  */
4428
4722
  ResourceArns?: string[];
@@ -4432,6 +4726,7 @@ export interface ListResourcesForWebACLResponse {
4432
4726
  */
4433
4727
  export interface ListRuleGroupsRequest {
4434
4728
  /**
4729
+ * @public
4435
4730
  * <p>If you specify a value for <code>Limit</code> and you have more <code>RuleGroups</code> than the value of <code>Limit</code>,
4436
4731
  * AWS WAF returns a <code>NextMarker</code> value in the response that allows you to list another group of <code>RuleGroups</code>.
4437
4732
  * For the second and subsequent <code>ListRuleGroups</code> requests, specify the value of <code>NextMarker</code>
@@ -4439,6 +4734,7 @@ export interface ListRuleGroupsRequest {
4439
4734
  */
4440
4735
  NextMarker?: string;
4441
4736
  /**
4737
+ * @public
4442
4738
  * <p>Specifies the number of <code>RuleGroups</code> that you want AWS WAF to return for this request. If you have more <code>RuleGroups</code> than the number that you specify for <code>Limit</code>, the response includes a <code>NextMarker</code> value that you can use to get another batch of <code>RuleGroups</code>.</p>
4443
4739
  */
4444
4740
  Limit?: number;
@@ -4457,6 +4753,7 @@ export interface ListRuleGroupsRequest {
4457
4753
  */
4458
4754
  export interface RuleGroupSummary {
4459
4755
  /**
4756
+ * @public
4460
4757
  * <p>A unique identifier for a <code>RuleGroup</code>. You use <code>RuleGroupId</code> to get more information about a <code>RuleGroup</code> (see <a>GetRuleGroup</a>),
4461
4758
  * update a <code>RuleGroup</code> (see <a>UpdateRuleGroup</a>), insert a <code>RuleGroup</code> into a <code>WebACL</code> or delete
4462
4759
  * one from a <code>WebACL</code> (see <a>UpdateWebACL</a>), or delete a <code>RuleGroup</code> from AWS WAF (see <a>DeleteRuleGroup</a>).</p>
@@ -4465,6 +4762,7 @@ export interface RuleGroupSummary {
4465
4762
  */
4466
4763
  RuleGroupId: string | undefined;
4467
4764
  /**
4765
+ * @public
4468
4766
  * <p>A friendly name or description of the <a>RuleGroup</a>. You can't change the name of a <code>RuleGroup</code> after you create it.</p>
4469
4767
  */
4470
4768
  Name: string | undefined;
@@ -4474,10 +4772,12 @@ export interface RuleGroupSummary {
4474
4772
  */
4475
4773
  export interface ListRuleGroupsResponse {
4476
4774
  /**
4775
+ * @public
4477
4776
  * <p>If you have more <code>RuleGroups</code> than the number that you specified for <code>Limit</code> in the request, the response includes a <code>NextMarker</code> value. To list more <code>RuleGroups</code>, submit another <code>ListRuleGroups</code> request, and specify the <code>NextMarker</code> value from the response in the <code>NextMarker</code> value in the next request.</p>
4478
4777
  */
4479
4778
  NextMarker?: string;
4480
4779
  /**
4780
+ * @public
4481
4781
  * <p>An array of <a>RuleGroup</a> objects.</p>
4482
4782
  */
4483
4783
  RuleGroups?: RuleGroupSummary[];
@@ -4487,6 +4787,7 @@ export interface ListRuleGroupsResponse {
4487
4787
  */
4488
4788
  export interface ListRulesRequest {
4489
4789
  /**
4790
+ * @public
4490
4791
  * <p>If you specify a value for <code>Limit</code> and you have more <code>Rules</code> than the value of <code>Limit</code>,
4491
4792
  * AWS WAF returns a <code>NextMarker</code> value in the response that allows you to list another group of <code>Rules</code>.
4492
4793
  * For the second and subsequent <code>ListRules</code> requests, specify the value of <code>NextMarker</code>
@@ -4494,6 +4795,7 @@ export interface ListRulesRequest {
4494
4795
  */
4495
4796
  NextMarker?: string;
4496
4797
  /**
4798
+ * @public
4497
4799
  * <p>Specifies the number of <code>Rules</code> that you want AWS WAF to return for this request. If you have more <code>Rules</code> than the number that you specify for <code>Limit</code>, the response includes a
4498
4800
  * <code>NextMarker</code> value that you can use to get another batch of <code>Rules</code>.</p>
4499
4801
  */
@@ -4504,12 +4806,14 @@ export interface ListRulesRequest {
4504
4806
  */
4505
4807
  export interface ListRulesResponse {
4506
4808
  /**
4809
+ * @public
4507
4810
  * <p>If you have more <code>Rules</code> than the number that you specified for <code>Limit</code> in the request, the response includes a <code>NextMarker</code> value. To list more <code>Rules</code>, submit another
4508
4811
  * <code>ListRules</code> request, and specify the <code>NextMarker</code> value from the response in the
4509
4812
  * <code>NextMarker</code> value in the next request.</p>
4510
4813
  */
4511
4814
  NextMarker?: string;
4512
4815
  /**
4816
+ * @public
4513
4817
  * <p>An array of <a>RuleSummary</a> objects.</p>
4514
4818
  */
4515
4819
  Rules?: RuleSummary[];
@@ -4519,12 +4823,14 @@ export interface ListRulesResponse {
4519
4823
  */
4520
4824
  export interface ListSizeConstraintSetsRequest {
4521
4825
  /**
4826
+ * @public
4522
4827
  * <p>If you specify a value for <code>Limit</code> and you have more <code>SizeConstraintSets</code> than the value of <code>Limit</code>,
4523
4828
  * AWS WAF returns a <code>NextMarker</code> value in the response that allows you to list another group of <code>SizeConstraintSets</code>.
