aws-cdk-lib 2.185.0__py3-none-any.whl → 2.187.0__py3-none-any.whl

aws_cdk/aws_wafv2/__init__.py

@@ -1908,502 +1908,7 @@ class CfnRuleGroup(
 
     Example::
 
-        # The code below shows an example of how to instantiate this type.
-        # The values are placeholders you should change.
-        from aws_cdk import aws_wafv2 as wafv2
-        
-        # all: Any
-        # allow: Any
-        # all_query_arguments: Any
-        # block: Any
-        # captcha: Any
-        # challenge: Any
-        # count: Any
-        # forwarded_ip: Any
-        # http_method: Any
-        # ip: Any
-        # method: Any
-        # query_string: Any
-        # single_header: Any
-        # single_query_argument: Any
-        # statement_property_: wafv2.CfnRuleGroup.StatementProperty
-        # uri_path: Any
-        
-        cfn_rule_group = wafv2.CfnRuleGroup(self, "MyCfnRuleGroup",
-            capacity=123,
-            scope="scope",
-            visibility_config=wafv2.CfnRuleGroup.VisibilityConfigProperty(
-                cloud_watch_metrics_enabled=False,
-                metric_name="metricName",
-                sampled_requests_enabled=False
-            ),
-        
-            # the properties below are optional
-            available_labels=[wafv2.CfnRuleGroup.LabelSummaryProperty(
-                name="name"
-            )],
-            consumed_labels=[wafv2.CfnRuleGroup.LabelSummaryProperty(
-                name="name"
-            )],
-            custom_response_bodies={
-                "custom_response_bodies_key": wafv2.CfnRuleGroup.CustomResponseBodyProperty(
-                    content="content",
-                    content_type="contentType"
-                )
-            },
-            description="description",
-            name="name",
-            rules=[wafv2.CfnRuleGroup.RuleProperty(
-                name="name",
-                priority=123,
-                statement=wafv2.CfnRuleGroup.StatementProperty(
-                    and_statement=wafv2.CfnRuleGroup.AndStatementProperty(
-                        statements=[statement_property_]
-                    ),
-                    byte_match_statement=wafv2.CfnRuleGroup.ByteMatchStatementProperty(
-                        field_to_match=wafv2.CfnRuleGroup.FieldToMatchProperty(
-                            all_query_arguments=all_query_arguments,
-                            body=wafv2.CfnRuleGroup.BodyProperty(
-                                oversize_handling="oversizeHandling"
-                            ),
-                            cookies=wafv2.CfnRuleGroup.CookiesProperty(
-                                match_pattern=wafv2.CfnRuleGroup.CookieMatchPatternProperty(
-                                    all=all,
-                                    excluded_cookies=["excludedCookies"],
-                                    included_cookies=["includedCookies"]
-                                ),
-                                match_scope="matchScope",
-                                oversize_handling="oversizeHandling"
-                            ),
-                            headers=wafv2.CfnRuleGroup.HeadersProperty(
-                                match_pattern=wafv2.CfnRuleGroup.HeaderMatchPatternProperty(
-                                    all=all,
-                                    excluded_headers=["excludedHeaders"],
-                                    included_headers=["includedHeaders"]
-                                ),
-                                match_scope="matchScope",
-                                oversize_handling="oversizeHandling"
-                            ),
-                            ja3_fingerprint=wafv2.CfnRuleGroup.JA3FingerprintProperty(
-                                fallback_behavior="fallbackBehavior"
-                            ),
-                            ja4_fingerprint=wafv2.CfnRuleGroup.JA4FingerprintProperty(
-                                fallback_behavior="fallbackBehavior"
-                            ),
-                            json_body=wafv2.CfnRuleGroup.JsonBodyProperty(
-                                match_pattern=wafv2.CfnRuleGroup.JsonMatchPatternProperty(
-                                    all=all,
-                                    included_paths=["includedPaths"]
-                                ),
-                                match_scope="matchScope",
-        
-                                # the properties below are optional
-                                invalid_fallback_behavior="invalidFallbackBehavior",
-                                oversize_handling="oversizeHandling"
-                            ),
-                            method=method,
-                            query_string=query_string,
-                            single_header=single_header,
-                            single_query_argument=single_query_argument,
-                            uri_path=uri_path
-                        ),
-                        positional_constraint="positionalConstraint",
-                        text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                            priority=123,
-                            type="type"
-                        )],
-        
-                        # the properties below are optional
-                        search_string="searchString",
-                        search_string_base64="searchStringBase64"
-                    ),
-                    geo_match_statement=wafv2.CfnRuleGroup.GeoMatchStatementProperty(
-                        country_codes=["countryCodes"],
-                        forwarded_ip_config=wafv2.CfnRuleGroup.ForwardedIPConfigurationProperty(
-                            fallback_behavior="fallbackBehavior",
-                            header_name="headerName"
-                        )
-                    ),
-                    ip_set_reference_statement={
-                        "arn": "arn",
-        
-                        # the properties below are optional
-                        "ip_set_forwarded_ip_config": {
-                            "fallback_behavior": "fallbackBehavior",
-                            "header_name": "headerName",
-                            "position": "position"
-                        }
-                    },
-                    label_match_statement=wafv2.CfnRuleGroup.LabelMatchStatementProperty(
-                        key="key",
-                        scope="scope"
-                    ),
-                    not_statement=wafv2.CfnRuleGroup.NotStatementProperty(
-                        statement=statement_property_
-                    ),
-                    or_statement=wafv2.CfnRuleGroup.OrStatementProperty(
-                        statements=[statement_property_]
-                    ),
-                    rate_based_statement=wafv2.CfnRuleGroup.RateBasedStatementProperty(
-                        aggregate_key_type="aggregateKeyType",
-                        limit=123,
-        
-                        # the properties below are optional
-                        custom_keys=[wafv2.CfnRuleGroup.RateBasedStatementCustomKeyProperty(
-                            cookie=wafv2.CfnRuleGroup.RateLimitCookieProperty(
-                                name="name",
-                                text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                                    priority=123,
-                                    type="type"
-                                )]
-                            ),
-                            forwarded_ip=forwarded_ip,
-                            header=wafv2.CfnRuleGroup.RateLimitHeaderProperty(
-                                name="name",
-                                text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                                    priority=123,
-                                    type="type"
-                                )]
-                            ),
-                            http_method=http_method,
-                            ip=ip,
-                            ja3_fingerprint=wafv2.CfnRuleGroup.RateLimitJA3FingerprintProperty(
-                                fallback_behavior="fallbackBehavior"
-                            ),
-                            ja4_fingerprint=wafv2.CfnRuleGroup.RateLimitJA4FingerprintProperty(
-                                fallback_behavior="fallbackBehavior"
-                            ),
-                            label_namespace=wafv2.CfnRuleGroup.RateLimitLabelNamespaceProperty(
-                                namespace="namespace"
-                            ),
-                            query_argument=wafv2.CfnRuleGroup.RateLimitQueryArgumentProperty(
-                                name="name",
-                                text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                                    priority=123,
-                                    type="type"
-                                )]
-                            ),
-                            query_string=wafv2.CfnRuleGroup.RateLimitQueryStringProperty(
-                                text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                                    priority=123,
-                                    type="type"
-                                )]
-                            ),
-                            uri_path=wafv2.CfnRuleGroup.RateLimitUriPathProperty(
-                                text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                                    priority=123,
-                                    type="type"
-                                )]
-                            )
-                        )],
-                        evaluation_window_sec=123,
-                        forwarded_ip_config=wafv2.CfnRuleGroup.ForwardedIPConfigurationProperty(
-                            fallback_behavior="fallbackBehavior",
-                            header_name="headerName"
-                        ),
-                        scope_down_statement=statement_property_
-                    ),
-                    regex_match_statement=wafv2.CfnRuleGroup.RegexMatchStatementProperty(
-                        field_to_match=wafv2.CfnRuleGroup.FieldToMatchProperty(
-                            all_query_arguments=all_query_arguments,
-                            body=wafv2.CfnRuleGroup.BodyProperty(
-                                oversize_handling="oversizeHandling"
-                            ),
-                            cookies=wafv2.CfnRuleGroup.CookiesProperty(
-                                match_pattern=wafv2.CfnRuleGroup.CookieMatchPatternProperty(
-                                    all=all,
-                                    excluded_cookies=["excludedCookies"],
-                                    included_cookies=["includedCookies"]
-                                ),
-                                match_scope="matchScope",
-                                oversize_handling="oversizeHandling"
-                            ),
-                            headers=wafv2.CfnRuleGroup.HeadersProperty(
-                                match_pattern=wafv2.CfnRuleGroup.HeaderMatchPatternProperty(
-                                    all=all,
-                                    excluded_headers=["excludedHeaders"],
-                                    included_headers=["includedHeaders"]
-                                ),
-                                match_scope="matchScope",
-                                oversize_handling="oversizeHandling"
-                            ),
-                            ja3_fingerprint=wafv2.CfnRuleGroup.JA3FingerprintProperty(
-                                fallback_behavior="fallbackBehavior"
-                            ),
-                            ja4_fingerprint=wafv2.CfnRuleGroup.JA4FingerprintProperty(
-                                fallback_behavior="fallbackBehavior"
-                            ),
-                            json_body=wafv2.CfnRuleGroup.JsonBodyProperty(
-                                match_pattern=wafv2.CfnRuleGroup.JsonMatchPatternProperty(
-                                    all=all,
-                                    included_paths=["includedPaths"]
-                                ),
-                                match_scope="matchScope",
-        
-                                # the properties below are optional
-                                invalid_fallback_behavior="invalidFallbackBehavior",
-                                oversize_handling="oversizeHandling"
-                            ),
-                            method=method,
-                            query_string=query_string,
-                            single_header=single_header,
-                            single_query_argument=single_query_argument,
-                            uri_path=uri_path
-                        ),
-                        regex_string="regexString",
-                        text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                            priority=123,
-                            type="type"
-                        )]
-                    ),
-                    regex_pattern_set_reference_statement=wafv2.CfnRuleGroup.RegexPatternSetReferenceStatementProperty(
-                        arn="arn",
-                        field_to_match=wafv2.CfnRuleGroup.FieldToMatchProperty(
-                            all_query_arguments=all_query_arguments,
-                            body=wafv2.CfnRuleGroup.BodyProperty(
-                                oversize_handling="oversizeHandling"
-                            ),
-                            cookies=wafv2.CfnRuleGroup.CookiesProperty(
-                                match_pattern=wafv2.CfnRuleGroup.CookieMatchPatternProperty(
-                                    all=all,
-                                    excluded_cookies=["excludedCookies"],
-                                    included_cookies=["includedCookies"]
-                                ),
-                                match_scope="matchScope",
-                                oversize_handling="oversizeHandling"
-                            ),
-                            headers=wafv2.CfnRuleGroup.HeadersProperty(
-                                match_pattern=wafv2.CfnRuleGroup.HeaderMatchPatternProperty(
-                                    all=all,
-                                    excluded_headers=["excludedHeaders"],
-                                    included_headers=["includedHeaders"]
-                                ),
-                                match_scope="matchScope",
-                                oversize_handling="oversizeHandling"
-                            ),
-                            ja3_fingerprint=wafv2.CfnRuleGroup.JA3FingerprintProperty(
-                                fallback_behavior="fallbackBehavior"
-                            ),
-                            ja4_fingerprint=wafv2.CfnRuleGroup.JA4FingerprintProperty(
-                                fallback_behavior="fallbackBehavior"
-                            ),
-                            json_body=wafv2.CfnRuleGroup.JsonBodyProperty(
-                                match_pattern=wafv2.CfnRuleGroup.JsonMatchPatternProperty(
-                                    all=all,
-                                    included_paths=["includedPaths"]
-                                ),
-                                match_scope="matchScope",
-        
-                                # the properties below are optional
-                                invalid_fallback_behavior="invalidFallbackBehavior",
-                                oversize_handling="oversizeHandling"
-                            ),
-                            method=method,
-                            query_string=query_string,
-                            single_header=single_header,
-                            single_query_argument=single_query_argument,
-                            uri_path=uri_path
-                        ),
-                        text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                            priority=123,
-                            type="type"
-                        )]
-                    ),
-                    size_constraint_statement=wafv2.CfnRuleGroup.SizeConstraintStatementProperty(
-                        comparison_operator="comparisonOperator",
-                        field_to_match=wafv2.CfnRuleGroup.FieldToMatchProperty(
-                            all_query_arguments=all_query_arguments,
-                            body=wafv2.CfnRuleGroup.BodyProperty(
-                                oversize_handling="oversizeHandling"
-                            ),
-                            cookies=wafv2.CfnRuleGroup.CookiesProperty(
-                                match_pattern=wafv2.CfnRuleGroup.CookieMatchPatternProperty(
-                                    all=all,
-                                    excluded_cookies=["excludedCookies"],
-                                    included_cookies=["includedCookies"]
-                                ),
-                                match_scope="matchScope",
-                                oversize_handling="oversizeHandling"
-                            ),
-                            headers=wafv2.CfnRuleGroup.HeadersProperty(
-                                match_pattern=wafv2.CfnRuleGroup.HeaderMatchPatternProperty(
-                                    all=all,
-                                    excluded_headers=["excludedHeaders"],
-                                    included_headers=["includedHeaders"]
-                                ),
-                                match_scope="matchScope",
-                                oversize_handling="oversizeHandling"
-                            ),
-                            ja3_fingerprint=wafv2.CfnRuleGroup.JA3FingerprintProperty(
-                                fallback_behavior="fallbackBehavior"
-                            ),
-                            ja4_fingerprint=wafv2.CfnRuleGroup.JA4FingerprintProperty(
-                                fallback_behavior="fallbackBehavior"
-                            ),
-                            json_body=wafv2.CfnRuleGroup.JsonBodyProperty(
-                                match_pattern=wafv2.CfnRuleGroup.JsonMatchPatternProperty(
-                                    all=all,
-                                    included_paths=["includedPaths"]
-                                ),
-                                match_scope="matchScope",
-        
-                                # the properties below are optional
-                                invalid_fallback_behavior="invalidFallbackBehavior",
-                                oversize_handling="oversizeHandling"
-                            ),
-                            method=method,
-                            query_string=query_string,
-                            single_header=single_header,
-                            single_query_argument=single_query_argument,
-                            uri_path=uri_path
-                        ),
-                        size=123,
-                        text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                            priority=123,
-                            type="type"
-                        )]
-                    ),
-                    sqli_match_statement=wafv2.CfnRuleGroup.SqliMatchStatementProperty(
-                        field_to_match=wafv2.CfnRuleGroup.FieldToMatchProperty(
-                            all_query_arguments=all_query_arguments,
-                            body=wafv2.CfnRuleGroup.BodyProperty(
-                                oversize_handling="oversizeHandling"
-                            ),
-                            cookies=wafv2.CfnRuleGroup.CookiesProperty(
-                                match_pattern=wafv2.CfnRuleGroup.CookieMatchPatternProperty(
-                                    all=all,
-                                    excluded_cookies=["excludedCookies"],
-                                    included_cookies=["includedCookies"]
-                                ),
-                                match_scope="matchScope",
-                                oversize_handling="oversizeHandling"
-                            ),
-                            headers=wafv2.CfnRuleGroup.HeadersProperty(
-                                match_pattern=wafv2.CfnRuleGroup.HeaderMatchPatternProperty(
-                                    all=all,
-                                    excluded_headers=["excludedHeaders"],
-                                    included_headers=["includedHeaders"]
-                                ),
-                                match_scope="matchScope",
-                                oversize_handling="oversizeHandling"
-                            ),
-                            ja3_fingerprint=wafv2.CfnRuleGroup.JA3FingerprintProperty(
-                                fallback_behavior="fallbackBehavior"
-                            ),
-                            ja4_fingerprint=wafv2.CfnRuleGroup.JA4FingerprintProperty(
-                                fallback_behavior="fallbackBehavior"
-                            ),
-                            json_body=wafv2.CfnRuleGroup.JsonBodyProperty(
-                                match_pattern=wafv2.CfnRuleGroup.JsonMatchPatternProperty(
-                                    all=all,
-                                    included_paths=["includedPaths"]
-                                ),
-                                match_scope="matchScope",
-        
-                                # the properties below are optional
-                                invalid_fallback_behavior="invalidFallbackBehavior",
-                                oversize_handling="oversizeHandling"
-                            ),
-                            method=method,
-                            query_string=query_string,
-                            single_header=single_header,
-                            single_query_argument=single_query_argument,
-                            uri_path=uri_path
-                        ),
-                        text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                            priority=123,
-                            type="type"
-                        )],
-        
-                        # the properties below are optional
-                        sensitivity_level="sensitivityLevel"
-                    ),
-                    xss_match_statement=wafv2.CfnRuleGroup.XssMatchStatementProperty(
-                        field_to_match=wafv2.CfnRuleGroup.FieldToMatchProperty(
-                            all_query_arguments=all_query_arguments,
-                            body=wafv2.CfnRuleGroup.BodyProperty(
-                                oversize_handling="oversizeHandling"
-                            ),
-                            cookies=wafv2.CfnRuleGroup.CookiesProperty(
-                                match_pattern=wafv2.CfnRuleGroup.CookieMatchPatternProperty(
-                                    all=all,
-                                    excluded_cookies=["excludedCookies"],
-                                    included_cookies=["includedCookies"]
-                                ),
-                                match_scope="matchScope",
-                                oversize_handling="oversizeHandling"
-                            ),
-                            headers=wafv2.CfnRuleGroup.HeadersProperty(
-                                match_pattern=wafv2.CfnRuleGroup.HeaderMatchPatternProperty(
-                                    all=all,
-                                    excluded_headers=["excludedHeaders"],
-                                    included_headers=["includedHeaders"]
-                                ),
-                                match_scope="matchScope",
-                                oversize_handling="oversizeHandling"
-                            ),
-                            ja3_fingerprint=wafv2.CfnRuleGroup.JA3FingerprintProperty(
-                                fallback_behavior="fallbackBehavior"
-                            ),
-                            ja4_fingerprint=wafv2.CfnRuleGroup.JA4FingerprintProperty(
-                                fallback_behavior="fallbackBehavior"
-                            ),
-                            json_body=wafv2.CfnRuleGroup.JsonBodyProperty(
-                                match_pattern=wafv2.CfnRuleGroup.JsonMatchPatternProperty(
-                                    all=all,
-                                    included_paths=["includedPaths"]
-                                ),
-                                match_scope="matchScope",
-        
-                                # the properties below are optional
-                                invalid_fallback_behavior="invalidFallbackBehavior",
-                                oversize_handling="oversizeHandling"
-                            ),
-                            method=method,
-                            query_string=query_string,
-                            single_header=single_header,
-                            single_query_argument=single_query_argument,
-                            uri_path=uri_path
-                        ),
-                        text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                            priority=123,
-                            type="type"
-                        )]
-                    )
-                ),
-                visibility_config=wafv2.CfnRuleGroup.VisibilityConfigProperty(
-                    cloud_watch_metrics_enabled=False,
-                    metric_name="metricName",
-                    sampled_requests_enabled=False
-                ),
-        
-                # the properties below are optional
-                action=wafv2.CfnRuleGroup.RuleActionProperty(
-                    allow=allow,
-                    block=block,
-                    captcha=captcha,
-                    challenge=challenge,
-                    count=count
-                ),
-                captcha_config=wafv2.CfnRuleGroup.CaptchaConfigProperty(
-                    immunity_time_property=wafv2.CfnRuleGroup.ImmunityTimePropertyProperty(
-                        immunity_time=123
-                    )
-                ),
-                challenge_config=wafv2.CfnRuleGroup.ChallengeConfigProperty(
-                    immunity_time_property=wafv2.CfnRuleGroup.ImmunityTimePropertyProperty(
-                        immunity_time=123
-                    )
-                ),
-                rule_labels=[wafv2.CfnRuleGroup.LabelProperty(
-                    name="name"
-                )]
-            )],
-            tags=[CfnTag(
-                key="key",
-                value="value"
-            )]
-        )
+        
     '''
 
     def __init__(
@@ -2833,6 +2338,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             positional_constraint="positionalConstraint",
@@ -2976,6 +2484,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             regex_string="regexString",
@@ -3030,6 +2541,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -3083,6 +2597,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             size=123,
@@ -3136,6 +2653,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -3191,6 +2711,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -3464,6 +2987,9 @@ class CfnRuleGroup(
                         query_string=query_string,
                         single_header=single_header,
                         single_query_argument=single_query_argument,
+                        uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                            fallback_behavior="fallbackBehavior"
+                        ),
                         uri_path=uri_path
                     ),
                     positional_constraint="positionalConstraint",
@@ -4457,6 +3983,7 @@ class CfnRuleGroup(
             "query_string": "queryString",
             "single_header": "singleHeader",
             "single_query_argument": "singleQueryArgument",
+            "uri_fragment": "uriFragment",
             "uri_path": "uriPath",
         },
     )
@@ -4475,6 +4002,7 @@ class CfnRuleGroup(
             query_string: typing.Any = None,
             single_header: typing.Any = None,
             single_query_argument: typing.Any = None,
+            uri_fragment: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnRuleGroup.UriFragmentProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             uri_path: typing.Any = None,
         ) -> None:
             '''Specifies a web request component to be used in a rule match statement or in a logging configuration.
@@ -4505,6 +4033,7 @@ class CfnRuleGroup(
             :param query_string: Inspect the query string. This is the part of a URL that appears after a ``?`` character, if any.
             :param single_header: Inspect a single header. Provide the name of the header to inspect, for example, ``User-Agent`` or ``Referer`` . This setting isn't case sensitive. Example JSON: ``"SingleHeader": { "Name": "haystack" }`` Alternately, you can filter and inspect all headers with the ``Headers`` ``FieldToMatch`` setting.
             :param single_query_argument: Inspect a single query argument. Provide the name of the query argument to inspect, such as *UserName* or *SalesRegion* . The name can be up to 30 characters long and isn't case sensitive. Example JSON: ``"SingleQueryArgument": { "Name": "myArgument" }``
+            :param uri_fragment: The path component of the URI Fragment. This is the part of a web request that identifies a fragment uri, for example, /abcd#introduction
             :param uri_path: Inspect the request URI path. This is the part of the web request that identifies a resource, for example, ``/images/daily-ad.jpg`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-fieldtomatch.html
@@ -4568,6 +4097,9 @@ class CfnRuleGroup(
                     query_string=query_string,
                     single_header=single_header,
                     single_query_argument=single_query_argument,
+                    uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                        fallback_behavior="fallbackBehavior"
+                    ),
                     uri_path=uri_path
                 )
             '''
@@ -4584,6 +4116,7 @@ class CfnRuleGroup(
                 check_type(argname="argument query_string", value=query_string, expected_type=type_hints["query_string"])
                 check_type(argname="argument single_header", value=single_header, expected_type=type_hints["single_header"])
                 check_type(argname="argument single_query_argument", value=single_query_argument, expected_type=type_hints["single_query_argument"])
+                check_type(argname="argument uri_fragment", value=uri_fragment, expected_type=type_hints["uri_fragment"])
                 check_type(argname="argument uri_path", value=uri_path, expected_type=type_hints["uri_path"])
             self._values: typing.Dict[builtins.str, typing.Any] = {}
             if all_query_arguments is not None:
@@ -4608,6 +4141,8 @@ class CfnRuleGroup(
                 self._values["single_header"] = single_header
             if single_query_argument is not None:
                 self._values["single_query_argument"] = single_query_argument
+            if uri_fragment is not None:
+                self._values["uri_fragment"] = uri_fragment
             if uri_path is not None:
                 self._values["uri_path"] = uri_path
 
@@ -4780,6 +4315,19 @@ class CfnRuleGroup(
             result = self._values.get("single_query_argument")
             return typing.cast(typing.Any, result)
 
+        @builtins.property
+        def uri_fragment(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.UriFragmentProperty"]]:
+            '''The path component of the URI Fragment.
+
+            This is the part of a web request that identifies a fragment uri, for example, /abcd#introduction
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-fieldtomatch.html#cfn-wafv2-rulegroup-fieldtomatch-urifragment
+            '''
+            result = self._values.get("uri_fragment")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.UriFragmentProperty"]], result)
+
         @builtins.property
         def uri_path(self) -> typing.Any:
             '''Inspect the request URI path.
@@ -6122,6 +5670,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             positional_constraint="positionalConstraint",
@@ -6263,6 +5814,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             regex_string="regexString",
@@ -6317,6 +5871,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -6370,6 +5927,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             size=123,
@@ -6423,6 +5983,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -6478,6 +6041,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -6609,6 +6175,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             positional_constraint="positionalConstraint",
@@ -6750,6 +6319,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             regex_string="regexString",
@@ -6804,6 +6376,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -6857,6 +6432,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             size=123,
@@ -6910,6 +6488,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -6965,6 +6546,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -7513,6 +7097,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             positional_constraint="positionalConstraint",
@@ -7598,6 +7185,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             regex_string="regexString",
@@ -7652,6 +7242,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -7705,6 +7298,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             size=123,
@@ -7758,6 +7354,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -7813,6 +7412,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -8594,6 +8196,9 @@ class CfnRuleGroup(
                         query_string=query_string,
                         single_header=single_header,
                         single_query_argument=single_query_argument,
+                        uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                            fallback_behavior="fallbackBehavior"
+                        ),
                         uri_path=uri_path
                     ),
                     regex_string="regexString",
@@ -8751,6 +8356,9 @@ class CfnRuleGroup(
                         query_string=query_string,
                         single_header=single_header,
                         single_query_argument=single_query_argument,
+                        uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                            fallback_behavior="fallbackBehavior"
+                        ),
                         uri_path=uri_path
                     ),
                     text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -9077,6 +8685,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             positional_constraint="positionalConstraint",
@@ -9220,6 +8831,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             regex_string="regexString",
@@ -9274,6 +8888,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -9327,6 +8944,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             size=123,
@@ -9380,6 +9000,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -9435,6 +9058,9 @@ class CfnRuleGroup(
                                 query_string=query_string,
                                 single_header=single_header,
                                 single_query_argument=single_query_argument,
+                                uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                    fallback_behavior="fallbackBehavior"
+                                ),
                                 uri_path=uri_path
                             ),
                             text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -9837,6 +9463,9 @@ class CfnRuleGroup(
                         query_string=query_string,
                         single_header=single_header,
                         single_query_argument=single_query_argument,
+                        uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                            fallback_behavior="fallbackBehavior"
+                        ),
                         uri_path=uri_path
                     ),
                     size=123,
@@ -10003,6 +9632,9 @@ class CfnRuleGroup(
                         query_string=query_string,
                         single_header=single_header,
                         single_query_argument=single_query_argument,
+                        uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                            fallback_behavior="fallbackBehavior"
+                        ),
                         uri_path=uri_path
                     ),
                     text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -10201,6 +9833,9 @@ class CfnRuleGroup(
                             query_string=query_string,
                             single_header=single_header,
                             single_query_argument=single_query_argument,
+                            uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                fallback_behavior="fallbackBehavior"
+                            ),
                             uri_path=uri_path
                         ),
                         positional_constraint="positionalConstraint",
@@ -10344,6 +9979,9 @@ class CfnRuleGroup(
                             query_string=query_string,
                             single_header=single_header,
                             single_query_argument=single_query_argument,
+                            uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                fallback_behavior="fallbackBehavior"
+                            ),
                             uri_path=uri_path
                         ),
                         regex_string="regexString",
@@ -10398,6 +10036,9 @@ class CfnRuleGroup(
                             query_string=query_string,
                             single_header=single_header,
                             single_query_argument=single_query_argument,
+                            uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                fallback_behavior="fallbackBehavior"
+                            ),
                             uri_path=uri_path
                         ),
                         text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -10451,6 +10092,9 @@ class CfnRuleGroup(
                             query_string=query_string,
                             single_header=single_header,
                             single_query_argument=single_query_argument,
+                            uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                fallback_behavior="fallbackBehavior"
+                            ),
                             uri_path=uri_path
                         ),
                         size=123,
@@ -10504,6 +10148,9 @@ class CfnRuleGroup(
                             query_string=query_string,
                             single_header=single_header,
                             single_query_argument=single_query_argument,
+                            uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                fallback_behavior="fallbackBehavior"
+                            ),
                             uri_path=uri_path
                         ),
                         text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -10559,6 +10206,9 @@ class CfnRuleGroup(
                             query_string=query_string,
                             single_header=single_header,
                             single_query_argument=single_query_argument,
+                            uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                                fallback_behavior="fallbackBehavior"
+                            ),
                             uri_path=uri_path
                         ),
                         text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
@@ -10779,238 +10429,62 @@ class CfnRuleGroup(
             return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.RegexMatchStatementProperty"]], result)
 
