@aws-sdk/client-wafv2 3.130.0 → 3.131.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +11 -0
- package/README.md +1 -1
- package/dist-cjs/models/models_0.js +10 -5
- package/dist-cjs/protocols/Aws_json1_1.js +2 -0
- package/dist-es/models/models_0.js +5 -0
- package/dist-es/protocols/Aws_json1_1.js +2 -1
- package/dist-types/WAFV2.d.ts +30 -15
- package/dist-types/WAFV2Client.d.ts +1 -1
- package/dist-types/commands/DeleteWebACLCommand.d.ts +6 -5
- package/dist-types/commands/DisassociateWebACLCommand.d.ts +2 -2
- package/dist-types/commands/GetMobileSdkReleaseCommand.d.ts +2 -1
- package/dist-types/commands/GetRateBasedStatementManagedKeysCommand.d.ts +14 -3
- package/dist-types/commands/ListMobileSdkReleasesCommand.d.ts +2 -1
- package/dist-types/commands/UpdateManagedRuleSetVersionExpiryDateCommand.d.ts +1 -1
- package/dist-types/commands/UpdateWebACLCommand.d.ts +2 -1
- package/dist-types/models/models_0.d.ts +261 -186
- package/package.json +4 -4
package/CHANGELOG.md
CHANGED
|
@@ -3,6 +3,17 @@
|
|
|
3
3
|
All notable changes to this project will be documented in this file.
|
|
4
4
|
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
|
|
5
5
|
|
|
6
|
+
# [3.131.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.130.0...v3.131.0) (2022-07-15)
|
|
7
|
+
|
|
8
|
+
|
|
9
|
+
### Features
|
|
10
|
+
|
|
11
|
+
* **client-wafv2:** This SDK release provide customers ability to add sensitivity level for WAF SQLI Match Statements. ([2b37799](https://github.com/aws/aws-sdk-js-v3/commit/2b37799fd6fde067ffb5d9ab4db60b0a927f775d))
|
|
12
|
+
|
|
13
|
+
|
|
14
|
+
|
|
15
|
+
|
|
16
|
+
|
|
6
17
|
# [3.130.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.129.0...v3.130.0) (2022-07-14)
|
|
7
18
|
|
|
8
19
|
|
package/README.md
CHANGED
|
@@ -26,7 +26,7 @@ see the <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapt
|
|
|
26
26
|
</note>
|
|
27
27
|
<p>WAF is a web application firewall that lets you monitor the HTTP and HTTPS
|
|
28
28
|
requests that are forwarded to Amazon CloudFront, an Amazon API Gateway REST API, an Application Load Balancer, or an AppSync
|
|
29
|
-
GraphQL API. WAF also lets you control access to your content. Based on
|
|
29
|
+
GraphQL API. WAF also lets you control access to your content. Based on criteria that
|
|
30
30
|
you specify, such as the IP addresses that requests originate from or the values of query
|
|
31
31
|
strings, the Amazon API Gateway REST API, CloudFront distribution, the Application Load Balancer, or the AppSync GraphQL
|
|
32
32
|
API responds to requests either with the requested content or with an HTTP 403 status code
|
|
@@ -1,10 +1,10 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.
|
|
4
|
-
exports.
|
|
5
|
-
exports.
|
|
6
|
-
exports.
|
|
7
|
-
exports.GetWebACLResponse = exports.GetWebACLForResourceResponse = exports.WebACL = exports.GetRuleGroupResponse = exports.UpdateWebACLRequest = exports.UpdateRuleGroupRequest = exports.RuleGroup = exports.CreateWebACLRequest = exports.CreateRuleGroupRequest = exports.CheckCapacityRequest = exports.FirewallManagerRuleGroup = exports.FirewallManagerStatement = exports.OrStatement = exports.AndStatement = exports.Rule = exports.RateBasedStatement = exports.NotStatement = exports.ManagedRuleGroupStatement = exports.Statement = exports.UpdateWebACLResponse = exports.UpdateRuleGroupResponse = exports.UpdateRegexPatternSetResponse = exports.UpdateRegexPatternSetRequest = exports.UpdateManagedRuleSetVersionExpiryDateResponse = exports.UpdateManagedRuleSetVersionExpiryDateRequest = exports.UpdateIPSetResponse = exports.UpdateIPSetRequest = void 0;
|
|
3
|
+
exports.SqliMatchStatement = exports.SensitivityLevel = exports.SizeConstraintStatement = exports.ComparisonOperator = exports.RuleGroupReferenceStatement = exports.RegexPatternSetReferenceStatement = exports.RegexMatchStatement = exports.RateBasedStatementAggregateKeyType = exports.ManagedRuleGroupConfig = exports.UsernameField = exports.PayloadType = exports.PasswordField = exports.ExcludedRule = exports.LabelMatchStatement = exports.LabelMatchScope = exports.IPSetReferenceStatement = exports.IPSetForwardedIPConfig = exports.ForwardedIPPosition = exports.GeoMatchStatement = exports.ForwardedIPConfig = exports.FallbackBehavior = exports.CountryCode = exports.ByteMatchStatement = exports.TextTransformation = exports.TextTransformationType = exports.PositionalConstraint = exports.FieldToMatch = exports.UriPath = exports.SingleQueryArgument = exports.SingleHeader = exports.QueryString = exports.Method = exports.JsonBody = exports.JsonMatchScope = exports.JsonMatchPattern = exports.BodyParsingFallbackBehavior = exports.Headers = exports.HeaderMatchPattern = exports.Cookies = exports.MapMatchScope = exports.CookieMatchPattern = exports.Body = exports.OversizeHandling = exports.AllQueryArguments = exports.AllowAction = exports.CustomRequestHandling = exports.CustomHTTPHeader = exports.All = exports.ActionCondition = exports.ActionValue = void 0;
|
|
4
|
+
exports.DeleteIPSetRequest = exports.DeleteFirewallManagerRuleGroupsResponse = exports.DeleteFirewallManagerRuleGroupsRequest = exports.WAFConfigurationWarningException = exports.CreateWebACLResponse = exports.WebACLSummary = exports.DefaultAction = exports.CreateRuleGroupResponse = exports.RuleGroupSummary = exports.CustomResponseBody = exports.ResponseContentType = exports.CreateRegexPatternSetResponse = exports.RegexPatternSetSummary = exports.CreateRegexPatternSetRequest = exports.Regex = exports.WAFTagOperationInternalErrorException = exports.WAFTagOperationException = exports.WAFOptimisticLockException = exports.WAFDuplicateItemException = exports.CreateIPSetResponse = exports.IPSetSummary = exports.CreateIPSetRequest = exports.Tag = exports.IPAddressVersion = exports.WAFSubscriptionNotFoundException = exports.WAFLimitsExceededException = exports.WAFInvalidResourceException = exports.WAFExpiredManagedRuleGroupVersionException = exports.CheckCapacityResponse = exports.Scope = exports.VisibilityConfig = exports.Label = exports.OverrideAction = exports.NoneAction = exports.CaptchaConfig = exports.ImmunityTimeProperty = exports.RuleAction = exports.CountAction = exports.CaptchaAction = exports.BlockAction = exports.CustomResponse = exports.WAFUnavailableEntityException = exports.WAFNonexistentItemException = exports.WAFInvalidParameterException = exports.ParameterExceptionField = exports.WAFInvalidOperationException = exports.WAFInternalErrorException = exports.AssociateWebACLResponse = exports.AssociateWebACLRequest = exports.XssMatchStatement = void 0;
|
|
5
|
+
exports.TimeWindow = exports.GetRuleGroupRequest = exports.GetRegexPatternSetResponse = exports.RegexPatternSet = exports.GetRegexPatternSetRequest = exports.GetRateBasedStatementManagedKeysResponse = exports.RateBasedStatementManagedKeysIPSet = exports.GetRateBasedStatementManagedKeysRequest = exports.GetPermissionPolicyResponse = exports.GetPermissionPolicyRequest = exports.GetMobileSdkReleaseResponse = exports.MobileSdkRelease = exports.GetMobileSdkReleaseRequest = exports.GetManagedRuleSetResponse = exports.ManagedRuleSet = exports.ManagedRuleSetVersion = exports.GetManagedRuleSetRequest = exports.GetLoggingConfigurationResponse = exports.LoggingConfiguration = exports.LoggingFilter = exports.Filter = exports.FilterRequirement = exports.Condition = exports.LabelNameCondition = exports.FilterBehavior = exports.GetLoggingConfigurationRequest = exports.GetIPSetResponse = exports.IPSet = exports.GetIPSetRequest = exports.GenerateMobileSdkReleaseUrlResponse = exports.GenerateMobileSdkReleaseUrlRequest = exports.Platform = exports.DisassociateWebACLResponse = exports.DisassociateWebACLRequest = exports.DescribeManagedRuleGroupResponse = exports.RuleSummary = exports.LabelSummary = exports.DescribeManagedRuleGroupRequest = exports.DeleteWebACLResponse = exports.DeleteWebACLRequest = exports.DeleteRuleGroupResponse = exports.DeleteRuleGroupRequest = exports.DeleteRegexPatternSetResponse = exports.DeleteRegexPatternSetRequest = exports.DeletePermissionPolicyResponse = exports.DeletePermissionPolicyRequest = exports.DeleteLoggingConfigurationResponse = exports.DeleteLoggingConfigurationRequest = exports.WAFAssociatedItemException = exports.DeleteIPSetResponse = void 0;
|
|
6
|
+
exports.UntagResourceRequest = exports.TagResourceResponse = exports.TagResourceRequest = exports.WAFInvalidPermissionPolicyException = exports.PutPermissionPolicyResponse = exports.PutPermissionPolicyRequest = exports.PutManagedRuleSetVersionsResponse = exports.PutManagedRuleSetVersionsRequest = exports.VersionToPublish = exports.WAFServiceLinkedRoleErrorException = exports.WAFLogDestinationPermissionIssueException = exports.PutLoggingConfigurationResponse = exports.PutLoggingConfigurationRequest = exports.ListWebACLsResponse = exports.ListWebACLsRequest = exports.ListTagsForResourceResponse = exports.TagInfoForResource = exports.ListTagsForResourceRequest = exports.ListRuleGroupsResponse = exports.ListRuleGroupsRequest = exports.ListResourcesForWebACLResponse = exports.ListResourcesForWebACLRequest = exports.ResourceType = exports.ListRegexPatternSetsResponse = exports.ListRegexPatternSetsRequest = exports.ListMobileSdkReleasesResponse = exports.ReleaseSummary = exports.ListMobileSdkReleasesRequest = exports.ListManagedRuleSetsResponse = exports.ManagedRuleSetSummary = exports.ListManagedRuleSetsRequest = exports.ListLoggingConfigurationsResponse = exports.ListLoggingConfigurationsRequest = exports.ListIPSetsResponse = exports.ListIPSetsRequest = exports.ListAvailableManagedRuleGroupVersionsResponse = exports.ManagedRuleGroupVersion = exports.ListAvailableManagedRuleGroupVersionsRequest = exports.ListAvailableManagedRuleGroupsResponse = exports.ManagedRuleGroupSummary = exports.ListAvailableManagedRuleGroupsRequest = exports.GetWebACLForResourceRequest = exports.GetWebACLRequest = exports.GetSampledRequestsResponse = exports.SampledHTTPRequest = exports.HTTPRequest = exports.HTTPHeader = exports.CaptchaResponse = exports.FailureReason = exports.GetSampledRequestsRequest = void 0;
|
|
7
|
+
exports.GetWebACLResponse = exports.GetWebACLForResourceResponse = exports.WebACL = exports.GetRuleGroupResponse = exports.UpdateWebACLRequest = exports.UpdateRuleGroupRequest = exports.RuleGroup = exports.CreateWebACLRequest = exports.CreateRuleGroupRequest = exports.CheckCapacityRequest = exports.FirewallManagerRuleGroup = exports.FirewallManagerStatement = exports.OrStatement = exports.AndStatement = exports.Rule = exports.RateBasedStatement = exports.NotStatement = exports.ManagedRuleGroupStatement = exports.Statement = exports.UpdateWebACLResponse = exports.UpdateRuleGroupResponse = exports.UpdateRegexPatternSetResponse = exports.UpdateRegexPatternSetRequest = exports.UpdateManagedRuleSetVersionExpiryDateResponse = exports.UpdateManagedRuleSetVersionExpiryDateRequest = exports.UpdateIPSetResponse = exports.UpdateIPSetRequest = exports.UntagResourceResponse = void 0;
|
|
8
8
|
const WAFV2ServiceException_1 = require("./WAFV2ServiceException");
|
|
9
9
|
var ActionValue;
|
|
10
10
|
(function (ActionValue) {
|
|
@@ -562,6 +562,11 @@ var SizeConstraintStatement;
|
|
|
562
562
|
...obj,
|
|
563
563
|
});
|
|
564
564
|
})(SizeConstraintStatement = exports.SizeConstraintStatement || (exports.SizeConstraintStatement = {}));
|
|
565
|
+
var SensitivityLevel;
|
|
566
|
+
(function (SensitivityLevel) {
|
|
567
|
+
SensitivityLevel["HIGH"] = "HIGH";
|
|
568
|
+
SensitivityLevel["LOW"] = "LOW";
|
|
569
|
+
})(SensitivityLevel = exports.SensitivityLevel || (exports.SensitivityLevel = {}));
|
|
565
570
|
var SqliMatchStatement;
|
|
566
571
|
(function (SqliMatchStatement) {
|
|
567
572
|
SqliMatchStatement.filterSensitiveLog = (obj) => ({
|
|
@@ -3967,6 +3967,7 @@ const serializeAws_json1_1SizeConstraintStatement = (input, context) => {
|
|
|
3967
3967
|
const serializeAws_json1_1SqliMatchStatement = (input, context) => {
|
|
3968
3968
|
return {
|
|
3969
3969
|
...(input.FieldToMatch != null && { FieldToMatch: serializeAws_json1_1FieldToMatch(input.FieldToMatch, context) }),
|
|
3970
|
+
...(input.SensitivityLevel != null && { SensitivityLevel: input.SensitivityLevel }),
|
|
3970
3971
|
...(input.TextTransformations != null && {
|
|
3971
3972
|
TextTransformations: serializeAws_json1_1TextTransformations(input.TextTransformations, context),
|
|
3972
3973
|
}),
|
|
@@ -5378,6 +5379,7 @@ const deserializeAws_json1_1SizeConstraintStatement = (output, context) => {
|
|
|
5378
5379
|
const deserializeAws_json1_1SqliMatchStatement = (output, context) => {
|
|
5379
5380
|
return {
|
|
5380
5381
|
FieldToMatch: output.FieldToMatch != null ? deserializeAws_json1_1FieldToMatch(output.FieldToMatch, context) : undefined,
|
|
5382
|
+
SensitivityLevel: (0, smithy_client_1.expectString)(output.SensitivityLevel),
|
|
5381
5383
|
TextTransformations: output.TextTransformations != null
|
|
5382
5384
|
? deserializeAws_json1_1TextTransformations(output.TextTransformations, context)
|
|
5383
5385
|
: undefined,
|
|
@@ -488,6 +488,11 @@ export var SizeConstraintStatement;
|
|
|
488
488
|
(function (SizeConstraintStatement) {
|
|
489
489
|
SizeConstraintStatement.filterSensitiveLog = function (obj) { return (__assign({}, obj)); };
|
|
490
490
|
})(SizeConstraintStatement || (SizeConstraintStatement = {}));
|
|
491
|
+
export var SensitivityLevel;
|
|
492
|
+
(function (SensitivityLevel) {
|
|
493
|
+
SensitivityLevel["HIGH"] = "HIGH";
|
|
494
|
+
SensitivityLevel["LOW"] = "LOW";
|
|
495
|
+
})(SensitivityLevel || (SensitivityLevel = {}));
|
|
491
496
|
export var SqliMatchStatement;
|
|
492
497
|
(function (SqliMatchStatement) {
|
|
493
498
|
SqliMatchStatement.filterSensitiveLog = function (obj) { return (__assign({}, obj)); };
|
|
@@ -4550,7 +4550,7 @@ var serializeAws_json1_1SizeConstraintStatement = function (input, context) {
|
|
|
4550
4550
|
}));
|
|
4551
4551
|
};
|
|
4552
4552
|
var serializeAws_json1_1SqliMatchStatement = function (input, context) {
|
|
4553
|
-
return __assign(__assign({}, (input.FieldToMatch != null && { FieldToMatch: serializeAws_json1_1FieldToMatch(input.FieldToMatch, context) })), (input.TextTransformations != null && {
|
|
4553
|
+
return __assign(__assign(__assign({}, (input.FieldToMatch != null && { FieldToMatch: serializeAws_json1_1FieldToMatch(input.FieldToMatch, context) })), (input.SensitivityLevel != null && { SensitivityLevel: input.SensitivityLevel })), (input.TextTransformations != null && {
|
|
4554
4554
|
TextTransformations: serializeAws_json1_1TextTransformations(input.TextTransformations, context),
|
|
4555
4555
|
}));
|
|
4556
4556
|
};
|
|
@@ -5873,6 +5873,7 @@ var deserializeAws_json1_1SizeConstraintStatement = function (output, context) {
|
|
|
5873
5873
|
var deserializeAws_json1_1SqliMatchStatement = function (output, context) {
|
|
5874
5874
|
return {
|
|
5875
5875
|
FieldToMatch: output.FieldToMatch != null ? deserializeAws_json1_1FieldToMatch(output.FieldToMatch, context) : undefined,
|
|
5876
|
+
SensitivityLevel: __expectString(output.SensitivityLevel),
|
|
5876
5877
|
TextTransformations: output.TextTransformations != null
|
|
5877
5878
|
? deserializeAws_json1_1TextTransformations(output.TextTransformations, context)
|
|
5878
5879
|
: undefined,
|
package/dist-types/WAFV2.d.ts
CHANGED
|
@@ -65,7 +65,7 @@ import { WAFV2Client } from "./WAFV2Client";
|
|
|
65
65
|
* </note>
|
|
66
66
|
* <p>WAF is a web application firewall that lets you monitor the HTTP and HTTPS
|
|
67
67
|
* requests that are forwarded to Amazon CloudFront, an Amazon API Gateway REST API, an Application Load Balancer, or an AppSync
|
|
68
|
-
* GraphQL API. WAF also lets you control access to your content. Based on
|
|
68
|
+
* GraphQL API. WAF also lets you control access to your content. Based on criteria that
|
|
69
69
|
* you specify, such as the IP addresses that requests originate from or the values of query
|
|
70
70
|
* strings, the Amazon API Gateway REST API, CloudFront distribution, the Application Load Balancer, or the AppSync GraphQL
|
|
71
71
|
* API responds to requests either with the requested content or with an HTTP 403 status code
|
|
@@ -212,18 +212,19 @@ export declare class WAFV2 extends WAFV2Client {
|
|
|
212
212
|
* <p>Deletes the specified <a>WebACL</a>. </p>
|
|
213
213
|
* <p>You can only use this if <code>ManagedByFirewallManager</code> is false in the specified
|
|
214
214
|
* <a>WebACL</a>. </p>
|
|
215
|
-
*
|
|
215
|
+
* <note>
|
|
216
216
|
* <p>Before deleting any web ACL, first disassociate it from all resources.</p>
|
|
217
217
|
* <ul>
|
|
218
218
|
* <li>
|
|
219
|
-
* <p>To retrieve a list of the resources that are associated with a web ACL, use the
|
|
219
|
+
* <p>To retrieve a list of the resources that are associated with a web ACL, use the
|
|
220
|
+
* following calls:</p>
|
|
220
221
|
* <ul>
|
|
221
222
|
* <li>
|
|
222
223
|
* <p>For regional resources, call <a>ListResourcesForWebACL</a>.</p>
|
|
223
224
|
* </li>
|
|
224
225
|
* <li>
|
|
225
|
-
* <p>For Amazon CloudFront distributions, use the CloudFront call
|
|
226
|
-
*
|
|
226
|
+
* <p>For Amazon CloudFront distributions, use the CloudFront call
|
|
227
|
+
* <code>ListDistributionsByWebACLId</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByWebACLId.html">ListDistributionsByWebACLId</a>.</p>
|
|
227
228
|
* </li>
|
|
228
229
|
* </ul>
|
|
229
230
|
* </li>
|
|
@@ -235,7 +236,7 @@ export declare class WAFV2 extends WAFV2Client {
|
|
|
235
236
|
* </li>
|
|
236
237
|
* <li>
|
|
237
238
|
* <p>For Amazon CloudFront distributions, provide an empty web ACL ID in the CloudFront call
|
|
238
|
-
*
|
|
239
|
+
* <code>UpdateDistribution</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a>.</p>
|
|
239
240
|
* </li>
|
|
240
241
|
* </ul>
|
|
241
242
|
* </li>
|
|
@@ -253,8 +254,8 @@ export declare class WAFV2 extends WAFV2Client {
|
|
|
253
254
|
describeManagedRuleGroup(args: DescribeManagedRuleGroupCommandInput, cb: (err: any, data?: DescribeManagedRuleGroupCommandOutput) => void): void;
|
|
254
255
|
describeManagedRuleGroup(args: DescribeManagedRuleGroupCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeManagedRuleGroupCommandOutput) => void): void;
|
|
255
256
|
/**
|
|
256
|
-
* <p>Disassociates the specified regional application resource from any existing web ACL
|
|
257
|
-
*
|
|
257
|
+
* <p>Disassociates the specified regional application resource from any existing web ACL
|
|
258
|
+
* association. A resource can have at most one web ACL association. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync GraphQL API. </p>
|
|
258
259
|
* <p>For Amazon CloudFront, don't use this call. Instead, use your CloudFront distribution configuration. To
|
|
259
260
|
* disassociate a web ACL, provide an empty web ACL ID in the CloudFront call
|
|
260
261
|
* <code>UpdateDistribution</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a>.</p>
|
|
@@ -293,7 +294,8 @@ export declare class WAFV2 extends WAFV2Client {
|
|
|
293
294
|
getManagedRuleSet(args: GetManagedRuleSetCommandInput, cb: (err: any, data?: GetManagedRuleSetCommandOutput) => void): void;
|
|
294
295
|
getManagedRuleSet(args: GetManagedRuleSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetManagedRuleSetCommandOutput) => void): void;
|
|
295
296
|
/**
|
|
296
|
-
* <p>Retrieves information for the specified mobile SDK release, including release notes and
|
|
297
|
+
* <p>Retrieves information for the specified mobile SDK release, including release notes and
|
|
298
|
+
* tags.</p>
|
|
297
299
|
* <p>The mobile SDK is not generally available. Customers who have access to the mobile SDK can use it to establish and manage Security Token Service (STS) security tokens for use in HTTP(S) requests from a mobile device to WAF. For more information, see
|
|
298
300
|
* <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-application-integration.html">WAF client application integration</a> in the <i>WAF Developer Guide</i>.</p>
|
|
299
301
|
*/
|
|
@@ -308,9 +310,20 @@ export declare class WAFV2 extends WAFV2Client {
|
|
|
308
310
|
getPermissionPolicy(args: GetPermissionPolicyCommandInput, cb: (err: any, data?: GetPermissionPolicyCommandOutput) => void): void;
|
|
309
311
|
getPermissionPolicy(args: GetPermissionPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetPermissionPolicyCommandOutput) => void): void;
|
|
310
312
|
/**
|
|
311
|
-
* <p>Retrieves the keys that are currently blocked by a rate-based rule instance. The maximum
|
|
312
|
-
*
|
|
313
|
-
*
|
|
313
|
+
* <p>Retrieves the keys that are currently blocked by a rate-based rule instance. The maximum
|
|
314
|
+
* number of managed keys that can be blocked for a single rate-based rule instance is 10,000.
|
|
315
|
+
* If more than 10,000 addresses exceed the rate limit, those with the highest rates are
|
|
316
|
+
* blocked.</p>
|
|
317
|
+
* <p>For a rate-based rule that you've defined inside a rule group, provide the name of the
|
|
318
|
+
* rule group reference statement in your request, in addition to the rate-based rule name and
|
|
319
|
+
* the web ACL name. </p>
|
|
320
|
+
* <p>WAF monitors web requests and manages keys independently for each unique combination
|
|
321
|
+
* of web ACL, optional rule group, and rate-based rule. For example, if you define a
|
|
322
|
+
* rate-based rule inside a rule group, and then use the rule group in a web ACL, WAF
|
|
323
|
+
* monitors web requests and manages keys for that web ACL, rule group reference statement,
|
|
324
|
+
* and rate-based rule instance. If you use the same rule group in a second web ACL, WAF
|
|
325
|
+
* monitors web requests and manages keys for this second usage completely independent of your
|
|
326
|
+
* first. </p>
|
|
314
327
|
*/
|
|
315
328
|
getRateBasedStatementManagedKeys(args: GetRateBasedStatementManagedKeysCommandInput, options?: __HttpHandlerOptions): Promise<GetRateBasedStatementManagedKeysCommandOutput>;
|
|
316
329
|
getRateBasedStatementManagedKeys(args: GetRateBasedStatementManagedKeysCommandInput, cb: (err: any, data?: GetRateBasedStatementManagedKeysCommandOutput) => void): void;
|
|
@@ -392,7 +405,8 @@ export declare class WAFV2 extends WAFV2Client {
|
|
|
392
405
|
listManagedRuleSets(args: ListManagedRuleSetsCommandInput, cb: (err: any, data?: ListManagedRuleSetsCommandOutput) => void): void;
|
|
393
406
|
listManagedRuleSets(args: ListManagedRuleSetsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListManagedRuleSetsCommandOutput) => void): void;
|
|
394
407
|
/**
|
|
395
|
-
* <p>Retrieves a list of the available releases for the mobile SDK and the specified device
|
|
408
|
+
* <p>Retrieves a list of the available releases for the mobile SDK and the specified device
|
|
409
|
+
* platform. </p>
|
|
396
410
|
* <p>The mobile SDK is not generally available. Customers who have access to the mobile SDK can use it to establish and manage Security Token Service (STS) security tokens for use in HTTP(S) requests from a mobile device to WAF. For more information, see
|
|
397
411
|
* <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-application-integration.html">WAF client application integration</a> in the <i>WAF Developer Guide</i>.</p>
|
|
398
412
|
*/
|
|
@@ -550,7 +564,7 @@ export declare class WAFV2 extends WAFV2Client {
|
|
|
550
564
|
/**
|
|
551
565
|
* <p>Updates the expiration information for your managed rule set. Use this to initiate the
|
|
552
566
|
* expiration of a managed rule group version. After you initiate expiration for a version,
|
|
553
|
-
* WAF excludes it from the
|
|
567
|
+
* WAF excludes it from the response to <a>ListAvailableManagedRuleGroupVersions</a> for the managed rule group. </p>
|
|
554
568
|
* <note>
|
|
555
569
|
* <p>This is intended for use only by vendors of managed rule sets. Vendors are Amazon Web Services and Amazon Web Services Marketplace sellers. </p>
|
|
556
570
|
* <p>Vendors, you can use the managed rule set APIs to provide controlled rollout of your versioned managed rule group offerings for your customers. The APIs are <code>ListManagedRuleSets</code>, <code>GetManagedRuleSet</code>, <code>PutManagedRuleSetVersions</code>, and <code>UpdateManagedRuleSetVersionExpiryDate</code>.</p>
|
|
@@ -583,7 +597,8 @@ export declare class WAFV2 extends WAFV2Client {
|
|
|
583
597
|
updateRuleGroup(args: UpdateRuleGroupCommandInput, cb: (err: any, data?: UpdateRuleGroupCommandOutput) => void): void;
|
|
584
598
|
updateRuleGroup(args: UpdateRuleGroupCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateRuleGroupCommandOutput) => void): void;
|
|
585
599
|
/**
|
|
586
|
-
* <p>Updates the specified <a>WebACL</a>. While updating a web ACL, WAF provides
|
|
600
|
+
* <p>Updates the specified <a>WebACL</a>. While updating a web ACL, WAF provides
|
|
601
|
+
* continuous coverage to the resources that you have associated with the web ACL. </p>
|
|
587
602
|
*
|
|
588
603
|
* <p>When you make changes to web ACLs or web ACL components, like rules and rule groups, WAF propagates the changes everywhere that the web ACL and its components are stored and used. Your changes are applied within seconds, but there might be a brief period of inconsistency when the changes have arrived in some places and not in others. So, for example, if you change a rule action setting, the action might be the old action in one area and the new action in another area. Or if you add an IP address to an IP set used in a blocking rule, the new address might briefly be blocked in one area while still allowed in another. This temporary inconsistency can occur when you first associate a web ACL with an Amazon Web Services resource and when you change a web ACL that is already associated with a resource. Generally, any inconsistencies of this type last only a few seconds.</p>
|
|
589
604
|
* <note>
|
|
@@ -190,7 +190,7 @@ export interface WAFV2ClientResolvedConfig extends WAFV2ClientResolvedConfigType
|
|
|
190
190
|
* </note>
|
|
191
191
|
* <p>WAF is a web application firewall that lets you monitor the HTTP and HTTPS
|
|
192
192
|
* requests that are forwarded to Amazon CloudFront, an Amazon API Gateway REST API, an Application Load Balancer, or an AppSync
|
|
193
|
-
* GraphQL API. WAF also lets you control access to your content. Based on
|
|
193
|
+
* GraphQL API. WAF also lets you control access to your content. Based on criteria that
|
|
194
194
|
* you specify, such as the IP addresses that requests originate from or the values of query
|
|
195
195
|
* strings, the Amazon API Gateway REST API, CloudFront distribution, the Application Load Balancer, or the AppSync GraphQL
|
|
196
196
|
* API responds to requests either with the requested content or with an HTTP 403 status code
|
|
@@ -10,18 +10,19 @@ export interface DeleteWebACLCommandOutput extends DeleteWebACLResponse, __Metad
|
|
|
10
10
|
* <p>Deletes the specified <a>WebACL</a>. </p>
|
|
11
11
|
* <p>You can only use this if <code>ManagedByFirewallManager</code> is false in the specified
|
|
12
12
|
* <a>WebACL</a>. </p>
|
|
13
|
-
*
|
|
13
|
+
* <note>
|
|
14
14
|
* <p>Before deleting any web ACL, first disassociate it from all resources.</p>
|
|
15
15
|
* <ul>
|
|
16
16
|
* <li>
|
|
17
|
-
* <p>To retrieve a list of the resources that are associated with a web ACL, use the
|
|
17
|
+
* <p>To retrieve a list of the resources that are associated with a web ACL, use the
|
|
18
|
+
* following calls:</p>
|
|
18
19
|
* <ul>
|
|
19
20
|
* <li>
|
|
20
21
|
* <p>For regional resources, call <a>ListResourcesForWebACL</a>.</p>
|
|
21
22
|
* </li>
|
|
22
23
|
* <li>
|
|
23
|
-
* <p>For Amazon CloudFront distributions, use the CloudFront call
|
|
24
|
-
*
|
|
24
|
+
* <p>For Amazon CloudFront distributions, use the CloudFront call
|
|
25
|
+
* <code>ListDistributionsByWebACLId</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByWebACLId.html">ListDistributionsByWebACLId</a>.</p>
|
|
25
26
|
* </li>
|
|
26
27
|
* </ul>
|
|
27
28
|
* </li>
|
|
@@ -33,7 +34,7 @@ export interface DeleteWebACLCommandOutput extends DeleteWebACLResponse, __Metad
|
|
|
33
34
|
* </li>
|
|
34
35
|
* <li>
|
|
35
36
|
* <p>For Amazon CloudFront distributions, provide an empty web ACL ID in the CloudFront call
|
|
36
|
-
*
|
|
37
|
+
* <code>UpdateDistribution</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a>.</p>
|
|
37
38
|
* </li>
|
|
38
39
|
* </ul>
|
|
39
40
|
* </li>
|
|
@@ -7,8 +7,8 @@ export interface DisassociateWebACLCommandInput extends DisassociateWebACLReques
|
|
|
7
7
|
export interface DisassociateWebACLCommandOutput extends DisassociateWebACLResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Disassociates the specified regional application resource from any existing web ACL
|
|
11
|
-
*
|
|
10
|
+
* <p>Disassociates the specified regional application resource from any existing web ACL
|
|
11
|
+
* association. A resource can have at most one web ACL association. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync GraphQL API. </p>
|
|
12
12
|
* <p>For Amazon CloudFront, don't use this call. Instead, use your CloudFront distribution configuration. To
|
|
13
13
|
* disassociate a web ACL, provide an empty web ACL ID in the CloudFront call
|
|
14
14
|
* <code>UpdateDistribution</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a>.</p>
|
|
@@ -7,7 +7,8 @@ export interface GetMobileSdkReleaseCommandInput extends GetMobileSdkReleaseRequ
|
|
|
7
7
|
export interface GetMobileSdkReleaseCommandOutput extends GetMobileSdkReleaseResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Retrieves information for the specified mobile SDK release, including release notes and
|
|
10
|
+
* <p>Retrieves information for the specified mobile SDK release, including release notes and
|
|
11
|
+
* tags.</p>
|
|
11
12
|
* <p>The mobile SDK is not generally available. Customers who have access to the mobile SDK can use it to establish and manage Security Token Service (STS) security tokens for use in HTTP(S) requests from a mobile device to WAF. For more information, see
|
|
12
13
|
* <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-application-integration.html">WAF client application integration</a> in the <i>WAF Developer Guide</i>.</p>
|
|
13
14
|
* @example
|
|
@@ -7,9 +7,20 @@ export interface GetRateBasedStatementManagedKeysCommandInput extends GetRateBas
|
|
|
7
7
|
export interface GetRateBasedStatementManagedKeysCommandOutput extends GetRateBasedStatementManagedKeysResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Retrieves the keys that are currently blocked by a rate-based rule instance. The maximum
|
|
11
|
-
*
|
|
12
|
-
*
|
|
10
|
+
* <p>Retrieves the keys that are currently blocked by a rate-based rule instance. The maximum
|
|
11
|
+
* number of managed keys that can be blocked for a single rate-based rule instance is 10,000.
|
|
12
|
+
* If more than 10,000 addresses exceed the rate limit, those with the highest rates are
|
|
13
|
+
* blocked.</p>
|
|
14
|
+
* <p>For a rate-based rule that you've defined inside a rule group, provide the name of the
|
|
15
|
+
* rule group reference statement in your request, in addition to the rate-based rule name and
|
|
16
|
+
* the web ACL name. </p>
|
|
17
|
+
* <p>WAF monitors web requests and manages keys independently for each unique combination
|
|
18
|
+
* of web ACL, optional rule group, and rate-based rule. For example, if you define a
|
|
19
|
+
* rate-based rule inside a rule group, and then use the rule group in a web ACL, WAF
|
|
20
|
+
* monitors web requests and manages keys for that web ACL, rule group reference statement,
|
|
21
|
+
* and rate-based rule instance. If you use the same rule group in a second web ACL, WAF
|
|
22
|
+
* monitors web requests and manages keys for this second usage completely independent of your
|
|
23
|
+
* first. </p>
|
|
13
24
|
* @example
|
|
14
25
|
* Use a bare-bones client and the command you need to make an API call.
|
|
15
26
|
* ```javascript
|
|
@@ -7,7 +7,8 @@ export interface ListMobileSdkReleasesCommandInput extends ListMobileSdkReleases
|
|
|
7
7
|
export interface ListMobileSdkReleasesCommandOutput extends ListMobileSdkReleasesResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Retrieves a list of the available releases for the mobile SDK and the specified device
|
|
10
|
+
* <p>Retrieves a list of the available releases for the mobile SDK and the specified device
|
|
11
|
+
* platform. </p>
|
|
11
12
|
* <p>The mobile SDK is not generally available. Customers who have access to the mobile SDK can use it to establish and manage Security Token Service (STS) security tokens for use in HTTP(S) requests from a mobile device to WAF. For more information, see
|
|
12
13
|
* <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-application-integration.html">WAF client application integration</a> in the <i>WAF Developer Guide</i>.</p>
|
|
13
14
|
* @example
|
|
@@ -9,7 +9,7 @@ export interface UpdateManagedRuleSetVersionExpiryDateCommandOutput extends Upda
|
|
|
9
9
|
/**
|
|
10
10
|
* <p>Updates the expiration information for your managed rule set. Use this to initiate the
|
|
11
11
|
* expiration of a managed rule group version. After you initiate expiration for a version,
|
|
12
|
-
* WAF excludes it from the
|
|
12
|
+
* WAF excludes it from the response to <a>ListAvailableManagedRuleGroupVersions</a> for the managed rule group. </p>
|
|
13
13
|
* <note>
|
|
14
14
|
* <p>This is intended for use only by vendors of managed rule sets. Vendors are Amazon Web Services and Amazon Web Services Marketplace sellers. </p>
|
|
15
15
|
* <p>Vendors, you can use the managed rule set APIs to provide controlled rollout of your versioned managed rule group offerings for your customers. The APIs are <code>ListManagedRuleSets</code>, <code>GetManagedRuleSet</code>, <code>PutManagedRuleSetVersions</code>, and <code>UpdateManagedRuleSetVersionExpiryDate</code>.</p>
|
|
@@ -7,7 +7,8 @@ export interface UpdateWebACLCommandInput extends UpdateWebACLRequest {
|
|
|
7
7
|
export interface UpdateWebACLCommandOutput extends UpdateWebACLResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Updates the specified <a>WebACL</a>. While updating a web ACL, WAF provides
|
|
10
|
+
* <p>Updates the specified <a>WebACL</a>. While updating a web ACL, WAF provides
|
|
11
|
+
* continuous coverage to the resources that you have associated with the web ACL. </p>
|
|
11
12
|
*
|
|
12
13
|
* <p>When you make changes to web ACLs or web ACL components, like rules and rule groups, WAF propagates the changes everywhere that the web ACL and its components are stored and used. Your changes are applied within seconds, but there might be a brief period of inconsistency when the changes have arrived in some places and not in others. So, for example, if you change a rule action setting, the action might be the old action in one area and the new action in another area. Or if you add an IP address to an IP set used in a blocking rule, the new address might briefly be blocked in one area while still allowed in another. This temporary inconsistency can occur when you first associate a web ACL with an Amazon Web Services resource and when you change a web ACL that is already associated with a resource. Generally, any inconsistencies of this type last only a few seconds.</p>
|
|
13
14
|
* <note>
|