@pulumi/aws 7.8.0-alpha.1758051590 → 7.8.0-alpha.1759505861

package/wafv2/webAcl.js

@@ -8,412 +8,10 @@ const utilities = require("../utilities");
 /**
  * Creates a WAFv2 Web ACL resource.
  *
- * > **Note** In `fieldToMatch` blocks, _e.g._, in `byteMatchStatement`, the `body` block includes an optional argument `oversizeHandling`. AWS indicates this argument will be required starting February 2023. To avoid configurations breaking when that change happens, treat the `oversizeHandling` argument as **required** as soon as possible.
+ * > **Note** In `fieldToMatch` blocks, *e.g.*, in `byteMatchStatement`, the `body` block includes an optional argument `oversizeHandling`. AWS indicates this argument will be required starting February 2023. To avoid configurations breaking when that change happens, treat the `oversizeHandling` argument as **required** as soon as possible.
  *
  * !> **Warning:** If you use the `aws.wafv2.WebAclRuleGroupAssociation` resource to associate rule groups with this Web ACL, you must add `lifecycle { ignoreChanges = [rule] }` to this resource to prevent configuration drift. The association resource modifies the Web ACL's rules outside of this resource's direct management.
  *
- * ## Example Usage
- *
- * This resource is based on `aws.wafv2.RuleGroup`, check the documentation of the `aws.wafv2.RuleGroup` resource to see examples of the various available statements.
- *
- * ### Managed Rule
- *
- * ```typescript
- * import * as pulumi from "@pulumi/pulumi";
- * import * as aws from "@pulumi/aws";
- *
- * const example = new aws.wafv2.WebAcl("example", {
- *     name: "managed-rule-example",
- *     description: "Example of a managed rule.",
- *     scope: "REGIONAL",
- *     defaultAction: {
- *         allow: {},
- *     },
- *     rules: [{
- *         name: "rule-1",
- *         priority: 1,
- *         overrideAction: {
- *             count: {},
- *         },
- *         statement: {
- *             managedRuleGroupStatement: {
- *                 name: "AWSManagedRulesCommonRuleSet",
- *                 vendorName: "AWS",
- *                 ruleActionOverrides: [
- *                     {
- *                         actionToUse: {
- *                             count: {},
- *                         },
- *                         name: "SizeRestrictions_QUERYSTRING",
- *                     },
- *                     {
- *                         actionToUse: {
- *                             count: {},
- *                         },
- *                         name: "NoUserAgent_HEADER",
- *                     },
- *                 ],
- *                 scopeDownStatement: {
- *                     geoMatchStatement: {
- *                         countryCodes: [
- *                             "US",
- *                             "NL",
- *                         ],
- *                     },
- *                 },
- *             },
- *         },
- *         visibilityConfig: {
- *             cloudwatchMetricsEnabled: false,
- *             metricName: "friendly-rule-metric-name",
- *             sampledRequestsEnabled: false,
- *         },
- *     }],
- *     tags: {
- *         Tag1: "Value1",
- *         Tag2: "Value2",
- *     },
- *     tokenDomains: [
- *         "mywebsite.com",
- *         "myotherwebsite.com",
- *     ],
- *     visibilityConfig: {
- *         cloudwatchMetricsEnabled: false,
- *         metricName: "friendly-metric-name",
- *         sampledRequestsEnabled: false,
- *     },
- * });
- * ```
- *
- * ### Account Creation Fraud Prevention
- *
- * ```typescript
- * import * as pulumi from "@pulumi/pulumi";
- * import * as aws from "@pulumi/aws";
- *
- * const acfp_example = new aws.wafv2.WebAcl("acfp-example", {
- *     name: "managed-acfp-example",
- *     description: "Example of a managed ACFP rule.",
- *     scope: "CLOUDFRONT",
- *     defaultAction: {
- *         allow: {},
- *     },
- *     rules: [{
- *         name: "acfp-rule-1",
- *         priority: 1,
- *         overrideAction: {
- *             count: {},
- *         },
- *         statement: {
- *             managedRuleGroupStatement: {
- *                 name: "AWSManagedRulesACFPRuleSet",
- *                 vendorName: "AWS",
- *                 managedRuleGroupConfigs: [{
- *                     awsManagedRulesAcfpRuleSet: {
- *                         creationPath: "/signin",
- *                         registrationPagePath: "/register",
- *                         requestInspection: {
- *                             emailField: {
