@aws-sdk/client-wafv2 3.303.0 → 3.305.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (19) hide show
  1. package/README.md +1 -1
  2. package/dist-cjs/endpoint/ruleset.js +3 -3
  3. package/dist-cjs/models/models_0.js +11 -1
  4. package/dist-cjs/protocols/Aws_json1_1.js +47 -0
  5. package/dist-es/endpoint/ruleset.js +3 -3
  6. package/dist-es/models/models_0.js +10 -0
  7. package/dist-es/protocols/Aws_json1_1.js +47 -0
  8. package/dist-types/WAFV2.d.ts +13 -11
  9. package/dist-types/WAFV2Client.d.ts +1 -1
  10. package/dist-types/commands/AssociateWebACLCommand.d.ts +2 -2
  11. package/dist-types/commands/CheckCapacityCommand.d.ts +2 -2
  12. package/dist-types/commands/CreateWebACLCommand.d.ts +8 -1
  13. package/dist-types/commands/DeleteWebACLCommand.d.ts +4 -2
  14. package/dist-types/commands/DisassociateWebACLCommand.d.ts +2 -2
  15. package/dist-types/commands/PutPermissionPolicyCommand.d.ts +1 -1
  16. package/dist-types/commands/UpdateWebACLCommand.d.ts +8 -1
  17. package/dist-types/models/models_0.d.ts +239 -136
  18. package/dist-types/ts3.4/models/models_0.d.ts +23 -0
  19. package/package.json +1 -1
package/README.md CHANGED
@@ -39,7 +39,7 @@ Guide</a>.</p>
39
39
  <ul>
40
40
  <li>
41
41
  <p>For regional applications, you can use any of the endpoints in the list.
42
- A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
42
+ A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
43
43
  </li>
44
44
  <li>
45
45
  <p>For Amazon CloudFront applications, you must use the API endpoint listed for
package/dist-cjs/endpoint/ruleset.js CHANGED
@@ -1,7 +1,7 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
3
  exports.ruleSet = void 0;
4
- const s = "required", t = "fn", u = "argv", v = "ref";
5
- const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = "stringEquals", g = { [s]: false, "type": "String" }, h = { [s]: true, "default": false, "type": "Boolean" }, i = { [v]: "Endpoint" }, j = { [t]: "booleanEquals", [u]: [{ [v]: "UseFIPS" }, true] }, k = { [t]: "booleanEquals", [u]: [{ [v]: "UseDualStack" }, true] }, l = {}, m = { [v]: "Region" }, n = { [t]: "booleanEquals", [u]: [true, { [t]: "getAttr", [u]: [{ [v]: e }, "supportsFIPS"] }] }, o = { [t]: "booleanEquals", [u]: [true, { [t]: "getAttr", [u]: [{ [v]: e }, "supportsDualStack"] }] }, p = [j], q = [k], r = [m];
6
- const _data = { version: "1.0", parameters: { Region: g, UseDualStack: h, UseFIPS: h, Endpoint: g }, rules: [{ conditions: [{ [t]: a, [u]: [i] }], type: b, rules: [{ conditions: p, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { type: b, rules: [{ conditions: q, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: i, properties: l, headers: l }, type: d }] }] }, { type: b, rules: [{ conditions: [{ [t]: a, [u]: r }], type: b, rules: [{ conditions: [{ [t]: "aws.partition", [u]: r, assign: e }], type: b, rules: [{ conditions: [j, k], type: b, rules: [{ conditions: [n, o], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://wafv2-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: l, headers: l }, type: d }] }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: p, type: b, rules: [{ conditions: [n], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://wafv2-fips.{Region}.{PartitionResult#dnsSuffix}", properties: l, headers: l }, type: d }] }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: q, type: b, rules: [{ conditions: [o], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://wafv2.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: l, headers: l }, type: d }] }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { type: b, rules: [{ conditions: [{ [t]: f, [u]: [m, "af-south-1"] }], endpoint: { url: "https://wafv2.af-south-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-east-1"] }], endpoint: { url: "https://wafv2.ap-east-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-northeast-1"] }], endpoint: { url: "https://wafv2.ap-northeast-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-northeast-2"] }], endpoint: { url: "https://wafv2.ap-northeast-2.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-northeast-3"] }], endpoint: { url: "https://wafv2.ap-northeast-3.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-south-1"] }], endpoint: { url: "https://wafv2.ap-south-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-southeast-1"] }], endpoint: { url: "https://wafv2.ap-southeast-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-southeast-2"] }], endpoint: { url: "https://wafv2.ap-southeast-2.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-southeast-3"] }], endpoint: { url: "https://wafv2.ap-southeast-3.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ca-central-1"] }], endpoint: { url: "https://wafv2.ca-central-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "eu-central-1"] }], endpoint: { url: "https://wafv2.eu-central-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "eu-north-1"] }], endpoint: { url: "https://wafv2.eu-north-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "eu-south-1"] }], endpoint: { url: "https://wafv2.eu-south-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "eu-west-1"] }], endpoint: { url: "https://wafv2.eu-west-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "eu-west-2"] }], endpoint: { url: "https://wafv2.eu-west-2.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "eu-west-3"] }], endpoint: { url: "https://wafv2.eu-west-3.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "me-south-1"] }], endpoint: { url: "https://wafv2.me-south-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "sa-east-1"] }], endpoint: { url: "https://wafv2.sa-east-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "us-east-1"] }], endpoint: { url: "https://wafv2.us-east-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "us-east-2"] }], endpoint: { url: "https://wafv2.us-east-2.