@aws-sdk/client-wafv2 3.525.0 → 3.529.0

package/dist-cjs/index.js

@@ -281,6 +281,7 @@ var import_middleware_serde = require("@smithy/middleware-serde");
 var import_types = require("@smithy/types");
 
 // src/protocols/Aws_json1_1.ts
+var import_core2 = require("@aws-sdk/core");
 
 
 
@@ -649,7 +650,11 @@ var SensitivityLevel = {
   LOW: "LOW"
 };
 var AssociatedResourceType = {
-  CLOUDFRONT: "CLOUDFRONT"
+  API_GATEWAY: "API_GATEWAY",
+  APP_RUNNER_SERVICE: "APP_RUNNER_SERVICE",
+  CLOUDFRONT: "CLOUDFRONT",
+  COGNITO_USER_POOL: "COGNITO_USER_POOL",
+  VERIFIED_ACCESS_INSTANCE: "VERIFIED_ACCESS_INSTANCE"
 };
 var _WAFInternalErrorException = class _WAFInternalErrorException extends WAFV2ServiceException {
   /**
@@ -875,6 +880,7 @@ var _WAFLimitsExceededException = class _WAFLimitsExceededException extends WAFV
     this.$fault = "client";
     Object.setPrototypeOf(this, _WAFLimitsExceededException.prototype);
     this.Message = opts.Message;
+    this.SourceType = opts.SourceType;
   }
 };
 __name(_WAFLimitsExceededException, "WAFLimitsExceededException");
@@ -1441,7 +1447,7 @@ var de_AssociateWebACLCommand = /* @__PURE__ */ __name(async (output, context) =
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1454,7 +1460,7 @@ var de_CheckCapacityCommand = /* @__PURE__ */ __name(async (output, context) =>
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1467,7 +1473,7 @@ var de_CreateAPIKeyCommand = /* @__PURE__ */ __name(async (output, context) => {
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1480,7 +1486,7 @@ var de_CreateIPSetCommand = /* @__PURE__ */ __name(async (output, context) => {
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1493,7 +1499,7 @@ var de_CreateRegexPatternSetCommand = /* @__PURE__ */ __name(async (output, cont
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1506,7 +1512,7 @@ var de_CreateRuleGroupCommand = /* @__PURE__ */ __name(async (output, context) =
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1519,7 +1525,7 @@ var de_CreateWebACLCommand = /* @__PURE__ */ __name(async (output, context) => {
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1532,7 +1538,7 @@ var de_DeleteAPIKeyCommand = /* @__PURE__ */ __name(async (output, context) => {
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1545,7 +1551,7 @@ var de_DeleteFirewallManagerRuleGroupsCommand = /* @__PURE__ */ __name(async (ou
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1558,7 +1564,7 @@ var de_DeleteIPSetCommand = /* @__PURE__ */ __name(async (output, context) => {
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1571,7 +1577,7 @@ var de_DeleteLoggingConfigurationCommand = /* @__PURE__ */ __name(async (output,
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1584,7 +1590,7 @@ var de_DeletePermissionPolicyCommand = /* @__PURE__ */ __name(async (output, con
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1597,7 +1603,7 @@ var de_DeleteRegexPatternSetCommand = /* @__PURE__ */ __name(async (output, cont
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1610,7 +1616,7 @@ var de_DeleteRuleGroupCommand = /* @__PURE__ */ __name(async (output, context) =
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1623,7 +1629,7 @@ var de_DeleteWebACLCommand = /* @__PURE__ */ __name(async (output, context) => {
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1636,7 +1642,7 @@ var de_DescribeAllManagedProductsCommand = /* @__PURE__ */ __name(async (output,
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1649,7 +1655,7 @@ var de_DescribeManagedProductsByVendorCommand = /* @__PURE__ */ __name(async (ou
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1662,7 +1668,7 @@ var de_DescribeManagedRuleGroupCommand = /* @__PURE__ */ __name(async (output, c
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1675,7 +1681,7 @@ var de_DisassociateWebACLCommand = /* @__PURE__ */ __name(async (output, context
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1688,7 +1694,7 @@ var de_GenerateMobileSdkReleaseUrlCommand = /* @__PURE__ */ __name(async (output
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1701,7 +1707,7 @@ var de_GetDecryptedAPIKeyCommand = /* @__PURE__ */ __name(async (output, context
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = de_GetDecryptedAPIKeyResponse(data, context);
   const response = {
@@ -1714,7 +1720,7 @@ var de_GetIPSetCommand = /* @__PURE__ */ __name(async (output, context) => {
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1727,7 +1733,7 @@ var de_GetLoggingConfigurationCommand = /* @__PURE__ */ __name(async (output, co
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1740,7 +1746,7 @@ var de_GetManagedRuleSetCommand = /* @__PURE__ */ __name(async (output, context)
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = de_GetManagedRuleSetResponse(data, context);
   const response = {
@@ -1753,7 +1759,7 @@ var de_GetMobileSdkReleaseCommand = /* @__PURE__ */ __name(async (output, contex
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = de_GetMobileSdkReleaseResponse(data, context);
   const response = {
@@ -1766,7 +1772,7 @@ var de_GetPermissionPolicyCommand = /* @__PURE__ */ __name(async (output, contex
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1779,7 +1785,7 @@ var de_GetRateBasedStatementManagedKeysCommand = /* @__PURE__ */ __name(async (o
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1792,7 +1798,7 @@ var de_GetRegexPatternSetCommand = /* @__PURE__ */ __name(async (output, context
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1805,7 +1811,7 @@ var de_GetRuleGroupCommand = /* @__PURE__ */ __name(async (output, context) => {
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = de_GetRuleGroupResponse(data, context);
   const response = {
@@ -1818,7 +1824,7 @@ var de_GetSampledRequestsCommand = /* @__PURE__ */ __name(async (output, context
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = de_GetSampledRequestsResponse(data, context);
   const response = {
@@ -1831,7 +1837,7 @@ var de_GetWebACLCommand = /* @__PURE__ */ __name(async (output, context) => {
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = de_GetWebACLResponse(data, context);
   const response = {
@@ -1844,7 +1850,7 @@ var de_GetWebACLForResourceCommand = /* @__PURE__ */ __name(async (output, conte
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = de_GetWebACLForResourceResponse(data, context);
   const response = {
@@ -1857,7 +1863,7 @@ var de_ListAPIKeysCommand = /* @__PURE__ */ __name(async (output, context) => {
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = de_ListAPIKeysResponse(data, context);
   const response = {
@@ -1870,7 +1876,7 @@ var de_ListAvailableManagedRuleGroupsCommand = /* @__PURE__ */ __name(async (out
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1883,7 +1889,7 @@ var de_ListAvailableManagedRuleGroupVersionsCommand = /* @__PURE__ */ __name(asy
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = de_ListAvailableManagedRuleGroupVersionsResponse(data, context);
   const response = {
@@ -1896,7 +1902,7 @@ var de_ListIPSetsCommand = /* @__PURE__ */ __name(async (output, context) => {
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1909,7 +1915,7 @@ var de_ListLoggingConfigurationsCommand = /* @__PURE__ */ __name(async (output,
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1922,7 +1928,7 @@ var de_ListManagedRuleSetsCommand = /* @__PURE__ */ __name(async (output, contex
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1935,7 +1941,7 @@ var de_ListMobileSdkReleasesCommand = /* @__PURE__ */ __name(async (output, cont
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = de_ListMobileSdkReleasesResponse(data, context);
   const response = {
@@ -1948,7 +1954,7 @@ var de_ListRegexPatternSetsCommand = /* @__PURE__ */ __name(async (output, conte
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1961,7 +1967,7 @@ var de_ListResourcesForWebACLCommand = /* @__PURE__ */ __name(async (output, con
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1974,7 +1980,7 @@ var de_ListRuleGroupsCommand = /* @__PURE__ */ __name(async (output, context) =>
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -1987,7 +1993,7 @@ var de_ListTagsForResourceCommand = /* @__PURE__ */ __name(async (output, contex
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -2000,7 +2006,7 @@ var de_ListWebACLsCommand = /* @__PURE__ */ __name(async (output, context) => {
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -2013,7 +2019,7 @@ var de_PutLoggingConfigurationCommand = /* @__PURE__ */ __name(async (output, co
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -2026,7 +2032,7 @@ var de_PutManagedRuleSetVersionsCommand = /* @__PURE__ */ __name(async (output,
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -2039,7 +2045,7 @@ var de_PutPermissionPolicyCommand = /* @__PURE__ */ __name(async (output, contex
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -2052,7 +2058,7 @@ var de_TagResourceCommand = /* @__PURE__ */ __name(async (output, context) => {
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -2065,7 +2071,7 @@ var de_UntagResourceCommand = /* @__PURE__ */ __name(async (output, context) =>
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -2078,7 +2084,7 @@ var de_UpdateIPSetCommand = /* @__PURE__ */ __name(async (output, context) => {
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -2091,7 +2097,7 @@ var de_UpdateManagedRuleSetVersionExpiryDateCommand = /* @__PURE__ */ __name(asy
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = de_UpdateManagedRuleSetVersionExpiryDateResponse(data, context);
   const response = {
@@ -2104,7 +2110,7 @@ var de_UpdateRegexPatternSetCommand = /* @__PURE__ */ __name(async (output, cont
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -2117,7 +2123,7 @@ var de_UpdateRuleGroupCommand = /* @__PURE__ */ __name(async (output, context) =
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -2130,7 +2136,7 @@ var de_UpdateWebACLCommand = /* @__PURE__ */ __name(async (output, context) => {
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
   }
-  const data = await parseBody(output.body, context);
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
   let contents = {};
   contents = (0, import_smithy_client._json)(data);
   const response = {
@@ -2142,9 +2148,9 @@ var de_UpdateWebACLCommand = /* @__PURE__ */ __name(async (output, context) => {
 var de_CommandError = /* @__PURE__ */ __name(async (output, context) => {
   const parsedOutput = {
     ...output,
-    body: await parseErrorBody(output.body, context)
+    body: await (0, import_core2.parseJsonErrorBody)(output.body, context)
   };
-  const errorCode = loadRestJsonErrorCode(output, parsedOutput.body);
+  const errorCode = (0, import_core2.loadRestJsonErrorCode)(output, parsedOutput.body);
   switch (errorCode) {
     case "WAFInternalErrorException":
     case "com.amazonaws.wafv2#WAFInternalErrorException":
@@ -2880,7 +2886,6 @@ var deserializeMetadata = /* @__PURE__ */ __name((output) => ({
   extendedRequestId: output.headers["x-amz-id-2"],
   cfId: output.headers["x-amz-cf-id"]
 }), "deserializeMetadata");
-var collectBodyString = /* @__PURE__ */ __name((streamBody, context) => (0, import_smithy_client.collectBody)(streamBody, context).then((body) => context.utf8Encoder(body)), "collectBodyString");
 var throwDefaultError = (0, import_smithy_client.withBaseException)(WAFV2ServiceException);
 var buildHttpRpcRequest = /* @__PURE__ */ __name(async (context, headers, path, resolvedHostname, body) => {
   const { hostname, protocol = "https", port, path: basePath } = await context.endpoint();
@@ -2907,46 +2912,6 @@ function sharedHeaders(operation) {
   };
 }
 __name(sharedHeaders, "sharedHeaders");
-var parseBody = /* @__PURE__ */ __name((streamBody, context) => collectBodyString(streamBody, context).then((encoded) => {
-  if (encoded.length) {
-    return JSON.parse(encoded);
-  }
-  return {};
-}), "parseBody");
-var parseErrorBody = /* @__PURE__ */ __name(async (errorBody, context) => {
-  const value = await parseBody(errorBody, context);
-  value.message = value.message ?? value.Message;
-  return value;
-}, "parseErrorBody");
-var loadRestJsonErrorCode = /* @__PURE__ */ __name((output, data) => {
-  const findKey = /* @__PURE__ */ __name((object, key) => Object.keys(object).find((k) => k.toLowerCase() === key.toLowerCase()), "findKey");
-  const sanitizeErrorCode = /* @__PURE__ */ __name((rawValue) => {
-    let cleanValue = rawValue;
-    if (typeof cleanValue === "number") {
-      cleanValue = cleanValue.toString();
-    }
-    if (cleanValue.indexOf(",") >= 0) {
-      cleanValue = cleanValue.split(",")[0];
-    }
-    if (cleanValue.indexOf(":") >= 0) {
-      cleanValue = cleanValue.split(":")[0];
-    }
-    if (cleanValue.indexOf("#") >= 0) {
-      cleanValue = cleanValue.split("#")[1];
-    }
-    return cleanValue;
-  }, "sanitizeErrorCode");
-  const headerKey = findKey(output.headers, "x-amzn-errortype");
-  if (headerKey !== void 0) {
-    return sanitizeErrorCode(output.headers[headerKey]);
-  }
-  if (data.code !== void 0) {
-    return sanitizeErrorCode(data.code);
-  }
-  if (data["__type"] !== void 0) {
-    return sanitizeErrorCode(data["__type"]);
-  }
-}, "loadRestJsonErrorCode");
 
 // src/commands/AssociateWebACLCommand.ts
 var _AssociateWebACLCommand = class _AssociateWebACLCommand extends import_smithy_client.Command.classBuilder().ep({

package/dist-es/models/models_0.js

@@ -349,7 +349,11 @@ export const SensitivityLevel = {
     LOW: "LOW",
 };
 export const AssociatedResourceType = {
+    API_GATEWAY: "API_GATEWAY",
+    APP_RUNNER_SERVICE: "APP_RUNNER_SERVICE",
     CLOUDFRONT: "CLOUDFRONT",
+    COGNITO_USER_POOL: "COGNITO_USER_POOL",
+    VERIFIED_ACCESS_INSTANCE: "VERIFIED_ACCESS_INSTANCE",
 };
 export class WAFInternalErrorException extends __BaseException {
     constructor(opts) {
@@ -537,6 +541,7 @@ export class WAFLimitsExceededException extends __BaseException {
         this.$fault = "client";
         Object.setPrototypeOf(this, WAFLimitsExceededException.prototype);
         this.Message = opts.Message;
+        this.SourceType = opts.SourceType;
     }
 }
 export class WAFSubscriptionNotFoundException extends __BaseException {

package/dist-es/protocols/Aws_json1_1.js

@@ -1,3 +1,4 @@
+import { loadRestJsonErrorCode, parseJsonBody as parseBody, parseJsonErrorBody as parseErrorBody } from "@aws-sdk/core";
 import { HttpRequest as __HttpRequest } from "@smithy/protocol-http";
 import { _json, collectBody, decorateServiceException as __decorateServiceException, expectBoolean as __expectBoolean, expectInt32 as __expectInt32, expectLong as __expectLong, expectNonNull as __expectNonNull, expectNumber as __expectNumber, expectString as __expectString, parseEpochTimestamp as __parseEpochTimestamp, take, withBaseException, } from "@smithy/smithy-client";
 import { WAFAssociatedItemException, WAFConfigurationWarningException, WAFDuplicateItemException, WAFExpiredManagedRuleGroupVersionException, WAFInternalErrorException, WAFInvalidOperationException, WAFInvalidParameterException, WAFInvalidPermissionPolicyException, WAFInvalidResourceException, WAFLimitsExceededException, WAFLogDestinationPermissionIssueException, WAFNonexistentItemException, WAFOptimisticLockException, WAFServiceLinkedRoleErrorException, WAFSubscriptionNotFoundException, WAFTagOperationException, WAFTagOperationInternalErrorException, WAFUnavailableEntityException, WAFUnsupportedAggregateKeyTypeException, } from "../models/models_0";
@@ -1813,43 +1814,3 @@ function sharedHeaders(operation) {
         "x-amz-target": `AWSWAF_20190729.${operation}`,
     };
 }
-const parseBody = (streamBody, context) => collectBodyString(streamBody, context).then((encoded) => {
-    if (encoded.length) {
-        return JSON.parse(encoded);
-    }
-    return {};
-});
-const parseErrorBody = async (errorBody, context) => {
-    const value = await parseBody(errorBody, context);
-    value.message = value.message ?? value.Message;
-    return value;
-};
-const loadRestJsonErrorCode = (output, data) => {
-    const findKey = (object, key) => Object.keys(object).find((k) => k.toLowerCase() === key.toLowerCase());
-    const sanitizeErrorCode = (rawValue) => {
-        let cleanValue = rawValue;
-        if (typeof cleanValue === "number") {
-            cleanValue = cleanValue.toString();
-        }
-        if (cleanValue.indexOf(",") >= 0) {
-            cleanValue = cleanValue.split(",")[0];
-        }
-        if (cleanValue.indexOf(":") >= 0) {
-            cleanValue = cleanValue.split(":")[0];
-        }
-        if (cleanValue.indexOf("#") >= 0) {
-            cleanValue = cleanValue.split("#")[1];
-        }
-        return cleanValue;
-    };
-    const headerKey = findKey(output.headers, "x-amzn-errortype");
-    if (headerKey !== undefined) {
-        return sanitizeErrorCode(output.headers[headerKey]);
-    }
-    if (data.code !== undefined) {
-        return sanitizeErrorCode(data.code);
-    }
-    if (data["__type"] !== undefined) {
-        return sanitizeErrorCode(data["__type"]);
-    }
-};

package/dist-types/commands/DescribeAllManagedProductsCommand.d.ts

@@ -69,6 +69,27 @@ declare const DescribeAllManagedProductsCommand_base: {
  * @throws {@link WAFInvalidOperationException} (client fault)
  *  <p>The operation isn't valid. </p>
  *
+ * @throws {@link WAFInvalidParameterException} (client fault)
+ *  <p>The operation failed because WAF didn't recognize a parameter in the request. For
+ *          example: </p>
+ *          <ul>
+ *             <li>
+ *                <p>You specified a parameter name or value that isn't valid.</p>
+ *             </li>
+ *             <li>
+ *                <p>Your nested statement isn't valid. You might have tried to nest a statement that
+ *                can’t be nested. </p>
+ *             </li>
+ *             <li>
+ *                <p>You tried to update a <code>WebACL</code> with a <code>DefaultAction</code> that
+ *                isn't among the types available at <a>DefaultAction</a>.</p>
+ *             </li>
+ *             <li>
+ *                <p>Your request references an ARN that is malformed, or corresponds to a resource
+ *                with which a web ACL can't be associated.</p>
+ *             </li>
+ *          </ul>
+ *
  * @throws {@link WAFV2ServiceException}
  * <p>Base exception class for all service exceptions from WAFV2 service.</p>
  *

package/dist-types/commands/GetDecryptedAPIKeyCommand.d.ts

@@ -89,6 +89,12 @@ declare const GetDecryptedAPIKeyCommand_base: {
  *  <p>WAF couldn’t perform the operation because the resource that you requested isn’t
  *          valid. Check the resource, and try again.</p>
  *
+ * @throws {@link WAFNonexistentItemException} (client fault)
+ *  <p>WAF couldn’t perform the operation because your resource doesn't exist.
+ *        If you've just created a resource that you're using in this operation, you might
+ *        just need to wait a few minutes. It can take from a few seconds to a number of minutes
+ *        for changes to propagate. </p>
+ *
  * @throws {@link WAFV2ServiceException}
  * <p>Base exception class for all service exceptions from WAFV2 service.</p>
  *

package/dist-types/models/models_0.d.ts

@@ -154,12 +154,19 @@ export type OversizeHandling = (typeof OversizeHandling)[keyof typeof OversizeHa
 export interface Body {
     /**
      * @public
-     * <p>What WAF should do if the body is larger than WAF can inspect.
-     *     WAF does not support inspecting the entire contents of the web request body if the body
-     *     exceeds the limit for the resource type. If the body is larger than the limit, the underlying host service
-     *     only forwards the contents that are below the limit to WAF for inspection. </p>
-     *          <p>The default limit is 8 KB (8,192 bytes) for regional resources and 16 KB (16,384 bytes) for CloudFront distributions. For CloudFront distributions,
-     *     you can increase the limit in the web ACL <code>AssociationConfig</code>, for additional processing fees. </p>
+     * <p>What WAF should do if the body is larger than WAF can inspect. </p>
+     *          <p>WAF does not support inspecting the entire contents of the web request body if the body
+     *     exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service
+     *     only forwards the contents that are within the limit to WAF for inspection. </p>
+     *          <ul>
+     *             <li>
+     *                <p>For Application Load Balancer and AppSync, the limit is fixed at 8 KB (8,192 bytes).</p>
+     *             </li>
+     *             <li>
+     *                <p>For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and
+     *           you can increase the limit for each resource type in the web ACL <code>AssociationConfig</code>, for additional processing fees. </p>
+     *             </li>
+     *          </ul>
      *          <p>The options for oversize handling are the following:</p>
      *          <ul>
      *             <li>
@@ -580,12 +587,19 @@ export interface JsonBody {
     InvalidFallbackBehavior?: BodyParsingFallbackBehavior;
     /**
      * @public
-     * <p>What WAF should do if the body is larger than WAF can inspect.
-     *     WAF does not support inspecting the entire contents of the web request body if the body
-     *     exceeds the limit for the resource type. If the body is larger than the limit, the underlying host service
-     *     only forwards the contents that are below the limit to WAF for inspection. </p>
-     *          <p>The default limit is 8 KB (8,192 bytes) for regional resources and 16 KB (16,384 bytes) for CloudFront distributions. For CloudFront distributions,
-     *     you can increase the limit in the web ACL <code>AssociationConfig</code>, for additional processing fees. </p>
+     * <p>What WAF should do if the body is larger than WAF can inspect. </p>
+     *          <p>WAF does not support inspecting the entire contents of the web request body if the body
+     *     exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service
+     *     only forwards the contents that are within the limit to WAF for inspection. </p>
+     *          <ul>
+     *             <li>
+     *                <p>For Application Load Balancer and AppSync, the limit is fixed at 8 KB (8,192 bytes).</p>
+     *             </li>
+     *             <li>
+     *                <p>For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and
+     *           you can increase the limit for each resource type in the web ACL <code>AssociationConfig</code>, for additional processing fees. </p>
+     *             </li>
+     *          </ul>
      *          <p>The options for oversize handling are the following:</p>
      *          <ul>
      *             <li>
@@ -675,20 +689,39 @@ export interface UriPath {
 }
 /**
  * @public
- * <p>The part of the web request that you want WAF to inspect. Include the single
- *             <code>FieldToMatch</code> type that you want to inspect, with additional specifications
- *          as needed, according to the type. You specify a single request component in
- *             <code>FieldToMatch</code> for each rule statement that requires it. To inspect more than
- *          one component of the web request, create a separate rule statement for each
- *          component.</p>
- *          <p>Example JSON for a <code>QueryString</code> field to match: </p>
- *          <p>
- *             <code> "FieldToMatch": \{ "QueryString": \{\} \}</code>
- *          </p>
- *          <p>Example JSON for a <code>Method</code> field to match specification:</p>
- *          <p>
- *             <code> "FieldToMatch": \{ "Method": \{ "Name": "DELETE" \} \}</code>
- *          </p>
+ * <p>Specifies a web request component to be used in a rule match statement or in a logging configuration. </p>
+ *          <ul>
+ *             <li>
+ *                <p>In a rule statement, this is the part of the web request that you want WAF to inspect. Include the single
+ *                     <code>FieldToMatch</code> type that you want to inspect, with additional specifications
+ *                  as needed, according to the type. You specify a single request component in
+ *                     <code>FieldToMatch</code> for each rule statement that requires it. To inspect more than
+ *                  one component of the web request, create a separate rule statement for each
+ *                  component.</p>
+ *                <p>Example JSON for a <code>QueryString</code> field to match: </p>
+ *                <p>
+ *                   <code> "FieldToMatch": \{ "QueryString": \{\} \}</code>
+ *                </p>
+ *                <p>Example JSON for a <code>Method</code> field to match specification:</p>
+ *                <p>
+ *                   <code> "FieldToMatch": \{ "Method": \{ "Name": "DELETE" \} \}</code>
+ *                </p>
+ *             </li>
+ *             <li>
+ *                <p>In a logging configuration, this is used in the <code>RedactedFields</code> property to specify a field to
+ *               redact from the logging records. For this use case, note the following: </p>
+ *                <ul>
+ *                   <li>
+ *                      <p>Even though all <code>FieldToMatch</code> settings
+ *                   are available, the only valid settings for field redaction are <code>UriPath</code>, <code>QueryString</code>, <code>SingleHeader</code>, and <code>Method</code>.</p>
+ *                   </li>
+ *                   <li>
+ *                      <p>In this documentation, the descriptions of the individual fields talk about specifying the web request component to inspect,
+ *                       but for field redaction, you are specifying the component type to redact from the logs. </p>
+ *                   </li>
+ *                </ul>
+ *             </li>
+ *          </ul>
  */
 export interface FieldToMatch {
     /**
@@ -733,9 +766,18 @@ export interface FieldToMatch {
      * <p>Inspect the request body as plain text. The request body immediately follows the request
      *          headers. This is the part of a request that contains any additional data that you want to
      *          send to your web server as the HTTP request body, such as data from a form. </p>
-     *          <p>A limited amount of the request body is forwarded to WAF for
-     *       inspection by the underlying host service. For regional resources, the limit is 8 KB (8,192 bytes) and for CloudFront distributions, the limit is 16 KB (16,384 bytes). For CloudFront distributions,
-     *     you can increase the limit in the web ACL's <code>AssociationConfig</code>, for additional processing fees. </p>
+     *          <p>WAF does not support inspecting the entire contents of the web request body if the body
+     *     exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service
+     *     only forwards the contents that are within the limit to WAF for inspection. </p>
+     *          <ul>
+     *             <li>
+     *                <p>For Application Load Balancer and AppSync, the limit is fixed at 8 KB (8,192 bytes).</p>
+     *             </li>
+     *             <li>
+     *                <p>For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and
+     *           you can increase the limit for each resource type in the web ACL <code>AssociationConfig</code>, for additional processing fees. </p>
+     *             </li>
+     *          </ul>
      *          <p>For information about how to handle oversized
      *          request bodies, see the <code>Body</code> object configuration. </p>
      */
@@ -751,9 +793,18 @@ export interface FieldToMatch {
      * <p>Inspect the request body as JSON. The request body immediately follows the request
      *          headers. This is the part of a request that contains any additional data that you want to
      *          send to your web server as the HTTP request body, such as data from a form. </p>
-     *          <p>A limited amount of the request body is forwarded to WAF for
-     *       inspection by the underlying host service. For regional resources, the limit is 8 KB (8,192 bytes) and for CloudFront distributions, the limit is 16 KB (16,384 bytes). For CloudFront distributions,
-     *     you can increase the limit in the web ACL's <code>AssociationConfig</code>, for additional processing fees. </p>
+     *          <p>WAF does not support inspecting the entire contents of the web request body if the body
+     *     exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service
+     *     only forwards the contents that are within the limit to WAF for inspection. </p>
+     *          <ul>
+     *             <li>
+     *                <p>For Application Load Balancer and AppSync, the limit is fixed at 8 KB (8,192 bytes).</p>
+     *             </li>
+     *             <li>
+     *                <p>For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and
+     *           you can increase the limit for each resource type in the web ACL <code>AssociationConfig</code>, for additional processing fees. </p>
+     *             </li>
+     *          </ul>
      *          <p>For information about how to handle oversized
      *          request bodies, see the <code>JsonBody</code> object configuration. </p>
      */
@@ -2652,7 +2703,7 @@ export type ComparisonOperator = (typeof ComparisonOperator)[keyof typeof Compar
 /**
  * @public
  * <p>A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes. </p>
- *          <p>If you configure WAF to inspect the request body, WAF inspects only the number of bytes of the body up to the limit for the web ACL. By default, for regional web ACLs, this limit is 8 KB (8,192 bytes) and for CloudFront web ACLs, this limit is 16 KB (16,384 bytes). For CloudFront web ACLs, you can increase the limit in the web ACL <code>AssociationConfig</code>, for additional fees. If you know that the request body for your web requests should never exceed the inspection limit, you could use a size constraint statement to block requests that have a larger request body size.</p>
+ *          <p>If you configure WAF to inspect the request body, WAF inspects only the number of bytes in the body up to the limit for the web ACL and protected resource type. If you know that the request body for your web requests should never exceed the inspection limit, you can use a size constraint statement to block requests that have a larger request body size. For more information about the inspection limits, see <code>Body</code> and <code>JsonBody</code> settings for the <code>FieldToMatch</code> data type. </p>
  *          <p>If you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI <code>/logo.jpg</code> is nine characters long.</p>
  */
 export interface SizeConstraintStatement {
@@ -2772,7 +2823,11 @@ export interface APIKeySummary {
  * @enum
  */
 export declare const AssociatedResourceType: {
+    readonly API_GATEWAY: "API_GATEWAY";
+    readonly APP_RUNNER_SERVICE: "APP_RUNNER_SERVICE";
     readonly CLOUDFRONT: "CLOUDFRONT";
+    readonly COGNITO_USER_POOL: "COGNITO_USER_POOL";
+    readonly VERIFIED_ACCESS_INSTANCE: "VERIFIED_ACCESS_INSTANCE";
 };
 /**
  * @public
@@ -3033,16 +3088,22 @@ export declare const SizeInspectionLimit: {
 export type SizeInspectionLimit = (typeof SizeInspectionLimit)[keyof typeof SizeInspectionLimit];
 /**
  * @public
- * <p>Customizes the maximum size of the request body that your protected CloudFront distributions forward to WAF for inspection. The default size is 16 KB (16,384 bytes). </p>
+ * <p>Customizes the maximum size of the request body that your protected CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access resources forward to WAF for inspection. The default size is 16 KB (16,384 bytes). You can change the setting for any of the available resource types. </p>
  *          <note>
  *             <p>You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see <a href="http://aws.amazon.com/waf/pricing/">WAF Pricing</a>.</p>
  *          </note>
+ *          <p>Example JSON: <code> \{
+ *     "API_GATEWAY": "KB_48",
+ *     "APP_RUNNER_SERVICE": "KB_32"
+ *     \}</code>
+ *          </p>
+ *          <p>For Application Load Balancer and AppSync, the limit is fixed at 8 KB (8,192 bytes).</p>
  *          <p>This is used in the <code>AssociationConfig</code> of the web ACL. </p>
  */
 export interface RequestBodyAssociatedResourceTypeConfig {
     /**
      * @public
-     * <p>Specifies the maximum size of the web request body component that an associated CloudFront distribution should send to WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. </p>
+     * <p>Specifies the maximum size of the web request body component that an associated CloudFront, API Gateway, Amazon Cognito, App Runner, or Verified Access resource should send to WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. </p>
      *          <p>Default: <code>16 KB (16,384 bytes)</code>
      *          </p>
      */
@@ -3051,18 +3112,26 @@ export interface RequestBodyAssociatedResourceTypeConfig {
 /**
  * @public
  * <p>Specifies custom configurations for the associations between the web ACL and protected resources.  </p>
- *          <p>Use this to customize the maximum size of the request body that your protected CloudFront distributions forward to WAF for inspection. The default is 16 KB (16,384 bytes). </p>
+ *          <p>Use this to customize the maximum size of the request body that your protected resources forward to WAF for inspection. You can
+ *     customize this setting for CloudFront, API Gateway, Amazon Cognito, App Runner, or Verified Access resources. The default setting is 16 KB (16,384 bytes). </p>
  *          <note>
  *             <p>You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see <a href="http://aws.amazon.com/waf/pricing/">WAF Pricing</a>.</p>
  *          </note>
+ *          <p>For Application Load Balancer and AppSync, the limit is fixed at 8 KB (8,192 bytes).</p>
  */
 export interface AssociationConfig {
     /**
      * @public
-     * <p>Customizes the maximum size of the request body that your protected CloudFront distributions forward to WAF for inspection. The default size is 16 KB (16,384 bytes). </p>
+     * <p>Customizes the maximum size of the request body that your protected CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access resources forward to WAF for inspection. The default size is 16 KB (16,384 bytes). You can change the setting for any of the available resource types. </p>
      *          <note>
      *             <p>You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see <a href="http://aws.amazon.com/waf/pricing/">WAF Pricing</a>.</p>
      *          </note>
+     *          <p>Example JSON: <code> \{
+     *     "API_GATEWAY": "KB_48",
+     *     "APP_RUNNER_SERVICE": "KB_32"
+     *     \}</code>
+     *          </p>
+     *          <p>For Application Load Balancer and AppSync, the limit is fixed at 8 KB (8,192 bytes).</p>
      */
     RequestBody?: Partial<Record<AssociatedResourceType, RequestBodyAssociatedResourceTypeConfig>>;
 }
@@ -3248,6 +3317,11 @@ export declare class WAFLimitsExceededException extends __BaseException {
     readonly name: "WAFLimitsExceededException";
     readonly $fault: "client";
     Message?: string;
+    /**
+     * @public
+     * <p>Source type for the exception. </p>
+     */
+    SourceType?: string;
     /**
      * @internal
      */
@@ -6806,7 +6880,7 @@ export interface Statement {
     /**
      * @public
      * <p>A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes. </p>
-     *          <p>If you configure WAF to inspect the request body, WAF inspects only the number of bytes of the body up to the limit for the web ACL. By default, for regional web ACLs, this limit is 8 KB (8,192 bytes) and for CloudFront web ACLs, this limit is 16 KB (16,384 bytes). For CloudFront web ACLs, you can increase the limit in the web ACL <code>AssociationConfig</code>, for additional fees. If you know that the request body for your web requests should never exceed the inspection limit, you could use a size constraint statement to block requests that have a larger request body size.</p>
+     *          <p>If you configure WAF to inspect the request body, WAF inspects only the number of bytes in the body up to the limit for the web ACL and protected resource type. If you know that the request body for your web requests should never exceed the inspection limit, you can use a size constraint statement to block requests that have a larger request body size. For more information about the inspection limits, see <code>Body</code> and <code>JsonBody</code> settings for the <code>FieldToMatch</code> data type. </p>
      *          <p>If you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI <code>/logo.jpg</code> is nine characters long.</p>
      */
     SizeConstraintStatement?: SizeConstraintStatement;
@@ -6849,6 +6923,9 @@ export interface Statement {
     /**
      * @public
      * <p>A rate-based rule counts incoming requests and rate limits requests when they are coming at too fast a rate. The rule categorizes requests according to your aggregation criteria, collects them into aggregation instances, and counts and rate limits the requests for each instance. </p>
+     *          <note>
+     *             <p>If you change any of these settings in a rule that's currently in use, the change resets the rule's rate limiting counts. This can pause the rule's rate limiting activities for up to a minute. </p>
+     *          </note>
      *          <p>You can specify individual aggregation keys, like IP address or HTTP method. You can also specify aggregation key combinations, like IP address and HTTP method, or HTTP method, query argument, and cookie. </p>
      *          <p>Each unique set of values for the aggregation keys that you specify is a separate aggregation instance, with the value from each key contributing to the aggregation instance definition. </p>
      *          <p>For example, assume the rule evaluates web requests with the following IP address and HTTP method values: </p>
@@ -7037,6 +7114,9 @@ export interface NotStatement {
 /**
  * @public
  * <p>A rate-based rule counts incoming requests and rate limits requests when they are coming at too fast a rate. The rule categorizes requests according to your aggregation criteria, collects them into aggregation instances, and counts and rate limits the requests for each instance. </p>
+ *          <note>
+ *             <p>If you change any of these settings in a rule that's currently in use, the change resets the rule's rate limiting counts. This can pause the rule's rate limiting activities for up to a minute. </p>
+ *          </note>
  *          <p>You can specify individual aggregation keys, like IP address or HTTP method. You can also specify aggregation key combinations, like IP address and HTTP method, or HTTP method, query argument, and cookie. </p>
  *          <p>Each unique set of values for the aggregation keys that you specify is a separate aggregation instance, with the value from each key contributing to the aggregation instance definition. </p>
  *          <p>For example, assume the rule evaluates web requests with the following IP address and HTTP method values: </p>
@@ -7556,10 +7636,12 @@ export interface CreateWebACLRequest {
     /**
      * @public
      * <p>Specifies custom configurations for the associations between the web ACL and protected resources.  </p>
-     *          <p>Use this to customize the maximum size of the request body that your protected CloudFront distributions forward to WAF for inspection. The default is 16 KB (16,384 bytes). </p>
+     *          <p>Use this to customize the maximum size of the request body that your protected resources forward to WAF for inspection. You can
+     *     customize this setting for CloudFront, API Gateway, Amazon Cognito, App Runner, or Verified Access resources. The default setting is 16 KB (16,384 bytes). </p>
      *          <note>
      *             <p>You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see <a href="http://aws.amazon.com/waf/pricing/">WAF Pricing</a>.</p>
      *          </note>
+     *          <p>For Application Load Balancer and AppSync, the limit is fixed at 8 KB (8,192 bytes).</p>
      */
     AssociationConfig?: AssociationConfig;
 }
@@ -7807,10 +7889,12 @@ export interface UpdateWebACLRequest {
     /**
      * @public
      * <p>Specifies custom configurations for the associations between the web ACL and protected resources.  </p>
-     *          <p>Use this to customize the maximum size of the request body that your protected CloudFront distributions forward to WAF for inspection. The default is 16 KB (16,384 bytes). </p>
+     *          <p>Use this to customize the maximum size of the request body that your protected resources forward to WAF for inspection. You can
+     *     customize this setting for CloudFront, API Gateway, Amazon Cognito, App Runner, or Verified Access resources. The default setting is 16 KB (16,384 bytes). </p>
      *          <note>
      *             <p>You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see <a href="http://aws.amazon.com/waf/pricing/">WAF Pricing</a>.</p>
      *          </note>
+     *          <p>For Application Load Balancer and AppSync, the limit is fixed at 8 KB (8,192 bytes).</p>
      */
     AssociationConfig?: AssociationConfig;
 }
@@ -7964,10 +8048,12 @@ export interface WebACL {
     /**
      * @public
      * <p>Specifies custom configurations for the associations between the web ACL and protected resources.  </p>
-     *          <p>Use this to customize the maximum size of the request body that your protected CloudFront distributions forward to WAF for inspection. The default is 16 KB (16,384 bytes). </p>
+     *          <p>Use this to customize the maximum size of the request body that your protected resources forward to WAF for inspection. You can
+     *     customize this setting for CloudFront, API Gateway, Amazon Cognito, App Runner, or Verified Access resources. The default setting is 16 KB (16,384 bytes). </p>
      *          <note>
      *             <p>You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see <a href="http://aws.amazon.com/waf/pricing/">WAF Pricing</a>.</p>
      *          </note>
+     *          <p>For Application Load Balancer and AppSync, the limit is fixed at 8 KB (8,192 bytes).</p>
      */
     AssociationConfig?: AssociationConfig;
 }

package/dist-types/ts3.4/models/models_0.d.ts

@@ -666,7 +666,11 @@ export interface APIKeySummary {
   Version?: number;
 }
 export declare const AssociatedResourceType: {
+  readonly API_GATEWAY: "API_GATEWAY";
+  readonly APP_RUNNER_SERVICE: "APP_RUNNER_SERVICE";
   readonly CLOUDFRONT: "CLOUDFRONT";
+  readonly COGNITO_USER_POOL: "COGNITO_USER_POOL";
+  readonly VERIFIED_ACCESS_INSTANCE: "VERIFIED_ACCESS_INSTANCE";
 };
 export type AssociatedResourceType =
   (typeof AssociatedResourceType)[keyof typeof AssociatedResourceType];
@@ -860,6 +864,7 @@ export declare class WAFLimitsExceededException extends __BaseException {
   readonly name: "WAFLimitsExceededException";
   readonly $fault: "client";
   Message?: string;
+  SourceType?: string;
   constructor(
     opts: __ExceptionOptionType<WAFLimitsExceededException, __BaseException>
   );

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-wafv2",
   "description": "AWS SDK for JavaScript Wafv2 Client for Node.js, Browser and React Native",
-  "version": "3.525.0",
+  "version": "3.529.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-wafv2",
@@ -20,9 +20,9 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "3.0.0",
     "@aws-crypto/sha256-js": "3.0.0",
-    "@aws-sdk/client-sts": "3.525.0",
-    "@aws-sdk/core": "3.525.0",
-    "@aws-sdk/credential-provider-node": "3.525.0",
+    "@aws-sdk/client-sts": "3.529.0",
+    "@aws-sdk/core": "3.529.0",
+    "@aws-sdk/credential-provider-node": "3.529.0",
     "@aws-sdk/middleware-host-header": "3.523.0",
     "@aws-sdk/middleware-logger": "3.523.0",
     "@aws-sdk/middleware-recursion-detection": "3.523.0",