4524
4829
  * For the second and subsequent <code>ListSizeConstraintSets</code> requests, specify the value of <code>NextMarker</code> from the previous response to get information about another batch of <code>SizeConstraintSets</code>.</p>
4525
4830
  */
4526
4831
  NextMarker?: string;
4527
4832
  /**
4833
+ * @public
4528
4834
  * <p>Specifies the number of <code>SizeConstraintSet</code> objects that you want AWS WAF to return for this request. If you have more
4529
4835
  * <code>SizeConstraintSets</code> objects than the number you specify for <code>Limit</code>, the response includes a
4530
4836
  * <code>NextMarker</code> value that you can use to get another batch of <code>SizeConstraintSet</code> objects.</p>
@@ -4545,6 +4851,7 @@ export interface ListSizeConstraintSetsRequest {
4545
4851
  */
4546
4852
  export interface SizeConstraintSetSummary {
4547
4853
  /**
4854
+ * @public
4548
4855
  * <p>A unique identifier for a <code>SizeConstraintSet</code>. You use <code>SizeConstraintSetId</code> to get information about a
4549
4856
  * <code>SizeConstraintSet</code> (see <a>GetSizeConstraintSet</a>), update a <code>SizeConstraintSet</code>
4550
4857
  * (see <a>UpdateSizeConstraintSet</a>), insert a <code>SizeConstraintSet</code> into a <code>Rule</code> or
@@ -4555,6 +4862,7 @@ export interface SizeConstraintSetSummary {
4555
4862
  */
4556
4863
  SizeConstraintSetId: string | undefined;
4557
4864
  /**
4865
+ * @public
4558
4866
  * <p>The name of the <code>SizeConstraintSet</code>, if any.</p>
4559
4867
  */
4560
4868
  Name: string | undefined;
@@ -4564,6 +4872,7 @@ export interface SizeConstraintSetSummary {
4564
4872
  */
4565
4873
  export interface ListSizeConstraintSetsResponse {
4566
4874
  /**
4875
+ * @public
4567
4876
  * <p>If you have more <code>SizeConstraintSet</code> objects than the number that you specified for <code>Limit</code> in the request,
4568
4877
  * the response includes a <code>NextMarker</code> value. To list more <code>SizeConstraintSet</code> objects, submit another
4569
4878
  * <code>ListSizeConstraintSets</code> request, and specify the <code>NextMarker</code> value from the response in the
@@ -4571,6 +4880,7 @@ export interface ListSizeConstraintSetsResponse {
4571
4880
  */
4572
4881
  NextMarker?: string;
4573
4882
  /**
4883
+ * @public
4574
4884
  * <p>An array of <a>SizeConstraintSetSummary</a> objects.</p>
4575
4885
  */
4576
4886
  SizeConstraintSets?: SizeConstraintSetSummary[];
@@ -4581,6 +4891,7 @@ export interface ListSizeConstraintSetsResponse {
4581
4891
  */
4582
4892
  export interface ListSqlInjectionMatchSetsRequest {
4583
4893
  /**
4894
+ * @public
4584
4895
  * <p>If you specify a value for <code>Limit</code> and you have more <a>SqlInjectionMatchSet</a> objects than the value of
4585
4896
  * <code>Limit</code>, AWS WAF returns a <code>NextMarker</code> value in the response that allows you to list another group of
4586
4897
  * <code>SqlInjectionMatchSets</code>. For the second and subsequent <code>ListSqlInjectionMatchSets</code> requests, specify the
@@ -4588,6 +4899,7 @@ export interface ListSqlInjectionMatchSetsRequest {
4588
4899
  */
4589
4900
  NextMarker?: string;
4590
4901
  /**
4902
+ * @public
4591
4903
  * <p>Specifies the number of <a>SqlInjectionMatchSet</a> objects that you want AWS WAF to return for this request. If you have more
4592
4904
  * <code>SqlInjectionMatchSet</code> objects than the number you specify for <code>Limit</code>, the response includes a
4593
4905
  * <code>NextMarker</code> value that you can use to get another batch of <code>Rules</code>.</p>
@@ -4608,6 +4920,7 @@ export interface ListSqlInjectionMatchSetsRequest {
4608
4920
  */
4609
4921
  export interface SqlInjectionMatchSetSummary {
4610
4922
  /**
4923
+ * @public
4611
4924
  * <p>A unique identifier for a <code>SqlInjectionMatchSet</code>. You use <code>SqlInjectionMatchSetId</code> to get information about a
4612
4925
  * <code>SqlInjectionMatchSet</code> (see <a>GetSqlInjectionMatchSet</a>), update a <code>SqlInjectionMatchSet</code>
4613
4926
  * (see <a>UpdateSqlInjectionMatchSet</a>), insert a <code>SqlInjectionMatchSet</code> into a <code>Rule</code> or
@@ -4618,6 +4931,7 @@ export interface SqlInjectionMatchSetSummary {
4618
4931
  */
4619
4932
  SqlInjectionMatchSetId: string | undefined;
4620
4933
  /**
4934
+ * @public
4621
4935
  * <p>The name of the <code>SqlInjectionMatchSet</code>, if any, specified by <code>Id</code>.</p>
4622
4936
  */
4623
4937
  Name: string | undefined;
@@ -4628,6 +4942,7 @@ export interface SqlInjectionMatchSetSummary {
4628
4942
  */
4629
4943
  export interface ListSqlInjectionMatchSetsResponse {
4630
4944
  /**
4945
+ * @public
4631
4946
  * <p>If you have more <a>SqlInjectionMatchSet</a> objects than the number that you specified for <code>Limit</code> in the request,
4632
4947
  * the response includes a <code>NextMarker</code> value. To list more <code>SqlInjectionMatchSet</code> objects, submit another
4633
4948
  * <code>ListSqlInjectionMatchSets</code> request, and specify the <code>NextMarker</code> value from the response in the
@@ -4635,6 +4950,7 @@ export interface ListSqlInjectionMatchSetsResponse {
4635
4950
  */
4636
4951
  NextMarker?: string;
4637
4952
  /**
4953
+ * @public
4638
4954
  * <p>An array of <a>SqlInjectionMatchSetSummary</a> objects.</p>
4639
4955
  */
4640
4956
  SqlInjectionMatchSets?: SqlInjectionMatchSetSummary[];
@@ -4644,6 +4960,7 @@ export interface ListSqlInjectionMatchSetsResponse {
4644
4960
  */
4645
4961
  export interface ListSubscribedRuleGroupsRequest {
4646
4962
  /**
4963
+ * @public
4647
4964
  * <p>If you specify a value for <code>Limit</code> and you have more <code>ByteMatchSets</code>subscribed rule groups than the value of <code>Limit</code>,
4648
4965
  * AWS WAF returns a <code>NextMarker</code> value in the response that allows you to list another group of subscribed rule groups.