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "us-west-1"] }], endpoint: { url: "https://wafv2.us-west-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "us-west-2"] }], endpoint: { url: "https://wafv2.us-west-2.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "cn-north-1"] }], endpoint: { url: "https://wafv2.cn-north-1.amazonaws.com.cn", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "cn-northwest-1"] }], endpoint: { url: "https://wafv2.cn-northwest-1.amazonaws.com.cn", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "us-gov-east-1"] }], endpoint: { url: "https://wafv2.us-gov-east-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "us-gov-west-1"] }], endpoint: { url: "https://wafv2.us-gov-west-1.amazonaws.com", properties: l, headers: l }, type: d }, { endpoint: { url: "https://wafv2.{Region}.{PartitionResult#dnsSuffix}", properties: l, headers: l }, type: d }] }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] }] };
4
+ const q = "required", r = "fn", s = "argv", t = "ref";
5
+ const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = { [q]: false, "type": "String" }, g = { [q]: true, "default": false, "type": "Boolean" }, h = { [t]: "Endpoint" }, i = { [r]: "booleanEquals", [s]: [{ [t]: "UseFIPS" }, true] }, j = { [r]: "booleanEquals", [s]: [{ [t]: "UseDualStack" }, true] }, k = {}, l = { [r]: "booleanEquals", [s]: [true, { [r]: "getAttr", [s]: [{ [t]: e }, "supportsFIPS"] }] }, m = { [r]: "booleanEquals", [s]: [true, { [r]: "getAttr", [s]: [{ [t]: e }, "supportsDualStack"] }] }, n = [i], o = [j], p = [{ [t]: "Region" }];
6
+ const _data = { version: "1.0", parameters: { Region: f, UseDualStack: g, UseFIPS: g, Endpoint: f }, rules: [{ conditions: [{ [r]: a, [s]: [h] }], type: b, rules: [{ conditions: n, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { type: b, rules: [{ conditions: o, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: h, properties: k, headers: k }, type: d }] }] }, { type: b, rules: [{ conditions: [{ [r]: a, [s]: p }], type: b, rules: [{ conditions: [{ [r]: "aws.partition", [s]: p, assign: e }], type: b, rules: [{ conditions: [i, j], type: b, rules: [{ conditions: [l, m], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://wafv2-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: n, type: b, rules: [{ conditions: [l], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://wafv2-fips.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: o, type: b, rules: [{ conditions: [m], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://wafv2.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { type: b, rules: [{ endpoint: { url: "https://wafv2.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] }] };
7
7
  exports.ruleSet = _data;
package/dist-cjs/models/models_0.js CHANGED
@@ -1,6 +1,6 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.WAFInvalidPermissionPolicyException = exports.WAFServiceLinkedRoleErrorException = exports.WAFLogDestinationPermissionIssueException = exports.ResourceType = exports.FailureReason = exports.FilterRequirement = exports.FilterBehavior = exports.Platform = exports.WAFAssociatedItemException = exports.WAFConfigurationWarningException = exports.ResponseContentType = exports.WAFTagOperationInternalErrorException = exports.WAFTagOperationException = exports.WAFOptimisticLockException = exports.WAFDuplicateItemException = exports.IPAddressVersion = exports.WAFSubscriptionNotFoundException = exports.WAFLimitsExceededException = exports.WAFInvalidResourceException = exports.WAFExpiredManagedRuleGroupVersionException = exports.Scope = exports.WAFUnavailableEntityException = exports.WAFNonexistentItemException = exports.WAFInvalidParameterException = exports.ParameterExceptionField = exports.WAFInvalidOperationException = exports.WAFInternalErrorException = exports.SensitivityLevel = exports.ComparisonOperator = exports.RateBasedStatementAggregateKeyType = exports.InspectionLevel = exports.PayloadType = exports.LabelMatchScope = exports.ForwardedIPPosition = exports.FallbackBehavior = exports.CountryCode = exports.TextTransformationType = exports.PositionalConstraint = exports.JsonMatchScope = exports.BodyParsingFallbackBehavior = exports.MapMatchScope = exports.OversizeHandling = exports.ActionValue = void 0;
3
+ exports.WAFInvalidPermissionPolicyException = exports.WAFServiceLinkedRoleErrorException = exports.WAFLogDestinationPermissionIssueException = exports.ResourceType = exports.FailureReason = exports.FilterRequirement = exports.FilterBehavior = exports.Platform = exports.WAFAssociatedItemException = exports.WAFConfigurationWarningException = exports.ResponseContentType = exports.WAFTagOperationInternalErrorException = exports.WAFTagOperationException = exports.WAFOptimisticLockException = exports.WAFDuplicateItemException = exports.IPAddressVersion = exports.WAFSubscriptionNotFoundException = exports.WAFLimitsExceededException = exports.WAFInvalidResourceException = exports.WAFExpiredManagedRuleGroupVersionException = exports.Scope = exports.SizeInspectionLimit = exports.WAFUnavailableEntityException = exports.WAFNonexistentItemException = exports.WAFInvalidParameterException = exports.ParameterExceptionField = exports.WAFInvalidOperationException = exports.WAFInternalErrorException = exports.AssociatedResourceType = exports.SensitivityLevel = exports.ComparisonOperator = exports.RateBasedStatementAggregateKeyType = exports.InspectionLevel = exports.PayloadType = exports.LabelMatchScope = exports.ForwardedIPPosition = exports.FallbackBehavior = exports.CountryCode = exports.TextTransformationType = exports.PositionalConstraint = exports.JsonMatchScope = exports.BodyParsingFallbackBehavior = exports.MapMatchScope = exports.OversizeHandling = exports.ActionValue = void 0;