- *                                 identifier: "/email",
- *                             },
- *                             passwordField: {
- *                                 identifier: "/password",
- *                             },
- *                             payloadType: "JSON",
- *                             usernameField: {
- *                                 identifier: "/username",
- *                             },
- *                         },
- *                         responseInspection: {
- *                             statusCode: {
- *                                 failureCodes: [403],
- *                                 successCodes: [200],
- *                             },
- *                         },
- *                     },
- *                 }],
- *             },
- *         },
- *         visibilityConfig: {
- *             cloudwatchMetricsEnabled: false,
- *             metricName: "friendly-rule-metric-name",
- *             sampledRequestsEnabled: false,
- *         },
- *     }],
- *     visibilityConfig: {
- *         cloudwatchMetricsEnabled: false,
- *         metricName: "friendly-metric-name",
- *         sampledRequestsEnabled: false,
- *     },
- * });
- * ```
- *
- * ### Account Takeover Protection
- *
- * ```typescript
- * import * as pulumi from "@pulumi/pulumi";
- * import * as aws from "@pulumi/aws";
- *
- * const atp_example = new aws.wafv2.WebAcl("atp-example", {
- *     name: "managed-atp-example",
- *     description: "Example of a managed ATP rule.",
- *     scope: "CLOUDFRONT",
- *     defaultAction: {
- *         allow: {},
- *     },
- *     rules: [{
- *         name: "atp-rule-1",
- *         priority: 1,
- *         overrideAction: {
- *             count: {},
- *         },
- *         statement: {
- *             managedRuleGroupStatement: {
- *                 name: "AWSManagedRulesATPRuleSet",
- *                 vendorName: "AWS",
- *                 managedRuleGroupConfigs: [{
- *                     awsManagedRulesAtpRuleSet: {
- *                         loginPath: "/api/1/signin",
- *                         requestInspection: {
- *                             passwordField: {
- *                                 identifier: "/password",
- *                             },
- *                             payloadType: "JSON",
- *                             usernameField: {
- *                                 identifier: "/email",
- *                             },
- *                         },
- *                         responseInspection: {
- *                             statusCode: {
- *                                 failureCodes: [403],
- *                                 successCodes: [200],
- *                             },
- *                         },
- *                     },
- *                 }],
- *             },
- *         },
- *         visibilityConfig: {
- *             cloudwatchMetricsEnabled: false,
- *             metricName: "friendly-rule-metric-name",
- *             sampledRequestsEnabled: false,
- *         },
- *     }],
- *     visibilityConfig: {
- *         cloudwatchMetricsEnabled: false,
- *         metricName: "friendly-metric-name",
- *         sampledRequestsEnabled: false,
- *     },
- * });
- * ```
- *
- * ### Rate Based
- *
- * Rate-limit US and NL-based clients to 10,000 requests for every 5 minutes.
- *
- * ```typescript
- * import * as pulumi from "@pulumi/pulumi";
- * import * as aws from "@pulumi/aws";
- *
- * const example = new aws.wafv2.WebAcl("example", {
- *     name: "rate-based-example",
- *     description: "Example of a Cloudfront rate based statement.",
- *     scope: "CLOUDFRONT",
- *     defaultAction: {
- *         allow: {},
- *     },
- *     rules: [{
- *         name: "rule-1",
- *         priority: 1,
- *         action: {
- *             block: {},
- *         },
- *         statement: {
- *             rateBasedStatement: {
- *                 limit: 10000,
- *                 aggregateKeyType: "IP",
- *                 scopeDownStatement: {
- *                     geoMatchStatement: {
- *                         countryCodes: [
- *                             "US",
- *                             "NL",
- *                         ],
- *                     },
- *                 },
- *             },
- *         },
- *         visibilityConfig: {
- *             cloudwatchMetricsEnabled: false,
- *             metricName: "friendly-rule-metric-name",
- *             sampledRequestsEnabled: false,
