@aws-sdk/client-waf 3.31.0 → 3.35.0

package/src/commands/CreateByteMatchSetCommand.ts

@@ -0,0 +1,126 @@
+import { getSerdePlugin } from "@aws-sdk/middleware-serde";
+import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@aws-sdk/protocol-http";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import {
+  FinalizeHandlerArguments,
+  Handler,
+  HandlerExecutionContext,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+  SerdeContext as __SerdeContext,
+} from "@aws-sdk/types";
+
+import { CreateByteMatchSetRequest, CreateByteMatchSetResponse } from "../models/models_0";
+import {
+  deserializeAws_json1_1CreateByteMatchSetCommand,
+  serializeAws_json1_1CreateByteMatchSetCommand,
+} from "../protocols/Aws_json1_1";
+import { ServiceInputTypes, ServiceOutputTypes, WAFClientResolvedConfig } from "../WAFClient";
+
+export interface CreateByteMatchSetCommandInput extends CreateByteMatchSetRequest {}
+export interface CreateByteMatchSetCommandOutput extends CreateByteMatchSetResponse, __MetadataBearer {}
+
+/**
+ * <note>
+ *             <p>This is <b>AWS WAF Classic</b> documentation. For
+ *       more information, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html">AWS
+ *       WAF Classic</a> in the developer guide.</p>
+ *             <p>
+ *                <b>For the latest version of AWS
+ *       WAF</b>, use the AWS WAFV2 API and see the <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">AWS WAF Developer Guide</a>. With the latest version, AWS WAF has a single set of endpoints for regional and global use. </p>
+ *          </note>
+ * 		       <p>Creates a <code>ByteMatchSet</code>. You then use <a>UpdateByteMatchSet</a> to identify the part of a
+ * 			web request that you want AWS WAF to inspect, such as the values of the <code>User-Agent</code> header or the query string.
+ * 			For example, you can create a <code>ByteMatchSet</code> that matches any requests with <code>User-Agent</code> headers
+ * 			that contain the string <code>BadBot</code>. You can then configure AWS WAF to reject those requests.</p>
+ * 		       <p>To create and configure a <code>ByteMatchSet</code>, perform the following steps:</p>
+ * 		       <ol>
+ *             <li>
+ *                <p>Use <a>GetChangeToken</a> to get the change token that you provide in the <code>ChangeToken</code> parameter of a
+ * 				<code>CreateByteMatchSet</code> request.</p>
+ *             </li>
+ *             <li>
+ *                <p>Submit a <code>CreateByteMatchSet</code> request.</p>
+ *             </li>
+ *             <li>
+ *                <p>Use <code>GetChangeToken</code> to get the change token that you provide in the <code>ChangeToken</code> parameter of an
+ * 				<code>UpdateByteMatchSet</code> request.</p>
+ *             </li>
+ *             <li>
+ *                <p>Submit an <a>UpdateByteMatchSet</a> request to specify the part of the request that you want AWS WAF to inspect
+ * 				(for example, the header or the URI) and the value that you want AWS WAF to watch for.</p>
+ *             </li>
+ *          </ol>
+ * 		       <p>For more information about how to use the AWS WAF API to allow or block HTTP requests, see the
+ * 			<a href="https://docs.aws.amazon.com/waf/latest/developerguide/">AWS WAF Developer Guide</a>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { WAFClient, CreateByteMatchSetCommand } from "@aws-sdk/client-waf"; // ES Modules import
+ * // const { WAFClient, CreateByteMatchSetCommand } = require("@aws-sdk/client-waf"); // CommonJS import
+ * const client = new WAFClient(config);
+ * const command = new CreateByteMatchSetCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link CreateByteMatchSetCommandInput} for command's `input` shape.
+ * @see {@link CreateByteMatchSetCommandOutput} for command's `response` shape.
