@aws-sdk/client-wafv2 3.303.0 → 3.305.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (19) hide show
  1. package/README.md +1 -1
  2. package/dist-cjs/endpoint/ruleset.js +3 -3
  3. package/dist-cjs/models/models_0.js +11 -1
  4. package/dist-cjs/protocols/Aws_json1_1.js +47 -0
  5. package/dist-es/endpoint/ruleset.js +3 -3
  6. package/dist-es/models/models_0.js +10 -0
  7. package/dist-es/protocols/Aws_json1_1.js +47 -0
  8. package/dist-types/WAFV2.d.ts +13 -11
  9. package/dist-types/WAFV2Client.d.ts +1 -1
  10. package/dist-types/commands/AssociateWebACLCommand.d.ts +2 -2
  11. package/dist-types/commands/CheckCapacityCommand.d.ts +2 -2
  12. package/dist-types/commands/CreateWebACLCommand.d.ts +8 -1
  13. package/dist-types/commands/DeleteWebACLCommand.d.ts +4 -2
  14. package/dist-types/commands/DisassociateWebACLCommand.d.ts +2 -2
  15. package/dist-types/commands/PutPermissionPolicyCommand.d.ts +1 -1
  16. package/dist-types/commands/UpdateWebACLCommand.d.ts +8 -1
  17. package/dist-types/models/models_0.d.ts +239 -136
  18. package/dist-types/ts3.4/models/models_0.d.ts +23 -0
  19. package/package.json +1 -1
package/dist-types/models/models_0.d.ts CHANGED
@@ -62,14 +62,15 @@ export interface CustomHTTPHeader {
62
62
  * <p>Custom request handling behavior that inserts custom headers into a web request. You can
63
63
  * add custom request handling for WAF to use when the rule action doesn't block the request.
64
64
  * For example, <code>CaptchaAction</code> for requests with valid t okens, and <code>AllowAction</code>. </p>
65
- * <p>For information about customizing web requests and responses, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a> in the
66
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
65
+ * <p>For information about customizing web requests and responses,
66
+ * see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a>
67
+ * in the <i>WAF Developer Guide</i>. </p>
67
68
  */
68
69
  export interface CustomRequestHandling {
69
70
  /**
70
71
  * <p>The HTTP headers to insert into the request. Duplicate header names are not allowed. </p>
71
- * <p>For information about the limits on count and size for custom request and response settings, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/limits.html">WAF quotas</a> in the
72
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
72
+ * <p>For information about the limits on count and size for custom request and response settings, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/limits.html">WAF quotas</a>
73
+ * in the <i>WAF Developer Guide</i>. </p>
73
74
  */
74
75
  InsertHeaders: CustomHTTPHeader[] | undefined;
75
76
  }
@@ -82,8 +83,9 @@ export interface CustomRequestHandling {
82
83
  export interface AllowAction {
83
84
  /**
84
85
  * <p>Defines custom handling for the web request.</p>
85
- * <p>For information about customizing web requests and responses, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a> in the
86
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
86
+ * <p>For information about customizing web requests and responses,
87
+ * see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a>
88
+ * in the <i>WAF Developer Guide</i>. </p>
87
89
  */
88
90
  CustomRequestHandling?: CustomRequestHandling;
89
91
  }
@@ -118,9 +120,11 @@ export type OversizeHandling = (typeof OversizeHandling)[keyof typeof OversizeHa
118
120
  export interface Body {
119
121
  /**
120
122
  * <p>What WAF should do if the body is larger than WAF can inspect.
121
- * WAF does not support inspecting the entire contents of the body of a web request
122
- * when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to
123
- * WAF by the underlying host service. </p>
123
+ * WAF does not support inspecting the entire contents of the web request body if the body
124
+ * exceeds the limit for the resource type. If the body is larger than the limit, the underlying host service
125
+ * only forwards the contents that are below the limit to WAF for inspection. </p>
126
+ * <p>The default limit is 8 KB (8,192 kilobytes) for regional resources and 16 KB (16,384 kilobytes) for CloudFront distributions. For CloudFront distributions,
127
+ * you can increase the limit in the web ACL <code>AssociationConfig</code>, for additional processing fees. </p>
124
128
  * <p>The options for oversize handling are the following:</p>
125
129
  * <ul>
126
130
  * <li>
@@ -139,7 +143,7 @@ export interface Body {
139
143
  * </li>
140
144
  * </ul>
141
145
  * <p>You can combine the <code>MATCH</code> or <code>NO_MATCH</code>
142
- * settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over 8 KB. </p>
146
+ * settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit. </p>
143
147
  * <p>Default: <code>CONTINUE</code>
144
148
  * </p>
145
149
  */
@@ -429,9 +433,11 @@ export interface JsonBody {
429
433
  InvalidFallbackBehavior?: BodyParsingFallbackBehavior | string;
430
434
  /**
431
435
  * <p>What WAF should do if the body is larger than WAF can inspect.
432
- * WAF does not support inspecting the entire contents of the body of a web request
433
- * when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to
434
- * WAF by the underlying host service. </p>
436
+ * WAF does not support inspecting the entire contents of the web request body if the body
437
+ * exceeds the limit for the resource type. If the body is larger than the limit, the underlying host service
438
+ * only forwards the contents that are below the limit to WAF for inspection. </p>
439
+ * <p>The default limit is 8 KB (8,192 kilobytes) for regional resources and 16 KB (16,384 kilobytes) for CloudFront distributions. For CloudFront distributions,
440
+ * you can increase the limit in the web ACL <code>AssociationConfig</code>, for additional processing fees. </p>
435
441
  * <p>The options for oversize handling are the following:</p>
436
442
  * <ul>
437
443
  * <li>
@@ -450,7 +456,7 @@ export interface JsonBody {
450
456
  * </li>
451
457
  * </ul>
452
458
  * <p>You can combine the <code>MATCH</code> or <code>NO_MATCH</code>
453
- * settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over 8 KB. </p>
459
+ * settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit. </p>
454
460
  * <p>Default: <code>CONTINUE</code>
455
461
  * </p>
456
462
  */
@@ -571,8 +577,10 @@ export interface FieldToMatch {
571
577
  * <p>Inspect the request body as plain text. The request body immediately follows the request
572
578
  * headers. This is the part of a request that contains any additional data that you want to
573
579
  * send to your web server as the HTTP request body, such as data from a form. </p>
574
- * <p>Only the first 8 KB (8192 bytes) of the request body are forwarded to WAF for
575
- * inspection by the underlying host service. For information about how to handle oversized
580
+ * <p>A limited amount of the request body is forwarded to WAF for
581
+ * inspection by the underlying host service. For regional resources, the limit is 8 KB (8,192 kilobytes) and for CloudFront distributions, the limit is 16 KB (16,384 kilobytes). For CloudFront distributions,
582
+ * you can increase the limit in the web ACL's <code>AssociationConfig</code>, for additional processing fees. </p>
583
+ * <p>For information about how to handle oversized
576
584
  * request bodies, see the <code>Body</code> object configuration. </p>
577
585
  */
578
586
  Body?: Body;