4649
4966
  * For the second and subsequent <code>ListSubscribedRuleGroupsRequest</code> requests, specify the value of <code>NextMarker</code>
@@ -4651,6 +4968,7 @@ export interface ListSubscribedRuleGroupsRequest {
4651
4968
  */
4652
4969
  NextMarker?: string;
4653
4970
  /**
4971
+ * @public
4654
4972
  * <p>Specifies the number of subscribed rule groups that you want AWS WAF to return for this request. If you have more
4655
4973
  * objects than the number you specify for <code>Limit</code>, the response includes a
4656
4974
  * <code>NextMarker</code> value that you can use to get another batch of objects.</p>
@@ -4671,14 +4989,17 @@ export interface ListSubscribedRuleGroupsRequest {
4671
4989
  */
4672
4990
  export interface SubscribedRuleGroupSummary {
4673
4991
  /**
4992
+ * @public
4674
4993
  * <p>A unique identifier for a <code>RuleGroup</code>.</p>
4675
4994
  */
4676
4995
  RuleGroupId: string | undefined;
4677
4996
  /**
4997
+ * @public
4678
4998
  * <p>A friendly name or description of the <code>RuleGroup</code>. You can't change the name of a <code>RuleGroup</code> after you create it.</p>
4679
4999
  */
4680
5000
  Name: string | undefined;
4681
5001
  /**
5002
+ * @public
4682
5003
  * <p>A friendly name or description for the metrics for this <code>RuleGroup</code>. The name can contain only alphanumeric characters (A-Z, a-z, 0-9), with maximum length 128 and minimum length one. It can't contain
4683
5004
  * whitespace or metric names reserved for AWS WAF, including "All" and "Default_Action." You can't change the name of the metric after you create the <code>RuleGroup</code>.</p>
4684
5005
  */
@@ -4689,6 +5010,7 @@ export interface SubscribedRuleGroupSummary {
4689
5010
  */
4690
5011
  export interface ListSubscribedRuleGroupsResponse {
4691
5012
  /**
5013
+ * @public
4692
5014
  * <p>If you have more objects than the number that you specified for <code>Limit</code> in the request,
4693
5015
  * the response includes a <code>NextMarker</code> value. To list more objects, submit another
4694
5016
  * <code>ListSubscribedRuleGroups</code> request, and specify the <code>NextMarker</code> value from the response in the
@@ -4696,6 +5018,7 @@ export interface ListSubscribedRuleGroupsResponse {
4696
5018
  */
4697
5019
  NextMarker?: string;
4698
5020
  /**
5021
+ * @public
4699
5022
  * <p>An array of <a>RuleGroup</a> objects.</p>
4700
5023
  */
4701
5024
  RuleGroups?: SubscribedRuleGroupSummary[];
@@ -4705,14 +5028,17 @@ export interface ListSubscribedRuleGroupsResponse {
4705
5028
  */
4706
5029
  export interface ListTagsForResourceRequest {
4707
5030
  /**
5031
+ * @public
4708
5032
  * <p></p>
4709
5033
  */
4710
5034
  NextMarker?: string;
4711
5035
  /**
5036
+ * @public
4712
5037
  * <p></p>
4713
5038
  */
4714
5039
  Limit?: number;
4715
5040
  /**
5041
+ * @public
4716
5042
  * <p></p>
4717
5043
  */
4718
5044
  ResourceARN: string | undefined;
@@ -4732,10 +5058,12 @@ export interface ListTagsForResourceRequest {
4732
5058
  */
4733
5059
  export interface TagInfoForResource {
4734
5060
  /**
5061
+ * @public
4735
5062
  * <p></p>
4736
5063
  */
4737
5064
  ResourceARN?: string;
4738
5065
  /**
5066
+ * @public
4739
5067
  * <p></p>
4740
5068
  */
4741
5069
  TagList?: Tag[];
@@ -4745,10 +5073,12 @@ export interface TagInfoForResource {
4745
5073
  */
4746
5074
  export interface ListTagsForResourceResponse {
4747
5075
  /**
5076
+ * @public
4748
5077
  * <p></p>
4749
5078
  */
4750
5079
  NextMarker?: string;
4751
5080
  /**
5081
+ * @public
4752
5082
  * <p></p>
4753
5083
  */
4754
5084
  TagInfoForResource?: TagInfoForResource;
@@ -4758,6 +5088,7 @@ export interface ListTagsForResourceResponse {
4758
5088
  */
4759
5089
  export interface ListWebACLsRequest {
4760
5090
  /**
5091
+ * @public
4761
5092
  * <p>If you specify a value for <code>Limit</code> and you have more <code>WebACL</code> objects than the number that you specify
4762
5093
  * for <code>Limit</code>, AWS WAF returns a <code>NextMarker</code> value in the response that allows you to list another group of
4763
5094
  * <code>WebACL</code> objects. For the second and subsequent <code>ListWebACLs</code> requests, specify the value of <code>NextMarker</code>
@@ -4765,6 +5096,7 @@ export interface ListWebACLsRequest {
4765
5096
  */
4766
5097
  NextMarker?: string;
4767
5098
  /**
5099
+ * @public
4768
5100
  * <p>Specifies the number of <code>WebACL</code> objects that you want AWS WAF to return for this request. If you have more
4769
5101
  * <code>WebACL</code> objects than the number that you specify for <code>Limit</code>, the response includes a
4770
5102
  * <code>NextMarker</code> value that you can use to get another batch of <code>WebACL</code> objects.</p>
@@ -4776,6 +5108,7 @@ export interface ListWebACLsRequest {
4776
5108
  */
4777
5109
  export interface ListWebACLsResponse {
4778
5110
  /**
5111
+ * @public
4779
5112
  * <p>If you have more <code>WebACL</code> objects than the number that you specified for <code>Limit</code> in the request,
4780
5113
  * the response includes a <code>NextMarker</code> value. To list more <code>WebACL</code> objects, submit another
4781
5114
  * <code>ListWebACLs</code> request, and specify the <code>NextMarker</code> value from the response in the
@@ -4783,6 +5116,7 @@ export interface ListWebACLsResponse {
4783
5116
  */
4784
5117
  NextMarker?: string;
4785
5118
  /**
5119
+ * @public
4786
5120
  * <p>An array of <a>WebACLSummary</a> objects.</p>
4787
5121
  */
4788
5122
  WebACLs?: WebACLSummary[];
@@ -4793,6 +5127,7 @@ export interface ListWebACLsResponse {
4793
5127
  */
4794
5128
  export interface ListXssMatchSetsRequest {
4795
5129
  /**
5130
+ * @public
4796
5131
  * <p>If you specify a value for <code>Limit</code> and you have more <a>XssMatchSet</a> objects than the value of
4797
5132
  * <code>Limit</code>, AWS WAF returns a <code>NextMarker</code> value in the response that allows you to list another group of