- *         },
- *     }],
- *     tags: {
- *         Tag1: "Value1",
- *         Tag2: "Value2",
- *     },
- *     visibilityConfig: {
- *         cloudwatchMetricsEnabled: false,
- *         metricName: "friendly-metric-name",
- *         sampledRequestsEnabled: false,
- *     },
- * });
- * ```
- *
- * ### Rule Group Reference
- *
- * ```typescript
- * import * as pulumi from "@pulumi/pulumi";
- * import * as aws from "@pulumi/aws";
- *
- * const example = new aws.wafv2.RuleGroup("example", {
- *     capacity: 10,
- *     name: "example-rule-group",
- *     scope: "REGIONAL",
- *     rules: [
- *         {
- *             name: "rule-1",
- *             priority: 1,
- *             action: {
- *                 count: {},
- *             },
- *             statement: {
- *                 geoMatchStatement: {
- *                     countryCodes: ["NL"],
- *                 },
- *             },
- *             visibilityConfig: {
- *                 cloudwatchMetricsEnabled: false,
- *                 metricName: "friendly-rule-metric-name",
- *                 sampledRequestsEnabled: false,
- *             },
- *         },
- *         {
- *             name: "rule-to-exclude-a",
- *             priority: 10,
- *             action: {
- *                 allow: {},
- *             },
- *             statement: {
- *                 geoMatchStatement: {
- *                     countryCodes: ["US"],
- *                 },
- *             },
- *             visibilityConfig: {
- *                 cloudwatchMetricsEnabled: false,
- *                 metricName: "friendly-rule-metric-name",
- *                 sampledRequestsEnabled: false,
- *             },
- *         },
- *         {
- *             name: "rule-to-exclude-b",
- *             priority: 15,
- *             action: {
- *                 allow: {},
- *             },
- *             statement: {
- *                 geoMatchStatement: {
- *                     countryCodes: ["GB"],
- *                 },
- *             },
- *             visibilityConfig: {
- *                 cloudwatchMetricsEnabled: false,
- *                 metricName: "friendly-rule-metric-name",
- *                 sampledRequestsEnabled: false,
- *             },
- *         },
- *     ],
- *     visibilityConfig: {
- *         cloudwatchMetricsEnabled: false,
- *         metricName: "friendly-metric-name",
- *         sampledRequestsEnabled: false,
- *     },
- * });
- * const test = new aws.wafv2.WebAcl("test", {
- *     name: "rule-group-example",
- *     scope: "REGIONAL",
- *     defaultAction: {
- *         block: {},
- *     },
- *     rules: [{
- *         name: "rule-1",
- *         priority: 1,
- *         overrideAction: {
- *             count: {},
- *         },
- *         statement: {
- *             ruleGroupReferenceStatement: {
- *                 arn: example.arn,
- *                 ruleActionOverrides: [
- *                     {
- *                         actionToUse: {
- *                             count: {},
- *                         },
- *                         name: "rule-to-exclude-b",
- *                     },
- *                     {
- *                         actionToUse: {
- *                             count: {},
- *                         },
- *                         name: "rule-to-exclude-a",
- *                     },
- *                 ],
- *             },
- *         },
- *         visibilityConfig: {
- *             cloudwatchMetricsEnabled: false,
- *             metricName: "friendly-rule-metric-name",
- *             sampledRequestsEnabled: false,
- *         },
- *     }],
- *     tags: {
- *         Tag1: "Value1",
- *         Tag2: "Value2",
- *     },
- *     visibilityConfig: {
- *         cloudwatchMetricsEnabled: false,
- *         metricName: "friendly-metric-name",
- *         sampledRequestsEnabled: false,
- *     },
- * });
- * ```
- *
- * ### Large Request Body Inspections for Regional Resources
- *
- * ```typescript
- * import * as pulumi from "@pulumi/pulumi";
- * import * as aws from "@pulumi/aws";
- *
- * const example = new aws.wafv2.WebAcl("example", {
- *     name: "large-request-body-example",
- *     scope: "REGIONAL",
- *     defaultAction: {
- *         allow: {},
- *     },
- *     associationConfig: {
- *         requestBodies: [{
- *             apiGateway: {
- *                 defaultSizeInspectionLimit: "KB_64",
- *             },
- *             appRunnerService: {
- *                 defaultSizeInspectionLimit: "KB_64",