+ * @see {@link WAFClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export class CreateByteMatchSetCommand extends $Command<
+  CreateByteMatchSetCommandInput,
+  CreateByteMatchSetCommandOutput,
+  WAFClientResolvedConfig
+> {
+  // Start section: command_properties
+  // End section: command_properties
+
+  constructor(readonly input: CreateByteMatchSetCommandInput) {
+    // Start section: command_constructor
+    super();
+    // End section: command_constructor
+  }
+
+  /**
+   * @internal
+   */
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: WAFClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<CreateByteMatchSetCommandInput, CreateByteMatchSetCommandOutput> {
+    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
+
+    const stack = clientStack.concat(this.middlewareStack);
+
+    const { logger } = configuration;
+    const clientName = "WAFClient";
+    const commandName = "CreateByteMatchSetCommand";
+    const handlerExecutionContext: HandlerExecutionContext = {
+      logger,
+      clientName,
+      commandName,
+      inputFilterSensitiveLog: CreateByteMatchSetRequest.filterSensitiveLog,
+      outputFilterSensitiveLog: CreateByteMatchSetResponse.filterSensitiveLog,
+    };
+    const { requestHandler } = configuration;
+    return stack.resolve(
+      (request: FinalizeHandlerArguments<any>) =>
+        requestHandler.handle(request.request as __HttpRequest, options || {}),
+      handlerExecutionContext
+    );
+  }
+
+  private serialize(input: CreateByteMatchSetCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
+    return serializeAws_json1_1CreateByteMatchSetCommand(input, context);
+  }
+
+  private deserialize(output: __HttpResponse, context: __SerdeContext): Promise<CreateByteMatchSetCommandOutput> {
+    return deserializeAws_json1_1CreateByteMatchSetCommand(output, context);
+  }
+
+  // Start section: command_body_extra
+  // End section: command_body_extra
+}

package/src/commands/CreateGeoMatchSetCommand.ts

@@ -0,0 +1,123 @@
+import { getSerdePlugin } from "@aws-sdk/middleware-serde";
+import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@aws-sdk/protocol-http";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import {
+  FinalizeHandlerArguments,
+  Handler,
+  HandlerExecutionContext,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+  SerdeContext as __SerdeContext,
+} from "@aws-sdk/types";
+
+import { CreateGeoMatchSetRequest, CreateGeoMatchSetResponse } from "../models/models_0";
+import {
+  deserializeAws_json1_1CreateGeoMatchSetCommand,
+  serializeAws_json1_1CreateGeoMatchSetCommand,
+} from "../protocols/Aws_json1_1";
+import { ServiceInputTypes, ServiceOutputTypes, WAFClientResolvedConfig } from "../WAFClient";
+
+export interface CreateGeoMatchSetCommandInput extends CreateGeoMatchSetRequest {}
+export interface CreateGeoMatchSetCommandOutput extends CreateGeoMatchSetResponse, __MetadataBearer {}
+
+/**
+ * <note>
+ *             <p>This is <b>AWS WAF Classic</b> documentation. For
+ *       more information, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html">AWS
+ *       WAF Classic</a> in the developer guide.</p>
+ *             <p>
+ *                <b>For the latest version of AWS
+ *       WAF</b>, use the AWS WAFV2 API and see the <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">AWS WAF Developer Guide</a>. With the latest version, AWS WAF has a single set of endpoints for regional and global use. </p>
+ *          </note>
+ *          <p>Creates an <a>GeoMatchSet</a>, which you use to specify which web requests you want to allow or block based on the country
+ * 			that the requests originate from. For example, if you're receiving a lot of requests from one or more countries and you want to block the requests, you can create an <code>GeoMatchSet</code> that contains those countries and then configure AWS WAF to block the requests. </p>
+ * 		       <p>To create and configure a <code>GeoMatchSet</code>, perform the following steps:</p>
+ * 		       <ol>
+ *             <li>
+ *                <p>Use <a>GetChangeToken</a> to get the change token that you provide in the <code>ChangeToken</code> parameter of a
+ * 				<code>CreateGeoMatchSet</code> request.</p>
+ *             </li>
+ *             <li>
+ *                <p>Submit a <code>CreateGeoMatchSet</code> request.</p>
+ *             </li>
+ *             <li>
+ *                <p>Use <code>GetChangeToken</code> to get the change token that you provide in the <code>ChangeToken</code> parameter of an
+ * 				<a>UpdateGeoMatchSet</a> request.</p>
+ *             </li>
+ *             <li>
+ *                <p>Submit an <code>UpdateGeoMatchSetSet</code> request to specify the countries that you want AWS WAF to watch for.</p>
+ *             </li>
+ *          </ol>
+ * 		       <p>For more information about how to use the AWS WAF API to allow or block HTTP requests, see the
+ * 			<a href="https://docs.aws.amazon.com/waf/latest/developerguide/">AWS WAF Developer Guide</a>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { WAFClient, CreateGeoMatchSetCommand } from "@aws-sdk/client-waf"; // ES Modules import
+ * // const { WAFClient, CreateGeoMatchSetCommand } = require("@aws-sdk/client-waf"); // CommonJS import
+ * const client = new WAFClient(config);
+ * const command = new CreateGeoMatchSetCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link CreateGeoMatchSetCommandInput} for command's `input` shape.
+ * @see {@link CreateGeoMatchSetCommandOutput} for command's `response` shape.
+ * @see {@link WAFClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export class CreateGeoMatchSetCommand extends $Command<
+  CreateGeoMatchSetCommandInput,
+  CreateGeoMatchSetCommandOutput,
+  WAFClientResolvedConfig
+> {
+  // Start section: command_properties
+  // End section: command_properties
+
+  constructor(readonly input: CreateGeoMatchSetCommandInput) {
+    // Start section: command_constructor
+    super();
+    // End section: command_constructor
+  }
+
+  /**
+   * @internal
+   */
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: WAFClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<CreateGeoMatchSetCommandInput, CreateGeoMatchSetCommandOutput> {
+    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
+
+    const stack = clientStack.concat(this.middlewareStack);
+
+    const { logger } = configuration;
+    const clientName = "WAFClient";
+    const commandName = "CreateGeoMatchSetCommand";
+    const handlerExecutionContext: HandlerExecutionContext = {
+      logger,
+      clientName,
+      commandName,
+      inputFilterSensitiveLog: CreateGeoMatchSetRequest.filterSensitiveLog,
+      outputFilterSensitiveLog: CreateGeoMatchSetResponse.filterSensitiveLog,
+    };
+    const { requestHandler } = configuration;
+    return stack.resolve(
+      (request: FinalizeHandlerArguments<any>) =>
+        requestHandler.handle(request.request as __HttpRequest, options || {}),
+      handlerExecutionContext
+    );
+  }
+
+  private serialize(input: CreateGeoMatchSetCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
+    return serializeAws_json1_1CreateGeoMatchSetCommand(input, context);
+  }
+
+  private deserialize(output: __HttpResponse, context: __SerdeContext): Promise<CreateGeoMatchSetCommandOutput> {
+    return deserializeAws_json1_1CreateGeoMatchSetCommand(output, context);
+  }
+
+  // Start section: command_body_extra
+  // End section: command_body_extra
+}

package/src/commands/CreateIPSetCommand.ts

@@ -0,0 +1,128 @@
+import { getSerdePlugin } from "@aws-sdk/middleware-serde";
+import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@aws-sdk/protocol-http";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import {
+  FinalizeHandlerArguments,
+  Handler,
+  HandlerExecutionContext,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+  SerdeContext as __SerdeContext,
+} from "@aws-sdk/types";
+
+import { CreateIPSetRequest, CreateIPSetResponse } from "../models/models_0";
+import {
+  deserializeAws_json1_1CreateIPSetCommand,
+  serializeAws_json1_1CreateIPSetCommand,
+} from "../protocols/Aws_json1_1";
+import { ServiceInputTypes, ServiceOutputTypes, WAFClientResolvedConfig } from "../WAFClient";
+
+export interface CreateIPSetCommandInput extends CreateIPSetRequest {}
+export interface CreateIPSetCommandOutput extends CreateIPSetResponse, __MetadataBearer {}
+
+/**
+ * <note>
+ *             <p>This is <b>AWS WAF Classic</b> documentation. For
+ *       more information, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html">AWS
+ *       WAF Classic</a> in the developer guide.</p>
+ *             <p>
+ *                <b>For the latest version of AWS
+ *       WAF</b>, use the AWS WAFV2 API and see the <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">AWS WAF Developer Guide</a>. With the latest version, AWS WAF has a single set of endpoints for regional and global use. </p>
+ *          </note>
+ * 		       <p>Creates an <a>IPSet</a>, which you use to specify which web requests
+ *          that
+ *          you want to allow or block based on the IP addresses that the requests
+ *          originate from. For example, if you're receiving a lot of requests from one or more
+ *          individual IP addresses or one or more ranges of IP addresses and you want to block the
+ *          requests, you can create an <code>IPSet</code> that contains those IP addresses and then
+ *          configure AWS WAF to block the requests. </p>
+ * 		       <p>To create and configure an <code>IPSet</code>, perform the following steps:</p>
+ * 		       <ol>
+ *             <li>
+ *                <p>Use <a>GetChangeToken</a> to get the change token that you provide in the <code>ChangeToken</code> parameter of a
+ * 				<code>CreateIPSet</code> request.</p>
+ *             </li>
+ *             <li>
+ *                <p>Submit a <code>CreateIPSet</code> request.</p>
+ *             </li>
+ *             <li>
+ *                <p>Use <code>GetChangeToken</code> to get the change token that you provide in the <code>ChangeToken</code> parameter of an
+ * 				<a>UpdateIPSet</a> request.</p>
+ *             </li>
+ *             <li>
+ *                <p>Submit an <code>UpdateIPSet</code> request to specify the IP addresses that you want AWS WAF to watch for.</p>
+ *             </li>
+ *          </ol>
+ * 		       <p>For more information about how to use the AWS WAF API to allow or block HTTP requests, see the
+ * 			<a href="https://docs.aws.amazon.com/waf/latest/developerguide/">AWS WAF Developer Guide</a>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { WAFClient, CreateIPSetCommand } from "@aws-sdk/client-waf"; // ES Modules import
+ * // const { WAFClient, CreateIPSetCommand } = require("@aws-sdk/client-waf"); // CommonJS import
+ * const client = new WAFClient(config);
+ * const command = new CreateIPSetCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link CreateIPSetCommandInput} for command's `input` shape.
+ * @see {@link CreateIPSetCommandOutput} for command's `response` shape.
+ * @see {@link WAFClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export class CreateIPSetCommand extends $Command<
+  CreateIPSetCommandInput,
+  CreateIPSetCommandOutput,
+  WAFClientResolvedConfig
+> {
+  // Start section: command_properties
+  // End section: command_properties
+
+  constructor(readonly input: CreateIPSetCommandInput) {
+    // Start section: command_constructor
+    super();
+    // End section: command_constructor
+  }
+
+  /**
+   * @internal
+   */
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: WAFClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<CreateIPSetCommandInput, CreateIPSetCommandOutput> {
+    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
+
+    const stack = clientStack.concat(this.middlewareStack);
+
+    const { logger } = configuration;
+    const clientName = "WAFClient";
+    const commandName = "CreateIPSetCommand";
+    const handlerExecutionContext: HandlerExecutionContext = {
+      logger,
+      clientName,
+      commandName,
+      inputFilterSensitiveLog: CreateIPSetRequest.filterSensitiveLog,
+      outputFilterSensitiveLog: CreateIPSetResponse.filterSensitiveLog,
+    };
+    const { requestHandler } = configuration;
+    return stack.resolve(
+      (request: FinalizeHandlerArguments<any>) =>
+        requestHandler.handle(request.request as __HttpRequest, options || {}),
+      handlerExecutionContext
+    );
+  }
+
+  private serialize(input: CreateIPSetCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
+    return serializeAws_json1_1CreateIPSetCommand(input, context);
+  }
+
+  private deserialize(output: __HttpResponse, context: __SerdeContext): Promise<CreateIPSetCommandOutput> {
+    return deserializeAws_json1_1CreateIPSetCommand(output, context);
+  }
+
+  // Start section: command_body_extra
+  // End section: command_body_extra
+}

package/src/commands/CreateRateBasedRuleCommand.ts

@@ -0,0 +1,188 @@
+import { getSerdePlugin } from "@aws-sdk/middleware-serde";
+import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@aws-sdk/protocol-http";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import {
+  FinalizeHandlerArguments,
+  Handler,
+  HandlerExecutionContext,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+  SerdeContext as __SerdeContext,
+} from "@aws-sdk/types";
+
+import { CreateRateBasedRuleRequest, CreateRateBasedRuleResponse } from "../models/models_0";
+import {
+  deserializeAws_json1_1CreateRateBasedRuleCommand,
+  serializeAws_json1_1CreateRateBasedRuleCommand,
+} from "../protocols/Aws_json1_1";
+import { ServiceInputTypes, ServiceOutputTypes, WAFClientResolvedConfig } from "../WAFClient";
+
+export interface CreateRateBasedRuleCommandInput extends CreateRateBasedRuleRequest {}
+export interface CreateRateBasedRuleCommandOutput extends CreateRateBasedRuleResponse, __MetadataBearer {}
+
+/**
+ * <note>
+ *             <p>This is <b>AWS WAF Classic</b> documentation. For
+ *       more information, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html">AWS
+ *       WAF Classic</a> in the developer guide.</p>
+ *             <p>
+ *                <b>For the latest version of AWS
+ *       WAF</b>, use the AWS WAFV2 API and see the <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">AWS WAF Developer Guide</a>. With the latest version, AWS WAF has a single set of endpoints for regional and global use. </p>
+ *          </note>
+ *          <p>Creates a <a>RateBasedRule</a>. The <code>RateBasedRule</code> contains a
+ *             <code>RateLimit</code>, which specifies the maximum number of requests that AWS WAF allows
+ *                 from a specified IP address in a five-minute period.
+ *                 The <code>RateBasedRule</code> also
+ *          contains the <code>IPSet</code> objects, <code>ByteMatchSet</code> objects, and other
+ *          predicates that identify the requests that you want to count or block if these requests
+ *          exceed the <code>RateLimit</code>.</p>
+ *          <p>If you add more than one predicate to a <code>RateBasedRule</code>, a request not
+ *          only must exceed the <code>RateLimit</code>, but it also must match all the
+ *          conditions to be counted or blocked. For example, suppose you add the following to a
+ *             <code>RateBasedRule</code>:</p>
+ *          <ul>
+ *             <li>
+ *                <p>An <code>IPSet</code> that matches the IP address <code>192.0.2.44/32</code>
+ *                </p>
+ *             </li>
+ *             <li>
+ *                <p>A <code>ByteMatchSet</code> that matches <code>BadBot</code> in the
+ *                   <code>User-Agent</code> header</p>
+ *             </li>
+ *          </ul>
+ *          <p>Further, you specify a <code>RateLimit</code> of 1,000.</p>
+ *          <p>You then add the <code>RateBasedRule</code> to a <code>WebACL</code> and specify that
+ *          you want to block requests that meet the conditions in the rule. For a request to be
+ *          blocked, it must come from the IP address 192.0.2.44 <i>and</i> the
+ *             <code>User-Agent</code> header in the request must contain the value
+ *          <code>BadBot</code>. Further, requests that match these two conditions must be received at
+ *          a rate of more than 1,000 requests every five minutes. If both conditions are met and the
+ *          rate is exceeded, AWS WAF blocks the requests. If the rate drops below 1,000 for a
+ *          five-minute period, AWS WAF no longer blocks the requests.</p>
+ *
+ * 		       <p>As a second example, suppose you want to limit requests to a particular page on your site. To do this, you could add the following to a
+ *             <code>RateBasedRule</code>:</p>
+ *
+ *
+ *          <ul>
+ *             <li>
+ *                <p>A <code>ByteMatchSet</code> with <code>FieldToMatch</code> of <code>URI</code>
+ *                </p>
+ *             </li>
+ *             <li>
+ *                <p>A <code>PositionalConstraint</code> of <code>STARTS_WITH</code>
+ *                </p>
+ *             </li>
+ *             <li>
+ *                <p>A <code>TargetString</code> of <code>login</code>
+ *                </p>
+ *             </li>
+ *          </ul>
+ *          <p>Further, you specify a <code>RateLimit</code> of 1,000.</p>
+ *          <p>By adding this <code>RateBasedRule</code> to a <code>WebACL</code>, you could limit requests to your login page without affecting the rest of your site.</p>
+ *
+ *
+ *          <p>To create and configure a <code>RateBasedRule</code>, perform the following
+ *          steps:</p>
+ *          <ol>
+ *             <li>
+ *                <p>Create and update the predicates that you want to include in the rule. For more
+ *                information, see <a>CreateByteMatchSet</a>, <a>CreateIPSet</a>,
+ *                and <a>CreateSqlInjectionMatchSet</a>.</p>
+ *             </li>
+ *             <li>
+ *                <p>Use <a>GetChangeToken</a> to get the change token that you provide
+ *                in the <code>ChangeToken</code> parameter of a <code>CreateRule</code>
+ *                request.</p>
+ *             </li>
+ *             <li>
+ *                <p>Submit a <code>CreateRateBasedRule</code> request.</p>
+ *             </li>
+ *             <li>
+ *                <p>Use <code>GetChangeToken</code> to get the change token that you provide in the
+ *                   <code>ChangeToken</code> parameter of an <a>UpdateRule</a>
+ *                request.</p>
+ *             </li>
+ *             <li>
+ *                <p>Submit an <code>UpdateRateBasedRule</code> request to specify the predicates
+ *                that you want to include in the rule.</p>
+ *             </li>
+ *             <li>
+ *                <p>Create and update a <code>WebACL</code> that contains the
+ *                   <code>RateBasedRule</code>. For more information, see <a>CreateWebACL</a>.</p>
+ *             </li>
+ *          </ol>
+ *          <p>For more information about how to use the AWS WAF API to allow or block HTTP requests,
+ *          see the <a href="https://docs.aws.amazon.com/waf/latest/developerguide/">AWS WAF Developer
+ *             Guide</a>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { WAFClient, CreateRateBasedRuleCommand } from "@aws-sdk/client-waf"; // ES Modules import
+ * // const { WAFClient, CreateRateBasedRuleCommand } = require("@aws-sdk/client-waf"); // CommonJS import
+ * const client = new WAFClient(config);
+ * const command = new CreateRateBasedRuleCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link CreateRateBasedRuleCommandInput} for command's `input` shape.
+ * @see {@link CreateRateBasedRuleCommandOutput} for command's `response` shape.
+ * @see {@link WAFClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export class CreateRateBasedRuleCommand extends $Command<
+  CreateRateBasedRuleCommandInput,
+  CreateRateBasedRuleCommandOutput,
+  WAFClientResolvedConfig
+> {
+  // Start section: command_properties
+  // End section: command_properties
+
+  constructor(readonly input: CreateRateBasedRuleCommandInput) {
+    // Start section: command_constructor
+    super();
+    // End section: command_constructor
+  }
+
+  /**
+   * @internal
+   */
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: WAFClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<CreateRateBasedRuleCommandInput, CreateRateBasedRuleCommandOutput> {
+    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
+
+    const stack = clientStack.concat(this.middlewareStack);
+
+    const { logger } = configuration;
+    const clientName = "WAFClient";
+    const commandName = "CreateRateBasedRuleCommand";
+    const handlerExecutionContext: HandlerExecutionContext = {
+      logger,
+      clientName,
+      commandName,
+      inputFilterSensitiveLog: CreateRateBasedRuleRequest.filterSensitiveLog,
+      outputFilterSensitiveLog: CreateRateBasedRuleResponse.filterSensitiveLog,
+    };
+    const { requestHandler } = configuration;
+    return stack.resolve(
+      (request: FinalizeHandlerArguments<any>) =>
+        requestHandler.handle(request.request as __HttpRequest, options || {}),
+      handlerExecutionContext
+    );
+  }
+
+  private serialize(input: CreateRateBasedRuleCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
+    return serializeAws_json1_1CreateRateBasedRuleCommand(input, context);
+  }
+
+  private deserialize(output: __HttpResponse, context: __SerdeContext): Promise<CreateRateBasedRuleCommandOutput> {
+    return deserializeAws_json1_1CreateRateBasedRuleCommand(output, context);
+  }
+
+  // Start section: command_body_extra
+  // End section: command_body_extra
+}