4798
5133
  * <code>XssMatchSets</code>. For the second and subsequent <code>ListXssMatchSets</code> requests, specify the
@@ -4800,6 +5135,7 @@ export interface ListXssMatchSetsRequest {
4800
5135
  */
4801
5136
  NextMarker?: string;
4802
5137
  /**
5138
+ * @public
4803
5139
  * <p>Specifies the number of <a>XssMatchSet</a> objects that you want AWS WAF to return for this request. If you have more
4804
5140
  * <code>XssMatchSet</code> objects than the number you specify for <code>Limit</code>, the response includes a
4805
5141
  * <code>NextMarker</code> value that you can use to get another batch of <code>Rules</code>.</p>
@@ -4820,6 +5156,7 @@ export interface ListXssMatchSetsRequest {
4820
5156
  */
4821
5157
  export interface XssMatchSetSummary {
4822
5158
  /**
5159
+ * @public
4823
5160
  * <p>A unique identifier for an <code>XssMatchSet</code>. You use <code>XssMatchSetId</code> to get information about a
4824
5161
  * <code>XssMatchSet</code> (see <a>GetXssMatchSet</a>), update an <code>XssMatchSet</code>
4825
5162
  * (see <a>UpdateXssMatchSet</a>), insert an <code>XssMatchSet</code> into a <code>Rule</code> or
@@ -4830,6 +5167,7 @@ export interface XssMatchSetSummary {
4830
5167
  */
4831
5168
  XssMatchSetId: string | undefined;
4832
5169
  /**
5170
+ * @public
4833
5171
  * <p>The name of the <code>XssMatchSet</code>, if any, specified by <code>Id</code>.</p>
4834
5172
  */
4835
5173
  Name: string | undefined;
@@ -4840,6 +5178,7 @@ export interface XssMatchSetSummary {
4840
5178
  */
4841
5179
  export interface ListXssMatchSetsResponse {
4842
5180
  /**
5181
+ * @public
4843
5182
  * <p>If you have more <a>XssMatchSet</a> objects than the number that you specified for <code>Limit</code> in the request,
4844
5183
  * the response includes a <code>NextMarker</code> value. To list more <code>XssMatchSet</code> objects, submit another
4845
5184
  * <code>ListXssMatchSets</code> request, and specify the <code>NextMarker</code> value from the response in the
@@ -4847,6 +5186,7 @@ export interface ListXssMatchSetsResponse {
4847
5186
  */
4848
5187
  NextMarker?: string;
4849
5188
  /**
5189
+ * @public
4850
5190
  * <p>An array of <a>XssMatchSetSummary</a> objects.</p>
4851
5191
  */
4852
5192
  XssMatchSets?: XssMatchSetSummary[];
@@ -4856,6 +5196,7 @@ export interface ListXssMatchSetsResponse {
4856
5196
  */
4857
5197
  export interface PutLoggingConfigurationRequest {
4858
5198
  /**
5199
+ * @public
4859
5200
  * <p>The Amazon Kinesis Data Firehose that contains the inspected traffic
4860
5201
  * information, the redacted fields details, and the Amazon Resource Name (ARN) of the web ACL
4861
5202
  * to monitor.</p>
@@ -4872,6 +5213,7 @@ export interface PutLoggingConfigurationRequest {
4872
5213
  */
4873
5214
  export interface PutLoggingConfigurationResponse {
4874
5215
  /**
5216
+ * @public
4875
5217
  * <p>The <a>LoggingConfiguration</a> that you submitted in the request.</p>
4876
5218
  */
4877
5219
  LoggingConfiguration?: LoggingConfiguration;
@@ -4893,10 +5235,12 @@ export declare class WAFServiceLinkedRoleErrorException extends __BaseException
4893
5235
  */
4894
5236
  export interface PutPermissionPolicyRequest {
4895
5237
  /**
5238
+ * @public
4896
5239
  * <p>The Amazon Resource Name (ARN) of the RuleGroup to which you want to attach the policy.</p>
4897
5240
  */
4898
5241
  ResourceArn: string | undefined;
4899
5242
  /**
5243
+ * @public
4900
5244
  * <p>The policy to attach to the specified RuleGroup.</p>
4901
5245
  */
4902
5246
  Policy: string | undefined;
@@ -4952,10 +5296,12 @@ export declare class WAFInvalidPermissionPolicyException extends __BaseException
4952
5296
  */
4953
5297
  export interface TagResourceRequest {
4954
5298
  /**
5299
+ * @public
4955
5300
  * <p></p>
4956
5301
  */
4957
5302
  ResourceARN: string | undefined;
4958
5303
  /**
5304
+ * @public
4959
5305
  * <p></p>
4960
5306
  */
4961
5307
  Tags: Tag[] | undefined;
@@ -4970,10 +5316,12 @@ export interface TagResourceResponse {
4970
5316
  */
4971
5317
  export interface UntagResourceRequest {
4972
5318
  /**
5319
+ * @public
4973
5320
  * <p></p>
4974
5321
  */
4975
5322
  ResourceARN: string | undefined;
4976
5323
  /**
5324
+ * @public
4977
5325
  * <p></p>
4978
5326
  */
4979
5327
  TagKeys: string[] | undefined;
@@ -5010,10 +5358,12 @@ export type ChangeAction = (typeof ChangeAction)[keyof typeof ChangeAction];
5010
5358
  */
5011
5359
  export interface ByteMatchSetUpdate {
5012
5360
  /**
5361
+ * @public
5013
5362
  * <p>Specifies whether to insert or delete a <a>ByteMatchTuple</a>.</p>
5014
5363
  */
5015
5364
  Action: ChangeAction | string | undefined;
5016
5365
  /**
5366
+ * @public
5017
5367
  * <p>Information about the part of a web request that you want AWS WAF to inspect and the value that you want AWS WAF to search for.
5018
5368
  * If you specify <code>DELETE</code> for the value of <code>Action</code>, the <code>ByteMatchTuple</code> values must
5019
5369
  * exactly match the values in the <code>ByteMatchTuple</code> that you want to delete from the <code>ByteMatchSet</code>.</p>
@@ -5025,15 +5375,18 @@ export interface ByteMatchSetUpdate {
5025
5375
  */
5026
5376
  export interface UpdateByteMatchSetRequest {
5027
5377
  /**
5378
+ * @public
5028
5379
  * <p>The <code>ByteMatchSetId</code> of the <a>ByteMatchSet</a> that you want to update. <code>ByteMatchSetId</code> is returned by <a>CreateByteMatchSet</a> and by
5029
5380
  * <a>ListByteMatchSets</a>.</p>
5030
5381
  */
5031
5382
  ByteMatchSetId: string | undefined;
5032
5383
  /**
5384
+ * @public
5033
5385
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
5034
5386
  */
5035
5387
  ChangeToken: string | undefined;
5036
5388
  /**
5389
+ * @public
5037
5390
  * <p>An array of <code>ByteMatchSetUpdate</code> objects that you want to insert into or delete from a <a>ByteMatchSet</a>.
5038
5391
  * For more information, see the applicable data types:</p>
5039
5392
  * <ul>
@@ -5062,6 +5415,7 @@ export interface UpdateByteMatchSetRequest {
5062
5415
  */
5063
5416
  export interface UpdateByteMatchSetResponse {
5064
5417
  /**
5418
+ * @public
5065
5419
  * <p>The <code>ChangeToken</code> that you used to submit the <code>UpdateByteMatchSet</code> request. You can also use this value
5066
5420
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
5067
5421
  */
@@ -5108,10 +5462,12 @@ export declare class WAFNonexistentContainerException extends __BaseException {
5108
5462
  */
5109
5463
  export interface GeoMatchSetUpdate {
5110
5464
  /**
5465
+ * @public
5111
5466
  * <p>Specifies whether to insert or delete a country with <a>UpdateGeoMatchSet</a>.</p>
5112
5467
  */
5113
5468
  Action: ChangeAction | string | undefined;
5114
5469
  /**
5470
+ * @public
5115
5471
  * <p>The country from which web requests originate that you want AWS WAF to search for.</p>
5116
5472
  */
5117
5473
  GeoMatchConstraint: GeoMatchConstraint | undefined;
@@ -5121,15 +5477,18 @@ export interface GeoMatchSetUpdate {
5121
5477
  */
5122
5478
  export interface UpdateGeoMatchSetRequest {
5123
5479
  /**
5480
+ * @public
5124
5481
  * <p>The <code>GeoMatchSetId</code> of the <a>GeoMatchSet</a> that you want to update. <code>GeoMatchSetId</code> is returned by <a>CreateGeoMatchSet</a> and by
5125
5482
  * <a>ListGeoMatchSets</a>.</p>
5126
5483
  */
5127
5484
  GeoMatchSetId: string | undefined;
5128
5485
  /**
5486
+ * @public
5129
5487
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
5130
5488
  */
5131
5489
  ChangeToken: string | undefined;
5132
5490
  /**
5491
+ * @public
5133
5492
  * <p>An array of <code>GeoMatchSetUpdate</code> objects that you want to insert into or delete from an <a>GeoMatchSet</a>.
5134
5493
  * For more information, see the applicable data types:</p>
5135
5494
  * <ul>
@@ -5153,6 +5512,7 @@ export interface UpdateGeoMatchSetRequest {
5153
5512
  */
5154
5513
  export interface UpdateGeoMatchSetResponse {
5155
5514
  /**
5515
+ * @public
5156
5516
  * <p>The <code>ChangeToken</code> that you used to submit the <code>UpdateGeoMatchSet</code> request. You can also use this value
5157
5517
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
5158
5518
  */
@@ -5172,10 +5532,12 @@ export interface UpdateGeoMatchSetResponse {
5172
5532
  */
5173
5533
  export interface IPSetUpdate {
5174
5534
  /**
5535
+ * @public
5175
5536
  * <p>Specifies whether to insert or delete an IP address with <a>UpdateIPSet</a>.</p>
5176
5537
  */
5177
5538
  Action: ChangeAction | string | undefined;
5178
5539
  /**
5540
+ * @public
5179
5541
  * <p>The IP address type (<code>IPV4</code> or <code>IPV6</code>) and the IP address range (in CIDR notation) that web requests originate from.</p>
5180
5542
  */
5181
5543
  IPSetDescriptor: IPSetDescriptor | undefined;
@@ -5185,15 +5547,18 @@ export interface IPSetUpdate {
5185
5547
  */
5186
5548
  export interface UpdateIPSetRequest {
5187
5549
  /**
5550
+ * @public
5188
5551
  * <p>The <code>IPSetId</code> of the <a>IPSet</a> that you want to update. <code>IPSetId</code> is returned by <a>CreateIPSet</a> and by
5189
5552
  * <a>ListIPSets</a>.</p>
5190
5553
  */
5191
5554
  IPSetId: string | undefined;
5192
5555
  /**
5556
+ * @public
5193
5557
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
5194
5558
  */
5195
5559
  ChangeToken: string | undefined;
5196
5560
  /**
5561
+ * @public
5197
5562
  * <p>An array of <code>IPSetUpdate</code> objects that you want to insert into or delete from an <a>IPSet</a>.
5198
5563
  * For more information, see the applicable data types:</p>
5199
5564
  * <ul>
@@ -5217,6 +5582,7 @@ export interface UpdateIPSetRequest {
5217
5582
  */
5218
5583
  export interface UpdateIPSetResponse {
5219
5584
  /**
5585
+ * @public
5220
5586
  * <p>The <code>ChangeToken</code> that you used to submit the <code>UpdateIPSet</code> request. You can also use this value
5221
5587
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
5222
5588
  */
@@ -5237,11 +5603,13 @@ export interface UpdateIPSetResponse {
5237
5603
  */
5238
5604
  export interface RuleUpdate {
5239
5605
  /**
5606
+ * @public
5240
5607
  * <p>Specify <code>INSERT</code> to add a <code>Predicate</code> to a <code>Rule</code>. Use <code>DELETE</code> to remove a
5241
5608
  * <code>Predicate</code> from a <code>Rule</code>.</p>
5242
5609
  */
5243
5610
  Action: ChangeAction | string | undefined;
5244
5611
  /**
5612
+ * @public
5245
5613
  * <p>The ID of the <code>Predicate</code> (such as an <code>IPSet</code>) that you want to add to a <code>Rule</code>.</p>
5246
5614
  */
5247
5615
  Predicate: Predicate | undefined;
@@ -5251,20 +5619,24 @@ export interface RuleUpdate {
5251
5619
  */
5252
5620
  export interface UpdateRateBasedRuleRequest {
5253
5621
  /**
5622
+ * @public
5254
5623
  * <p>The <code>RuleId</code> of the <code>RateBasedRule</code> that you want to update.
5255
5624
  * <code>RuleId</code> is returned by <code>CreateRateBasedRule</code> and by <a>ListRateBasedRules</a>.</p>
5256
5625
  */
5257
5626
  RuleId: string | undefined;
5258
5627
  /**
5628
+ * @public
5259
5629
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
5260
5630
  */
5261
5631
  ChangeToken: string | undefined;
5262
5632
  /**
5633
+ * @public
5263
5634
  * <p>An array of <code>RuleUpdate</code> objects that you want to insert into or delete
5264
5635
  * from a <a>RateBasedRule</a>. </p>
5265
5636
  */
5266
5637
  Updates: RuleUpdate[] | undefined;
5267
5638
  /**
5639
+ * @public
5268
5640
  * <p>The maximum number of requests, which have an identical value in the field specified by the <code>RateKey</code>, allowed in a
5269
5641
  * five-minute period. If the number of requests exceeds the <code>RateLimit</code> and the other
5270
5642
  * predicates specified in the rule are also met,
@@ -5277,6 +5649,7 @@ export interface UpdateRateBasedRuleRequest {
5277
5649
  */
5278
5650
  export interface UpdateRateBasedRuleResponse {
5279
5651
  /**
5652
+ * @public
5280
5653
  * <p>The <code>ChangeToken</code> that you used to submit the
5281
5654
  * <code>UpdateRateBasedRule</code> request. You can also use this value to query the
5282
5655
  * status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
@@ -5298,10 +5671,12 @@ export interface UpdateRateBasedRuleResponse {
5298
5671
  */
5299
5672
  export interface RegexMatchSetUpdate {
5300
5673
  /**
5674
+ * @public
5301
5675
  * <p>Specifies whether to insert or delete a <a>RegexMatchTuple</a>.</p>
5302
5676
  */
5303
5677
  Action: ChangeAction | string | undefined;
5304
5678
  /**
5679
+ * @public
5305
5680
  * <p>Information about the part of a web request that you want AWS WAF to inspect and the identifier of the regular expression (regex) pattern that you want AWS WAF to search for.
5306
5681
  * If you specify <code>DELETE</code> for the value of <code>Action</code>, the <code>RegexMatchTuple</code> values must
5307
5682
  * exactly match the values in the <code>RegexMatchTuple</code> that you want to delete from the <code>RegexMatchSet</code>.</p>
@@ -5313,16 +5688,19 @@ export interface RegexMatchSetUpdate {
5313
5688
  */
5314
5689
  export interface UpdateRegexMatchSetRequest {
5315
5690
  /**
5691
+ * @public
5316
5692
  * <p>The <code>RegexMatchSetId</code> of the <a>RegexMatchSet</a> that you want to update. <code>RegexMatchSetId</code> is returned by <a>CreateRegexMatchSet</a> and by
5317
5693
  * <a>ListRegexMatchSets</a>.</p>
5318
5694
  */
5319
5695
  RegexMatchSetId: string | undefined;
5320
5696
  /**
5697
+ * @public
5321
5698
  * <p>An array of <code>RegexMatchSetUpdate</code> objects that you want to insert into or delete from a <a>RegexMatchSet</a>.
5322
5699
  * For more information, see <a>RegexMatchTuple</a>.</p>
5323
5700
  */
5324
5701
  Updates: RegexMatchSetUpdate[] | undefined;
5325
5702
  /**
5703
+ * @public
5326
5704
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
5327
5705
  */
5328
5706
  ChangeToken: string | undefined;
@@ -5332,6 +5710,7 @@ export interface UpdateRegexMatchSetRequest {
5332
5710
  */
5333
5711
  export interface UpdateRegexMatchSetResponse {
5334
5712
  /**
5713
+ * @public
5335
5714
  * <p>The <code>ChangeToken</code> that you used to submit the <code>UpdateRegexMatchSet</code> request. You can also use this value
5336
5715
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
5337
5716
  */
@@ -5352,10 +5731,12 @@ export interface UpdateRegexMatchSetResponse {
5352
5731
  */
5353
5732
  export interface RegexPatternSetUpdate {
5354
5733
  /**
5734
+ * @public
5355
5735
  * <p>Specifies whether to insert or delete a <code>RegexPatternString</code>.</p>
5356
5736
  */
5357
5737
  Action: ChangeAction | string | undefined;
5358
5738
  /**
5739
+ * @public
5359
5740
  * <p>Specifies the regular expression (regex) pattern that you want AWS WAF to search for, such as <code>B[a@]dB[o0]t</code>.</p>
5360
5741
  */
5361
5742
  RegexPatternString: string | undefined;
@@ -5365,15 +5746,18 @@ export interface RegexPatternSetUpdate {
5365
5746
  */
5366
5747
  export interface UpdateRegexPatternSetRequest {
5367
5748
  /**
5749
+ * @public
5368
5750
  * <p>The <code>RegexPatternSetId</code> of the <a>RegexPatternSet</a> that you want to update. <code>RegexPatternSetId</code> is returned by <a>CreateRegexPatternSet</a> and by
5369
5751
  * <a>ListRegexPatternSets</a>.</p>
5370
5752
  */
5371
5753
  RegexPatternSetId: string | undefined;
5372
5754
  /**
5755
+ * @public
5373
5756
  * <p>An array of <code>RegexPatternSetUpdate</code> objects that you want to insert into or delete from a <a>RegexPatternSet</a>.</p>
5374
5757
  */
5375
5758
  Updates: RegexPatternSetUpdate[] | undefined;
5376
5759
  /**
5760
+ * @public
5377
5761
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
5378
5762
  */
5379
5763
  ChangeToken: string | undefined;
@@ -5383,6 +5767,7 @@ export interface UpdateRegexPatternSetRequest {
5383
5767
  */
5384
5768
  export interface UpdateRegexPatternSetResponse {
5385
5769
  /**
5770
+ * @public
5386
5771
  * <p>The <code>ChangeToken</code> that you used to submit the <code>UpdateRegexPatternSet</code> request. You can also use this value
5387
5772
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
5388
5773
  */
@@ -5405,15 +5790,18 @@ export declare class WAFInvalidRegexPatternException extends __BaseException {
5405
5790
  */
5406
5791
  export interface UpdateRuleRequest {
5407
5792
  /**
5793
+ * @public
5408
5794
  * <p>The <code>RuleId</code> of the <code>Rule</code> that you want to update. <code>RuleId</code> is returned by
5409
5795
  * <code>CreateRule</code> and by <a>ListRules</a>.</p>
5410
5796
  */
5411
5797
  RuleId: string | undefined;
5412
5798
  /**
5799
+ * @public
5413
5800
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
5414
5801
  */
5415
5802
  ChangeToken: string | undefined;
5416
5803
  /**
5804
+ * @public
5417
5805
  * <p>An array of <code>RuleUpdate</code> objects that you want to insert into or delete from a
5418
5806
  * <a>Rule</a>. For more information, see the applicable data types:</p>
5419
5807
  * <ul>
@@ -5441,6 +5829,7 @@ export interface UpdateRuleRequest {
5441
5829
  */
5442
5830
  export interface UpdateRuleResponse {
5443
5831
  /**
5832
+ * @public
5444
5833
  * <p>The <code>ChangeToken</code> that you used to submit the <code>UpdateRule</code> request. You can also use this value
5445
5834
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
5446
5835
  */
@@ -5461,11 +5850,13 @@ export interface UpdateRuleResponse {
5461
5850
  */
5462
5851
  export interface RuleGroupUpdate {
5463
5852
  /**
5853
+ * @public
5464
5854
  * <p>Specify <code>INSERT</code> to add an <code>ActivatedRule</code> to a <code>RuleGroup</code>. Use <code>DELETE</code> to remove an
5465
5855
  * <code>ActivatedRule</code> from a <code>RuleGroup</code>.</p>
5466
5856
  */
5467
5857
  Action: ChangeAction | string | undefined;
5468
5858
  /**
5859
+ * @public
5469
5860
  * <p>The <code>ActivatedRule</code> object specifies a <code>Rule</code> that you want to insert or delete,
5470
5861
  * the priority of the <code>Rule</code> in the <code>WebACL</code>, and the action that you want AWS WAF to take when a web request matches the <code>Rule</code>
5471
5862
  * (<code>ALLOW</code>, <code>BLOCK</code>, or <code>COUNT</code>).</p>
@@ -5477,11 +5868,13 @@ export interface RuleGroupUpdate {
5477
5868
  */
5478
5869
  export interface UpdateRuleGroupRequest {
5479
5870
  /**
5871
+ * @public
5480
5872
  * <p>The <code>RuleGroupId</code> of the <a>RuleGroup</a> that you want to update. <code>RuleGroupId</code> is returned by <a>CreateRuleGroup</a> and by
5481
5873
  * <a>ListRuleGroups</a>.</p>
5482
5874
  */
5483
5875
  RuleGroupId: string | undefined;
5484
5876
  /**
5877
+ * @public
5485
5878
  * <p>An array of <code>RuleGroupUpdate</code> objects that you want to insert into or delete from a
5486
5879
  * <a>RuleGroup</a>.</p>
5487
5880
  * <p>You can only insert <code>REGULAR</code> rules into a rule group.</p>
@@ -5490,6 +5883,7 @@ export interface UpdateRuleGroupRequest {
5490
5883
  */
5491
5884
  Updates: RuleGroupUpdate[] | undefined;
5492
5885
  /**
5886
+ * @public
5493
5887
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
5494
5888
  */
5495
5889
  ChangeToken: string | undefined;
@@ -5499,6 +5893,7 @@ export interface UpdateRuleGroupRequest {
5499
5893
  */
5500
5894
  export interface UpdateRuleGroupResponse {
5501
5895
  /**
5896
+ * @public
5502
5897
  * <p>The <code>ChangeToken</code> that you used to submit the <code>UpdateRuleGroup</code> request. You can also use this value
5503
5898
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
5504
5899
  */
@@ -5519,11 +5914,13 @@ export interface UpdateRuleGroupResponse {
5519
5914
  */
5520
5915
  export interface SizeConstraintSetUpdate {
5521
5916
  /**
5917
+ * @public
5522
5918
  * <p>Specify <code>INSERT</code> to add a <a>SizeConstraintSetUpdate</a> to a <a>SizeConstraintSet</a>.
5523
5919
  * Use <code>DELETE</code> to remove a <code>SizeConstraintSetUpdate</code> from a <code>SizeConstraintSet</code>.</p>
5524
5920
  */
5525
5921
  Action: ChangeAction | string | undefined;
5526
5922
  /**
5923
+ * @public
5527
5924
  * <p>Specifies a constraint on the size of a part of the web request. AWS WAF uses the <code>Size</code>, <code>ComparisonOperator</code>, and <code>FieldToMatch</code> to build
5528
5925
  * an expression in the form of "<code>Size</code>
5529
5926
  * <code>ComparisonOperator</code> size in bytes of <code>FieldToMatch</code>". If that expression is true, the
@@ -5536,15 +5933,18 @@ export interface SizeConstraintSetUpdate {
5536
5933
  */
5537
5934
  export interface UpdateSizeConstraintSetRequest {
5538
5935
  /**
5936
+ * @public
5539
5937
  * <p>The <code>SizeConstraintSetId</code> of the <a>SizeConstraintSet</a> that you want to update. <code>SizeConstraintSetId</code>
5540
5938
  * is returned by <a>CreateSizeConstraintSet</a> and by <a>ListSizeConstraintSets</a>.</p>
5541
5939
  */
5542
5940
  SizeConstraintSetId: string | undefined;
5543
5941
  /**
5942
+ * @public
5544
5943
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
5545
5944
  */
5546
5945
  ChangeToken: string | undefined;
5547
5946
  /**
5947
+ * @public
5548
5948
  * <p>An array of <code>SizeConstraintSetUpdate</code> objects that you want to insert into or delete from a <a>SizeConstraintSet</a>.
5549
5949
  * For more information, see the applicable data types:</p>
5550
5950
  * <ul>
@@ -5573,6 +5973,7 @@ export interface UpdateSizeConstraintSetRequest {
5573
5973
  */
5574
5974
  export interface UpdateSizeConstraintSetResponse {
5575
5975
  /**
5976
+ * @public
5576
5977
  * <p>The <code>ChangeToken</code> that you used to submit the <code>UpdateSizeConstraintSet</code> request. You can also use this value
5577
5978
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
5578
5979
  */
@@ -5593,11 +5994,13 @@ export interface UpdateSizeConstraintSetResponse {
5593
5994
  */
5594
5995
  export interface SqlInjectionMatchSetUpdate {
5595
5996
  /**
5997
+ * @public
5596
5998
  * <p>Specify <code>INSERT</code> to add a <a>SqlInjectionMatchSetUpdate</a> to a <a>SqlInjectionMatchSet</a>.
5597
5999
  * Use <code>DELETE</code> to remove a <code>SqlInjectionMatchSetUpdate</code> from a <code>SqlInjectionMatchSet</code>.</p>
5598
6000
  */
5599
6001
  Action: ChangeAction | string | undefined;
5600
6002
  /**
6003
+ * @public
5601
6004
  * <p>Specifies the part of a web request that you want AWS WAF to inspect for snippets of malicious SQL code and, if you want AWS WAF to inspect a header, the name of the header.</p>
5602
6005
  */
5603
6006
  SqlInjectionMatchTuple: SqlInjectionMatchTuple | undefined;
@@ -5608,15 +6011,18 @@ export interface SqlInjectionMatchSetUpdate {
5608
6011
  */
5609
6012
  export interface UpdateSqlInjectionMatchSetRequest {
5610
6013
  /**
6014
+ * @public
5611
6015
  * <p>The <code>SqlInjectionMatchSetId</code> of the <code>SqlInjectionMatchSet</code> that you want to update.
5612
6016
  * <code>SqlInjectionMatchSetId</code> is returned by <a>CreateSqlInjectionMatchSet</a> and by <a>ListSqlInjectionMatchSets</a>.</p>
5613
6017
  */
5614
6018
  SqlInjectionMatchSetId: string | undefined;
5615
6019
  /**
6020
+ * @public
5616
6021
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
5617
6022
  */
5618
6023
  ChangeToken: string | undefined;
5619
6024
  /**
6025
+ * @public
5620
6026
  * <p>An array of <code>SqlInjectionMatchSetUpdate</code> objects that you want to insert into or delete from a
5621
6027
  * <a>SqlInjectionMatchSet</a>. For more information, see the applicable data types:</p>
5622
6028
  * <ul>
@@ -5645,6 +6051,7 @@ export interface UpdateSqlInjectionMatchSetRequest {
5645
6051
  */
5646
6052
  export interface UpdateSqlInjectionMatchSetResponse {
5647
6053
  /**
6054
+ * @public
5648
6055
  * <p>The <code>ChangeToken</code> that you used to submit the <code>UpdateSqlInjectionMatchSet</code> request. You can also use this value
5649
6056
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
5650
6057
  */
@@ -5664,10 +6071,12 @@ export interface UpdateSqlInjectionMatchSetResponse {
5664
6071
  */
5665
6072
  export interface WebACLUpdate {
5666
6073
  /**
6074
+ * @public
5667
6075
  * <p>Specifies whether to insert a <code>Rule</code> into or delete a <code>Rule</code> from a <code>WebACL</code>.</p>
5668
6076
  */
5669
6077
  Action: ChangeAction | string | undefined;
5670
6078
  /**
6079
+ * @public
5671
6080
  * <p>The <code>ActivatedRule</code> object in an <a>UpdateWebACL</a> request specifies a <code>Rule</code> that you want to insert or delete,
5672
6081
  * the priority of the <code>Rule</code> in the <code>WebACL</code>, and the action that you want AWS WAF to take when a web request matches the <code>Rule</code>
5673
6082
  * (<code>ALLOW</code>, <code>BLOCK</code>, or <code>COUNT</code>).</p>
@@ -5679,15 +6088,18 @@ export interface WebACLUpdate {
5679
6088
  */
5680
6089
  export interface UpdateWebACLRequest {
5681
6090
  /**
6091
+ * @public
5682
6092
  * <p>The <code>WebACLId</code> of the <a>WebACL</a> that you want to update. <code>WebACLId</code> is returned by <a>CreateWebACL</a> and by
5683
6093
  * <a>ListWebACLs</a>.</p>
5684
6094
  */
5685
6095
  WebACLId: string | undefined;
5686
6096
  /**
6097
+ * @public
5687
6098
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
5688
6099
  */
5689
6100
  ChangeToken: string | undefined;
5690
6101
  /**
6102
+ * @public
5691
6103
  * <p>An array of updates to make to the <a>WebACL</a>.</p>
5692
6104
  * <p>An array of <code>WebACLUpdate</code> objects that you want to insert into or delete from a
5693
6105
  * <a>WebACL</a>. For more information, see the applicable data types:</p>
@@ -5717,6 +6129,7 @@ export interface UpdateWebACLRequest {
5717
6129
  */
5718
6130
  Updates?: WebACLUpdate[];
5719
6131
  /**
6132
+ * @public
5720
6133
  * <p>A default action for the web ACL, either ALLOW or BLOCK. AWS WAF performs the default
5721
6134
  * action if a request doesn't match the criteria in any of the rules in a web ACL.</p>
5722
6135
  */
@@ -5727,6 +6140,7 @@ export interface UpdateWebACLRequest {
5727
6140
  */
5728
6141
  export interface UpdateWebACLResponse {
5729
6142
  /**
6143
+ * @public
5730
6144
  * <p>The <code>ChangeToken</code> that you used to submit the <code>UpdateWebACL</code> request. You can also use this value
5731
6145
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
5732
6146
  */
@@ -5759,6 +6173,7 @@ export declare class WAFSubscriptionNotFoundException extends __BaseException {
5759
6173
  */
5760
6174
  export interface XssMatchSetUpdate {
5761
6175
  /**
6176
+ * @public
5762
6177
  * <p>Specify <code>INSERT</code> to add an
5763
6178
  * <a>XssMatchSetUpdate</a> to an <a>XssMatchSet</a>. Use
5764
6179
  * <code>DELETE</code> to remove an
@@ -5766,6 +6181,7 @@ export interface XssMatchSetUpdate {
5766
6181
  */
5767
6182
  Action: ChangeAction | string | undefined;
5768
6183
  /**
6184
+ * @public
5769
6185
  * <p>Specifies the part of a web request that you want AWS WAF to inspect for cross-site scripting attacks and, if you want AWS WAF to inspect a header, the name of the header.</p>
5770
6186
  */
5771
6187
  XssMatchTuple: XssMatchTuple | undefined;
@@ -5776,15 +6192,18 @@ export interface XssMatchSetUpdate {
5776
6192
  */
5777
6193
  export interface UpdateXssMatchSetRequest {
5778
6194
  /**
6195
+ * @public
5779
6196
  * <p>The <code>XssMatchSetId</code> of the <code>XssMatchSet</code> that you want to update.
5780
6197
  * <code>XssMatchSetId</code> is returned by <a>CreateXssMatchSet</a> and by <a>ListXssMatchSets</a>.</p>
5781
6198
  */
5782
6199
  XssMatchSetId: string | undefined;
5783
6200
  /**
6201
+ * @public
5784
6202
  * <p>The value returned by the most recent call to <a>GetChangeToken</a>.</p>
5785
6203
  */
5786
6204
  ChangeToken: string | undefined;
5787
6205
  /**
6206
+ * @public
5788
6207
  * <p>An array of <code>XssMatchSetUpdate</code> objects that you want to insert into or
5789
6208
  * delete from an
5790
6209
  * <a>XssMatchSet</a>. For more information, see the applicable data
@@ -5815,6 +6234,7 @@ export interface UpdateXssMatchSetRequest {
5815
6234
  */
5816
6235
  export interface UpdateXssMatchSetResponse {
5817
6236
  /**
6237
+ * @public
5818
6238
  * <p>The <code>ChangeToken</code> that you used to submit the <code>UpdateXssMatchSet</code> request. You can also use this value
5819
6239
  * to query the status of the request. For more information, see <a>GetChangeTokenStatus</a>.</p>
5820
6240
  */