- *             },
- *             cognitoUserPool: {
- *                 defaultSizeInspectionLimit: "KB_64",
- *             },
- *             verifiedAccessInstance: {
- *                 defaultSizeInspectionLimit: "KB_64",
- *             },
- *         }],
- *     },
- *     visibilityConfig: {
- *         cloudwatchMetricsEnabled: false,
- *         metricName: "friendly-metric-name",
- *         sampledRequestsEnabled: false,
- *     },
- * });
- * ```
- *
  * ## Import
  *
  * Using `pulumi import`, import WAFv2 Web ACLs using `ID/Name/Scope`. For example:

package/wafv2/webAcl.js.map

@@ -1 +1 @@
-{"version":3,"file":"webAcl.js","sourceRoot":"","sources":["../../wafv2/webAcl.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgaG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IA4FD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,EAAE,yBAAyB,CAAC;YAC/E,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC;YACnC,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;SAChE;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,IAAI,IAAI,EAAE,aAAa,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,IAAI,EAAE,gBAAgB,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;aACnE;YACD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,2BAA2B,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChE,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AAnLL,wBAoLC;AAtKG,gBAAgB;AACO,mBAAY,GAAG,yBAAyB,CAAC"}
+{"version":3,"file":"webAcl.js","sourceRoot":"","sources":["../../wafv2/webAcl.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;;;;;;;;;;;;;GAcG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IA4FD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,EAAE,yBAAyB,CAAC;YAC/E,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC;YACnC,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;SAChE;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,IAAI,IAAI,EAAE,aAAa,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,IAAI,EAAE,gBAAgB,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;aACnE;YACD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,2BAA2B,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChE,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AAnLL,wBAoLC;AAtKG,gBAAgB;AACO,mBAAY,GAAG,yBAAyB,CAAC"}

package/wafv2/webAclRuleGroupAssociation.d.ts

@@ -14,7 +14,6 @@ import * as outputs from "../types/output";
  * !> **Warning:** Using this resource will cause the associated Web ACL resource to show configuration drift in the `rule` argument unless you add `lifecycle { ignoreChanges = [rule] }` to the Web ACL resource configuration. This is because this resource modifies the Web ACL's rules outside of the Web ACL resource's direct management.
  *
  * > **Note:** This resource creates a rule within the Web ACL that references the entire Rule Group. The rule group's individual rules are evaluated as a unit when requests are processed by the Web ACL.
- *
  * ## Example Usage
  *
  * ### Custom Rule Group - Basic Usage
@@ -74,7 +73,6 @@ import * as outputs from "../types/output";
  *     },
  * });
  * ```
- *
  * ### Managed Rule Group - Basic Usage
  *
  * ```typescript
@@ -103,7 +101,6 @@ import * as outputs from "../types/output";
  *     },
  * });
  * ```
- *
  * ### Managed Rule Group - With Version
  *
  * ```typescript
@@ -121,7 +118,6 @@ import * as outputs from "../types/output";
  *     },
  * });
  * ```
- *
  * ### Managed Rule Group - With Rule Action Overrides
  *
  * ```typescript
@@ -159,7 +155,6 @@ import * as outputs from "../types/output";
  *     },
  * });
  * ```
- *
  * ### Custom Rule Group - With Override Action
  *
  * ```typescript
@@ -177,168 +172,6 @@ import * as outputs from "../types/output";
  * });
  * ```
  *
- * ### Custom Rule Group - With Rule Action Overrides
- *
- * ```typescript
- * import * as pulumi from "@pulumi/pulumi";
- * import * as aws from "@pulumi/aws";
- *
- * const example = new aws.wafv2.RuleGroup("example", {
- *     name: "example-rule-group",
- *     scope: "REGIONAL",
- *     capacity: 10,
- *     rules: [
- *         {
- *             name: "geo-block-rule",
- *             priority: 1,
- *             action: {
- *                 block: {},
- *             },
- *             statement: {
- *                 geoMatchStatement: {
- *                     countryCodes: [
- *                         "CN",
- *                         "RU",
- *                     ],
- *                 },
- *             },
- *             visibilityConfig: {