@@ -585,8 +593,10 @@ export interface FieldToMatch {
585
593
  * <p>Inspect the request body as JSON. The request body immediately follows the request
586
594
  * headers. This is the part of a request that contains any additional data that you want to
587
595
  * send to your web server as the HTTP request body, such as data from a form. </p>
588
- * <p>Only the first 8 KB (8192 bytes) of the request body are forwarded to WAF for
589
- * inspection by the underlying host service. For information about how to handle oversized
596
+ * <p>A limited amount of the request body is forwarded to WAF for
597
+ * inspection by the underlying host service. For regional resources, the limit is 8 KB (8,192 kilobytes) and for CloudFront distributions, the limit is 16 KB (16,384 kilobytes). For CloudFront distributions,
598
+ * you can increase the limit in the web ACL's <code>AssociationConfig</code>, for additional processing fees. </p>
599
+ * <p>For information about how to handle oversized
590
600
  * request bodies, see the <code>JsonBody</code> object configuration. </p>
591
601
  */
592
602
  JsonBody?: JsonBody;
@@ -1692,7 +1702,8 @@ export interface AWSManagedRulesBotControlRuleSet {
1692
1702
  /**
1693
1703
  * <p>The inspection level to use for the Bot Control rule group. The common level is the least expensive. The
1694
1704
  * targeted level includes all common level rules and adds rules with more advanced inspection criteria. For
1695
- * details, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html">WAF Bot Control rule group</a>.</p>
1705
+ * details, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html">WAF Bot Control rule group</a>
1706
+ * in the <i>WAF Developer Guide</i>.</p>
1696
1707
  */
1697
1708
  InspectionLevel: InspectionLevel | string | undefined;
1698
1709
  }
@@ -1764,14 +1775,15 @@ export interface ManagedRuleGroupConfig {
1764
1775
  * @public
1765
1776
  * <p>A custom response to send to the client. You can define a custom response for rule
1766
1777
  * actions and default web ACL actions that are set to <a>BlockAction</a>. </p>
1767
- * <p>For information about customizing web requests and responses, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a> in the
1768
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
1778
+ * <p>For information about customizing web requests and responses,
1779
+ * see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a>
1780
+ * in the <i>WAF Developer Guide</i>. </p>
1769
1781
  */
1770
1782
  export interface CustomResponse {
1771
1783
  /**
1772
1784
  * <p>The HTTP status code to return to the client. </p>
1773
- * <p>For a list of status codes that you can use in your custom responses, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/customizing-the-response-status-codes.html">Supported status codes for custom response</a> in the
1774
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
1785
+ * <p>For a list of status codes that you can use in your custom responses, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/customizing-the-response-status-codes.html">Supported status codes for custom response</a>
1786
+ * in the <i>WAF Developer Guide</i>. </p>
1775
1787
  */
1776
1788
  ResponseCode: number | undefined;
1777
1789
  /**
@@ -1785,8 +1797,8 @@ export interface CustomResponse {
1785
1797
  CustomResponseBodyKey?: string;
1786
1798
  /**
1787
1799
  * <p>The HTTP headers to use in the response. Duplicate header names are not allowed. </p>
1788
- * <p>For information about the limits on count and size for custom request and response settings, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/limits.html">WAF quotas</a> in the
1789
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
1800
+ * <p>For information about the limits on count and size for custom request and response settings, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/limits.html">WAF quotas</a>
1801
+ * in the <i>WAF Developer Guide</i>. </p>
1790
1802
  */
1791
1803
  ResponseHeaders?: CustomHTTPHeader[];
1792
1804
  }
@@ -1799,8 +1811,9 @@ export interface CustomResponse {
1799
1811
  export interface BlockAction {
1800
1812
  /**
1801
1813
  * <p>Defines a custom response for the web request.</p>
1802
- * <p>For information about customizing web requests and responses, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a> in the
1803
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
1814
+ * <p>For information about customizing web requests and responses,
1815
+ * see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a>
1816
+ * in the <i>WAF Developer Guide</i>. </p>
1804
1817
  */
1805
1818
  CustomResponse?: CustomResponse;
1806
1819
  }
@@ -1838,8 +1851,9 @@ export interface BlockAction {
1838
1851
  export interface CaptchaAction {
1839
1852
  /**
1840
1853
  * <p>Defines custom handling for the web request, used when the <code>CAPTCHA</code> inspection determines that the request's token is valid and unexpired.</p>
1841
- * <p>For information about customizing web requests and responses, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a> in the
1842
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
1854
+ * <p>For information about customizing web requests and responses,
1855
+ * see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a>
1856
+ * in the <i>WAF Developer Guide</i>. </p>
1843
1857
  */
1844
1858
  CustomRequestHandling?: CustomRequestHandling;
1845
1859
  }
@@ -1881,8 +1895,9 @@ export interface CaptchaAction {
1881
1895
  export interface ChallengeAction {
1882
1896
  /**
1883
1897
  * <p>Defines custom handling for the web request, used when the challenge inspection determines that the request's token is valid and unexpired.</p>
1884
- * <p>For information about customizing web requests and responses, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a> in the
1885
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
1898
+ * <p>For information about customizing web requests and responses,
1899
+ * see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a>
1900
+ * in the <i>WAF Developer Guide</i>. </p>
1886
1901
  */
1887
1902
  CustomRequestHandling?: CustomRequestHandling;
1888
1903
  }
@@ -1895,8 +1910,9 @@ export interface ChallengeAction {
1895
1910
  export interface CountAction {
1896
1911
  /**
1897
1912
  * <p>Defines custom handling for the web request.</p>
1898
- * <p>For information about customizing web requests and responses, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a> in the
1899
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
1913
+ * <p>For information about customizing web requests and responses,
1914
+ * see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a>
1915
+ * in the <i>WAF Developer Guide</i>. </p>
1900
1916
  */
1901
1917
  CustomRequestHandling?: CustomRequestHandling;
1902
1918
  }
@@ -2039,7 +2055,7 @@ export type ComparisonOperator = (typeof ComparisonOperator)[keyof typeof Compar
2039
2055
  /**
2040
2056
  * @public
2041
2057
  * <p>A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes. </p>
2042
- * <p>If you configure WAF to inspect the request body, WAF inspects only the first 8192 bytes (8 KB). If the request body for your web requests never exceeds 8192 bytes, you could use a size constraint statement to block requests that have a request body greater than 8192 bytes.</p>
2058
+ * <p>If you configure WAF to inspect the request body, WAF inspects only the number of bytes of the body up to the limit for the web ACL. By default, for regional web ACLs, this limit is 8 KB (8,192 kilobytes) and for CloudFront web ACLs, this limit is 16 KB (16,384 kilobytes). For CloudFront web ACLs, you can increase the limit in the web ACL <code>AssociationConfig</code>, for additional fees. If you know that the request body for your web requests should never exceed the inspection limit, you could use a size constraint statement to block requests that have a larger request body size.</p>
2043
2059
  * <p>If you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI <code>/logo.jpg</code> is nine characters long.</p>
2044
2060
  */
2045
2061
  export interface SizeConstraintStatement {
@@ -2122,6 +2138,17 @@ export interface XssMatchStatement {
2122
2138
  */
2123
2139
  TextTransformations: TextTransformation[] | undefined;
2124
2140
  }
2141
+ /**
2142
+ * @public
2143
+ * @enum
2144
+ */
2145
+ export declare const AssociatedResourceType: {
2146
+ readonly CLOUDFRONT: "CLOUDFRONT";
2147
+ };
2148
+ /**
2149
+ * @public
2150
+ */
2151
+ export type AssociatedResourceType = (typeof AssociatedResourceType)[keyof typeof AssociatedResourceType];
2125
2152
  /**
2126
2153
  * @public
2127
2154
  */
@@ -2136,27 +2163,27 @@ export interface AssociateWebACLRequest {
2136
2163
  * <p>The ARN must be in one of the following formats:</p>
2137
2164
  * <ul>
2138
2165
  * <li>
2139
- * <p>For an Application Load Balancer: <code>arn:aws:elasticloadbalancing:<i>region</i>:<i>account-id</i>:loadbalancer/app/<i>load-balancer-name</i>/<i>load-balancer-id</i>
2166
+ * <p>For an Application Load Balancer: <code>arn:<i>partition</i>:elasticloadbalancing:<i>region</i>:<i>account-id</i>:loadbalancer/app/<i>load-balancer-name</i>/<i>load-balancer-id</i>
2140
2167
  * </code>
2141
2168
  * </p>
2142
2169
  * </li>
2143
2170
  * <li>
2144
- * <p>For an Amazon API Gateway REST API: <code>arn:aws:apigateway:<i>region</i>::/restapis/<i>api-id</i>/stages/<i>stage-name</i>
2171
+ * <p>For an Amazon API Gateway REST API: <code>arn:<i>partition</i>:apigateway:<i>region</i>::/restapis/<i>api-id</i>/stages/<i>stage-name</i>
2145
2172
  * </code>
2146
2173
  * </p>
2147
2174
  * </li>
2148
2175
  * <li>
2149
- * <p>For an AppSync GraphQL API: <code>arn:aws:appsync:<i>region</i>:<i>account-id</i>:apis/<i>GraphQLApiId</i>
2176
+ * <p>For an AppSync GraphQL API: <code>arn:<i>partition</i>:appsync:<i>region</i>:<i>account-id</i>:apis/<i>GraphQLApiId</i>
2150
2177
  * </code>
2151
2178
  * </p>
2152
2179
  * </li>
2153
2180
  * <li>
2154
- * <p>For an Amazon Cognito user pool: <code>arn:aws:cognito-idp:<i>region</i>:<i>account-id</i>:userpool/<i>user-pool-id</i>
2181
+ * <p>For an Amazon Cognito user pool: <code>arn:<i>partition</i>:cognito-idp:<i>region</i>:<i>account-id</i>:userpool/<i>user-pool-id</i>
2155
2182
  * </code>
2156
2183
  * </p>
2157
2184
  * </li>
2158
2185
  * <li>
2159
- * <p>For an App Runner service: <code>arn:aws:apprunner:<i>region</i>:<i>account-id</i>:service/<i>apprunner-service-name</i>/<i>apprunner-service-id</i>
2186
+ * <p>For an App Runner service: <code>arn:<i>partition</i>:apprunner:<i>region</i>:<i>account-id</i>:service/<i>apprunner-service-name</i>/<i>apprunner-service-id</i>
2160
2187
  * </code>
2161
2188
  * </p>
2162
2189
  * </li>
@@ -2203,6 +2230,7 @@ export declare class WAFInvalidOperationException extends __BaseException {
2203
2230
  export declare const ParameterExceptionField: {
2204
2231
  readonly AND_STATEMENT: "AND_STATEMENT";
2205
2232
  readonly ASSOCIABLE_RESOURCE: "ASSOCIABLE_RESOURCE";
2233
+ readonly ASSOCIATED_RESOURCE_TYPE: "ASSOCIATED_RESOURCE_TYPE";
2206
2234
  readonly ATP_RULE_SET_RESPONSE_INSPECTION: "ATP_RULE_SET_RESPONSE_INSPECTION";
2207
2235
  readonly BODY_PARSING_FALLBACK_BEHAVIOR: "BODY_PARSING_FALLBACK_BEHAVIOR";
2208
2236
  readonly BYTE_MATCH_STATEMENT: "BYTE_MATCH_STATEMENT";
@@ -2347,6 +2375,53 @@ export declare class WAFUnavailableEntityException extends __BaseException {
2347
2375
  */
2348
2376
  constructor(opts: __ExceptionOptionType<WAFUnavailableEntityException, __BaseException>);
2349
2377
  }
2378
+ /**
2379
+ * @public
2380
+ * @enum
2381
+ */
2382
+ export declare const SizeInspectionLimit: {
2383
+ readonly KB_16: "KB_16";
2384
+ readonly KB_32: "KB_32";
2385
+ readonly KB_48: "KB_48";
2386
+ readonly KB_64: "KB_64";
2387
+ };
2388
+ /**
2389
+ * @public
2390
+ */
2391
+ export type SizeInspectionLimit = (typeof SizeInspectionLimit)[keyof typeof SizeInspectionLimit];
2392
+ /**
2393
+ * @public
2394
+ * <p>Customizes the maximum size of the request body that your protected CloudFront distributions forward to WAF for inspection. The default size is 16 KB (16,384 kilobytes). </p>
2395
+ * <note>
2396
+ * <p>You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see <a href="http://aws.amazon.com/waf/pricing/">WAF Pricing</a>.</p>
2397
+ * </note>
2398
+ * <p>This is used in the <code>AssociationConfig</code> of the web ACL. </p>
2399
+ */
2400
+ export interface RequestBodyAssociatedResourceTypeConfig {
2401
+ /**
2402
+ * <p>Specifies the maximum size of the web request body component that an associated CloudFront distribution should send to WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. </p>
2403
+ * <p>Default: <code>16 KB (16,384 kilobytes)</code>
2404
+ * </p>
2405
+ */
2406
+ DefaultSizeInspectionLimit: SizeInspectionLimit | string | undefined;
2407
+ }
2408
+ /**
2409
+ * @public
2410
+ * <p>Specifies custom configurations for the associations between the web ACL and protected resources. </p>
2411
+ * <p>Use this to customize the maximum size of the request body that your protected CloudFront distributions forward to WAF for inspection. The default is 16 KB (16,384 kilobytes). </p>
2412
+ * <note>
2413
+ * <p>You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see <a href="http://aws.amazon.com/waf/pricing/">WAF Pricing</a>.</p>
2414
+ * </note>
2415
+ */
2416
+ export interface AssociationConfig {
2417
+ /**
2418
+ * <p>Customizes the maximum size of the request body that your protected CloudFront distributions forward to WAF for inspection. The default size is 16 KB (16,384 kilobytes). </p>
2419
+ * <note>
2420
+ * <p>You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see <a href="http://aws.amazon.com/waf/pricing/">WAF Pricing</a>.</p>
2421
+ * </note>
2422
+ */
2423
+ RequestBody?: Record<string, RequestBodyAssociatedResourceTypeConfig>;
2424
+ }
2350
2425
  /**
2351
2426
  * @public
2352
2427
  * <p>Used for CAPTCHA and challenge token settings. Determines
@@ -2443,7 +2518,7 @@ export interface VisibilityConfig {
2443
2518
  /**
2444
2519
  * <p>A boolean indicating whether the associated resource sends metrics to Amazon CloudWatch. For the
2445
2520
  * list of available metrics, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#waf-metrics">WAF
2446
- * Metrics</a>.</p>
2521
+ * Metrics</a> in the <i>WAF Developer Guide</i>.</p>
2447
2522
  */
2448
2523
  CloudWatchMetricsEnabled: boolean | undefined;
2449
2524
  /**
@@ -2581,7 +2656,7 @@ export interface CreateIPSetRequest {
2581
2656
  */
2582
2657
  Name: string | undefined;
2583
2658
  /**
2584
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
2659
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
2585
2660
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
2586
2661
  * <ul>
2587
2662
  * <li>
@@ -2755,7 +2830,7 @@ export interface CreateRegexPatternSetRequest {
2755
2830
  */
2756
2831
  Name: string | undefined;
2757
2832
  /**
2758
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
2833
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
2759
2834
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
2760
2835
  * <ul>
2761
2836
  * <li>
@@ -2844,8 +2919,8 @@ export interface CustomResponseBody {
2844
2919
  * <p>The payload of the custom response. </p>
2845
2920
  * <p>You can use JSON escape strings in JSON content. To do this, you must specify JSON
2846
2921
  * content in the <code>ContentType</code> setting. </p>
2847
- * <p>For information about the limits on count and size for custom request and response settings, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/limits.html">WAF quotas</a> in the
2848
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
2922
+ * <p>For information about the limits on count and size for custom request and response settings, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/limits.html">WAF quotas</a>
2923
+ * in the <i>WAF Developer Guide</i>. </p>
2849
2924
  */
2850
2925
  Content: string | undefined;
2851
2926
  }
@@ -2989,7 +3064,7 @@ export interface DeleteIPSetRequest {
2989
3064
  */
2990
3065
  Name: string | undefined;
2991
3066
  /**
2992
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
3067
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
2993
3068
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
2994
3069
  * <ul>
2995
3070
  * <li>
@@ -3068,7 +3143,7 @@ export interface DeleteRegexPatternSetRequest {
3068
3143
  */
3069
3144
  Name: string | undefined;
3070
3145
  /**
3071
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
3146
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
3072
3147
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
3073
3148
  * <ul>
3074
3149
  * <li>
@@ -3103,7 +3178,7 @@ export interface DeleteRuleGroupRequest {
3103
3178
  */
3104
3179
  Name: string | undefined;
3105
3180
  /**
3106
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
3181
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
3107
3182
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
3108
3183
  * <ul>
3109
3184
  * <li>
@@ -3138,7 +3213,7 @@ export interface DeleteWebACLRequest {
3138
3213
  */
3139
3214
  Name: string | undefined;
3140
3215
  /**
3141
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
3216
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
3142
3217
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
3143
3218
  * <ul>
3144
3219
  * <li>
@@ -3177,7 +3252,7 @@ export interface DescribeManagedRuleGroupRequest {
3177
3252
  */
3178
3253
  Name: string | undefined;
3179
3254
  /**
3180
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
3255
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
3181
3256
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
3182
3257
  * <ul>
3183
3258
  * <li>
@@ -3249,12 +3324,15 @@ export interface DescribeManagedRuleGroupResponse {
3249
3324
  */
3250
3325
  SnsTopicArn?: string;
3251
3326
  /**
3252
- * <p>The web ACL capacity units (WCUs) required for this rule group. WAF uses web ACL
3253
- * capacity units (WCU) to calculate and control the operating resources that are used to run
3254
- * your rules, rule groups, and web ACLs. WAF calculates capacity differently for each rule
3255
- * type, to reflect each rule's relative cost. Rule group capacity is fixed at creation, so
3256
- * users can plan their web ACL WCU usage when they use a rule group. The WCU limit for web
3257
- * ACLs is 1,500. </p>
3327
+ * <p>The web ACL capacity units (WCUs) required for this rule group.</p>
3328
+ * <p>WAF uses WCUs to calculate and control the operating
3329
+ * resources that are used to run your rules, rule groups, and web ACLs. WAF
3330
+ * calculates capacity differently for each rule type, to reflect the relative cost of each rule.
3331
+ * Simple rules that cost little to run use fewer WCUs than more complex rules
3332
+ * that use more processing power.
3333
+ * Rule group capacity is fixed at creation, which helps users plan their
3334
+ * web ACL WCU usage when they use a rule group. For more information, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/aws-waf-capacity-units.html">WAF web ACL capacity units (WCU)</a>
3335
+ * in the <i>WAF Developer Guide</i>. </p>
3258
3336
  */
3259
3337
  Capacity?: number;
3260
3338
  /**
@@ -3296,27 +3374,27 @@ export interface DisassociateWebACLRequest {
3296
3374
  * <p>The ARN must be in one of the following formats:</p>
3297
3375
  * <ul>
3298
3376
  * <li>
3299
- * <p>For an Application Load Balancer: <code>arn:aws:elasticloadbalancing:<i>region</i>:<i>account-id</i>:loadbalancer/app/<i>load-balancer-name</i>/<i>load-balancer-id</i>
3377
+ * <p>For an Application Load Balancer: <code>arn:<i>partition</i>:elasticloadbalancing:<i>region</i>:<i>account-id</i>:loadbalancer/app/<i>load-balancer-name</i>/<i>load-balancer-id</i>
3300
3378
  * </code>
3301
3379
  * </p>
3302
3380
  * </li>
3303
3381
  * <li>
3304
- * <p>For an Amazon API Gateway REST API: <code>arn:aws:apigateway:<i>region</i>::/restapis/<i>api-id</i>/stages/<i>stage-name</i>
3382
+ * <p>For an Amazon API Gateway REST API: <code>arn:<i>partition</i>:apigateway:<i>region</i>::/restapis/<i>api-id</i>/stages/<i>stage-name</i>
3305
3383
  * </code>
3306
3384
  * </p>
3307
3385
  * </li>
3308
3386
  * <li>
3309
- * <p>For an AppSync GraphQL API: <code>arn:aws:appsync:<i>region</i>:<i>account-id</i>:apis/<i>GraphQLApiId</i>
3387
+ * <p>For an AppSync GraphQL API: <code>arn:<i>partition</i>:appsync:<i>region</i>:<i>account-id</i>:apis/<i>GraphQLApiId</i>
3310
3388
  * </code>
3311
3389
  * </p>
3312
3390
  * </li>
3313
3391
  * <li>
3314
- * <p>For an Amazon Cognito user pool: <code>arn:aws:cognito-idp:<i>region</i>:<i>account-id</i>:userpool/<i>user-pool-id</i>
3392
+ * <p>For an Amazon Cognito user pool: <code>arn:<i>partition</i>:cognito-idp:<i>region</i>:<i>account-id</i>:userpool/<i>user-pool-id</i>
3315
3393
  * </code>
3316
3394
  * </p>
3317
3395
  * </li>
3318
3396
  * <li>
3319
- * <p>For an App Runner service: <code>arn:aws:apprunner:<i>region</i>:<i>account-id</i>:service/<i>apprunner-service-name</i>/<i>apprunner-service-id</i>
3397
+ * <p>For an App Runner service: <code>arn:<i>partition</i>:apprunner:<i>region</i>:<i>account-id</i>:service/<i>apprunner-service-name</i>/<i>apprunner-service-id</i>
3320
3398
  * </code>
3321
3399
  * </p>
3322
3400
  * </li>
@@ -3373,7 +3451,7 @@ export interface GetIPSetRequest {
3373
3451
  */
3374
3452
  Name: string | undefined;
3375
3453
  /**
3376
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
3454
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
3377
3455
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
3378
3456
  * <ul>
3379
3457
  * <li>
@@ -3659,7 +3737,7 @@ export interface GetManagedRuleSetRequest {
3659
3737
  */
3660
3738
  Name: string | undefined;
3661
3739
  /**
3662
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
3740
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
3663
3741
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
3664
3742
  * <ul>
3665
3743
  * <li>
@@ -3698,8 +3776,8 @@ export interface ManagedRuleSetVersion {
3698
3776
  * Simple rules that cost little to run use fewer WCUs than more complex rules
3699
3777
  * that use more processing power.
3700
3778
  * Rule group capacity is fixed at creation, which helps users plan their
3701
- * web ACL WCU usage when they use a rule group.
3702
- * The WCU limit for web ACLs is 1,500. </p>
3779
+ * web ACL WCU usage when they use a rule group. For more information, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/aws-waf-capacity-units.html">WAF web ACL capacity units (WCU)</a>
3780
+ * in the <i>WAF Developer Guide</i>. </p>
3703
3781
  */
3704
3782
  Capacity?: number;
3705
3783
  /**
@@ -3860,7 +3938,7 @@ export interface GetPermissionPolicyResponse {
3860
3938
  */
3861
3939
  export interface GetRateBasedStatementManagedKeysRequest {
3862
3940
  /**
3863
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
3941
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
3864
3942
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
3865
3943
  * <ul>
3866
3944
  * <li>
@@ -3928,7 +4006,7 @@ export interface GetRegexPatternSetRequest {
3928
4006
  */
3929
4007
  Name: string | undefined;
3930
4008
  /**
3931
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
4009
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
3932
4010
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
3933
4011
  * <ul>
3934
4012
  * <li>
@@ -3995,7 +4073,7 @@ export interface GetRuleGroupRequest {
3995
4073
  */
3996
4074
  Name?: string;
3997
4075
  /**
3998
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
4076
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
3999
4077
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
4000
4078
  * <ul>
4001
4079
  * <li>
@@ -4066,7 +4144,7 @@ export interface GetSampledRequestsRequest {
4066
4144
  */
4067
4145
  RuleMetricName: string | undefined;
4068
4146
  /**
4069
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
4147
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
4070
4148
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
4071
4149
  * <ul>
4072
4150
  * <li>
@@ -4317,7 +4395,7 @@ export interface GetWebACLRequest {
4317
4395
  */
4318
4396
  Name: string | undefined;
4319
4397
  /**
4320
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
4398
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
4321
4399
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
4322
4400
  * <ul>
4323
4401
  * <li>
@@ -4343,27 +4421,27 @@ export interface GetWebACLForResourceRequest {
4343
4421
  * <p>The ARN must be in one of the following formats:</p>
4344
4422
  * <ul>
4345
4423
  * <li>
4346
- * <p>For an Application Load Balancer: <code>arn:aws:elasticloadbalancing:<i>region</i>:<i>account-id</i>:loadbalancer/app/<i>load-balancer-name</i>/<i>load-balancer-id</i>
4424
+ * <p>For an Application Load Balancer: <code>arn:<i>partition</i>:elasticloadbalancing:<i>region</i>:<i>account-id</i>:loadbalancer/app/<i>load-balancer-name</i>/<i>load-balancer-id</i>
4347
4425
  * </code>
4348
4426
  * </p>
4349
4427
  * </li>
4350
4428
  * <li>
4351
- * <p>For an Amazon API Gateway REST API: <code>arn:aws:apigateway:<i>region</i>::/restapis/<i>api-id</i>/stages/<i>stage-name</i>
4429
+ * <p>For an Amazon API Gateway REST API: <code>arn:<i>partition</i>:apigateway:<i>region</i>::/restapis/<i>api-id</i>/stages/<i>stage-name</i>
4352
4430
  * </code>
4353
4431
  * </p>
4354
4432
  * </li>
4355
4433
  * <li>
4356
- * <p>For an AppSync GraphQL API: <code>arn:aws:appsync:<i>region</i>:<i>account-id</i>:apis/<i>GraphQLApiId</i>
4434
+ * <p>For an AppSync GraphQL API: <code>arn:<i>partition</i>:appsync:<i>region</i>:<i>account-id</i>:apis/<i>GraphQLApiId</i>
4357
4435
  * </code>
4358
4436
  * </p>
4359
4437
  * </li>
4360
4438
  * <li>
4361
- * <p>For an Amazon Cognito user pool: <code>arn:aws:cognito-idp:<i>region</i>:<i>account-id</i>:userpool/<i>user-pool-id</i>
4439
+ * <p>For an Amazon Cognito user pool: <code>arn:<i>partition</i>:cognito-idp:<i>region</i>:<i>account-id</i>:userpool/<i>user-pool-id</i>
4362
4440
  * </code>
4363
4441
  * </p>
4364
4442
  * </li>
4365
4443
  * <li>
4366
- * <p>For an App Runner service: <code>arn:aws:apprunner:<i>region</i>:<i>account-id</i>:service/<i>apprunner-service-name</i>/<i>apprunner-service-id</i>
4444
+ * <p>For an App Runner service: <code>arn:<i>partition</i>:apprunner:<i>region</i>:<i>account-id</i>:service/<i>apprunner-service-name</i>/<i>apprunner-service-id</i>
4367
4445
  * </code>
4368
4446
  * </p>
4369
4447
  * </li>
@@ -4376,7 +4454,7 @@ export interface GetWebACLForResourceRequest {
4376
4454
  */
4377
4455
  export interface ListAvailableManagedRuleGroupsRequest {
4378
4456
  /**
4379
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
4457
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
4380
4458
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
4381
4459
  * <ul>
4382
4460
  * <li>
@@ -4452,7 +4530,7 @@ export interface ListAvailableManagedRuleGroupVersionsRequest {
4452
4530
  */
4453
4531
  Name: string | undefined;
4454
4532
  /**
4455
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
4533
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
4456
4534
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
4457
4535
  * <ul>
4458
4536
  * <li>
@@ -4516,7 +4594,7 @@ export interface ListAvailableManagedRuleGroupVersionsResponse {
4516
4594
  */
4517
4595
  export interface ListIPSetsRequest {
4518
4596
  /**
4519
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
4597
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
4520
4598
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
4521
4599
  * <ul>
4522
4600
  * <li>
@@ -4562,7 +4640,7 @@ export interface ListIPSetsResponse {
4562
4640
  */
4563
4641
  export interface ListLoggingConfigurationsRequest {
4564
4642
  /**
4565
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
4643
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
4566
4644
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
4567
4645
  * <ul>
4568
4646
  * <li>
@@ -4607,7 +4685,7 @@ export interface ListLoggingConfigurationsResponse {
4607
4685
  */
4608
4686
  export interface ListManagedRuleSetsRequest {
4609
4687
  /**
4610
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
4688
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
4611
4689
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
4612
4690
  * <ul>
4613
4691
  * <li>
@@ -4750,7 +4828,7 @@ export interface ListMobileSdkReleasesResponse {
4750
4828
  */
4751
4829
  export interface ListRegexPatternSetsRequest {
4752
4830
  /**
4753
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
4831
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
4754
4832
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
4755
4833
  * <ul>
4756
4834
  * <li>
@@ -4815,7 +4893,7 @@ export interface ListResourcesForWebACLRequest {
4815
4893
  WebACLArn: string | undefined;
4816
4894
  /**
4817
4895
  * <p>Used for web ACLs that are scoped for regional applications.
4818
- * A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
4896
+ * A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
4819
4897
  * <note>
4820
4898
  * <p>If you don't provide a resource type, the call uses the resource type <code>APPLICATION_LOAD_BALANCER</code>. </p>
4821
4899
  * </note>
@@ -4838,7 +4916,7 @@ export interface ListResourcesForWebACLResponse {
4838
4916
  */
4839
4917
  export interface ListRuleGroupsRequest {
4840
4918
  /**
4841
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
4919
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
4842
4920
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
4843
4921
  * <ul>
4844
4922
  * <li>
@@ -4942,7 +5020,7 @@ export interface ListTagsForResourceResponse {
4942
5020
  */
4943
5021
  export interface ListWebACLsRequest {
4944
5022
  /**
4945
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
5023
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
4946
5024
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
4947
5025
  * <ul>
4948
5026
  * <li>
@@ -5065,7 +5143,7 @@ export interface PutManagedRuleSetVersionsRequest {
5065
5143
  */
5066
5144
  Name: string | undefined;
5067
5145
  /**
5068
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
5146
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
5069
5147
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
5070
5148
  * <ul>
5071
5149
  * <li>
@@ -5119,7 +5197,7 @@ export interface PutPermissionPolicyRequest {
5119
5197
  * <p>The policy specifications must conform to the following:</p>
5120
5198
  * <ul>
5121
5199
  * <li>
5122
- * <p>The policy must be composed using IAM Policy version 2012-10-17 or version 2015-01-01.</p>
5200
+ * <p>The policy must be composed using IAM Policy version 2012-10-17.</p>
5123
5201
  * </li>
5124
5202
  * <li>
5125
5203
  * <p>The policy must include specifications for <code>Effect</code>, <code>Action</code>, and <code>Principal</code>.</p>
@@ -5153,7 +5231,7 @@ export interface PutPermissionPolicyResponse {
5153
5231
  * <p>The policy specifications must conform to the following:</p>
5154
5232
  * <ul>
5155
5233
  * <li>
5156
- * <p>The policy must be composed using IAM Policy version 2012-10-17 or version 2015-01-01.</p>
5234
+ * <p>The policy must be composed using IAM Policy version 2012-10-17.</p>
5157
5235
  * </li>
5158
5236
  * <li>
5159
5237
  * <p>The policy must include specifications for <code>Effect</code>, <code>Action</code>, and <code>Principal</code>.</p>
@@ -5228,7 +5306,7 @@ export interface UpdateIPSetRequest {
5228
5306
  */
5229
5307
  Name: string | undefined;
5230
5308
  /**
5231
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
5309
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
5232
5310
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
5233
5311
  * <ul>
5234
5312
  * <li>
@@ -5311,7 +5389,7 @@ export interface UpdateManagedRuleSetVersionExpiryDateRequest {
5311
5389
  */
5312
5390
  Name: string | undefined;
5313
5391
  /**
5314
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
5392
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
5315
5393
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
5316
5394
  * <ul>
5317
5395
  * <li>
@@ -5369,7 +5447,7 @@ export interface UpdateRegexPatternSetRequest {
5369
5447
  */
5370
5448
  Name: string | undefined;
5371
5449
  /**
5372
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
5450
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
5373
5451
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
5374
5452
  * <ul>
5375
5453
  * <li>
@@ -5447,7 +5525,7 @@ export interface Statement {
5447
5525
  XssMatchStatement?: XssMatchStatement;
5448
5526
  /**
5449
5527
  * <p>A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes. </p>
5450
- * <p>If you configure WAF to inspect the request body, WAF inspects only the first 8192 bytes (8 KB). If the request body for your web requests never exceeds 8192 bytes, you could use a size constraint statement to block requests that have a request body greater than 8192 bytes.</p>
5528
+ * <p>If you configure WAF to inspect the request body, WAF inspects only the number of bytes of the body up to the limit for the web ACL. By default, for regional web ACLs, this limit is 8 KB (8,192 kilobytes) and for CloudFront web ACLs, this limit is 16 KB (16,384 kilobytes). For CloudFront web ACLs, you can increase the limit in the web ACL <code>AssociationConfig</code>, for additional fees. If you know that the request body for your web requests should never exceed the inspection limit, you could use a size constraint statement to block requests that have a larger request body size.</p>
5451
5529
  * <p>If you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI <code>/logo.jpg</code> is nine characters long.</p>
5452
5530
  */
5453
5531
  SizeConstraintStatement?: SizeConstraintStatement;
@@ -5761,21 +5839,15 @@ export interface OrStatement {
5761
5839
  }
5762
5840
  /**
5763
5841
  * @public
5764
- * <p>The processing guidance for an Firewall Manager rule. This is like a regular rule <a>Statement</a>, but it can only contain a rule group reference.</p>
5842
+ * <p>The processing guidance for an Firewall Manager rule. This is like a regular rule <a>Statement</a>, but it can only contain a single rule group reference.</p>
5765
5843
  */
5766
5844
  export interface FirewallManagerStatement {
5767
5845
  /**
5768
- * <p>A rule statement used to run the rules that are defined in a managed rule group. To use this, provide the vendor name and the name of the rule group in this statement. You can retrieve the required names by calling <a>ListAvailableManagedRuleGroups</a>.</p>
5769
- * <p>You cannot nest a <code>ManagedRuleGroupStatement</code>, for example for use inside a <code>NotStatement</code> or <code>OrStatement</code>. It can only be referenced as a top-level statement within a rule.</p>
5770
- * <note>
5771
- * <p>You are charged additional fees when you use the WAF Bot Control managed rule group <code>AWSManagedRulesBotControlRuleSet</code> or the WAF Fraud Control account takeover prevention (ATP) managed rule group <code>AWSManagedRulesATPRuleSet</code>. For more information, see <a href="http://aws.amazon.com/waf/pricing/">WAF Pricing</a>.</p>
5772
- * </note>
5846
+ * <p>A statement used by Firewall Manager to run the rules that are defined in a managed rule group. This is managed by Firewall Manager for an Firewall Manager WAF policy.</p>
5773
5847
  */
5774
5848
  ManagedRuleGroupStatement?: ManagedRuleGroupStatement;
5775
5849
  /**
5776
- * <p>A rule statement used to run the rules that are defined in a <a>RuleGroup</a>. To use this, create a rule group with your rules, then provide the ARN of the rule group in this statement.</p>
5777
- * <p>You cannot nest a <code>RuleGroupReferenceStatement</code>, for example for use inside a <code>NotStatement</code> or <code>OrStatement</code>. You
5778
- * can only use a rule group reference statement at the top level inside a web ACL. </p>
5850
+ * <p>A statement used by Firewall Manager to run the rules that are defined in a rule group. This is managed by Firewall Manager for an Firewall Manager WAF policy.</p>
5779
5851
  */
5780
5852
  RuleGroupReferenceStatement?: RuleGroupReferenceStatement;
5781
5853
  }
@@ -5818,7 +5890,7 @@ export interface FirewallManagerRuleGroup {
5818
5890
  */
5819
5891
  export interface CheckCapacityRequest {
5820
5892
  /**
5821
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
5893
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
5822
5894
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
5823
5895
  * <ul>
5824
5896
  * <li>
@@ -5845,7 +5917,7 @@ export interface CreateRuleGroupRequest {
5845
5917
  */
5846
5918
  Name: string | undefined;
5847
5919
  /**
5848
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
5920
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
5849
5921
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
5850
5922
  * <ul>
5851
5923
  * <li>
@@ -5868,8 +5940,8 @@ export interface CreateRuleGroupRequest {
5868
5940
  * Simple rules that cost little to run use fewer WCUs than more complex rules
5869
5941
  * that use more processing power.
5870
5942
  * Rule group capacity is fixed at creation, which helps users plan their
5871
- * web ACL WCU usage when they use a rule group.
5872
- * The WCU limit for web ACLs is 1,500. </p>
5943
+ * web ACL WCU usage when they use a rule group. For more information, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/aws-waf-capacity-units.html">WAF web ACL capacity units (WCU)</a>
5944
+ * in the <i>WAF Developer Guide</i>. </p>
5873
5945
  */
5874
5946
  Capacity: number | undefined;
5875
5947
  /**
@@ -5893,10 +5965,11 @@ export interface CreateRuleGroupRequest {
5893
5965
  Tags?: Tag[];
5894
5966
  /**
5895
5967
  * <p>A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the rule group, and then use them in the rules that you define in the rule group. </p>
5896
- * <p>For information about customizing web requests and responses, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a> in the
5897
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
5898
- * <p>For information about the limits on count and size for custom request and response settings, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/limits.html">WAF quotas</a> in the
5899
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
5968
+ * <p>For information about customizing web requests and responses,
5969
+ * see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a>
5970
+ * in the <i>WAF Developer Guide</i>. </p>
5971
+ * <p>For information about the limits on count and size for custom request and response settings, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/limits.html">WAF quotas</a>
5972
+ * in the <i>WAF Developer Guide</i>. </p>
5900
5973
  */
5901
5974
  CustomResponseBodies?: Record<string, CustomResponseBody>;
5902
5975
  }
@@ -5909,7 +5982,7 @@ export interface CreateWebACLRequest {
5909
5982
  */
5910
5983
  Name: string | undefined;
5911
5984
  /**
5912
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
5985
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
5913
5986
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
5914
5987
  * <ul>
5915
5988
  * <li>
@@ -5946,10 +6019,11 @@ export interface CreateWebACLRequest {
5946
6019
  Tags?: Tag[];
5947
6020
  /**
5948
6021
  * <p>A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the web ACL, and then use them in the rules and default actions that you define in the web ACL. </p>
5949
- * <p>For information about customizing web requests and responses, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a> in the
5950
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
5951
- * <p>For information about the limits on count and size for custom request and response settings, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/limits.html">WAF quotas</a> in the
5952
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
6022
+ * <p>For information about customizing web requests and responses,
6023
+ * see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a>
6024
+ * in the <i>WAF Developer Guide</i>. </p>
6025
+ * <p>For information about the limits on count and size for custom request and response settings, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/limits.html">WAF quotas</a>
6026
+ * in the <i>WAF Developer Guide</i>. </p>
5953
6027
  */
5954
6028
  CustomResponseBodies?: Record<string, CustomResponseBody>;
5955
6029
  /**
@@ -5968,6 +6042,14 @@ export interface CreateWebACLRequest {
5968
6042
  * <p>Public suffixes aren't allowed. For example, you can't use <code>usa.gov</code> or <code>co.uk</code> as token domains.</p>
5969
6043
  */
5970
6044
  TokenDomains?: string[];
6045
+ /**
6046
+ * <p>Specifies custom configurations for the associations between the web ACL and protected resources. </p>
6047
+ * <p>Use this to customize the maximum size of the request body that your protected CloudFront distributions forward to WAF for inspection. The default is 16 KB (16,384 kilobytes). </p>
6048
+ * <note>
6049
+ * <p>You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see <a href="http://aws.amazon.com/waf/pricing/">WAF Pricing</a>.</p>
6050
+ * </note>
6051
+ */
6052
+ AssociationConfig?: AssociationConfig;
5971
6053
  }
5972
6054
  /**
5973
6055
  * @public
@@ -5993,8 +6075,8 @@ export interface RuleGroup {
5993
6075
  * Simple rules that cost little to run use fewer WCUs than more complex rules
5994
6076
  * that use more processing power.
5995
6077
  * Rule group capacity is fixed at creation, which helps users plan their
5996
- * web ACL WCU usage when they use a rule group.