4
4
  const WAFV2ServiceException_1 = require("./WAFV2ServiceException");
5
5
  exports.ActionValue = {
6
6
  ALLOW: "ALLOW",
@@ -349,6 +349,9 @@ exports.SensitivityLevel = {
349
349
  HIGH: "HIGH",
350
350
  LOW: "LOW",
351
351
  };
352
+ exports.AssociatedResourceType = {
353
+ CLOUDFRONT: "CLOUDFRONT",
354
+ };
352
355
  class WAFInternalErrorException extends WAFV2ServiceException_1.WAFV2ServiceException {
353
356
  constructor(opts) {
354
357
  super({
@@ -380,6 +383,7 @@ exports.WAFInvalidOperationException = WAFInvalidOperationException;
380
383
  exports.ParameterExceptionField = {
381
384
  AND_STATEMENT: "AND_STATEMENT",
382
385
  ASSOCIABLE_RESOURCE: "ASSOCIABLE_RESOURCE",
386
+ ASSOCIATED_RESOURCE_TYPE: "ASSOCIATED_RESOURCE_TYPE",
383
387
  ATP_RULE_SET_RESPONSE_INSPECTION: "ATP_RULE_SET_RESPONSE_INSPECTION",
384
388
  BODY_PARSING_FALLBACK_BEHAVIOR: "BODY_PARSING_FALLBACK_BEHAVIOR",
385
389
  BYTE_MATCH_STATEMENT: "BYTE_MATCH_STATEMENT",
@@ -489,6 +493,12 @@ class WAFUnavailableEntityException extends WAFV2ServiceException_1.WAFV2Service
489
493
  }
490
494
  }
491
495
  exports.WAFUnavailableEntityException = WAFUnavailableEntityException;
496
+ exports.SizeInspectionLimit = {
497
+ KB_16: "KB_16",
498
+ KB_32: "KB_32",
499
+ KB_48: "KB_48",
500
+ KB_64: "KB_64",
501
+ };
492
502
  exports.Scope = {
493
503
  CLOUDFRONT: "CLOUDFRONT",
494
504
  REGIONAL: "REGIONAL",
package/dist-cjs/protocols/Aws_json1_1.js CHANGED
@@ -2963,6 +2963,11 @@ const serializeAws_json1_1AssociateWebACLRequest = (input, context) => {
2963
2963
  ...(input.WebACLArn != null && { WebACLArn: input.WebACLArn }),
2964
2964
  };
2965
2965
  };
2966
+ const serializeAws_json1_1AssociationConfig = (input, context) => {
2967
+ return {
2968
+ ...(input.RequestBody != null && { RequestBody: serializeAws_json1_1RequestBody(input.RequestBody, context) }),
2969
+ };
2970
+ };
2966
2971
  const serializeAws_json1_1AWSManagedRulesATPRuleSet = (input, context) => {
2967
2972
  return {
2968
2973
  ...(input.LoginPath != null && { LoginPath: input.LoginPath }),
@@ -3132,6 +3137,9 @@ const serializeAws_json1_1CreateRuleGroupRequest = (input, context) => {
3132
3137
  };
3133
3138
  const serializeAws_json1_1CreateWebACLRequest = (input, context) => {
3134
3139
  return {
3140
+ ...(input.AssociationConfig != null && {
3141
+ AssociationConfig: serializeAws_json1_1AssociationConfig(input.AssociationConfig, context),
3142
+ }),
3135
3143
  ...(input.CaptchaConfig != null && {
3136
3144
  CaptchaConfig: serializeAws_json1_1CaptchaConfig(input.CaptchaConfig, context),
3137
3145
  }),
@@ -3761,6 +3769,20 @@ const serializeAws_json1_1RegularExpressionList = (input, context) => {
3761
3769
  return serializeAws_json1_1Regex(entry, context);
3762
3770
  });
3763
3771
  };
3772
+ const serializeAws_json1_1RequestBody = (input, context) => {
3773
+ return Object.entries(input).reduce((acc, [key, value]) => {
3774
+ if (value === null) {
3775
+ return acc;
3776
+ }
3777
+ acc[key] = serializeAws_json1_1RequestBodyAssociatedResourceTypeConfig(value, context);
3778
+ return acc;
3779
+ }, {});
3780
+ };
3781
+ const serializeAws_json1_1RequestBodyAssociatedResourceTypeConfig = (input, context) => {
3782
+ return {
3783
+ ...(input.DefaultSizeInspectionLimit != null && { DefaultSizeInspectionLimit: input.DefaultSizeInspectionLimit }),
3784
+ };
3785
+ };
3764
3786
  const serializeAws_json1_1RequestInspection = (input, context) => {
3765
3787
  return {
3766
3788
  ...(input.PasswordField != null && {
@@ -4130,6 +4152,9 @@ const serializeAws_json1_1UpdateRuleGroupRequest = (input, context) => {
4130
4152
  };
4131
4153
  const serializeAws_json1_1UpdateWebACLRequest = (input, context) => {
4132
4154
  return {
4155
+ ...(input.AssociationConfig != null && {
4156
+ AssociationConfig: serializeAws_json1_1AssociationConfig(input.AssociationConfig, context),
4157
+ }),
4133
4158
  ...(input.CaptchaConfig != null && {
4134
4159
  CaptchaConfig: serializeAws_json1_1CaptchaConfig(input.CaptchaConfig, context),
4135
4160
  }),
@@ -4218,6 +4243,11 @@ const deserializeAws_json1_1AndStatement = (output, context) => {
4218
4243
  const deserializeAws_json1_1AssociateWebACLResponse = (output, context) => {
4219
4244
  return {};
4220
4245
  };
4246
+ const deserializeAws_json1_1AssociationConfig = (output, context) => {
4247
+ return {
4248
+ RequestBody: output.RequestBody != null ? deserializeAws_json1_1RequestBody(output.RequestBody, context) : undefined,
4249
+ };
4250
+ };
4221
4251
  const deserializeAws_json1_1AWSManagedRulesATPRuleSet = (output, context) => {
4222
4252
  return {
4223
4253
  LoginPath: (0, smithy_client_1.expectString)(output.LoginPath),
@@ -5258,6 +5288,20 @@ const deserializeAws_json1_1ReleaseSummary = (output, context) => {
5258
5288
  Timestamp: output.Timestamp != null ? (0, smithy_client_1.expectNonNull)((0, smithy_client_1.parseEpochTimestamp)((0, smithy_client_1.expectNumber)(output.Timestamp))) : undefined,
5259
5289
  };
5260
5290
  };
5291
+ const deserializeAws_json1_1RequestBody = (output, context) => {
5292
+ return Object.entries(output).reduce((acc, [key, value]) => {
5293
+ if (value === null) {
5294
+ return acc;
5295
+ }
5296
+ acc[key] = deserializeAws_json1_1RequestBodyAssociatedResourceTypeConfig(value, context);
5297
+ return acc;
5298
+ }, {});
5299
+ };
5300
+ const deserializeAws_json1_1RequestBodyAssociatedResourceTypeConfig = (output, context) => {
5301
+ return {
5302
+ DefaultSizeInspectionLimit: (0, smithy_client_1.expectString)(output.DefaultSizeInspectionLimit),
5303
+ };
5304
+ };
5261
5305
  const deserializeAws_json1_1RequestInspection = (output, context) => {
5262
5306
  return {
5263
5307
  PasswordField: output.PasswordField != null ? deserializeAws_json1_1PasswordField(output.PasswordField, context) : undefined,
@@ -5857,6 +5901,9 @@ const deserializeAws_json1_1WAFUnavailableEntityException = (output, context) =>
5857
5901
  const deserializeAws_json1_1WebACL = (output, context) => {
5858
5902
  return {
5859
5903
  ARN: (0, smithy_client_1.expectString)(output.ARN),
5904
+ AssociationConfig: output.AssociationConfig != null
5905
+ ? deserializeAws_json1_1AssociationConfig(output.AssociationConfig, context)
5906
+ : undefined,
5860
5907
  Capacity: (0, smithy_client_1.expectLong)(output.Capacity),
5861
5908
  CaptchaConfig: output.CaptchaConfig != null ? deserializeAws_json1_1CaptchaConfig(output.CaptchaConfig, context) : undefined,
5862
5909
  ChallengeConfig: output.ChallengeConfig != null
package/dist-es/endpoint/ruleset.js CHANGED
@@ -1,4 +1,4 @@
1
- const s = "required", t = "fn", u = "argv", v = "ref";
2
- const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = "stringEquals", g = { [s]: false, "type": "String" }, h = { [s]: true, "default": false, "type": "Boolean" }, i = { [v]: "Endpoint" }, j = { [t]: "booleanEquals", [u]: [{ [v]: "UseFIPS" }, true] }, k = { [t]: "booleanEquals", [u]: [{ [v]: "UseDualStack" }, true] }, l = {}, m = { [v]: "Region" }, n = { [t]: "booleanEquals", [u]: [true, { [t]: "getAttr", [u]: [{ [v]: e }, "supportsFIPS"] }] }, o = { [t]: "booleanEquals", [u]: [true, { [t]: "getAttr", [u]: [{ [v]: e }, "supportsDualStack"] }] }, p = [j], q = [k], r = [m];
3
- const _data = { version: "1.0", parameters: { Region: g, UseDualStack: h, UseFIPS: h, Endpoint: g }, rules: [{ conditions: [{ [t]: a, [u]: [i] }], type: b, rules: [{ conditions: p, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { type: b, rules: [{ conditions: q, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: i, properties: l, headers: l }, type: d }] }] }, { type: b, rules: [{ conditions: [{ [t]: a, [u]: r }], type: b, rules: [{ conditions: [{ [t]: "aws.partition", [u]: r, assign: e }], type: b, rules: [{ conditions: [j, k], type: b, rules: [{ conditions: [n, o], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://wafv2-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: l, headers: l }, type: d }] }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: p, type: b, rules: [{ conditions: [n], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://wafv2-fips.{Region}.{PartitionResult#dnsSuffix}", properties: l, headers: l }, type: d }] }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: q, type: b, rules: [{ conditions: [o], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://wafv2.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: l, headers: l }, type: d }] }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { type: b, rules: [{ conditions: [{ [t]: f, [u]: [m, "af-south-1"] }], endpoint: { url: "https://wafv2.af-south-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-east-1"] }], endpoint: { url: "https://wafv2.ap-east-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-northeast-1"] }], endpoint: { url: "https://wafv2.ap-northeast-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-northeast-2"] }], endpoint: { url: "https://wafv2.ap-northeast-2.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-northeast-3"] }], endpoint: { url: "https://wafv2.ap-northeast-3.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-south-1"] }], endpoint: { url: "https://wafv2.ap-south-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-southeast-1"] }], endpoint: { url: "https://wafv2.ap-southeast-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-southeast-2"] }], endpoint: { url: "https://wafv2.ap-southeast-2.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-southeast-3"] }], endpoint: { url: "https://wafv2.ap-southeast-3.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ca-central-1"] }], endpoint: { url: "https://wafv2.ca-central-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "eu-central-1"] }], endpoint: { url: "https://wafv2.eu-central-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "eu-north-1"] }], endpoint: { url: "https://wafv2.eu-north-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "eu-south-1"] }], endpoint: { url: "https://wafv2.eu-south-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "eu-west-1"] }], endpoint: { url: "https://wafv2.eu-west-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "eu-west-2"] }], endpoint: { url: "https://wafv2.eu-west-2.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "eu-west-3"] }], endpoint: { url: "https://wafv2.eu-west-3.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "me-south-1"] }], endpoint: { url: "https://wafv2.me-south-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "sa-east-1"] }], endpoint: { url: "https://wafv2.sa-east-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "us-east-1"] }], endpoint: { url: "https://wafv2.us-east-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "us-east-2"] }], endpoint: { url: "https://wafv2.us-east-2.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "us-west-1"] }], endpoint: { url: "https://wafv2.us-west-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "us-west-2"] }], endpoint: { url: "https://wafv2.us-west-2.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "cn-north-1"] }], endpoint: { url: "https://wafv2.cn-north-1.amazonaws.com.cn", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "cn-northwest-1"] }], endpoint: { url: "https://wafv2.cn-northwest-1.amazonaws.com.cn", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "us-gov-east-1"] }], endpoint: { url: "https://wafv2.us-gov-east-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "us-gov-west-1"] }], endpoint: { url: "https://wafv2.us-gov-west-1.amazonaws.com", properties: l, headers: l }, type: d }, { endpoint: { url: "https://wafv2.{Region}.{PartitionResult#dnsSuffix}", properties: l, headers: l }, type: d }] }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] }] };
1
+ const q = "required", r = "fn", s = "argv", t = "ref";
2
+ const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = { [q]: false, "type": "String" }, g = { [q]: true, "default": false, "type": "Boolean" }, h = { [t]: "Endpoint" }, i = { [r]: "booleanEquals", [s]: [{ [t]: "UseFIPS" }, true] }, j = { [r]: "booleanEquals", [s]: [{ [t]: "UseDualStack" }, true] }, k = {}, l = { [r]: "booleanEquals", [s]: [true, { [r]: "getAttr", [s]: [{ [t]: e }, "supportsFIPS"] }] }, m = { [r]: "booleanEquals", [s]: [true, { [r]: "getAttr", [s]: [{ [t]: e }, "supportsDualStack"] }] }, n = [i], o = [j], p = [{ [t]: "Region" }];
3
+ const _data = { version: "1.0", parameters: { Region: f, UseDualStack: g, UseFIPS: g, Endpoint: f }, rules: [{ conditions: [{ [r]: a, [s]: [h] }], type: b, rules: [{ conditions: n, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { type: b, rules: [{ conditions: o, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: h, properties: k, headers: k }, type: d }] }] }, { type: b, rules: [{ conditions: [{ [r]: a, [s]: p }], type: b, rules: [{ conditions: [{ [r]: "aws.partition", [s]: p, assign: e }], type: b, rules: [{ conditions: [i, j], type: b, rules: [{ conditions: [l, m], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://wafv2-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: n, type: b, rules: [{ conditions: [l], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://wafv2-fips.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: o, type: b, rules: [{ conditions: [m], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://wafv2.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { type: b, rules: [{ endpoint: { url: "https://wafv2.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] }] };
4
4
  export const ruleSet = _data;
package/dist-es/models/models_0.js CHANGED
@@ -346,6 +346,9 @@ export const SensitivityLevel = {
346
346
  HIGH: "HIGH",
347
347
  LOW: "LOW",
348
348
  };
349
+ export const AssociatedResourceType = {
350
+ CLOUDFRONT: "CLOUDFRONT",
351
+ };
349
352
  export class WAFInternalErrorException extends __BaseException {
350
353
  constructor(opts) {
351
354
  super({
@@ -375,6 +378,7 @@ export class WAFInvalidOperationException extends __BaseException {
375
378
  export const ParameterExceptionField = {
376
379
  AND_STATEMENT: "AND_STATEMENT",
377
380
  ASSOCIABLE_RESOURCE: "ASSOCIABLE_RESOURCE",
381
+ ASSOCIATED_RESOURCE_TYPE: "ASSOCIATED_RESOURCE_TYPE",
378
382
  ATP_RULE_SET_RESPONSE_INSPECTION: "ATP_RULE_SET_RESPONSE_INSPECTION",
379
383
  BODY_PARSING_FALLBACK_BEHAVIOR: "BODY_PARSING_FALLBACK_BEHAVIOR",
380
384
  BYTE_MATCH_STATEMENT: "BYTE_MATCH_STATEMENT",
@@ -481,6 +485,12 @@ export class WAFUnavailableEntityException extends __BaseException {
481
485
  this.Message = opts.Message;
482
486
  }
483
487
  }
488
+ export const SizeInspectionLimit = {
489
+ KB_16: "KB_16",
490
+ KB_32: "KB_32",
491
+ KB_48: "KB_48",
492
+ KB_64: "KB_64",
493
+ };
484
494
  export const Scope = {
485
495
  CLOUDFRONT: "CLOUDFRONT",
486
496
  REGIONAL: "REGIONAL",
package/dist-es/protocols/Aws_json1_1.js CHANGED
@@ -2863,6 +2863,11 @@ const serializeAws_json1_1AssociateWebACLRequest = (input, context) => {
2863
2863
  ...(input.WebACLArn != null && { WebACLArn: input.WebACLArn }),
2864
2864
  };
2865
2865
  };
2866
+ const serializeAws_json1_1AssociationConfig = (input, context) => {
2867
+ return {
2868
+ ...(input.RequestBody != null && { RequestBody: serializeAws_json1_1RequestBody(input.RequestBody, context) }),
2869
+ };
2870
+ };
2866
2871
  const serializeAws_json1_1AWSManagedRulesATPRuleSet = (input, context) => {
2867
2872
  return {
2868
2873
  ...(input.LoginPath != null && { LoginPath: input.LoginPath }),
@@ -3032,6 +3037,9 @@ const serializeAws_json1_1CreateRuleGroupRequest = (input, context) => {
3032
3037
  };
3033
3038
  const serializeAws_json1_1CreateWebACLRequest = (input, context) => {
3034
3039
  return {
3040
+ ...(input.AssociationConfig != null && {
3041
+ AssociationConfig: serializeAws_json1_1AssociationConfig(input.AssociationConfig, context),
3042
+ }),
3035
3043
  ...(input.CaptchaConfig != null && {
3036
3044
  CaptchaConfig: serializeAws_json1_1CaptchaConfig(input.CaptchaConfig, context),
3037
3045
  }),
@@ -3661,6 +3669,20 @@ const serializeAws_json1_1RegularExpressionList = (input, context) => {
3661
3669
  return serializeAws_json1_1Regex(entry, context);
3662
3670
  });
3663
3671
  };
3672
+ const serializeAws_json1_1RequestBody = (input, context) => {
3673
+ return Object.entries(input).reduce((acc, [key, value]) => {
3674
+ if (value === null) {
3675
+ return acc;
3676
+ }
3677
+ acc[key] = serializeAws_json1_1RequestBodyAssociatedResourceTypeConfig(value, context);
3678
+ return acc;
3679
+ }, {});
3680
+ };
3681
+ const serializeAws_json1_1RequestBodyAssociatedResourceTypeConfig = (input, context) => {
3682
+ return {
3683
+ ...(input.DefaultSizeInspectionLimit != null && { DefaultSizeInspectionLimit: input.DefaultSizeInspectionLimit }),
3684
+ };
3685
+ };
3664
3686
  const serializeAws_json1_1RequestInspection = (input, context) => {
3665
3687
  return {
3666
3688
  ...(input.PasswordField != null && {
@@ -4030,6 +4052,9 @@ const serializeAws_json1_1UpdateRuleGroupRequest = (input, context) => {
4030
4052
  };
4031
4053
  const serializeAws_json1_1UpdateWebACLRequest = (input, context) => {
4032
4054
  return {
4055
+ ...(input.AssociationConfig != null && {
4056
+ AssociationConfig: serializeAws_json1_1AssociationConfig(input.AssociationConfig, context),
4057
+ }),
4033
4058
  ...(input.CaptchaConfig != null && {
4034
4059
  CaptchaConfig: serializeAws_json1_1CaptchaConfig(input.CaptchaConfig, context),
4035
4060
  }),
@@ -4118,6 +4143,11 @@ const deserializeAws_json1_1AndStatement = (output, context) => {
4118
4143
  const deserializeAws_json1_1AssociateWebACLResponse = (output, context) => {
4119
4144
  return {};
4120
4145
  };
4146
+ const deserializeAws_json1_1AssociationConfig = (output, context) => {
4147
+ return {
4148
+ RequestBody: output.RequestBody != null ? deserializeAws_json1_1RequestBody(output.RequestBody, context) : undefined,
4149
+ };
4150
+ };
4121
4151
  const deserializeAws_json1_1AWSManagedRulesATPRuleSet = (output, context) => {
4122
4152
  return {
4123
4153
  LoginPath: __expectString(output.LoginPath),
@@ -5158,6 +5188,20 @@ const deserializeAws_json1_1ReleaseSummary = (output, context) => {
5158
5188
  Timestamp: output.Timestamp != null ? __expectNonNull(__parseEpochTimestamp(__expectNumber(output.Timestamp))) : undefined,
5159
5189
  };
5160
5190
  };
5191
+ const deserializeAws_json1_1RequestBody = (output, context) => {
5192
+ return Object.entries(output).reduce((acc, [key, value]) => {
5193
+ if (value === null) {
5194
+ return acc;
5195
+ }
5196
+ acc[key] = deserializeAws_json1_1RequestBodyAssociatedResourceTypeConfig(value, context);
5197
+ return acc;
5198
+ }, {});
5199
+ };
5200
+ const deserializeAws_json1_1RequestBodyAssociatedResourceTypeConfig = (output, context) => {
5201
+ return {
5202
+ DefaultSizeInspectionLimit: __expectString(output.DefaultSizeInspectionLimit),
5203
+ };
5204
+ };
5161
5205
  const deserializeAws_json1_1RequestInspection = (output, context) => {
5162
5206
  return {
5163
5207
  PasswordField: output.PasswordField != null ? deserializeAws_json1_1PasswordField(output.PasswordField, context) : undefined,
@@ -5757,6 +5801,9 @@ const deserializeAws_json1_1WAFUnavailableEntityException = (output, context) =>
5757
5801
  const deserializeAws_json1_1WebACL = (output, context) => {
5758
5802
  return {
5759
5803
  ARN: __expectString(output.ARN),
5804
+ AssociationConfig: output.AssociationConfig != null
5805
+ ? deserializeAws_json1_1AssociationConfig(output.AssociationConfig, context)
5806
+ : undefined,
5760
5807
  Capacity: __expectLong(output.Capacity),
5761
5808
  CaptchaConfig: output.CaptchaConfig != null ? deserializeAws_json1_1CaptchaConfig(output.CaptchaConfig, context) : undefined,
5762
5809
  ChallengeConfig: output.ChallengeConfig != null
package/dist-types/WAFV2.d.ts CHANGED
@@ -79,7 +79,7 @@ import { WAFV2Client } from "./WAFV2Client";
79
79
  * <ul>
80
80
  * <li>
81
81
  * <p>For regional applications, you can use any of the endpoints in the list.
82
- * A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
82
+ * A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
83
83
  * </li>
84
84
  * <li>
85
85
  * <p>For Amazon CloudFront applications, you must use the API endpoint listed for
@@ -113,10 +113,10 @@ export declare class WAFV2 extends WAFV2Client {
113
113
  /**
114
114
  * @public
115
115
  * <p>Associates a web ACL with a regional application resource, to protect the resource.
116
- * A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
116
+ * A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
117
117
  * <p>For Amazon CloudFront, don't use this call. Instead, use your CloudFront distribution configuration. To
118
118
  * associate a web ACL, in the CloudFront call <code>UpdateDistribution</code>, set the web ACL ID
119
- * to the Amazon Resource Name (ARN) of the web ACL. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a>.</p>
119
+ * to the Amazon Resource Name (ARN) of the web ACL. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a> in the <i>Amazon CloudFront Developer Guide</i>. </p>
120
120
  * <p>When you make changes to web ACLs or web ACL components, like rules and rule groups, WAF propagates the changes everywhere that the web ACL and its components are stored and used. Your changes are applied within seconds, but there might be a brief period of inconsistency when the changes have arrived in some places and not in others. So, for example, if you change a rule action setting, the action might be the old action in one area and the new action in another area. Or if you add an IP address to an IP set used in a blocking rule, the new address might briefly be blocked in one area while still allowed in another. This temporary inconsistency can occur when you first associate a web ACL with an Amazon Web Services resource and when you change a web ACL that is already associated with a resource. Generally, any inconsistencies of this type last only a few seconds.</p>
121
121
  */
122
122
  associateWebACL(args: AssociateWebACLCommandInput, options?: __HttpHandlerOptions): Promise<AssociateWebACLCommandOutput>;
@@ -134,8 +134,8 @@ export declare class WAFV2 extends WAFV2Client {
134
134
  * Simple rules that cost little to run use fewer WCUs than more complex rules
135
135
  * that use more processing power.
136
136
  * Rule group capacity is fixed at creation, which helps users plan their
137
- * web ACL WCU usage when they use a rule group.
138
- * The WCU limit for web ACLs is 1,500. </p>
137
+ * web ACL WCU usage when they use a rule group. For more information, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/aws-waf-capacity-units.html">WAF web ACL capacity units (WCU)</a>
138
+ * in the <i>WAF Developer Guide</i>. </p>
139
139
  */
140
140
  checkCapacity(args: CheckCapacityCommandInput, options?: __HttpHandlerOptions): Promise<CheckCapacityCommandOutput>;
141
141
  checkCapacity(args: CheckCapacityCommandInput, cb: (err: any, data?: CheckCapacityCommandOutput) => void): void;
@@ -169,7 +169,7 @@ export declare class WAFV2 extends WAFV2Client {
169
169
  /**
170
170
  * @public
171
171
  * <p>Creates a <a>WebACL</a> per the specifications provided.</p>
172
- * <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, Amazon Cognito user pool, or an App Runner service. </p>
172
+ * <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
173
173
  */
174
174
  createWebACL(args: CreateWebACLCommandInput, options?: __HttpHandlerOptions): Promise<CreateWebACLCommandOutput>;
175
175
  createWebACL(args: CreateWebACLCommandInput, cb: (err: any, data?: CreateWebACLCommandOutput) => void): void;
@@ -236,7 +236,8 @@ export declare class WAFV2 extends WAFV2Client {
236
236
  * </li>
237
237
  * <li>
238
238
  * <p>For Amazon CloudFront distributions, use the CloudFront call
239
- * <code>ListDistributionsByWebACLId</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByWebACLId.html">ListDistributionsByWebACLId</a>.</p>
239
+ * <code>ListDistributionsByWebACLId</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByWebACLId.html">ListDistributionsByWebACLId</a>
240
+ * in the <i>Amazon CloudFront API Reference</i>. </p>
240
241
  * </li>
241
242
  * </ul>
242
243
  * </li>
@@ -248,7 +249,8 @@ export declare class WAFV2 extends WAFV2Client {
248
249
  * </li>
249
250
  * <li>
250
251
  * <p>For Amazon CloudFront distributions, provide an empty web ACL ID in the CloudFront call
251
- * <code>UpdateDistribution</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a>.</p>
252
+ * <code>UpdateDistribution</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a>
253
+ * in the <i>Amazon CloudFront API Reference</i>. </p>
252
254
  * </li>
253
255
  * </ul>
254
256
  * </li>
@@ -269,10 +271,10 @@ export declare class WAFV2 extends WAFV2Client {
269
271
  /**
270
272
  * @public
271
273
  * <p>Disassociates the specified regional application resource from any existing web ACL
272
- * association. A resource can have at most one web ACL association. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
274
+ * association. A resource can have at most one web ACL association. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
273
275
  * <p>For Amazon CloudFront, don't use this call. Instead, use your CloudFront distribution configuration. To
274
276
  * disassociate a web ACL, provide an empty web ACL ID in the CloudFront call
275
- * <code>UpdateDistribution</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a>.</p>
277
+ * <code>UpdateDistribution</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a> in the <i>Amazon CloudFront API Reference</i>. </p>
276
278
  */
277
279
  disassociateWebACL(args: DisassociateWebACLCommandInput, options?: __HttpHandlerOptions): Promise<DisassociateWebACLCommandOutput>;
278
280
  disassociateWebACL(args: DisassociateWebACLCommandInput, cb: (err: any, data?: DisassociateWebACLCommandOutput) => void): void;
@@ -713,7 +715,7 @@ export declare class WAFV2 extends WAFV2Client {
713
715
  * </ol>
714
716
  * </note>
715
717
  * <p>When you make changes to web ACLs or web ACL components, like rules and rule groups, WAF propagates the changes everywhere that the web ACL and its components are stored and used. Your changes are applied within seconds, but there might be a brief period of inconsistency when the changes have arrived in some places and not in others. So, for example, if you change a rule action setting, the action might be the old action in one area and the new action in another area. Or if you add an IP address to an IP set used in a blocking rule, the new address might briefly be blocked in one area while still allowed in another. This temporary inconsistency can occur when you first associate a web ACL with an Amazon Web Services resource and when you change a web ACL that is already associated with a resource. Generally, any inconsistencies of this type last only a few seconds.</p>
716
- * <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, Amazon Cognito user pool, or an App Runner service. </p>
718
+ * <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
717
719
  */
718
720
  updateWebACL(args: UpdateWebACLCommandInput, options?: __HttpHandlerOptions): Promise<UpdateWebACLCommandOutput>;
719
721
  updateWebACL(args: UpdateWebACLCommandInput, cb: (err: any, data?: UpdateWebACLCommandOutput) => void): void;
package/dist-types/WAFV2Client.d.ts CHANGED
@@ -220,7 +220,7 @@ export interface WAFV2ClientResolvedConfig extends WAFV2ClientResolvedConfigType
220
220
  * <ul>
221
221
  * <li>
222
222
  * <p>For regional applications, you can use any of the endpoints in the list.
223
- * A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
223
+ * A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
224
224
  * </li>
225
225
  * <li>
226
226
  * <p>For Amazon CloudFront applications, you must use the API endpoint listed for
package/dist-types/commands/AssociateWebACLCommand.d.ts CHANGED
@@ -20,10 +20,10 @@ export interface AssociateWebACLCommandOutput extends AssociateWebACLResponse, _
20
20
  /**
21
21
  * @public
22
22
  * <p>Associates a web ACL with a regional application resource, to protect the resource.
23
- * A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
23
+ * A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
24
24
  * <p>For Amazon CloudFront, don't use this call. Instead, use your CloudFront distribution configuration. To
25
25
  * associate a web ACL, in the CloudFront call <code>UpdateDistribution</code>, set the web ACL ID
26
- * to the Amazon Resource Name (ARN) of the web ACL. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a>.</p>
26
+ * to the Amazon Resource Name (ARN) of the web ACL. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a> in the <i>Amazon CloudFront Developer Guide</i>. </p>
27
27
  * <p>When you make changes to web ACLs or web ACL components, like rules and rule groups, WAF propagates the changes everywhere that the web ACL and its components are stored and used. Your changes are applied within seconds, but there might be a brief period of inconsistency when the changes have arrived in some places and not in others. So, for example, if you change a rule action setting, the action might be the old action in one area and the new action in another area. Or if you add an IP address to an IP set used in a blocking rule, the new address might briefly be blocked in one area while still allowed in another. This temporary inconsistency can occur when you first associate a web ACL with an Amazon Web Services resource and when you change a web ACL that is already associated with a resource. Generally, any inconsistencies of this type last only a few seconds.</p>
28
28
  * @example
29
29
  * Use a bare-bones client and the command you need to make an API call.
package/dist-types/commands/CheckCapacityCommand.d.ts CHANGED
@@ -29,8 +29,8 @@ export interface CheckCapacityCommandOutput extends CheckCapacityResponse, __Met
29
29
  * Simple rules that cost little to run use fewer WCUs than more complex rules
30
30
  * that use more processing power.
31
31
  * Rule group capacity is fixed at creation, which helps users plan their
32
- * web ACL WCU usage when they use a rule group.
33
- * The WCU limit for web ACLs is 1,500. </p>
32
+ * web ACL WCU usage when they use a rule group. For more information, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/aws-waf-capacity-units.html">WAF web ACL capacity units (WCU)</a>
33
+ * in the <i>WAF Developer Guide</i>. </p>
34
34
  * @example
35
35
  * Use a bare-bones client and the command you need to make an API call.
36
36
  * ```javascript
package/dist-types/commands/CreateWebACLCommand.d.ts CHANGED
@@ -20,7 +20,7 @@ export interface CreateWebACLCommandOutput extends CreateWebACLResponse, __Metad
20
20
  /**
21
21
  * @public
22
22
  * <p>Creates a <a>WebACL</a> per the specifications provided.</p>
23
- * <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, Amazon Cognito user pool, or an App Runner service. </p>
23
+ * <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
24
24
  * @example
25
25
  * Use a bare-bones client and the command you need to make an API call.
26
26
  * ```javascript
@@ -786,6 +786,13 @@ export interface CreateWebACLCommandOutput extends CreateWebACLResponse, __Metad
786
786
  * TokenDomains: [ // TokenDomains
787
787
  * "STRING_VALUE",
788
788
  * ],
789
+ * AssociationConfig: { // AssociationConfig
790
+ * RequestBody: { // RequestBody
791
+ * "<keys>": { // RequestBodyAssociatedResourceTypeConfig
792
+ * DefaultSizeInspectionLimit: "KB_16" || "KB_32" || "KB_48" || "KB_64", // required
793
+ * },
794
+ * },
795
+ * },
789
796
  * };
790
797
  * const command = new CreateWebACLCommand(input);
791
798
  * const response = await client.send(command);
package/dist-types/commands/DeleteWebACLCommand.d.ts CHANGED
@@ -34,7 +34,8 @@ export interface DeleteWebACLCommandOutput extends DeleteWebACLResponse, __Metad
34
34
  * </li>
35
35
  * <li>
36
36
  * <p>For Amazon CloudFront distributions, use the CloudFront call
37
- * <code>ListDistributionsByWebACLId</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByWebACLId.html">ListDistributionsByWebACLId</a>.</p>
37
+ * <code>ListDistributionsByWebACLId</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByWebACLId.html">ListDistributionsByWebACLId</a>
38
+ * in the <i>Amazon CloudFront API Reference</i>. </p>
38
39
  * </li>
39
40
  * </ul>
40
41
  * </li>
@@ -46,7 +47,8 @@ export interface DeleteWebACLCommandOutput extends DeleteWebACLResponse, __Metad
46
47
  * </li>
47
48
  * <li>
48
49
  * <p>For Amazon CloudFront distributions, provide an empty web ACL ID in the CloudFront call
49
- * <code>UpdateDistribution</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a>.</p>
50
+ * <code>UpdateDistribution</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a>
51
+ * in the <i>Amazon CloudFront API Reference</i>. </p>
50
52
  * </li>
51
53
  * </ul>
52
54
  * </li>
package/dist-types/commands/DisassociateWebACLCommand.d.ts CHANGED
@@ -20,10 +20,10 @@ export interface DisassociateWebACLCommandOutput extends DisassociateWebACLRespo
20
20
  /**
21
21
  * @public
22
22
  * <p>Disassociates the specified regional application resource from any existing web ACL
23
- * association. A resource can have at most one web ACL association. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
23
+ * association. A resource can have at most one web ACL association. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
24
24
  * <p>For Amazon CloudFront, don't use this call. Instead, use your CloudFront distribution configuration. To
25
25
  * disassociate a web ACL, provide an empty web ACL ID in the CloudFront call
26
- * <code>UpdateDistribution</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a>.</p>
26
+ * <code>UpdateDistribution</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a> in the <i>Amazon CloudFront API Reference</i>. </p>
27
27
  * @example
28
28
  * Use a bare-bones client and the command you need to make an API call.
29
29
  * ```javascript
package/dist-types/commands/PutPermissionPolicyCommand.d.ts CHANGED
@@ -86,7 +86,7 @@ export interface PutPermissionPolicyCommandOutput extends PutPermissionPolicyRes
86
86
  * <p>The policy specifications must conform to the following:</p>
87
87
  * <ul>
88
88
  * <li>
89
- * <p>The policy must be composed using IAM Policy version 2012-10-17 or version 2015-01-01.</p>
89
+ * <p>The policy must be composed using IAM Policy version 2012-10-17.</p>
90
90
  * </li>
91
91
  * <li>
92
92
  * <p>The policy must include specifications for <code>Effect</code>, <code>Action</code>, and <code>Principal</code>.</p>
package/dist-types/commands/UpdateWebACLCommand.d.ts CHANGED
@@ -38,7 +38,7 @@ export interface UpdateWebACLCommandOutput extends UpdateWebACLResponse, __Metad
38
38
  * </ol>
39
39
  * </note>
40
40
  * <p>When you make changes to web ACLs or web ACL components, like rules and rule groups, WAF propagates the changes everywhere that the web ACL and its components are stored and used. Your changes are applied within seconds, but there might be a brief period of inconsistency when the changes have arrived in some places and not in others. So, for example, if you change a rule action setting, the action might be the old action in one area and the new action in another area. Or if you add an IP address to an IP set used in a blocking rule, the new address might briefly be blocked in one area while still allowed in another. This temporary inconsistency can occur when you first associate a web ACL with an Amazon Web Services resource and when you change a web ACL that is already associated with a resource. Generally, any inconsistencies of this type last only a few seconds.</p>
41
- * <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, Amazon Cognito user pool, or an App Runner service. </p>
41
+ * <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
42
42
  * @example
43
43
  * Use a bare-bones client and the command you need to make an API call.
44
44
  * ```javascript
@@ -800,6 +800,13 @@ export interface UpdateWebACLCommandOutput extends UpdateWebACLResponse, __Metad
800
800
  * TokenDomains: [ // TokenDomains
801
801
  * "STRING_VALUE",
802
802
  * ],
803
+ * AssociationConfig: { // AssociationConfig
804
+ * RequestBody: { // RequestBody
805
+ * "<keys>": { // RequestBodyAssociatedResourceTypeConfig
806
+ * DefaultSizeInspectionLimit: "KB_16" || "KB_32" || "KB_48" || "KB_64", // required
807
+ * },
808
+ * },
809
+ * },
803
810
  * };
804
811
  * const command = new UpdateWebACLCommand(input);
805
812
  * const response = await client.send(command);