- *                 cloudwatchMetricsEnabled: true,
- *                 metricName: "geo-block-rule",
- *                 sampledRequestsEnabled: true,
- *             },
- *         },
- *         {
- *             name: "rate-limit-rule",
- *             priority: 2,
- *             action: {
- *                 block: {},
- *             },
- *             statement: {
- *                 rateBasedStatement: {
- *                     limit: 1000,
- *                     aggregateKeyType: "IP",
- *                 },
- *             },
- *             visibilityConfig: {
- *                 cloudwatchMetricsEnabled: true,
- *                 metricName: "rate-limit-rule",
- *                 sampledRequestsEnabled: true,
- *             },
- *         },
- *     ],
- *     visibilityConfig: {
- *         cloudwatchMetricsEnabled: true,
- *         metricName: "example-rule-group",
- *         sampledRequestsEnabled: true,
- *     },
- * });
- * const exampleWebAcl = new aws.wafv2.WebAcl("example", {
- *     name: "example-web-acl",
- *     scope: "REGIONAL",
- *     defaultAction: {
- *         allow: {},
- *     },
- *     visibilityConfig: {
- *         cloudwatchMetricsEnabled: true,
- *         metricName: "example-web-acl",
- *         sampledRequestsEnabled: true,
- *     },
- * });
- * const exampleWebAclRuleGroupAssociation = new aws.wafv2.WebAclRuleGroupAssociation("example", {
- *     ruleName: "example-rule-group-rule",
- *     priority: 100,
- *     webAclArn: exampleWebAcl.arn,
- *     ruleGroupReference: {
- *         arn: example.arn,
- *         ruleActionOverrides: [
- *             {
- *                 name: "geo-block-rule",
- *                 actionToUse: {
- *                     count: {
- *                         customRequestHandling: {
- *                             insertHeaders: [{
- *                                 name: "X-Geo-Block-Override",
- *                                 value: "counted",
- *                             }],
- *                         },
- *                     },
- *                 },
- *             },
- *             {
- *                 name: "rate-limit-rule",
- *                 actionToUse: {
- *                     captcha: {
- *                         customRequestHandling: {
- *                             insertHeaders: [{
- *                                 name: "X-Rate-Limit-Override",
- *                                 value: "captcha-required",
- *                             }],
- *                         },
- *                     },
- *                 },
- *             },
- *         ],
- *     },
- * });
- * ```
- *
- * ### Custom Rule Group - CloudFront Web ACL
- *
- * ```typescript
- * import * as pulumi from "@pulumi/pulumi";
- * import * as aws from "@pulumi/aws";
- *
- * const cloudfrontExample = new aws.wafv2.RuleGroup("cloudfront_example", {
- *     name: "cloudfront-rule-group",
- *     scope: "CLOUDFRONT",
- *     capacity: 10,
- *     rules: [{
- *         name: "rate-limit",
- *         priority: 1,
- *         action: {
- *             block: {},
- *         },
- *         statement: {
- *             rateBasedStatement: {
- *                 limit: 2000,
- *                 aggregateKeyType: "IP",
- *             },
- *         },
- *         visibilityConfig: {
- *             cloudwatchMetricsEnabled: true,
- *             metricName: "rate-limit",
- *             sampledRequestsEnabled: true,
- *         },
- *     }],
- *     visibilityConfig: {
- *         cloudwatchMetricsEnabled: true,
- *         metricName: "cloudfront-rule-group",
- *         sampledRequestsEnabled: true,
- *     },
- * });
- * const cloudfrontExampleWebAcl = new aws.wafv2.WebAcl("cloudfront_example", {
- *     name: "cloudfront-web-acl",
- *     scope: "CLOUDFRONT",
- *     defaultAction: {
- *         allow: {},
- *     },
- *     visibilityConfig: {
- *         cloudwatchMetricsEnabled: true,
- *         metricName: "cloudfront-web-acl",
- *         sampledRequestsEnabled: true,
- *     },
- * });
- * const cloudfrontExampleWebAclRuleGroupAssociation = new aws.wafv2.WebAclRuleGroupAssociation("cloudfront_example", {
- *     ruleName: "cloudfront-rule-group-rule",
- *     priority: 50,
- *     webAclArn: cloudfrontExampleWebAcl.arn,
- *     ruleGroupReference: {
- *         arn: cloudfrontExample.arn,
- *     },
- * });
- * ```
- *
  * ## Import
  *
  * Using `pulumi import`, import WAFv2 web ACL custom rule group associations using `WebACLARN,RuleGroupARN,RuleName`. For example: