@aws-sdk/client-waf 3.34.0 → 3.35.0

package/dist-types/commands/UpdateRuleGroupCommand.d.ts

@@ -0,0 +1,67 @@
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { UpdateRuleGroupRequest, UpdateRuleGroupResponse } from "../models/models_0";
+import { ServiceInputTypes, ServiceOutputTypes, WAFClientResolvedConfig } from "../WAFClient";
+export interface UpdateRuleGroupCommandInput extends UpdateRuleGroupRequest {
+}
+export interface UpdateRuleGroupCommandOutput extends UpdateRuleGroupResponse, __MetadataBearer {
+}
+/**
+ * <note>
+ *             <p>This is <b>AWS WAF Classic</b> documentation. For
+ *       more information, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html">AWS
+ *       WAF Classic</a> in the developer guide.</p>
+ *             <p>
+ *                <b>For the latest version of AWS
+ *       WAF</b>, use the AWS WAFV2 API and see the <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">AWS WAF Developer Guide</a>. With the latest version, AWS WAF has a single set of endpoints for regional and global use. </p>
+ *          </note>
+ *          <p>Inserts or deletes <a>ActivatedRule</a> objects in a <code>RuleGroup</code>.</p>
+ * 	        <p>You can only insert <code>REGULAR</code> rules into a rule group.</p>
+ *          <p>You can have a maximum of ten rules per rule group.</p>
+ *
+ *
+ *          <p>To create and configure a <code>RuleGroup</code>, perform the following steps:</p>
+ *          <ol>
+ *             <li>
+ *                <p>Create and update the <code>Rules</code> that you want to include in the <code>RuleGroup</code>. See <a>CreateRule</a>.</p>
+ *             </li>
+ *             <li>
+ *                <p>Use <code>GetChangeToken</code> to get the change token that you provide in the <code>ChangeToken</code> parameter of an
+ *                <a>UpdateRuleGroup</a> request.</p>
+ *             </li>
+ *             <li>
+ *                <p>Submit an <code>UpdateRuleGroup</code> request to add <code>Rules</code> to the <code>RuleGroup</code>.</p>
+ *             </li>
+ *             <li>
+ *                <p>Create and update a <code>WebACL</code> that contains the <code>RuleGroup</code>. See <a>CreateWebACL</a>.</p>
+ *             </li>
+ *          </ol>
+ *          <p>If you want to replace one <code>Rule</code> with another, you delete the existing one and
+ *          add the new one.</p>
+ *          <p>For more information about how to use the AWS WAF API to allow or block HTTP requests, see the
+ *          <a href="https://docs.aws.amazon.com/waf/latest/developerguide/">AWS WAF Developer Guide</a>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { WAFClient, UpdateRuleGroupCommand } from "@aws-sdk/client-waf"; // ES Modules import
+ * // const { WAFClient, UpdateRuleGroupCommand } = require("@aws-sdk/client-waf"); // CommonJS import
+ * const client = new WAFClient(config);
+ * const command = new UpdateRuleGroupCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link UpdateRuleGroupCommandInput} for command's `input` shape.
+ * @see {@link UpdateRuleGroupCommandOutput} for command's `response` shape.
+ * @see {@link WAFClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export declare class UpdateRuleGroupCommand extends $Command<UpdateRuleGroupCommandInput, UpdateRuleGroupCommandOutput, WAFClientResolvedConfig> {
+    readonly input: UpdateRuleGroupCommandInput;
+    constructor(input: UpdateRuleGroupCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: WAFClientResolvedConfig, options?: __HttpHandlerOptions): Handler<UpdateRuleGroupCommandInput, UpdateRuleGroupCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/commands/UpdateSizeConstraintSetCommand.d.ts

@@ -0,0 +1,85 @@
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { UpdateSizeConstraintSetRequest, UpdateSizeConstraintSetResponse } from "../models/models_0";
+import { ServiceInputTypes, ServiceOutputTypes, WAFClientResolvedConfig } from "../WAFClient";
+export interface UpdateSizeConstraintSetCommandInput extends UpdateSizeConstraintSetRequest {
+}
+export interface UpdateSizeConstraintSetCommandOutput extends UpdateSizeConstraintSetResponse, __MetadataBearer {
+}
+/**
+ * <note>
+ *             <p>This is <b>AWS WAF Classic</b> documentation. For
+ *       more information, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html">AWS
+ *       WAF Classic</a> in the developer guide.</p>
+ *             <p>
+ *                <b>For the latest version of AWS
+ *       WAF</b>, use the AWS WAFV2 API and see the <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">AWS WAF Developer Guide</a>. With the latest version, AWS WAF has a single set of endpoints for regional and global use. </p>
+ *          </note>
+ * 		       <p>Inserts or deletes <a>SizeConstraint</a> objects (filters) in a <a>SizeConstraintSet</a>. For each <code>SizeConstraint</code> object,
+ * 			you specify the following values: </p>
+ * 		       <ul>
+ *             <li>
+ *                <p>Whether to insert or delete the object from the array. If you want to change a <code>SizeConstraintSetUpdate</code> object,
+ * 				you delete the existing object and add a new one.</p>
+ *             </li>
+ *             <li>
+ *                <p>The part of a web request that you want AWS WAF to evaluate, such as the length of a query string or the length of the
+ * 				<code>User-Agent</code> header.</p>
+ *             </li>
+ *             <li>
+ *                <p>Whether to perform any transformations on the request, such as converting it to lowercase, before checking its length.
+ * 				Note that transformations of the request body are not supported because the AWS resource forwards only the first <code>8192</code> bytes
+ * 				of your request to AWS WAF.</p>
+ * 				           <p>You can only specify a single type of TextTransformation.</p>
+ *             </li>
+ *             <li>
+ *                <p>A <code>ComparisonOperator</code> used for evaluating the selected part of the request against the specified <code>Size</code>, such as
+ * 				equals, greater than, less than, and so on.</p>
+ *             </li>
+ *             <li>
+ *                <p>The length, in bytes, that you want AWS WAF to watch for in selected part of the request. The length is computed after applying the transformation.</p>
+ *             </li>
+ *          </ul>
+ * 		       <p>For example, you can add a <code>SizeConstraintSetUpdate</code> object that matches web requests in which the length of the
+ * 			<code>User-Agent</code> header is greater than 100 bytes. You can then configure AWS WAF to block those requests.</p>
+ * 		  	    <p>To create and configure a <code>SizeConstraintSet</code>, perform the following steps:</p>
+ * 		       <ol>
+ *             <li>
+ *                <p>Create a <code>SizeConstraintSet.</code> For more information, see <a>CreateSizeConstraintSet</a>.</p>
+ *             </li>
+ *             <li>
+ *                <p>Use <a>GetChangeToken</a> to get the change token that you provide in the <code>ChangeToken</code> parameter of an
+ * 				<code>UpdateSizeConstraintSet</code> request.</p>
+ *             </li>
+ *             <li>
+ *                <p>Submit an <code>UpdateSizeConstraintSet</code> request to specify the part of the request that you want AWS WAF to inspect
+ * 				(for example, the header or the URI) and the value that you want AWS WAF to watch for.</p>
+ *             </li>
+ *          </ol>
+ * 		       <p>For more information about how to use the AWS WAF API to allow or block HTTP requests, see the
+ * 			<a href="https://docs.aws.amazon.com/waf/latest/developerguide/">AWS WAF Developer Guide</a>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { WAFClient, UpdateSizeConstraintSetCommand } from "@aws-sdk/client-waf"; // ES Modules import
+ * // const { WAFClient, UpdateSizeConstraintSetCommand } = require("@aws-sdk/client-waf"); // CommonJS import
+ * const client = new WAFClient(config);
+ * const command = new UpdateSizeConstraintSetCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link UpdateSizeConstraintSetCommandInput} for command's `input` shape.
+ * @see {@link UpdateSizeConstraintSetCommandOutput} for command's `response` shape.
+ * @see {@link WAFClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export declare class UpdateSizeConstraintSetCommand extends $Command<UpdateSizeConstraintSetCommandInput, UpdateSizeConstraintSetCommandOutput, WAFClientResolvedConfig> {
+    readonly input: UpdateSizeConstraintSetCommandInput;
+    constructor(input: UpdateSizeConstraintSetCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: WAFClientResolvedConfig, options?: __HttpHandlerOptions): Handler<UpdateSizeConstraintSetCommandInput, UpdateSizeConstraintSetCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/commands/UpdateSqlInjectionMatchSetCommand.d.ts

@@ -0,0 +1,84 @@
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { UpdateSqlInjectionMatchSetRequest, UpdateSqlInjectionMatchSetResponse } from "../models/models_0";
+import { ServiceInputTypes, ServiceOutputTypes, WAFClientResolvedConfig } from "../WAFClient";
+export interface UpdateSqlInjectionMatchSetCommandInput extends UpdateSqlInjectionMatchSetRequest {
+}
+export interface UpdateSqlInjectionMatchSetCommandOutput extends UpdateSqlInjectionMatchSetResponse, __MetadataBearer {
+}
+/**
+ * <note>
+ *             <p>This is <b>AWS WAF Classic</b> documentation. For
+ *       more information, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html">AWS
+ *       WAF Classic</a> in the developer guide.</p>
+ *             <p>
+ *                <b>For the latest version of AWS
+ *       WAF</b>, use the AWS WAFV2 API and see the <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">AWS WAF Developer Guide</a>. With the latest version, AWS WAF has a single set of endpoints for regional and global use. </p>
+ *          </note>
+ * 		       <p>Inserts or deletes <a>SqlInjectionMatchTuple</a> objects (filters) in a <a>SqlInjectionMatchSet</a>.
+ * 			For each <code>SqlInjectionMatchTuple</code> object, you specify the following values:</p>
+ * 		       <ul>
+ *             <li>
+ *                <p>
+ *                   <code>Action</code>: Whether to insert the object into or delete the object from the array. To change a
+ * 				<code>SqlInjectionMatchTuple</code>, you delete the existing object and add a new one.</p>
+ *             </li>
+ *             <li>
+ *                <p>
+ *                   <code>FieldToMatch</code>: The part of web requests that you want AWS WAF to inspect and, if you want AWS WAF to inspect a header or custom query parameter,
+ * 				the name of the header or parameter.</p>
+ *             </li>
+ *             <li>
+ *                <p>
+ *                   <code>TextTransformation</code>: Which text transformation, if any, to perform on the web request before
+ * 				inspecting the request for snippets of malicious SQL code.</p>
+ * 				           <p>You can only specify a single type of  TextTransformation.</p>
+ *             </li>
+ *          </ul>
+ * 		       <p>You use <code>SqlInjectionMatchSet</code> objects to specify which CloudFront
+ *          requests that
+ *          you want to allow, block, or count. For example, if you're receiving
+ *          requests that contain snippets of SQL code in the query string and you want to block the
+ *          requests, you can create a <code>SqlInjectionMatchSet</code> with the applicable settings,
+ *          and then configure AWS WAF to block the requests. </p>
+ * 		       <p>To create and configure a <code>SqlInjectionMatchSet</code>, perform the following steps:</p>
+ * 		       <ol>
+ *             <li>
+ *                <p>Submit a <a>CreateSqlInjectionMatchSet</a> request.</p>
+ *             </li>
+ *             <li>
+ *                <p>Use <a>GetChangeToken</a> to get the change token that you provide in the <code>ChangeToken</code> parameter of an
+ * 				<a>UpdateIPSet</a> request.</p>
+ *             </li>
+ *             <li>
+ *                <p>Submit an <code>UpdateSqlInjectionMatchSet</code> request to specify the parts of web requests that you want AWS WAF to
+ * 				inspect for snippets of SQL code.</p>
+ *             </li>
+ *          </ol>
+ * 		       <p>For more information about how to use the AWS WAF API to allow or block HTTP requests, see the
+ * 			<a href="https://docs.aws.amazon.com/waf/latest/developerguide/">AWS WAF Developer Guide</a>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { WAFClient, UpdateSqlInjectionMatchSetCommand } from "@aws-sdk/client-waf"; // ES Modules import
+ * // const { WAFClient, UpdateSqlInjectionMatchSetCommand } = require("@aws-sdk/client-waf"); // CommonJS import
+ * const client = new WAFClient(config);
+ * const command = new UpdateSqlInjectionMatchSetCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link UpdateSqlInjectionMatchSetCommandInput} for command's `input` shape.
+ * @see {@link UpdateSqlInjectionMatchSetCommandOutput} for command's `response` shape.
+ * @see {@link WAFClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export declare class UpdateSqlInjectionMatchSetCommand extends $Command<UpdateSqlInjectionMatchSetCommandInput, UpdateSqlInjectionMatchSetCommandOutput, WAFClientResolvedConfig> {
+    readonly input: UpdateSqlInjectionMatchSetCommandInput;
+    constructor(input: UpdateSqlInjectionMatchSetCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: WAFClientResolvedConfig, options?: __HttpHandlerOptions): Handler<UpdateSqlInjectionMatchSetCommandInput, UpdateSqlInjectionMatchSetCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/commands/UpdateWebACLCommand.d.ts

@@ -0,0 +1,114 @@
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { UpdateWebACLRequest, UpdateWebACLResponse } from "../models/models_0";
+import { ServiceInputTypes, ServiceOutputTypes, WAFClientResolvedConfig } from "../WAFClient";
+export interface UpdateWebACLCommandInput extends UpdateWebACLRequest {
+}
+export interface UpdateWebACLCommandOutput extends UpdateWebACLResponse, __MetadataBearer {
+}
+/**
+ * <note>
+ *             <p>This is <b>AWS WAF Classic</b> documentation. For
+ *       more information, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html">AWS
+ *       WAF Classic</a> in the developer guide.</p>
+ *             <p>
+ *                <b>For the latest version of AWS
+ *       WAF</b>, use the AWS WAFV2 API and see the <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">AWS WAF Developer Guide</a>. With the latest version, AWS WAF has a single set of endpoints for regional and global use. </p>
+ *          </note>
+ * 		       <p>Inserts or deletes <a>ActivatedRule</a> objects in a <code>WebACL</code>. Each <code>Rule</code> identifies
+ * 			web requests that you want to allow, block, or count. When you update a <code>WebACL</code>, you specify the following values:</p>
+ * 		       <ul>
+ *             <li>
+ *                <p>A default action for the <code>WebACL</code>, either <code>ALLOW</code> or <code>BLOCK</code>.
+ * 				AWS WAF performs the default action if a request doesn't match the criteria in any of the <code>Rules</code> in a <code>WebACL</code>.</p>
+ *             </li>
+ *             <li>
+ *                <p>The <code>Rules</code> that you want to add
+ *                or
+ *                delete. If you want to replace one <code>Rule</code> with another, you delete the
+ *                existing <code>Rule</code> and add the new one.</p>
+ *             </li>
+ *             <li>
+ *                <p>For each <code>Rule</code>, whether you want AWS WAF to allow requests, block requests, or count requests that match
+ * 				the conditions in the <code>Rule</code>.</p>
+ *             </li>
+ *             <li>
+ *                <p>The order in which you want AWS WAF to evaluate the <code>Rules</code> in a
+ *                   <code>WebACL</code>. If you add more than one <code>Rule</code> to a
+ *                   <code>WebACL</code>, AWS WAF evaluates each request against the <code>Rules</code>
+ *                in order based on the value of <code>Priority</code>. (The <code>Rule</code> that has
+ *                the lowest value for <code>Priority</code> is evaluated first.) When a web request
+ *                matches all
+ *                the
+ *                predicates (such as <code>ByteMatchSets</code> and <code>IPSets</code>) in a
+ *                   <code>Rule</code>, AWS WAF immediately takes the corresponding action, allow or
+ *                block, and doesn't evaluate the request against the remaining <code>Rules</code> in
+ *                the <code>WebACL</code>, if any. </p>
+ *             </li>
+ *          </ul>
+ *
+ * 		       <p>To create and configure a <code>WebACL</code>, perform the following steps:</p>
+ * 		       <ol>
+ *             <li>
+ *                <p>Create and update the predicates that you want to include in <code>Rules</code>.
+ * 				For more information, see <a>CreateByteMatchSet</a>, <a>UpdateByteMatchSet</a>, <a>CreateIPSet</a>, <a>UpdateIPSet</a>,
+ * 				<a>CreateSqlInjectionMatchSet</a>, and <a>UpdateSqlInjectionMatchSet</a>.</p>
+ *             </li>
+ *             <li>
+ *                <p>Create and update the <code>Rules</code> that you want to include in the <code>WebACL</code>. For more information, see
+ * 				<a>CreateRule</a> and <a>UpdateRule</a>.</p>
+ *             </li>
+ *             <li>
+ *                <p>Create a <code>WebACL</code>. See <a>CreateWebACL</a>.</p>
+ *             </li>
+ *             <li>
+ *                <p>Use <code>GetChangeToken</code> to get the change token that you provide in the <code>ChangeToken</code> parameter of an
+ * 				<a>UpdateWebACL</a> request.</p>
+ *             </li>
+ *             <li>
+ *                <p>Submit an <code>UpdateWebACL</code> request to specify the <code>Rules</code>
+ *                that you want to include in the <code>WebACL</code>, to specify the default action,
+ *                and to associate the <code>WebACL</code> with a CloudFront distribution. </p>
+ *                <p>The <code>ActivatedRule</code> can be a rule group. If you specify a rule group
+ *                as your
+ *                <code>ActivatedRule</code>
+ *                ,
+ *                you can exclude specific rules from that rule group.</p>
+ *                <p>If you already have a rule group associated with a web ACL and want to submit
+ *                an <code>UpdateWebACL</code> request to exclude certain rules from that rule group,
+ *                you must first remove the rule group from the web ACL, the re-insert it again,
+ *                specifying the excluded rules.
+ *                For details,
+ *                see
+ *                   <a>ActivatedRule$ExcludedRules</a>
+ *                .
+ *                </p>
+ *             </li>
+ *          </ol>
+ *          <p>Be aware that if you try to add a RATE_BASED rule to a web ACL without setting the rule type when first creating the rule, the  <a>UpdateWebACL</a> request will fail because the request tries to add a REGULAR rule (the default rule type) with the specified ID, which does not exist. 		</p>
+ * 		       <p>For more information about how to use the AWS WAF API to allow or block HTTP requests, see the <a href="https://docs.aws.amazon.com/waf/latest/developerguide/">AWS WAF Developer Guide</a>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { WAFClient, UpdateWebACLCommand } from "@aws-sdk/client-waf"; // ES Modules import
+ * // const { WAFClient, UpdateWebACLCommand } = require("@aws-sdk/client-waf"); // CommonJS import
+ * const client = new WAFClient(config);
+ * const command = new UpdateWebACLCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link UpdateWebACLCommandInput} for command's `input` shape.
+ * @see {@link UpdateWebACLCommandOutput} for command's `response` shape.
+ * @see {@link WAFClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export declare class UpdateWebACLCommand extends $Command<UpdateWebACLCommandInput, UpdateWebACLCommandOutput, WAFClientResolvedConfig> {
+    readonly input: UpdateWebACLCommandInput;
+    constructor(input: UpdateWebACLCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: WAFClientResolvedConfig, options?: __HttpHandlerOptions): Handler<UpdateWebACLCommandInput, UpdateWebACLCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/commands/UpdateXssMatchSetCommand.d.ts

@@ -0,0 +1,86 @@
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { UpdateXssMatchSetRequest, UpdateXssMatchSetResponse } from "../models/models_0";
+import { ServiceInputTypes, ServiceOutputTypes, WAFClientResolvedConfig } from "../WAFClient";
+export interface UpdateXssMatchSetCommandInput extends UpdateXssMatchSetRequest {
+}
+export interface UpdateXssMatchSetCommandOutput extends UpdateXssMatchSetResponse, __MetadataBearer {
+}
+/**
+ * <note>
+ *             <p>This is <b>AWS WAF Classic</b> documentation. For
+ *       more information, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html">AWS
+ *       WAF Classic</a> in the developer guide.</p>
+ *             <p>
+ *                <b>For the latest version of AWS
+ *       WAF</b>, use the AWS WAFV2 API and see the <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">AWS WAF Developer Guide</a>. With the latest version, AWS WAF has a single set of endpoints for regional and global use. </p>
+ *          </note>
+ * 		       <p>Inserts or deletes <a>XssMatchTuple</a> objects (filters) in an <a>XssMatchSet</a>.
+ * 			For each <code>XssMatchTuple</code> object, you specify the following values:</p>
+ * 		       <ul>
+ *             <li>
+ *                <p>
+ *                   <code>Action</code>: Whether to insert the object into or delete the object from the
+ *                array. To change an
+ *                <code>XssMatchTuple</code>, you delete the existing object and add a new
+ *                one.</p>
+ *             </li>
+ *             <li>
+ *                <p>
+ *                   <code>FieldToMatch</code>: The part of web requests that you want AWS WAF to inspect and, if you want AWS WAF to inspect a header or custom query parameter,
+ * 				the name of the header or parameter.</p>
+ *             </li>
+ *             <li>
+ *                <p>
+ *                   <code>TextTransformation</code>: Which text transformation, if any, to perform on the web request before
+ * 				inspecting the request for cross-site scripting attacks.</p>
+ * 				           <p>You can only specify a single type of TextTransformation.</p>
+ *             </li>
+ *          </ul>
+ * 		       <p>You use <code>XssMatchSet</code> objects to specify which CloudFront requests
+ *          that
+ *          you want to allow, block, or count. For example, if you're receiving
+ *          requests that contain cross-site scripting attacks in the request body and you want to
+ *          block the requests, you can create an <code>XssMatchSet</code> with the applicable
+ *          settings, and then configure AWS WAF to block the requests. </p>
+ * 		       <p>To create and configure an <code>XssMatchSet</code>, perform the following steps:</p>
+ * 		       <ol>
+ *             <li>
+ *                <p>Submit a <a>CreateXssMatchSet</a> request.</p>
+ *             </li>
+ *             <li>
+ *                <p>Use <a>GetChangeToken</a> to get the change token that you provide in the <code>ChangeToken</code> parameter of an
+ * 				<a>UpdateIPSet</a> request.</p>
+ *             </li>
+ *             <li>
+ *                <p>Submit an <code>UpdateXssMatchSet</code> request to specify the parts of web requests that you want AWS WAF to
+ * 				inspect for cross-site scripting attacks.</p>
+ *             </li>
+ *          </ol>
+ * 		       <p>For more information about how to use the AWS WAF API to allow or block HTTP requests, see the
+ * 			<a href="https://docs.aws.amazon.com/waf/latest/developerguide/">AWS WAF Developer Guide</a>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { WAFClient, UpdateXssMatchSetCommand } from "@aws-sdk/client-waf"; // ES Modules import
+ * // const { WAFClient, UpdateXssMatchSetCommand } = require("@aws-sdk/client-waf"); // CommonJS import
+ * const client = new WAFClient(config);
+ * const command = new UpdateXssMatchSetCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link UpdateXssMatchSetCommandInput} for command's `input` shape.
+ * @see {@link UpdateXssMatchSetCommandOutput} for command's `response` shape.
+ * @see {@link WAFClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export declare class UpdateXssMatchSetCommand extends $Command<UpdateXssMatchSetCommandInput, UpdateXssMatchSetCommandOutput, WAFClientResolvedConfig> {
+    readonly input: UpdateXssMatchSetCommandInput;
+    constructor(input: UpdateXssMatchSetCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: WAFClientResolvedConfig, options?: __HttpHandlerOptions): Handler<UpdateXssMatchSetCommandInput, UpdateXssMatchSetCommandOutput>;
+    private serialize;
+    private deserialize;
+}