5997
- * The WCU limit for web ACLs is 1,500. </p>
6078
+ * web ACL WCU usage when they use a rule group. For more information, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/aws-waf-capacity-units.html">WAF web ACL capacity units (WCU)</a>
6079
+ * in the <i>WAF Developer Guide</i>. </p>
5998
6080
  */
5999
6081
  Capacity: number | undefined;
6000
6082
  /**
@@ -6036,10 +6118,11 @@ export interface RuleGroup {
6036
6118
  LabelNamespace?: string;
6037
6119
  /**
6038
6120
  * <p>A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the rule group, and then use them in the rules that you define in the rule group. </p>
6039
- * <p>For information about customizing web requests and responses, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a> in the
6040
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
6041
- * <p>For information about the limits on count and size for custom request and response settings, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/limits.html">WAF quotas</a> in the
6042
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
6121
+ * <p>For information about customizing web requests and responses,
6122
+ * see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a>
6123
+ * in the <i>WAF Developer Guide</i>. </p>
6124
+ * <p>For information about the limits on count and size for custom request and response settings, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/limits.html">WAF quotas</a>
6125
+ * in the <i>WAF Developer Guide</i>. </p>
6043
6126
  */
6044
6127
  CustomResponseBodies?: Record<string, CustomResponseBody>;
6045
6128
  /**
@@ -6060,7 +6143,7 @@ export interface UpdateRuleGroupRequest {
6060
6143
  */
6061
6144
  Name: string | undefined;
6062
6145
  /**
6063
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
6146
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
6064
6147
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
6065
6148
  * <ul>
6066
6149
  * <li>
@@ -6097,10 +6180,11 @@ export interface UpdateRuleGroupRequest {
6097
6180
  LockToken: string | undefined;
6098
6181
  /**
6099
6182
  * <p>A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the rule group, and then use them in the rules that you define in the rule group. </p>
6100
- * <p>For information about customizing web requests and responses, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a> in the
6101
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
6102
- * <p>For information about the limits on count and size for custom request and response settings, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/limits.html">WAF quotas</a> in the
6103
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
6183
+ * <p>For information about customizing web requests and responses,
6184
+ * see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a>
6185
+ * in the <i>WAF Developer Guide</i>. </p>
6186
+ * <p>For information about the limits on count and size for custom request and response settings, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/limits.html">WAF quotas</a>
6187
+ * in the <i>WAF Developer Guide</i>. </p>
6104
6188
  */
6105
6189
  CustomResponseBodies?: Record<string, CustomResponseBody>;
6106
6190
  }
@@ -6113,7 +6197,7 @@ export interface UpdateWebACLRequest {
6113
6197
  */
6114
6198
  Name: string | undefined;
6115
6199
  /**
6116
- * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service. </p>
6200
+ * <p>Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
6117
6201
  * <p>To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows: </p>
6118
6202
  * <ul>
6119
6203
  * <li>
@@ -6154,10 +6238,11 @@ export interface UpdateWebACLRequest {
6154
6238
  LockToken: string | undefined;
6155
6239
  /**
6156
6240
  * <p>A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the web ACL, and then use them in the rules and default actions that you define in the web ACL. </p>
6157
- * <p>For information about customizing web requests and responses, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a> in the
6158
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
6159
- * <p>For information about the limits on count and size for custom request and response settings, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/limits.html">WAF quotas</a> in the
6160
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
6241
+ * <p>For information about customizing web requests and responses,
6242
+ * see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a>
6243
+ * in the <i>WAF Developer Guide</i>. </p>
6244
+ * <p>For information about the limits on count and size for custom request and response settings, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/limits.html">WAF quotas</a>
6245
+ * in the <i>WAF Developer Guide</i>. </p>
6161
6246
  */
6162
6247
  CustomResponseBodies?: Record<string, CustomResponseBody>;
6163
6248
  /**
@@ -6176,6 +6261,14 @@ export interface UpdateWebACLRequest {
6176
6261
  * <p>Public suffixes aren't allowed. For example, you can't use <code>usa.gov</code> or <code>co.uk</code> as token domains.</p>
6177
6262
  */
6178
6263
  TokenDomains?: string[];
6264
+ /**
6265
+ * <p>Specifies custom configurations for the associations between the web ACL and protected resources. </p>
6266
+ * <p>Use this to customize the maximum size of the request body that your protected CloudFront distributions forward to WAF for inspection. The default is 16 KB (16,384 kilobytes). </p>
6267
+ * <note>
6268
+ * <p>You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see <a href="http://aws.amazon.com/waf/pricing/">WAF Pricing</a>.</p>
6269
+ * </note>
6270
+ */
6271
+ AssociationConfig?: AssociationConfig;
6179
6272
  }
6180
6273
  /**
6181
6274
  * @public
@@ -6192,7 +6285,7 @@ export interface GetRuleGroupResponse {
6192
6285
  }
6193
6286
  /**
6194
6287
  * @public
6195
- * <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, Amazon Cognito user pool, or an App Runner service. </p>
6288
+ * <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service. </p>
6196
6289
  */
6197
6290
  export interface WebACL {
6198
6291
  /**
@@ -6237,8 +6330,8 @@ export interface WebACL {
6237
6330
  * Simple rules that cost little to run use fewer WCUs than more complex rules
6238
6331
  * that use more processing power.
6239
6332
  * Rule group capacity is fixed at creation, which helps users plan their
6240
- * web ACL WCU usage when they use a rule group.
6241
- * The WCU limit for web ACLs is 1,500. </p>
6333
+ * web ACL WCU usage when they use a rule group. For more information, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/aws-waf-capacity-units.html">WAF web ACL capacity units (WCU)</a>
6334
+ * in the <i>WAF Developer Guide</i>. </p>
6242
6335
  */
6243
6336
  Capacity?: number;
6244
6337
  /**
@@ -6286,10 +6379,11 @@ export interface WebACL {
6286
6379
  LabelNamespace?: string;
6287
6380
  /**
6288
6381
  * <p>A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the web ACL, and then use them in the rules and default actions that you define in the web ACL. </p>
6289
- * <p>For information about customizing web requests and responses, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a> in the
6290
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
6291
- * <p>For information about the limits on count and size for custom request and response settings, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/limits.html">WAF quotas</a> in the
6292
- * <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
6382
+ * <p>For information about customizing web requests and responses,
6383
+ * see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a>
6384
+ * in the <i>WAF Developer Guide</i>. </p>
6385
+ * <p>For information about the limits on count and size for custom request and response settings, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/limits.html">WAF quotas</a>
6386
+ * in the <i>WAF Developer Guide</i>. </p>
6293
6387
  */
6294
6388
  CustomResponseBodies?: Record<string, CustomResponseBody>;
6295
6389
  /**
@@ -6305,6 +6399,14 @@ export interface WebACL {
6305
6399
  * <p>Specifies the domains that WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When WAF provides a token, it uses the domain of the Amazon Web Services resource that the web ACL is protecting. If you don't specify a list of token domains, WAF accepts tokens only for the domain of the protected resource. With a token domain list, WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.</p>
6306
6400
  */
6307
6401
  TokenDomains?: string[];
6402
+ /**
6403
+ * <p>Specifies custom configurations for the associations between the web ACL and protected resources. </p>
6404
+ * <p>Use this to customize the maximum size of the request body that your protected CloudFront distributions forward to WAF for inspection. The default is 16 KB (16,384 kilobytes). </p>
6405
+ * <note>
6406
+ * <p>You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see <a href="http://aws.amazon.com/waf/pricing/">WAF Pricing</a>.</p>
6407
+ * </note>
6408
+ */
6409
+ AssociationConfig?: AssociationConfig;
6308
6410
  }
6309
6411
  /**
6310
6412
  * @public
@@ -6330,7 +6432,8 @@ export interface GetWebACLResponse {
6330
6432
  */
6331
6433
  LockToken?: string;
6332
6434
  /**
6333
- * <p>The URL to use in SDK integrations with Amazon Web Services managed rule groups. For example, you can use the integration SDKs with the account takeover prevention managed rule group <code>AWSManagedRulesATPRuleSet</code>. This is only populated if you are using a rule group in your web ACL that integrates with your applications in this way. For more information, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-application-integration.html">WAF client application integration</a> in the <i>WAF Developer Guide</i>.</p>
6435
+ * <p>The URL to use in SDK integrations with Amazon Web Services managed rule groups. For example, you can use the integration SDKs with the account takeover prevention managed rule group <code>AWSManagedRulesATPRuleSet</code>. This is only populated if you are using a rule group in your web ACL that integrates with your applications in this way. For more information, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-application-integration.html">WAF client application integration</a>
6436
+ * in the <i>WAF Developer Guide</i>.</p>
6334
6437
  */
6335
6438
  ApplicationIntegrationURL?: string;
6336
6439
  }