         @builtins.property
-        def regex_pattern_set_reference_statement(
-            self,
-        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.RegexPatternSetReferenceStatementProperty"]]:
-            '''A rule statement used to search web request components for matches with regular expressions.
-
-            To use this, create a ``RegexPatternSet`` that specifies the expressions that you want to detect, then use the ARN of that set in this statement. A web request matches the pattern set rule statement if the request component matches any of the patterns in the set.
-
-            Each regex pattern set rule statement references a regex pattern set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it.
-
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-statement.html#cfn-wafv2-rulegroup-statement-regexpatternsetreferencestatement
-            '''
-            result = self._values.get("regex_pattern_set_reference_statement")
-            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.RegexPatternSetReferenceStatementProperty"]], result)
-
-        @builtins.property
-        def size_constraint_statement(
-            self,
-        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.SizeConstraintStatementProperty"]]:
-            '''A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<).
-
-            For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes.
-
-            If you configure AWS WAF to inspect the request body, AWS WAF inspects only the number of bytes in the body up to the limit for the web ACL and protected resource type. If you know that the request body for your web requests should never exceed the inspection limit, you can use a size constraint statement to block requests that have a larger request body size. For more information about the inspection limits, see ``Body`` and ``JsonBody`` settings for the ``FieldToMatch`` data type.
-
-            If you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI ``/logo.jpg`` is nine characters long.
-
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-statement.html#cfn-wafv2-rulegroup-statement-sizeconstraintstatement
-            '''
-            result = self._values.get("size_constraint_statement")
-            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.SizeConstraintStatementProperty"]], result)
-
-        @builtins.property
-        def sqli_match_statement(
-            self,
-        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.SqliMatchStatementProperty"]]:
-            '''A rule statement that inspects for malicious SQL code.
-
-            Attackers insert malicious SQL code into web requests to do things like modify your database or extract data from it.
-
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-statement.html#cfn-wafv2-rulegroup-statement-sqlimatchstatement
-            '''
-            result = self._values.get("sqli_match_statement")
-            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.SqliMatchStatementProperty"]], result)
-
-        @builtins.property
-        def xss_match_statement(
-            self,
-        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.XssMatchStatementProperty"]]:
-            '''A rule statement that inspects for cross-site scripting (XSS) attacks.
-
-            In XSS attacks, the attacker uses vulnerabilities in a benign website as a vehicle to inject malicious client-site scripts into other legitimate web browsers.
-
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-statement.html#cfn-wafv2-rulegroup-statement-xssmatchstatement
-            '''
-            result = self._values.get("xss_match_statement")
-            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.XssMatchStatementProperty"]], result)
-
-        def __eq__(self, rhs: typing.Any) -> builtins.bool:
-            return isinstance(rhs, self.__class__) and rhs._values == self._values
-
-        def __ne__(self, rhs: typing.Any) -> builtins.bool:
-            return not (rhs == self)
-
-        def __repr__(self) -> str:
-            return "StatementProperty(%s)" % ", ".join(
-                k + "=" + repr(v) for k, v in self._values.items()
-            )
-
-    @jsii.data_type(
-        jsii_type="aws-cdk-lib.aws_wafv2.CfnRuleGroup.TextTransformationProperty",
-        jsii_struct_bases=[],
-        name_mapping={"priority": "priority", "type": "type"},
-    )
-    class TextTransformationProperty:
-        def __init__(self, *, priority: jsii.Number, type: builtins.str) -> None:
-            '''Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection.
-
-            :param priority: Sets the relative processing order for multiple transformations. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content. The priorities don't need to be consecutive, but they must all be different.
-            :param type: For detailed descriptions of each of the transformation types, see `Text transformations <https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-transformation.html>`_ in the *AWS WAF Developer Guide* .
-
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-texttransformation.html
-            :exampleMetadata: fixture=_generated
-
-            Example::
-
-                # The code below shows an example of how to instantiate this type.
-                # The values are placeholders you should change.
-                from aws_cdk import aws_wafv2 as wafv2
-                
-                text_transformation_property = wafv2.CfnRuleGroup.TextTransformationProperty(
-                    priority=123,
-                    type="type"
-                )
-            '''
-            if __debug__:
-                type_hints = typing.get_type_hints(_typecheckingstub__cbdf04ef9e923368f792f61fdb73e804a219fcd9c66ffb20e85214a5a0861eae)
-                check_type(argname="argument priority", value=priority, expected_type=type_hints["priority"])
-                check_type(argname="argument type", value=type, expected_type=type_hints["type"])
-            self._values: typing.Dict[builtins.str, typing.Any] = {
-                "priority": priority,
-                "type": type,
-            }
-
-        @builtins.property
-        def priority(self) -> jsii.Number:
-            '''Sets the relative processing order for multiple transformations.
-
-            AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content. The priorities don't need to be consecutive, but they must all be different.
-
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-texttransformation.html#cfn-wafv2-rulegroup-texttransformation-priority
-            '''
-            result = self._values.get("priority")
-            assert result is not None, "Required property 'priority' is missing"
-            return typing.cast(jsii.Number, result)
-
-        @builtins.property
-        def type(self) -> builtins.str:
-            '''For detailed descriptions of each of the transformation types, see `Text transformations <https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-transformation.html>`_ in the *AWS WAF Developer Guide* .
-
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-texttransformation.html#cfn-wafv2-rulegroup-texttransformation-type
-            '''
-            result = self._values.get("type")
-            assert result is not None, "Required property 'type' is missing"
-            return typing.cast(builtins.str, result)
-
-        def __eq__(self, rhs: typing.Any) -> builtins.bool:
-            return isinstance(rhs, self.__class__) and rhs._values == self._values
-
-        def __ne__(self, rhs: typing.Any) -> builtins.bool:
-            return not (rhs == self)
-
-        def __repr__(self) -> str:
-            return "TextTransformationProperty(%s)" % ", ".join(
-                k + "=" + repr(v) for k, v in self._values.items()
-            )
-
-    @jsii.data_type(
-        jsii_type="aws-cdk-lib.aws_wafv2.CfnRuleGroup.VisibilityConfigProperty",
-        jsii_struct_bases=[],
-        name_mapping={
-            "cloud_watch_metrics_enabled": "cloudWatchMetricsEnabled",
-            "metric_name": "metricName",
-            "sampled_requests_enabled": "sampledRequestsEnabled",
-        },
-    )
-    class VisibilityConfigProperty:
-        def __init__(
-            self,
-            *,
-            cloud_watch_metrics_enabled: typing.Union[builtins.bool, _IResolvable_da3f097b],
-            metric_name: builtins.str,
-            sampled_requests_enabled: typing.Union[builtins.bool, _IResolvable_da3f097b],
-        ) -> None:
-            '''Defines and enables Amazon CloudWatch metrics and web request sample collection.
-
-            :param cloud_watch_metrics_enabled: Indicates whether the associated resource sends metrics to Amazon CloudWatch. For the list of available metrics, see `AWS WAF Metrics <https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#waf-metrics>`_ in the *AWS WAF Developer Guide* . For web ACLs, the metrics are for web requests that have the web ACL default action applied. AWS WAF applies the default action to web requests that pass the inspection of all rules in the web ACL without being either allowed or blocked. For more information, see `The web ACL default action <https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-default-action.html>`_ in the *AWS WAF Developer Guide* .
-            :param metric_name: A name of the Amazon CloudWatch metric dimension. The name can contain only the characters: A-Z, a-z, 0-9, - (hyphen), and _ (underscore). The name can be from one to 128 characters long. It can't contain whitespace or metric names that are reserved for AWS WAF , for example ``All`` and ``Default_Action`` .
-            :param sampled_requests_enabled: Indicates whether AWS WAF should store a sampling of the web requests that match the rules. You can view the sampled requests through the AWS WAF console. If you configure data protection for the web ACL, the protection applies to the web ACL's sampled web request data. .. epigraph:: Request sampling doesn't provide a field redaction option, and any field redaction that you specify in your logging configuration doesn't affect sampling. You can only exclude fields from request sampling by disabling sampling in the web ACL visibility configuration or by configuring data protection for the web ACL.
+        def regex_pattern_set_reference_statement(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.RegexPatternSetReferenceStatementProperty"]]:
+            '''A rule statement used to search web request components for matches with regular expressions.
 
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-visibilityconfig.html
-            :exampleMetadata: fixture=_generated
+            To use this, create a ``RegexPatternSet`` that specifies the expressions that you want to detect, then use the ARN of that set in this statement. A web request matches the pattern set rule statement if the request component matches any of the patterns in the set.
 
-            Example::
+            Each regex pattern set rule statement references a regex pattern set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it.
 
-                # The code below shows an example of how to instantiate this type.
-                # The values are placeholders you should change.
-                from aws_cdk import aws_wafv2 as wafv2
-                
-                visibility_config_property = wafv2.CfnRuleGroup.VisibilityConfigProperty(
-                    cloud_watch_metrics_enabled=False,
-                    metric_name="metricName",
-                    sampled_requests_enabled=False
-                )
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-statement.html#cfn-wafv2-rulegroup-statement-regexpatternsetreferencestatement
             '''
-            if __debug__:
-                type_hints = typing.get_type_hints(_typecheckingstub__ffc3de9fa9cd77d11c4487ad80fc48948664b917c8642b35ca709762ce71fddf)
-                check_type(argname="argument cloud_watch_metrics_enabled", value=cloud_watch_metrics_enabled, expected_type=type_hints["cloud_watch_metrics_enabled"])
-                check_type(argname="argument metric_name", value=metric_name, expected_type=type_hints["metric_name"])
-                check_type(argname="argument sampled_requests_enabled", value=sampled_requests_enabled, expected_type=type_hints["sampled_requests_enabled"])
-            self._values: typing.Dict[builtins.str, typing.Any] = {
-                "cloud_watch_metrics_enabled": cloud_watch_metrics_enabled,
-                "metric_name": metric_name,
-                "sampled_requests_enabled": sampled_requests_enabled,
-            }
+            result = self._values.get("regex_pattern_set_reference_statement")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.RegexPatternSetReferenceStatementProperty"]], result)
 
         @builtins.property
-        def cloud_watch_metrics_enabled(
+        def size_constraint_statement(
             self,
-        ) -> typing.Union[builtins.bool, _IResolvable_da3f097b]:
-            '''Indicates whether the associated resource sends metrics to Amazon CloudWatch.
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.SizeConstraintStatementProperty"]]:
+            '''A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<).
 
-            For the list of available metrics, see `AWS WAF Metrics <https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#waf-metrics>`_ in the *AWS WAF Developer Guide* .
+            For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes.
 
-            For web ACLs, the metrics are for web requests that have the web ACL default action applied. AWS WAF applies the default action to web requests that pass the inspection of all rules in the web ACL without being either allowed or blocked. For more information,
-            see `The web ACL default action <https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-default-action.html>`_ in the *AWS WAF Developer Guide* .
+            If you configure AWS WAF to inspect the request body, AWS WAF inspects only the number of bytes in the body up to the limit for the web ACL and protected resource type. If you know that the request body for your web requests should never exceed the inspection limit, you can use a size constraint statement to block requests that have a larger request body size. For more information about the inspection limits, see ``Body`` and ``JsonBody`` settings for the ``FieldToMatch`` data type.
 
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-visibilityconfig.html#cfn-wafv2-rulegroup-visibilityconfig-cloudwatchmetricsenabled
+            If you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI ``/logo.jpg`` is nine characters long.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-statement.html#cfn-wafv2-rulegroup-statement-sizeconstraintstatement
             '''
-            result = self._values.get("cloud_watch_metrics_enabled")
-            assert result is not None, "Required property 'cloud_watch_metrics_enabled' is missing"
-            return typing.cast(typing.Union[builtins.bool, _IResolvable_da3f097b], result)
+            result = self._values.get("size_constraint_statement")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.SizeConstraintStatementProperty"]], result)
 
         @builtins.property
-        def metric_name(self) -> builtins.str:
-            '''A name of the Amazon CloudWatch metric dimension.
+        def sqli_match_statement(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.SqliMatchStatementProperty"]]:
+            '''A rule statement that inspects for malicious SQL code.
 
-            The name can contain only the characters: A-Z, a-z, 0-9, - (hyphen), and _ (underscore). The name can be from one to 128 characters long. It can't contain whitespace or metric names that are reserved for AWS WAF , for example ``All`` and ``Default_Action`` .
+            Attackers insert malicious SQL code into web requests to do things like modify your database or extract data from it.
 
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-visibilityconfig.html#cfn-wafv2-rulegroup-visibilityconfig-metricname
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-statement.html#cfn-wafv2-rulegroup-statement-sqlimatchstatement
             '''
-            result = self._values.get("metric_name")
-            assert result is not None, "Required property 'metric_name' is missing"
-            return typing.cast(builtins.str, result)
+            result = self._values.get("sqli_match_statement")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.SqliMatchStatementProperty"]], result)
 
         @builtins.property
-        def sampled_requests_enabled(
+        def xss_match_statement(
             self,
-        ) -> typing.Union[builtins.bool, _IResolvable_da3f097b]:
-            '''Indicates whether AWS WAF should store a sampling of the web requests that match the rules.
-
-            You can view the sampled requests through the AWS WAF console.
-
-            If you configure data protection for the web ACL, the protection applies to the web ACL's sampled web request data.
-            .. epigraph::
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.XssMatchStatementProperty"]]:
+            '''A rule statement that inspects for cross-site scripting (XSS) attacks.
 
-               Request sampling doesn't provide a field redaction option, and any field redaction that you specify in your logging configuration doesn't affect sampling. You can only exclude fields from request sampling by disabling sampling in the web ACL visibility configuration or by configuring data protection for the web ACL.
+            In XSS attacks, the attacker uses vulnerabilities in a benign website as a vehicle to inject malicious client-site scripts into other legitimate web browsers.
 
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-visibilityconfig.html#cfn-wafv2-rulegroup-visibilityconfig-sampledrequestsenabled
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-statement.html#cfn-wafv2-rulegroup-statement-xssmatchstatement
             '''
-            result = self._values.get("sampled_requests_enabled")
-            assert result is not None, "Required property 'sampled_requests_enabled' is missing"
-            return typing.cast(typing.Union[builtins.bool, _IResolvable_da3f097b], result)
+            result = self._values.get("xss_match_statement")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.XssMatchStatementProperty"]], result)
 
         def __eq__(self, rhs: typing.Any) -> builtins.bool:
             return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -11019,33 +10493,23 @@ class CfnRuleGroup(
             return not (rhs == self)
 
         def __repr__(self) -> str:
-            return "VisibilityConfigProperty(%s)" % ", ".join(
+            return "StatementProperty(%s)" % ", ".join(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
     @jsii.data_type(
-        jsii_type="aws-cdk-lib.aws_wafv2.CfnRuleGroup.XssMatchStatementProperty",
+        jsii_type="aws-cdk-lib.aws_wafv2.CfnRuleGroup.TextTransformationProperty",
         jsii_struct_bases=[],
-        name_mapping={
-            "field_to_match": "fieldToMatch",
-            "text_transformations": "textTransformations",
-        },
+        name_mapping={"priority": "priority", "type": "type"},
     )
-    class XssMatchStatementProperty:
-        def __init__(
-            self,
-            *,
-            field_to_match: typing.Union[_IResolvable_da3f097b, typing.Union["CfnRuleGroup.FieldToMatchProperty", typing.Dict[builtins.str, typing.Any]]],
-            text_transformations: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnRuleGroup.TextTransformationProperty", typing.Dict[builtins.str, typing.Any]]]]],
-        ) -> None:
-            '''A rule statement that inspects for cross-site scripting (XSS) attacks.
-
-            In XSS attacks, the attacker uses vulnerabilities in a benign website as a vehicle to inject malicious client-site scripts into other legitimate web browsers.
+    class TextTransformationProperty:
+        def __init__(self, *, priority: jsii.Number, type: builtins.str) -> None:
+            '''Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection.
 
-            :param field_to_match: The part of the web request that you want AWS WAF to inspect.
-            :param text_transformations: Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by ``FieldToMatch`` , starting from the lowest priority setting, before inspecting the content for a match.
+            :param priority: Sets the relative processing order for multiple transformations. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content. The priorities don't need to be consecutive, but they must all be different.
+            :param type: For detailed descriptions of each of the transformation types, see `Text transformations <https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-transformation.html>`_ in the *AWS WAF Developer Guide* .
 
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-xssmatchstatement.html
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-texttransformation.html
             :exampleMetadata: fixture=_generated
 
             Example::
@@ -11054,659 +10518,409 @@ class CfnRuleGroup(
                 # The values are placeholders you should change.
                 from aws_cdk import aws_wafv2 as wafv2
                 
-                # all: Any
-                # all_query_arguments: Any
-                # method: Any
-                # query_string: Any
-                # single_header: Any
-                # single_query_argument: Any
-                # uri_path: Any
-                
-                xss_match_statement_property = wafv2.CfnRuleGroup.XssMatchStatementProperty(
-                    field_to_match=wafv2.CfnRuleGroup.FieldToMatchProperty(
-                        all_query_arguments=all_query_arguments,
-                        body=wafv2.CfnRuleGroup.BodyProperty(
-                            oversize_handling="oversizeHandling"
-                        ),
-                        cookies=wafv2.CfnRuleGroup.CookiesProperty(
-                            match_pattern=wafv2.CfnRuleGroup.CookieMatchPatternProperty(
-                                all=all,
-                                excluded_cookies=["excludedCookies"],
-                                included_cookies=["includedCookies"]
-                            ),
-                            match_scope="matchScope",
-                            oversize_handling="oversizeHandling"
-                        ),
-                        headers=wafv2.CfnRuleGroup.HeadersProperty(
-                            match_pattern=wafv2.CfnRuleGroup.HeaderMatchPatternProperty(
-                                all=all,
-                                excluded_headers=["excludedHeaders"],
-                                included_headers=["includedHeaders"]
-                            ),
-                            match_scope="matchScope",
-                            oversize_handling="oversizeHandling"
-                        ),
-                        ja3_fingerprint=wafv2.CfnRuleGroup.JA3FingerprintProperty(
-                            fallback_behavior="fallbackBehavior"
-                        ),
-                        ja4_fingerprint=wafv2.CfnRuleGroup.JA4FingerprintProperty(
-                            fallback_behavior="fallbackBehavior"
-                        ),
-                        json_body=wafv2.CfnRuleGroup.JsonBodyProperty(
-                            match_pattern=wafv2.CfnRuleGroup.JsonMatchPatternProperty(
-                                all=all,
-                                included_paths=["includedPaths"]
-                            ),
-                            match_scope="matchScope",
-                
-                            # the properties below are optional
-                            invalid_fallback_behavior="invalidFallbackBehavior",
-                            oversize_handling="oversizeHandling"
-                        ),
-                        method=method,
-                        query_string=query_string,
-                        single_header=single_header,
-                        single_query_argument=single_query_argument,
-                        uri_path=uri_path
-                    ),
-                    text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                        priority=123,
-                        type="type"
-                    )]
+                text_transformation_property = wafv2.CfnRuleGroup.TextTransformationProperty(
+                    priority=123,
+                    type="type"
                 )
             '''
             if __debug__:
-                type_hints = typing.get_type_hints(_typecheckingstub__e502ec1c8bc4096eb797b55f6c0a1f9c506e23db360770a855cc273d36ce4b4a)
-                check_type(argname="argument field_to_match", value=field_to_match, expected_type=type_hints["field_to_match"])
-                check_type(argname="argument text_transformations", value=text_transformations, expected_type=type_hints["text_transformations"])
+                type_hints = typing.get_type_hints(_typecheckingstub__cbdf04ef9e923368f792f61fdb73e804a219fcd9c66ffb20e85214a5a0861eae)
+                check_type(argname="argument priority", value=priority, expected_type=type_hints["priority"])
+                check_type(argname="argument type", value=type, expected_type=type_hints["type"])
             self._values: typing.Dict[builtins.str, typing.Any] = {
-                "field_to_match": field_to_match,
-                "text_transformations": text_transformations,
-            }
-
-        @builtins.property
-        def field_to_match(
-            self,
-        ) -> typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.FieldToMatchProperty"]:
-            '''The part of the web request that you want AWS WAF to inspect.
-
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-xssmatchstatement.html#cfn-wafv2-rulegroup-xssmatchstatement-fieldtomatch
-            '''
-            result = self._values.get("field_to_match")
-            assert result is not None, "Required property 'field_to_match' is missing"
-            return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.FieldToMatchProperty"], result)
-
-        @builtins.property
-        def text_transformations(
-            self,
-        ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.TextTransformationProperty"]]]:
-            '''Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection.
-
-            If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by ``FieldToMatch`` , starting from the lowest priority setting, before inspecting the content for a match.
-
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-xssmatchstatement.html#cfn-wafv2-rulegroup-xssmatchstatement-texttransformations
-            '''
-            result = self._values.get("text_transformations")
-            assert result is not None, "Required property 'text_transformations' is missing"
-            return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.TextTransformationProperty"]]], result)
-
-        def __eq__(self, rhs: typing.Any) -> builtins.bool:
-            return isinstance(rhs, self.__class__) and rhs._values == self._values
-
-        def __ne__(self, rhs: typing.Any) -> builtins.bool:
-            return not (rhs == self)
-
-        def __repr__(self) -> str:
-            return "XssMatchStatementProperty(%s)" % ", ".join(
-                k + "=" + repr(v) for k, v in self._values.items()
-            )
-
-
-@jsii.data_type(
-    jsii_type="aws-cdk-lib.aws_wafv2.CfnRuleGroupProps",
-    jsii_struct_bases=[],
-    name_mapping={
-        "capacity": "capacity",
-        "scope": "scope",
-        "visibility_config": "visibilityConfig",
-        "available_labels": "availableLabels",
-        "consumed_labels": "consumedLabels",
-        "custom_response_bodies": "customResponseBodies",
-        "description": "description",
-        "name": "name",
-        "rules": "rules",
-        "tags": "tags",
-    },
-)
-class CfnRuleGroupProps:
-    def __init__(
-        self,
-        *,
-        capacity: jsii.Number,
-        scope: builtins.str,
-        visibility_config: typing.Union[_IResolvable_da3f097b, typing.Union[CfnRuleGroup.VisibilityConfigProperty, typing.Dict[builtins.str, typing.Any]]],
-        available_labels: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnRuleGroup.LabelSummaryProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
-        consumed_labels: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnRuleGroup.LabelSummaryProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
-        custom_response_bodies: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, typing.Union[_IResolvable_da3f097b, typing.Union[CfnRuleGroup.CustomResponseBodyProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
-        description: typing.Optional[builtins.str] = None,
-        name: typing.Optional[builtins.str] = None,
-        rules: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnRuleGroup.RuleProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
-        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
-    ) -> None:
-        '''Properties for defining a ``CfnRuleGroup``.
+                "priority": priority,
+                "type": type,
+            }
 
-        :param capacity: The web ACL capacity units (WCUs) required for this rule group. When you create your own rule group, you define this, and you cannot change it after creation. When you add or modify the rules in a rule group, AWS WAF enforces this limit. AWS WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. AWS WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500.
-        :param scope: Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are ``CLOUDFRONT`` and ``REGIONAL`` . .. epigraph:: For ``CLOUDFRONT`` , you must create your WAFv2 resources in the US East (N. Virginia) Region, ``us-east-1`` .
-        :param visibility_config: Defines and enables Amazon CloudWatch metrics and web request sample collection.
-        :param available_labels: The labels that one or more rules in this rule group add to matching web requests. These labels are defined in the ``RuleLabels`` for a ``Rule`` .
-        :param consumed_labels: The labels that one or more rules in this rule group match against in label match statements. These labels are defined in a ``LabelMatchStatement`` specification, in the ``Statement`` definition of a rule.
-        :param custom_response_bodies: A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the rule group, and then use them in the rules that you define in the rule group. For information about customizing web requests and responses, see `Customizing web requests and responses in AWS WAF <https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html>`_ in the *AWS WAF Developer Guide* . For information about the limits on count and size for custom request and response settings, see `AWS WAF quotas <https://docs.aws.amazon.com/waf/latest/developerguide/limits.html>`_ in the *AWS WAF Developer Guide* .
-        :param description: A description of the rule group that helps with identification.
-        :param name: The name of the rule group. You cannot change the name of a rule group after you create it.
-        :param rules: The rule statements used to identify the web requests that you want to allow, block, or count. Each rule includes one top-level statement that AWS WAF uses to identify matching web requests, and parameters that govern how AWS WAF handles them.
-        :param tags: Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource. .. epigraph:: To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.
+        @builtins.property
+        def priority(self) -> jsii.Number:
+            '''Sets the relative processing order for multiple transformations.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-rulegroup.html
-        :exampleMetadata: fixture=_generated
+            AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content. The priorities don't need to be consecutive, but they must all be different.
 
-        Example::
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-texttransformation.html#cfn-wafv2-rulegroup-texttransformation-priority
+            '''
+            result = self._values.get("priority")
+            assert result is not None, "Required property 'priority' is missing"
+            return typing.cast(jsii.Number, result)
 
-            # The code below shows an example of how to instantiate this type.
-            # The values are placeholders you should change.
-            from aws_cdk import aws_wafv2 as wafv2
-            
-            # all: Any
-            # allow: Any
-            # all_query_arguments: Any
-            # block: Any
-            # captcha: Any
-            # challenge: Any
-            # count: Any
-            # forwarded_ip: Any
-            # http_method: Any
-            # ip: Any
-            # method: Any
-            # query_string: Any
-            # single_header: Any
-            # single_query_argument: Any
-            # statement_property_: wafv2.CfnRuleGroup.StatementProperty
-            # uri_path: Any
-            
-            cfn_rule_group_props = wafv2.CfnRuleGroupProps(
-                capacity=123,
-                scope="scope",
-                visibility_config=wafv2.CfnRuleGroup.VisibilityConfigProperty(
-                    cloud_watch_metrics_enabled=False,
-                    metric_name="metricName",
-                    sampled_requests_enabled=False
-                ),
-            
-                # the properties below are optional
-                available_labels=[wafv2.CfnRuleGroup.LabelSummaryProperty(
-                    name="name"
-                )],
-                consumed_labels=[wafv2.CfnRuleGroup.LabelSummaryProperty(
-                    name="name"
-                )],
-                custom_response_bodies={
-                    "custom_response_bodies_key": wafv2.CfnRuleGroup.CustomResponseBodyProperty(
-                        content="content",
-                        content_type="contentType"
-                    )
-                },
-                description="description",
-                name="name",
-                rules=[wafv2.CfnRuleGroup.RuleProperty(
-                    name="name",
-                    priority=123,
-                    statement=wafv2.CfnRuleGroup.StatementProperty(
-                        and_statement=wafv2.CfnRuleGroup.AndStatementProperty(
-                            statements=[statement_property_]
-                        ),
-                        byte_match_statement=wafv2.CfnRuleGroup.ByteMatchStatementProperty(
-                            field_to_match=wafv2.CfnRuleGroup.FieldToMatchProperty(
-                                all_query_arguments=all_query_arguments,
-                                body=wafv2.CfnRuleGroup.BodyProperty(
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                cookies=wafv2.CfnRuleGroup.CookiesProperty(
-                                    match_pattern=wafv2.CfnRuleGroup.CookieMatchPatternProperty(
-                                        all=all,
-                                        excluded_cookies=["excludedCookies"],
-                                        included_cookies=["includedCookies"]
-                                    ),
-                                    match_scope="matchScope",
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                headers=wafv2.CfnRuleGroup.HeadersProperty(
-                                    match_pattern=wafv2.CfnRuleGroup.HeaderMatchPatternProperty(
-                                        all=all,
-                                        excluded_headers=["excludedHeaders"],
-                                        included_headers=["includedHeaders"]
-                                    ),
-                                    match_scope="matchScope",
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                ja3_fingerprint=wafv2.CfnRuleGroup.JA3FingerprintProperty(
-                                    fallback_behavior="fallbackBehavior"
-                                ),
-                                ja4_fingerprint=wafv2.CfnRuleGroup.JA4FingerprintProperty(
-                                    fallback_behavior="fallbackBehavior"
-                                ),
-                                json_body=wafv2.CfnRuleGroup.JsonBodyProperty(
-                                    match_pattern=wafv2.CfnRuleGroup.JsonMatchPatternProperty(
-                                        all=all,
-                                        included_paths=["includedPaths"]
-                                    ),
-                                    match_scope="matchScope",
-            
-                                    # the properties below are optional
-                                    invalid_fallback_behavior="invalidFallbackBehavior",
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                method=method,
-                                query_string=query_string,
-                                single_header=single_header,
-                                single_query_argument=single_query_argument,
-                                uri_path=uri_path
-                            ),
-                            positional_constraint="positionalConstraint",
-                            text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                                priority=123,
-                                type="type"
-                            )],
-            
-                            # the properties below are optional
-                            search_string="searchString",
-                            search_string_base64="searchStringBase64"
-                        ),
-                        geo_match_statement=wafv2.CfnRuleGroup.GeoMatchStatementProperty(
-                            country_codes=["countryCodes"],
-                            forwarded_ip_config=wafv2.CfnRuleGroup.ForwardedIPConfigurationProperty(
-                                fallback_behavior="fallbackBehavior",
-                                header_name="headerName"
-                            )
-                        ),
-                        ip_set_reference_statement={
-                            "arn": "arn",
-            
-                            # the properties below are optional
-                            "ip_set_forwarded_ip_config": {
-                                "fallback_behavior": "fallbackBehavior",
-                                "header_name": "headerName",
-                                "position": "position"
-                            }
-                        },
-                        label_match_statement=wafv2.CfnRuleGroup.LabelMatchStatementProperty(
-                            key="key",
-                            scope="scope"
-                        ),
-                        not_statement=wafv2.CfnRuleGroup.NotStatementProperty(
-                            statement=statement_property_
-                        ),
-                        or_statement=wafv2.CfnRuleGroup.OrStatementProperty(
-                            statements=[statement_property_]
-                        ),
-                        rate_based_statement=wafv2.CfnRuleGroup.RateBasedStatementProperty(
-                            aggregate_key_type="aggregateKeyType",
-                            limit=123,
-            
-                            # the properties below are optional
-                            custom_keys=[wafv2.CfnRuleGroup.RateBasedStatementCustomKeyProperty(
-                                cookie=wafv2.CfnRuleGroup.RateLimitCookieProperty(
-                                    name="name",
-                                    text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                                        priority=123,
-                                        type="type"
-                                    )]
-                                ),
-                                forwarded_ip=forwarded_ip,
-                                header=wafv2.CfnRuleGroup.RateLimitHeaderProperty(
-                                    name="name",
-                                    text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                                        priority=123,
-                                        type="type"
-                                    )]
-                                ),
-                                http_method=http_method,
-                                ip=ip,
-                                ja3_fingerprint=wafv2.CfnRuleGroup.RateLimitJA3FingerprintProperty(
-                                    fallback_behavior="fallbackBehavior"
-                                ),
-                                ja4_fingerprint=wafv2.CfnRuleGroup.RateLimitJA4FingerprintProperty(
-                                    fallback_behavior="fallbackBehavior"
-                                ),
-                                label_namespace=wafv2.CfnRuleGroup.RateLimitLabelNamespaceProperty(
-                                    namespace="namespace"
-                                ),
-                                query_argument=wafv2.CfnRuleGroup.RateLimitQueryArgumentProperty(
-                                    name="name",
-                                    text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                                        priority=123,
-                                        type="type"
-                                    )]
-                                ),
-                                query_string=wafv2.CfnRuleGroup.RateLimitQueryStringProperty(
-                                    text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                                        priority=123,
-                                        type="type"
-                                    )]
-                                ),
-                                uri_path=wafv2.CfnRuleGroup.RateLimitUriPathProperty(
-                                    text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                                        priority=123,
-                                        type="type"
-                                    )]
-                                )
-                            )],
-                            evaluation_window_sec=123,
-                            forwarded_ip_config=wafv2.CfnRuleGroup.ForwardedIPConfigurationProperty(
-                                fallback_behavior="fallbackBehavior",
-                                header_name="headerName"
-                            ),
-                            scope_down_statement=statement_property_
-                        ),
-                        regex_match_statement=wafv2.CfnRuleGroup.RegexMatchStatementProperty(
-                            field_to_match=wafv2.CfnRuleGroup.FieldToMatchProperty(
-                                all_query_arguments=all_query_arguments,
-                                body=wafv2.CfnRuleGroup.BodyProperty(
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                cookies=wafv2.CfnRuleGroup.CookiesProperty(
-                                    match_pattern=wafv2.CfnRuleGroup.CookieMatchPatternProperty(
-                                        all=all,
-                                        excluded_cookies=["excludedCookies"],
-                                        included_cookies=["includedCookies"]
-                                    ),
-                                    match_scope="matchScope",
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                headers=wafv2.CfnRuleGroup.HeadersProperty(
-                                    match_pattern=wafv2.CfnRuleGroup.HeaderMatchPatternProperty(
-                                        all=all,
-                                        excluded_headers=["excludedHeaders"],
-                                        included_headers=["includedHeaders"]
-                                    ),
-                                    match_scope="matchScope",
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                ja3_fingerprint=wafv2.CfnRuleGroup.JA3FingerprintProperty(
-                                    fallback_behavior="fallbackBehavior"
-                                ),
-                                ja4_fingerprint=wafv2.CfnRuleGroup.JA4FingerprintProperty(
-                                    fallback_behavior="fallbackBehavior"
-                                ),
-                                json_body=wafv2.CfnRuleGroup.JsonBodyProperty(
-                                    match_pattern=wafv2.CfnRuleGroup.JsonMatchPatternProperty(
-                                        all=all,
-                                        included_paths=["includedPaths"]
-                                    ),
-                                    match_scope="matchScope",
-            
-                                    # the properties below are optional
-                                    invalid_fallback_behavior="invalidFallbackBehavior",
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                method=method,
-                                query_string=query_string,
-                                single_header=single_header,
-                                single_query_argument=single_query_argument,
-                                uri_path=uri_path
-                            ),
-                            regex_string="regexString",
-                            text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                                priority=123,
-                                type="type"
-                            )]
+        @builtins.property
+        def type(self) -> builtins.str:
+            '''For detailed descriptions of each of the transformation types, see `Text transformations <https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-transformation.html>`_ in the *AWS WAF Developer Guide* .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-texttransformation.html#cfn-wafv2-rulegroup-texttransformation-type
+            '''
+            result = self._values.get("type")
+            assert result is not None, "Required property 'type' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "TextTransformationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_wafv2.CfnRuleGroup.UriFragmentProperty",
+        jsii_struct_bases=[],
+        name_mapping={"fallback_behavior": "fallbackBehavior"},
+    )
+    class UriFragmentProperty:
+        def __init__(
+            self,
+            *,
+            fallback_behavior: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''The path component of the URI Fragment.
+
+            This is the part of a web request that identifies a fragment uri, for example, /abcd#introduction
+
+            :param fallback_behavior: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-urifragment.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_wafv2 as wafv2
+                
+                uri_fragment_property = wafv2.CfnRuleGroup.UriFragmentProperty(
+                    fallback_behavior="fallbackBehavior"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__fe1c476d259659923a1664b8e966720fc48cf48f725562b81ef2c02997f8998a)
+                check_type(argname="argument fallback_behavior", value=fallback_behavior, expected_type=type_hints["fallback_behavior"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if fallback_behavior is not None:
+                self._values["fallback_behavior"] = fallback_behavior
+
+        @builtins.property
+        def fallback_behavior(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-urifragment.html#cfn-wafv2-rulegroup-urifragment-fallbackbehavior
+            '''
+            result = self._values.get("fallback_behavior")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "UriFragmentProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_wafv2.CfnRuleGroup.VisibilityConfigProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "cloud_watch_metrics_enabled": "cloudWatchMetricsEnabled",
+            "metric_name": "metricName",
+            "sampled_requests_enabled": "sampledRequestsEnabled",
+        },
+    )
+    class VisibilityConfigProperty:
+        def __init__(
+            self,
+            *,
+            cloud_watch_metrics_enabled: typing.Union[builtins.bool, _IResolvable_da3f097b],
+            metric_name: builtins.str,
+            sampled_requests_enabled: typing.Union[builtins.bool, _IResolvable_da3f097b],
+        ) -> None:
+            '''Defines and enables Amazon CloudWatch metrics and web request sample collection.
+
+            :param cloud_watch_metrics_enabled: Indicates whether the associated resource sends metrics to Amazon CloudWatch. For the list of available metrics, see `AWS WAF Metrics <https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#waf-metrics>`_ in the *AWS WAF Developer Guide* . For web ACLs, the metrics are for web requests that have the web ACL default action applied. AWS WAF applies the default action to web requests that pass the inspection of all rules in the web ACL without being either allowed or blocked. For more information, see `The web ACL default action <https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-default-action.html>`_ in the *AWS WAF Developer Guide* .
+            :param metric_name: A name of the Amazon CloudWatch metric dimension. The name can contain only the characters: A-Z, a-z, 0-9, - (hyphen), and _ (underscore). The name can be from one to 128 characters long. It can't contain whitespace or metric names that are reserved for AWS WAF , for example ``All`` and ``Default_Action`` .
+            :param sampled_requests_enabled: Indicates whether AWS WAF should store a sampling of the web requests that match the rules. You can view the sampled requests through the AWS WAF console. If you configure data protection for the web ACL, the protection applies to the web ACL's sampled web request data. .. epigraph:: Request sampling doesn't provide a field redaction option, and any field redaction that you specify in your logging configuration doesn't affect sampling. You can only exclude fields from request sampling by disabling sampling in the web ACL visibility configuration or by configuring data protection for the web ACL.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-visibilityconfig.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_wafv2 as wafv2
+                
+                visibility_config_property = wafv2.CfnRuleGroup.VisibilityConfigProperty(
+                    cloud_watch_metrics_enabled=False,
+                    metric_name="metricName",
+                    sampled_requests_enabled=False
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__ffc3de9fa9cd77d11c4487ad80fc48948664b917c8642b35ca709762ce71fddf)
+                check_type(argname="argument cloud_watch_metrics_enabled", value=cloud_watch_metrics_enabled, expected_type=type_hints["cloud_watch_metrics_enabled"])
+                check_type(argname="argument metric_name", value=metric_name, expected_type=type_hints["metric_name"])
+                check_type(argname="argument sampled_requests_enabled", value=sampled_requests_enabled, expected_type=type_hints["sampled_requests_enabled"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "cloud_watch_metrics_enabled": cloud_watch_metrics_enabled,
+                "metric_name": metric_name,
+                "sampled_requests_enabled": sampled_requests_enabled,
+            }
+
+        @builtins.property
+        def cloud_watch_metrics_enabled(
+            self,
+        ) -> typing.Union[builtins.bool, _IResolvable_da3f097b]:
+            '''Indicates whether the associated resource sends metrics to Amazon CloudWatch.
+
+            For the list of available metrics, see `AWS WAF Metrics <https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#waf-metrics>`_ in the *AWS WAF Developer Guide* .
+
+            For web ACLs, the metrics are for web requests that have the web ACL default action applied. AWS WAF applies the default action to web requests that pass the inspection of all rules in the web ACL without being either allowed or blocked. For more information,
+            see `The web ACL default action <https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-default-action.html>`_ in the *AWS WAF Developer Guide* .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-visibilityconfig.html#cfn-wafv2-rulegroup-visibilityconfig-cloudwatchmetricsenabled
+            '''
+            result = self._values.get("cloud_watch_metrics_enabled")
+            assert result is not None, "Required property 'cloud_watch_metrics_enabled' is missing"
+            return typing.cast(typing.Union[builtins.bool, _IResolvable_da3f097b], result)
+
+        @builtins.property
+        def metric_name(self) -> builtins.str:
+            '''A name of the Amazon CloudWatch metric dimension.
+
+            The name can contain only the characters: A-Z, a-z, 0-9, - (hyphen), and _ (underscore). The name can be from one to 128 characters long. It can't contain whitespace or metric names that are reserved for AWS WAF , for example ``All`` and ``Default_Action`` .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-visibilityconfig.html#cfn-wafv2-rulegroup-visibilityconfig-metricname
+            '''
+            result = self._values.get("metric_name")
+            assert result is not None, "Required property 'metric_name' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def sampled_requests_enabled(
+            self,
+        ) -> typing.Union[builtins.bool, _IResolvable_da3f097b]:
+            '''Indicates whether AWS WAF should store a sampling of the web requests that match the rules.
+
+            You can view the sampled requests through the AWS WAF console.
+
+            If you configure data protection for the web ACL, the protection applies to the web ACL's sampled web request data.
+            .. epigraph::
+
+               Request sampling doesn't provide a field redaction option, and any field redaction that you specify in your logging configuration doesn't affect sampling. You can only exclude fields from request sampling by disabling sampling in the web ACL visibility configuration or by configuring data protection for the web ACL.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-visibilityconfig.html#cfn-wafv2-rulegroup-visibilityconfig-sampledrequestsenabled
+            '''
+            result = self._values.get("sampled_requests_enabled")
+            assert result is not None, "Required property 'sampled_requests_enabled' is missing"
+            return typing.cast(typing.Union[builtins.bool, _IResolvable_da3f097b], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "VisibilityConfigProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_wafv2.CfnRuleGroup.XssMatchStatementProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "field_to_match": "fieldToMatch",
+            "text_transformations": "textTransformations",
+        },
+    )
+    class XssMatchStatementProperty:
+        def __init__(
+            self,
+            *,
+            field_to_match: typing.Union[_IResolvable_da3f097b, typing.Union["CfnRuleGroup.FieldToMatchProperty", typing.Dict[builtins.str, typing.Any]]],
+            text_transformations: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnRuleGroup.TextTransformationProperty", typing.Dict[builtins.str, typing.Any]]]]],
+        ) -> None:
+            '''A rule statement that inspects for cross-site scripting (XSS) attacks.
+
+            In XSS attacks, the attacker uses vulnerabilities in a benign website as a vehicle to inject malicious client-site scripts into other legitimate web browsers.
+
+            :param field_to_match: The part of the web request that you want AWS WAF to inspect.
+            :param text_transformations: Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by ``FieldToMatch`` , starting from the lowest priority setting, before inspecting the content for a match.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-xssmatchstatement.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_wafv2 as wafv2
+                
+                # all: Any
+                # all_query_arguments: Any
+                # method: Any
+                # query_string: Any
+                # single_header: Any
+                # single_query_argument: Any
+                # uri_path: Any
+                
+                xss_match_statement_property = wafv2.CfnRuleGroup.XssMatchStatementProperty(
+                    field_to_match=wafv2.CfnRuleGroup.FieldToMatchProperty(
+                        all_query_arguments=all_query_arguments,
+                        body=wafv2.CfnRuleGroup.BodyProperty(
+                            oversize_handling="oversizeHandling"
                         ),
-                        regex_pattern_set_reference_statement=wafv2.CfnRuleGroup.RegexPatternSetReferenceStatementProperty(
-                            arn="arn",
-                            field_to_match=wafv2.CfnRuleGroup.FieldToMatchProperty(
-                                all_query_arguments=all_query_arguments,
-                                body=wafv2.CfnRuleGroup.BodyProperty(
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                cookies=wafv2.CfnRuleGroup.CookiesProperty(
-                                    match_pattern=wafv2.CfnRuleGroup.CookieMatchPatternProperty(
-                                        all=all,
-                                        excluded_cookies=["excludedCookies"],
-                                        included_cookies=["includedCookies"]
-                                    ),
-                                    match_scope="matchScope",
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                headers=wafv2.CfnRuleGroup.HeadersProperty(
-                                    match_pattern=wafv2.CfnRuleGroup.HeaderMatchPatternProperty(
-                                        all=all,
-                                        excluded_headers=["excludedHeaders"],
-                                        included_headers=["includedHeaders"]
-                                    ),
-                                    match_scope="matchScope",
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                ja3_fingerprint=wafv2.CfnRuleGroup.JA3FingerprintProperty(
-                                    fallback_behavior="fallbackBehavior"
-                                ),
-                                ja4_fingerprint=wafv2.CfnRuleGroup.JA4FingerprintProperty(
-                                    fallback_behavior="fallbackBehavior"
-                                ),
-                                json_body=wafv2.CfnRuleGroup.JsonBodyProperty(
-                                    match_pattern=wafv2.CfnRuleGroup.JsonMatchPatternProperty(
-                                        all=all,
-                                        included_paths=["includedPaths"]
-                                    ),
-                                    match_scope="matchScope",
-            
-                                    # the properties below are optional
-                                    invalid_fallback_behavior="invalidFallbackBehavior",
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                method=method,
-                                query_string=query_string,
-                                single_header=single_header,
-                                single_query_argument=single_query_argument,
-                                uri_path=uri_path
+                        cookies=wafv2.CfnRuleGroup.CookiesProperty(
+                            match_pattern=wafv2.CfnRuleGroup.CookieMatchPatternProperty(
+                                all=all,
+                                excluded_cookies=["excludedCookies"],
+                                included_cookies=["includedCookies"]
                             ),
-                            text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                                priority=123,
-                                type="type"
-                            )]
+                            match_scope="matchScope",
+                            oversize_handling="oversizeHandling"
                         ),
-                        size_constraint_statement=wafv2.CfnRuleGroup.SizeConstraintStatementProperty(
-                            comparison_operator="comparisonOperator",
-                            field_to_match=wafv2.CfnRuleGroup.FieldToMatchProperty(
-                                all_query_arguments=all_query_arguments,
-                                body=wafv2.CfnRuleGroup.BodyProperty(
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                cookies=wafv2.CfnRuleGroup.CookiesProperty(
-                                    match_pattern=wafv2.CfnRuleGroup.CookieMatchPatternProperty(
-                                        all=all,
-                                        excluded_cookies=["excludedCookies"],
-                                        included_cookies=["includedCookies"]
-                                    ),
-                                    match_scope="matchScope",
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                headers=wafv2.CfnRuleGroup.HeadersProperty(
-                                    match_pattern=wafv2.CfnRuleGroup.HeaderMatchPatternProperty(
-                                        all=all,
-                                        excluded_headers=["excludedHeaders"],
-                                        included_headers=["includedHeaders"]
-                                    ),
-                                    match_scope="matchScope",
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                ja3_fingerprint=wafv2.CfnRuleGroup.JA3FingerprintProperty(
-                                    fallback_behavior="fallbackBehavior"
-                                ),
-                                ja4_fingerprint=wafv2.CfnRuleGroup.JA4FingerprintProperty(
-                                    fallback_behavior="fallbackBehavior"
-                                ),
-                                json_body=wafv2.CfnRuleGroup.JsonBodyProperty(
-                                    match_pattern=wafv2.CfnRuleGroup.JsonMatchPatternProperty(
-                                        all=all,
-                                        included_paths=["includedPaths"]
-                                    ),
-                                    match_scope="matchScope",
-            
-                                    # the properties below are optional
-                                    invalid_fallback_behavior="invalidFallbackBehavior",
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                method=method,
-                                query_string=query_string,
-                                single_header=single_header,
-                                single_query_argument=single_query_argument,
-                                uri_path=uri_path
+                        headers=wafv2.CfnRuleGroup.HeadersProperty(
+                            match_pattern=wafv2.CfnRuleGroup.HeaderMatchPatternProperty(
+                                all=all,
+                                excluded_headers=["excludedHeaders"],
+                                included_headers=["includedHeaders"]
                             ),
-                            size=123,
-                            text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                                priority=123,
-                                type="type"
-                            )]
+                            match_scope="matchScope",
+                            oversize_handling="oversizeHandling"
                         ),
-                        sqli_match_statement=wafv2.CfnRuleGroup.SqliMatchStatementProperty(
-                            field_to_match=wafv2.CfnRuleGroup.FieldToMatchProperty(
-                                all_query_arguments=all_query_arguments,
-                                body=wafv2.CfnRuleGroup.BodyProperty(
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                cookies=wafv2.CfnRuleGroup.CookiesProperty(
-                                    match_pattern=wafv2.CfnRuleGroup.CookieMatchPatternProperty(
-                                        all=all,
-                                        excluded_cookies=["excludedCookies"],
-                                        included_cookies=["includedCookies"]
-                                    ),
-                                    match_scope="matchScope",
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                headers=wafv2.CfnRuleGroup.HeadersProperty(
-                                    match_pattern=wafv2.CfnRuleGroup.HeaderMatchPatternProperty(
-                                        all=all,
-                                        excluded_headers=["excludedHeaders"],
-                                        included_headers=["includedHeaders"]
-                                    ),
-                                    match_scope="matchScope",
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                ja3_fingerprint=wafv2.CfnRuleGroup.JA3FingerprintProperty(
-                                    fallback_behavior="fallbackBehavior"
-                                ),
-                                ja4_fingerprint=wafv2.CfnRuleGroup.JA4FingerprintProperty(
-                                    fallback_behavior="fallbackBehavior"
-                                ),
-                                json_body=wafv2.CfnRuleGroup.JsonBodyProperty(
-                                    match_pattern=wafv2.CfnRuleGroup.JsonMatchPatternProperty(
-                                        all=all,
-                                        included_paths=["includedPaths"]
-                                    ),
-                                    match_scope="matchScope",
-            
-                                    # the properties below are optional
-                                    invalid_fallback_behavior="invalidFallbackBehavior",
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                method=method,
-                                query_string=query_string,
-                                single_header=single_header,
-                                single_query_argument=single_query_argument,
-                                uri_path=uri_path
+                        ja3_fingerprint=wafv2.CfnRuleGroup.JA3FingerprintProperty(
+                            fallback_behavior="fallbackBehavior"
+                        ),
+                        ja4_fingerprint=wafv2.CfnRuleGroup.JA4FingerprintProperty(
+                            fallback_behavior="fallbackBehavior"
+                        ),
+                        json_body=wafv2.CfnRuleGroup.JsonBodyProperty(
+                            match_pattern=wafv2.CfnRuleGroup.JsonMatchPatternProperty(
+                                all=all,
+                                included_paths=["includedPaths"]
                             ),
-                            text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                                priority=123,
-                                type="type"
-                            )],
-            
+                            match_scope="matchScope",
+                
                             # the properties below are optional
-                            sensitivity_level="sensitivityLevel"
+                            invalid_fallback_behavior="invalidFallbackBehavior",
+                            oversize_handling="oversizeHandling"
                         ),
-                        xss_match_statement=wafv2.CfnRuleGroup.XssMatchStatementProperty(
-                            field_to_match=wafv2.CfnRuleGroup.FieldToMatchProperty(
-                                all_query_arguments=all_query_arguments,
-                                body=wafv2.CfnRuleGroup.BodyProperty(
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                cookies=wafv2.CfnRuleGroup.CookiesProperty(
-                                    match_pattern=wafv2.CfnRuleGroup.CookieMatchPatternProperty(
-                                        all=all,
-                                        excluded_cookies=["excludedCookies"],
-                                        included_cookies=["includedCookies"]
-                                    ),
-                                    match_scope="matchScope",
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                headers=wafv2.CfnRuleGroup.HeadersProperty(
-                                    match_pattern=wafv2.CfnRuleGroup.HeaderMatchPatternProperty(
-                                        all=all,
-                                        excluded_headers=["excludedHeaders"],
-                                        included_headers=["includedHeaders"]
-                                    ),
-                                    match_scope="matchScope",
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                ja3_fingerprint=wafv2.CfnRuleGroup.JA3FingerprintProperty(
-                                    fallback_behavior="fallbackBehavior"
-                                ),
-                                ja4_fingerprint=wafv2.CfnRuleGroup.JA4FingerprintProperty(
-                                    fallback_behavior="fallbackBehavior"
-                                ),
-                                json_body=wafv2.CfnRuleGroup.JsonBodyProperty(
-                                    match_pattern=wafv2.CfnRuleGroup.JsonMatchPatternProperty(
-                                        all=all,
-                                        included_paths=["includedPaths"]
-                                    ),
-                                    match_scope="matchScope",
-            
-                                    # the properties below are optional
-                                    invalid_fallback_behavior="invalidFallbackBehavior",
-                                    oversize_handling="oversizeHandling"
-                                ),
-                                method=method,
-                                query_string=query_string,
-                                single_header=single_header,
-                                single_query_argument=single_query_argument,
-                                uri_path=uri_path
-                            ),
-                            text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
-                                priority=123,
-                                type="type"
-                            )]
-                        )
-                    ),
-                    visibility_config=wafv2.CfnRuleGroup.VisibilityConfigProperty(
-                        cloud_watch_metrics_enabled=False,
-                        metric_name="metricName",
-                        sampled_requests_enabled=False
-                    ),
-            
-                    # the properties below are optional
-                    action=wafv2.CfnRuleGroup.RuleActionProperty(
-                        allow=allow,
-                        block=block,
-                        captcha=captcha,
-                        challenge=challenge,
-                        count=count
-                    ),
-                    captcha_config=wafv2.CfnRuleGroup.CaptchaConfigProperty(
-                        immunity_time_property=wafv2.CfnRuleGroup.ImmunityTimePropertyProperty(
-                            immunity_time=123
-                        )
-                    ),
-                    challenge_config=wafv2.CfnRuleGroup.ChallengeConfigProperty(
-                        immunity_time_property=wafv2.CfnRuleGroup.ImmunityTimePropertyProperty(
-                            immunity_time=123
-                        )
+                        method=method,
+                        query_string=query_string,
+                        single_header=single_header,
+                        single_query_argument=single_query_argument,
+                        uri_fragment=wafv2.CfnRuleGroup.UriFragmentProperty(
+                            fallback_behavior="fallbackBehavior"
+                        ),
+                        uri_path=uri_path
                     ),
-                    rule_labels=[wafv2.CfnRuleGroup.LabelProperty(
-                        name="name"
+                    text_transformations=[wafv2.CfnRuleGroup.TextTransformationProperty(
+                        priority=123,
+                        type="type"
                     )]
-                )],
-                tags=[CfnTag(
-                    key="key",
-                    value="value"
-                )]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__e502ec1c8bc4096eb797b55f6c0a1f9c506e23db360770a855cc273d36ce4b4a)
+                check_type(argname="argument field_to_match", value=field_to_match, expected_type=type_hints["field_to_match"])
+                check_type(argname="argument text_transformations", value=text_transformations, expected_type=type_hints["text_transformations"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "field_to_match": field_to_match,
+                "text_transformations": text_transformations,
+            }
+
+        @builtins.property
+        def field_to_match(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.FieldToMatchProperty"]:
+            '''The part of the web request that you want AWS WAF to inspect.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-xssmatchstatement.html#cfn-wafv2-rulegroup-xssmatchstatement-fieldtomatch
+            '''
+            result = self._values.get("field_to_match")
+            assert result is not None, "Required property 'field_to_match' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.FieldToMatchProperty"], result)
+
+        @builtins.property
+        def text_transformations(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.TextTransformationProperty"]]]:
+            '''Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection.
+
+            If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by ``FieldToMatch`` , starting from the lowest priority setting, before inspecting the content for a match.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-xssmatchstatement.html#cfn-wafv2-rulegroup-xssmatchstatement-texttransformations
+            '''
+            result = self._values.get("text_transformations")
+            assert result is not None, "Required property 'text_transformations' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.TextTransformationProperty"]]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "XssMatchStatementProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
             )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_wafv2.CfnRuleGroupProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "capacity": "capacity",
+        "scope": "scope",
+        "visibility_config": "visibilityConfig",
+        "available_labels": "availableLabels",
+        "consumed_labels": "consumedLabels",
+        "custom_response_bodies": "customResponseBodies",
+        "description": "description",
+        "name": "name",
+        "rules": "rules",
+        "tags": "tags",
+    },
+)
+class CfnRuleGroupProps:
+    def __init__(
+        self,
+        *,
+        capacity: jsii.Number,
+        scope: builtins.str,
+        visibility_config: typing.Union[_IResolvable_da3f097b, typing.Union[CfnRuleGroup.VisibilityConfigProperty, typing.Dict[builtins.str, typing.Any]]],
+        available_labels: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnRuleGroup.LabelSummaryProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        consumed_labels: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnRuleGroup.LabelSummaryProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        custom_response_bodies: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, typing.Union[_IResolvable_da3f097b, typing.Union[CfnRuleGroup.CustomResponseBodyProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        description: typing.Optional[builtins.str] = None,
+        name: typing.Optional[builtins.str] = None,
+        rules: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnRuleGroup.RuleProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnRuleGroup``.
+
+        :param capacity: The web ACL capacity units (WCUs) required for this rule group. When you create your own rule group, you define this, and you cannot change it after creation. When you add or modify the rules in a rule group, AWS WAF enforces this limit. AWS WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. AWS WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500.
+        :param scope: Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are ``CLOUDFRONT`` and ``REGIONAL`` . .. epigraph:: For ``CLOUDFRONT`` , you must create your WAFv2 resources in the US East (N. Virginia) Region, ``us-east-1`` .
+        :param visibility_config: Defines and enables Amazon CloudWatch metrics and web request sample collection.
+        :param available_labels: The labels that one or more rules in this rule group add to matching web requests. These labels are defined in the ``RuleLabels`` for a ``Rule`` .
+        :param consumed_labels: The labels that one or more rules in this rule group match against in label match statements. These labels are defined in a ``LabelMatchStatement`` specification, in the ``Statement`` definition of a rule.
+        :param custom_response_bodies: A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the rule group, and then use them in the rules that you define in the rule group. For information about customizing web requests and responses, see `Customizing web requests and responses in AWS WAF <https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html>`_ in the *AWS WAF Developer Guide* . For information about the limits on count and size for custom request and response settings, see `AWS WAF quotas <https://docs.aws.amazon.com/waf/latest/developerguide/limits.html>`_ in the *AWS WAF Developer Guide* .
+        :param description: A description of the rule group that helps with identification.
+        :param name: The name of the rule group. You cannot change the name of a rule group after you create it.
+        :param rules: The rule statements used to identify the web requests that you want to allow, block, or count. Each rule includes one top-level statement that AWS WAF uses to identify matching web requests, and parameters that govern how AWS WAF handles them.
+        :param tags: Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource. .. epigraph:: To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-rulegroup.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__c8dfa44d9c30297c12ad00bd34bbd4b85ea5438f4127e7e97226c16565c6ef5b)
@@ -11934,6 +11148,7 @@ class CfnWebACL(
         captcha_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWebACL.CaptchaConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         challenge_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWebACL.ChallengeConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         custom_response_bodies: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, typing.Union[_IResolvable_da3f097b, typing.Union["CfnWebACL.CustomResponseBodyProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        data_protection_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWebACL.DataProtectionConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         description: typing.Optional[builtins.str] = None,
         name: typing.Optional[builtins.str] = None,
         rules: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWebACL.RuleProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
@@ -11950,6 +11165,7 @@ class CfnWebACL(
         :param captcha_config: Specifies how AWS WAF should handle ``CAPTCHA`` evaluations for rules that don't have their own ``CaptchaConfig`` settings. If you don't specify this, AWS WAF uses its default settings for ``CaptchaConfig`` .
         :param challenge_config: Specifies how AWS WAF should handle challenge evaluations for rules that don't have their own ``ChallengeConfig`` settings. If you don't specify this, AWS WAF uses its default settings for ``ChallengeConfig`` .
         :param custom_response_bodies: A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the web ACL, and then use them in the rules and default actions that you define in the web ACL. For information about customizing web requests and responses, see `Customizing web requests and responses in AWS WAF <https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html>`_ in the *AWS WAF Developer Guide* . For information about the limits on count and size for custom request and response settings, see `AWS WAF quotas <https://docs.aws.amazon.com/waf/latest/developerguide/limits.html>`_ in the *AWS WAF Developer Guide* .
+        :param data_protection_config: Specifies data protection to apply to the web request data for the web ACL. This is a web ACL level data protection option. The data protection that you configure for the web ACL alters the data that's available for any other data collection activity, including your AWS WAF logging destinations, web ACL request sampling, and Amazon Security Lake data collection and management. Your other option for data protection is in the logging configuration, which only affects logging.
         :param description: A description of the web ACL that helps with identification.
         :param name: The name of the web ACL. You cannot change the name of a web ACL after you create it.
         :param rules: The rule statements used to identify the web requests that you want to manage. Each rule includes one top-level statement that AWS WAF uses to identify matching web requests, and parameters that govern how AWS WAF handles them.
@@ -11968,6 +11184,7 @@ class CfnWebACL(
             captcha_config=captcha_config,
             challenge_config=challenge_config,
             custom_response_bodies=custom_response_bodies,
+            data_protection_config=data_protection_config,
             description=description,
             name=name,
             rules=rules,
@@ -12183,6 +11400,24 @@ class CfnWebACL(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "customResponseBodies", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="dataProtectionConfig")
+    def data_protection_config(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWebACL.DataProtectionConfigProperty"]]:
+        '''Specifies data protection to apply to the web request data for the web ACL.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWebACL.DataProtectionConfigProperty"]], jsii.get(self, "dataProtectionConfig"))
+
+    @data_protection_config.setter
+    def data_protection_config(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWebACL.DataProtectionConfigProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c8fdb8c606175920c3facb5c8db0632e7cdc7bedffcd3c6c787bab31ba6f6474)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "dataProtectionConfig", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="description")
     def description(self) -> typing.Optional[builtins.str]:
@@ -13116,6 +12351,9 @@ class CfnWebACL(
                         query_string=query_string,
                         single_header=single_header,
                         single_query_argument=single_query_argument,
+                        uri_fragment=wafv2.CfnWebACL.UriFragmentProperty(
+                            fallback_behavior="fallbackBehavior"
+                        ),
                         uri_path=uri_path
                     ),
                     positional_constraint="positionalConstraint",
@@ -13981,37 +13219,261 @@ class CfnWebACL(
                 )
             '''
             if __debug__:
-                type_hints = typing.get_type_hints(_typecheckingstub__281879092afa665915e6fd969d0e9a5b5b4898fe8ef498c2dea6a4bf1109aafa)
-                check_type(argname="argument content", value=content, expected_type=type_hints["content"])
-                check_type(argname="argument content_type", value=content_type, expected_type=type_hints["content_type"])
+                type_hints = typing.get_type_hints(_typecheckingstub__281879092afa665915e6fd969d0e9a5b5b4898fe8ef498c2dea6a4bf1109aafa)
+                check_type(argname="argument content", value=content, expected_type=type_hints["content"])
+                check_type(argname="argument content_type", value=content_type, expected_type=type_hints["content_type"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "content": content,
+                "content_type": content_type,
+            }
+
+        @builtins.property
+        def content(self) -> builtins.str:
+            '''The payload of the custom response.
+
+            You can use JSON escape strings in JSON content. To do this, you must specify JSON content in the ``ContentType`` setting.
+
+            For information about the limits on count and size for custom request and response settings, see `AWS WAF quotas <https://docs.aws.amazon.com/waf/latest/developerguide/limits.html>`_ in the *AWS WAF Developer Guide* .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-customresponsebody.html#cfn-wafv2-webacl-customresponsebody-content
+            '''
+            result = self._values.get("content")
+            assert result is not None, "Required property 'content' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def content_type(self) -> builtins.str:
+            '''The type of content in the payload that you are defining in the ``Content`` string.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-customresponsebody.html#cfn-wafv2-webacl-customresponsebody-contenttype
+            '''
+            result = self._values.get("content_type")
+            assert result is not None, "Required property 'content_type' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "CustomResponseBodyProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_wafv2.CfnWebACL.CustomResponseProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "response_code": "responseCode",
+            "custom_response_body_key": "customResponseBodyKey",
+            "response_headers": "responseHeaders",
+        },
+    )
+    class CustomResponseProperty:
+        def __init__(
+            self,
+            *,
+            response_code: jsii.Number,
+            custom_response_body_key: typing.Optional[builtins.str] = None,
+            response_headers: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWebACL.CustomHTTPHeaderProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        ) -> None:
+            '''A custom response to send to the client.
+
+            You can define a custom response for rule actions and default web ACL actions that are set to the block action.
+
+            For information about customizing web requests and responses, see `Customizing web requests and responses in AWS WAF <https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html>`_ in the `AWS WAF developer guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html>`_ .
+
+            :param response_code: The HTTP status code to return to the client. For a list of status codes that you can use in your custom responses, see `Supported status codes for custom response <https://docs.aws.amazon.com/waf/latest/developerguide/customizing-the-response-status-codes.html>`_ in the *AWS WAF Developer Guide* .
+            :param custom_response_body_key: References the response body that you want AWS WAF to return to the web request client. You can define a custom response for a rule action or a default web ACL action that is set to block. To do this, you first define the response body key and value in the ``CustomResponseBodies`` setting for the ``WebACL`` or ``RuleGroup`` where you want to use it. Then, in the rule action or web ACL default action ``BlockAction`` setting, you reference the response body using this key.
+            :param response_headers: The HTTP headers to use in the response. You can specify any header name except for ``content-type`` . Duplicate header names are not allowed. For information about the limits on count and size for custom request and response settings, see `AWS WAF quotas <https://docs.aws.amazon.com/waf/latest/developerguide/limits.html>`_ in the *AWS WAF Developer Guide* .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-customresponse.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_wafv2 as wafv2
+                
+                custom_response_property = wafv2.CfnWebACL.CustomResponseProperty(
+                    response_code=123,
+                
+                    # the properties below are optional
+                    custom_response_body_key="customResponseBodyKey",
+                    response_headers=[wafv2.CfnWebACL.CustomHTTPHeaderProperty(
+                        name="name",
+                        value="value"
+                    )]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__6dbc9439dfbaeae9e0932894939e1048a58a2d028d4ee3fbdcead25e1600ad91)
+                check_type(argname="argument response_code", value=response_code, expected_type=type_hints["response_code"])
+                check_type(argname="argument custom_response_body_key", value=custom_response_body_key, expected_type=type_hints["custom_response_body_key"])
+                check_type(argname="argument response_headers", value=response_headers, expected_type=type_hints["response_headers"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "response_code": response_code,
+            }
+            if custom_response_body_key is not None:
+                self._values["custom_response_body_key"] = custom_response_body_key
+            if response_headers is not None:
+                self._values["response_headers"] = response_headers
+
+        @builtins.property
+        def response_code(self) -> jsii.Number:
+            '''The HTTP status code to return to the client.
+
+            For a list of status codes that you can use in your custom responses, see `Supported status codes for custom response <https://docs.aws.amazon.com/waf/latest/developerguide/customizing-the-response-status-codes.html>`_ in the *AWS WAF Developer Guide* .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-customresponse.html#cfn-wafv2-webacl-customresponse-responsecode
+            '''
+            result = self._values.get("response_code")
+            assert result is not None, "Required property 'response_code' is missing"
+            return typing.cast(jsii.Number, result)
+
+        @builtins.property
+        def custom_response_body_key(self) -> typing.Optional[builtins.str]:
+            '''References the response body that you want AWS WAF to return to the web request client.
+
+            You can define a custom response for a rule action or a default web ACL action that is set to block. To do this, you first define the response body key and value in the ``CustomResponseBodies`` setting for the ``WebACL`` or ``RuleGroup`` where you want to use it. Then, in the rule action or web ACL default action ``BlockAction`` setting, you reference the response body using this key.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-customresponse.html#cfn-wafv2-webacl-customresponse-customresponsebodykey
+            '''
+            result = self._values.get("custom_response_body_key")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def response_headers(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnWebACL.CustomHTTPHeaderProperty"]]]]:
+            '''The HTTP headers to use in the response.
+
+            You can specify any header name except for ``content-type`` . Duplicate header names are not allowed.
+
+            For information about the limits on count and size for custom request and response settings, see `AWS WAF quotas <https://docs.aws.amazon.com/waf/latest/developerguide/limits.html>`_ in the *AWS WAF Developer Guide* .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-customresponse.html#cfn-wafv2-webacl-customresponse-responseheaders
+            '''
+            result = self._values.get("response_headers")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnWebACL.CustomHTTPHeaderProperty"]]]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "CustomResponseProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_wafv2.CfnWebACL.DataProtectProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "action": "action",
+            "field": "field",
+            "exclude_rate_based_details": "excludeRateBasedDetails",
+            "exclude_rule_match_details": "excludeRuleMatchDetails",
+        },
+    )
+    class DataProtectProperty:
+        def __init__(
+            self,
+            *,
+            action: builtins.str,
+            field: typing.Union[_IResolvable_da3f097b, typing.Union["CfnWebACL.FieldToProtectProperty", typing.Dict[builtins.str, typing.Any]]],
+            exclude_rate_based_details: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+            exclude_rule_match_details: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        ) -> None:
+            '''
+            :param action: 
+            :param field: Field in log to protect.
+            :param exclude_rate_based_details: 
+            :param exclude_rule_match_details: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-dataprotect.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_wafv2 as wafv2
+                
+                data_protect_property = wafv2.CfnWebACL.DataProtectProperty(
+                    action="action",
+                    field=wafv2.CfnWebACL.FieldToProtectProperty(
+                        field_type="fieldType",
+                
+                        # the properties below are optional
+                        field_keys=["fieldKeys"]
+                    ),
+                
+                    # the properties below are optional
+                    exclude_rate_based_details=False,
+                    exclude_rule_match_details=False
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__426b9eaa484bd1569796d5a87210701ae64a082cfa2a2f0342a5b25283344e18)
+                check_type(argname="argument action", value=action, expected_type=type_hints["action"])
+                check_type(argname="argument field", value=field, expected_type=type_hints["field"])
+                check_type(argname="argument exclude_rate_based_details", value=exclude_rate_based_details, expected_type=type_hints["exclude_rate_based_details"])
+                check_type(argname="argument exclude_rule_match_details", value=exclude_rule_match_details, expected_type=type_hints["exclude_rule_match_details"])
             self._values: typing.Dict[builtins.str, typing.Any] = {
-                "content": content,
-                "content_type": content_type,
+                "action": action,
+                "field": field,
             }
+            if exclude_rate_based_details is not None:
+                self._values["exclude_rate_based_details"] = exclude_rate_based_details
+            if exclude_rule_match_details is not None:
+                self._values["exclude_rule_match_details"] = exclude_rule_match_details
 
         @builtins.property
-        def content(self) -> builtins.str:
-            '''The payload of the custom response.
-
-            You can use JSON escape strings in JSON content. To do this, you must specify JSON content in the ``ContentType`` setting.
+        def action(self) -> builtins.str:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-dataprotect.html#cfn-wafv2-webacl-dataprotect-action
+            '''
+            result = self._values.get("action")
+            assert result is not None, "Required property 'action' is missing"
+            return typing.cast(builtins.str, result)
 
-            For information about the limits on count and size for custom request and response settings, see `AWS WAF quotas <https://docs.aws.amazon.com/waf/latest/developerguide/limits.html>`_ in the *AWS WAF Developer Guide* .
+        @builtins.property
+        def field(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, "CfnWebACL.FieldToProtectProperty"]:
+            '''Field in log to protect.
 
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-customresponsebody.html#cfn-wafv2-webacl-customresponsebody-content
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-dataprotect.html#cfn-wafv2-webacl-dataprotect-field
             '''
-            result = self._values.get("content")
-            assert result is not None, "Required property 'content' is missing"
-            return typing.cast(builtins.str, result)
+            result = self._values.get("field")
+            assert result is not None, "Required property 'field' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnWebACL.FieldToProtectProperty"], result)
 
         @builtins.property
-        def content_type(self) -> builtins.str:
-            '''The type of content in the payload that you are defining in the ``Content`` string.
+        def exclude_rate_based_details(
+            self,
+        ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-dataprotect.html#cfn-wafv2-webacl-dataprotect-excluderatebaseddetails
+            '''
+            result = self._values.get("exclude_rate_based_details")
+            return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
 
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-customresponsebody.html#cfn-wafv2-webacl-customresponsebody-contenttype
+        @builtins.property
+        def exclude_rule_match_details(
+            self,
+        ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
             '''
-            result = self._values.get("content_type")
-            assert result is not None, "Required property 'content_type' is missing"
-            return typing.cast(builtins.str, result)
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-dataprotect.html#cfn-wafv2-webacl-dataprotect-excluderulematchdetails
+            '''
+            result = self._values.get("exclude_rule_match_details")
+            return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
 
         def __eq__(self, rhs: typing.Any) -> builtins.bool:
             return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -14020,38 +13482,32 @@ class CfnWebACL(
             return not (rhs == self)
 
         def __repr__(self) -> str:
-            return "CustomResponseBodyProperty(%s)" % ", ".join(
+            return "DataProtectProperty(%s)" % ", ".join(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
     @jsii.data_type(
-        jsii_type="aws-cdk-lib.aws_wafv2.CfnWebACL.CustomResponseProperty",
+        jsii_type="aws-cdk-lib.aws_wafv2.CfnWebACL.DataProtectionConfigProperty",
         jsii_struct_bases=[],
-        name_mapping={
-            "response_code": "responseCode",
-            "custom_response_body_key": "customResponseBodyKey",
-            "response_headers": "responseHeaders",
-        },
+        name_mapping={"data_protections": "dataProtections"},
     )
-    class CustomResponseProperty:
+    class DataProtectionConfigProperty:
         def __init__(
             self,
             *,
-            response_code: jsii.Number,
-            custom_response_body_key: typing.Optional[builtins.str] = None,
-            response_headers: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWebACL.CustomHTTPHeaderProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
+            data_protections: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWebACL.DataProtectProperty", typing.Dict[builtins.str, typing.Any]]]]],
         ) -> None:
-            '''A custom response to send to the client.
+            '''Specifies data protection to apply to the web request data for the web ACL.
 
-            You can define a custom response for rule actions and default web ACL actions that are set to the block action.
+            This is a web ACL level data protection option.
 
-            For information about customizing web requests and responses, see `Customizing web requests and responses in AWS WAF <https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html>`_ in the `AWS WAF developer guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html>`_ .
+            The data protection that you configure for the web ACL alters the data that's available for any other data collection activity, including your AWS WAF logging destinations, web ACL request sampling, and Amazon Security Lake data collection and management. Your other option for data protection is in the logging configuration, which only affects logging.
 
-            :param response_code: The HTTP status code to return to the client. For a list of status codes that you can use in your custom responses, see `Supported status codes for custom response <https://docs.aws.amazon.com/waf/latest/developerguide/customizing-the-response-status-codes.html>`_ in the *AWS WAF Developer Guide* .
-            :param custom_response_body_key: References the response body that you want AWS WAF to return to the web request client. You can define a custom response for a rule action or a default web ACL action that is set to block. To do this, you first define the response body key and value in the ``CustomResponseBodies`` setting for the ``WebACL`` or ``RuleGroup`` where you want to use it. Then, in the rule action or web ACL default action ``BlockAction`` setting, you reference the response body using this key.
-            :param response_headers: The HTTP headers to use in the response. You can specify any header name except for ``content-type`` . Duplicate header names are not allowed. For information about the limits on count and size for custom request and response settings, see `AWS WAF quotas <https://docs.aws.amazon.com/waf/latest/developerguide/limits.html>`_ in the *AWS WAF Developer Guide* .
+            This is part of the data protection configuration for a web ACL.
 
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-customresponse.html
+            :param data_protections: An array of data protection configurations for specific web request field types. This is defined for each web ACL. AWS WAF applies the specified protection to all web requests that the web ACL inspects.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-dataprotectionconfig.html
             :exampleMetadata: fixture=_generated
 
             Example::
@@ -14060,67 +13516,42 @@ class CfnWebACL(
                 # The values are placeholders you should change.
                 from aws_cdk import aws_wafv2 as wafv2
                 
-                custom_response_property = wafv2.CfnWebACL.CustomResponseProperty(
-                    response_code=123,
+                data_protection_config_property = wafv2.CfnWebACL.DataProtectionConfigProperty(
+                    data_protections=[wafv2.CfnWebACL.DataProtectProperty(
+                        action="action",
+                        field=wafv2.CfnWebACL.FieldToProtectProperty(
+                            field_type="fieldType",
                 
-                    # the properties below are optional
-                    custom_response_body_key="customResponseBodyKey",
-                    response_headers=[wafv2.CfnWebACL.CustomHTTPHeaderProperty(
-                        name="name",
-                        value="value"
+                            # the properties below are optional
+                            field_keys=["fieldKeys"]
+                        ),
+                
+                        # the properties below are optional
+                        exclude_rate_based_details=False,
+                        exclude_rule_match_details=False
                     )]
                 )
             '''
             if __debug__:
-                type_hints = typing.get_type_hints(_typecheckingstub__6dbc9439dfbaeae9e0932894939e1048a58a2d028d4ee3fbdcead25e1600ad91)
-                check_type(argname="argument response_code", value=response_code, expected_type=type_hints["response_code"])
-                check_type(argname="argument custom_response_body_key", value=custom_response_body_key, expected_type=type_hints["custom_response_body_key"])
-                check_type(argname="argument response_headers", value=response_headers, expected_type=type_hints["response_headers"])
+                type_hints = typing.get_type_hints(_typecheckingstub__00facdbed1fde99291b1bde086b472ce66ee6dd143e53d5639cc3ea8b02e5eac)
+                check_type(argname="argument data_protections", value=data_protections, expected_type=type_hints["data_protections"])
             self._values: typing.Dict[builtins.str, typing.Any] = {
-                "response_code": response_code,
+                "data_protections": data_protections,
             }
-            if custom_response_body_key is not None:
-                self._values["custom_response_body_key"] = custom_response_body_key
-            if response_headers is not None:
-                self._values["response_headers"] = response_headers
-
-        @builtins.property
-        def response_code(self) -> jsii.Number:
-            '''The HTTP status code to return to the client.
-
-            For a list of status codes that you can use in your custom responses, see `Supported status codes for custom response <https://docs.aws.amazon.com/waf/latest/developerguide/customizing-the-response-status-codes.html>`_ in the *AWS WAF Developer Guide* .
-
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-customresponse.html#cfn-wafv2-webacl-customresponse-responsecode
-            '''
-            result = self._values.get("response_code")
-            assert result is not None, "Required property 'response_code' is missing"
-            return typing.cast(jsii.Number, result)
-
-        @builtins.property
-        def custom_response_body_key(self) -> typing.Optional[builtins.str]:
-            '''References the response body that you want AWS WAF to return to the web request client.
-
-            You can define a custom response for a rule action or a default web ACL action that is set to block. To do this, you first define the response body key and value in the ``CustomResponseBodies`` setting for the ``WebACL`` or ``RuleGroup`` where you want to use it. Then, in the rule action or web ACL default action ``BlockAction`` setting, you reference the response body using this key.
-
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-customresponse.html#cfn-wafv2-webacl-customresponse-customresponsebodykey
-            '''
-            result = self._values.get("custom_response_body_key")
-            return typing.cast(typing.Optional[builtins.str], result)
 
         @builtins.property
-        def response_headers(
+        def data_protections(
             self,
-        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnWebACL.CustomHTTPHeaderProperty"]]]]:
-            '''The HTTP headers to use in the response.
-
-            You can specify any header name except for ``content-type`` . Duplicate header names are not allowed.
+        ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnWebACL.DataProtectProperty"]]]:
+            '''An array of data protection configurations for specific web request field types.
 
-            For information about the limits on count and size for custom request and response settings, see `AWS WAF quotas <https://docs.aws.amazon.com/waf/latest/developerguide/limits.html>`_ in the *AWS WAF Developer Guide* .
+            This is defined for each web ACL. AWS WAF applies the specified protection to all web requests that the web ACL inspects.
 
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-customresponse.html#cfn-wafv2-webacl-customresponse-responseheaders
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-dataprotectionconfig.html#cfn-wafv2-webacl-dataprotectionconfig-dataprotections
             '''
-            result = self._values.get("response_headers")
-            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnWebACL.CustomHTTPHeaderProperty"]]]], result)
+            result = self._values.get("data_protections")
+            assert result is not None, "Required property 'data_protections' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnWebACL.DataProtectProperty"]]], result)
 
         def __eq__(self, rhs: typing.Any) -> builtins.bool:
             return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -14129,7 +13560,7 @@ class CfnWebACL(
             return not (rhs == self)
 
         def __repr__(self) -> str:
-            return "CustomResponseProperty(%s)" % ", ".join(
+            return "DataProtectionConfigProperty(%s)" % ", ".join(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
@@ -14358,6 +13789,7 @@ class CfnWebACL(
             "query_string": "queryString",
             "single_header": "singleHeader",
             "single_query_argument": "singleQueryArgument",
+            "uri_fragment": "uriFragment",
             "uri_path": "uriPath",
         },
     )
@@ -14376,6 +13808,7 @@ class CfnWebACL(
             query_string: typing.Any = None,
             single_header: typing.Any = None,
             single_query_argument: typing.Any = None,
+            uri_fragment: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWebACL.UriFragmentProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             uri_path: typing.Any = None,
         ) -> None:
             '''Specifies a web request component to be used in a rule match statement or in a logging configuration.
@@ -14406,6 +13839,7 @@ class CfnWebACL(
             :param query_string: Inspect the query string. This is the part of a URL that appears after a ``?`` character, if any.
             :param single_header: Inspect a single header. Provide the name of the header to inspect, for example, ``User-Agent`` or ``Referer`` . This setting isn't case sensitive. Example JSON: ``"SingleHeader": { "Name": "haystack" }`` Alternately, you can filter and inspect all headers with the ``Headers`` ``FieldToMatch`` setting.
             :param single_query_argument: Inspect a single query argument. Provide the name of the query argument to inspect, such as *UserName* or *SalesRegion* . The name can be up to 30 characters long and isn't case sensitive. Example JSON: ``"SingleQueryArgument": { "Name": "myArgument" }``
+            :param uri_fragment: The path component of the URI Fragment. This is the part of a web request that identifies a fragment uri, for example, /abcd#introduction
             :param uri_path: Inspect the request URI path. This is the part of the web request that identifies a resource, for example, ``/images/daily-ad.jpg`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-fieldtomatch.html
@@ -14469,6 +13903,9 @@ class CfnWebACL(
                     query_string=query_string,
                     single_header=single_header,
                     single_query_argument=single_query_argument,
+                    uri_fragment=wafv2.CfnWebACL.UriFragmentProperty(
+                        fallback_behavior="fallbackBehavior"
+                    ),
                     uri_path=uri_path
                 )
             '''
@@ -14485,6 +13922,7 @@ class CfnWebACL(
                 check_type(argname="argument query_string", value=query_string, expected_type=type_hints["query_string"])
                 check_type(argname="argument single_header", value=single_header, expected_type=type_hints["single_header"])
                 check_type(argname="argument single_query_argument", value=single_query_argument, expected_type=type_hints["single_query_argument"])
+                check_type(argname="argument uri_fragment", value=uri_fragment, expected_type=type_hints["uri_fragment"])
                 check_type(argname="argument uri_path", value=uri_path, expected_type=type_hints["uri_path"])
             self._values: typing.Dict[builtins.str, typing.Any] = {}
             if all_query_arguments is not None:
@@ -14509,6 +13947,8 @@ class CfnWebACL(
                 self._values["single_header"] = single_header
             if single_query_argument is not None:
                 self._values["single_query_argument"] = single_query_argument
+            if uri_fragment is not None:
+                self._values["uri_fragment"] = uri_fragment
             if uri_path is not None:
                 self._values["uri_path"] = uri_path
 
@@ -14681,6 +14121,19 @@ class CfnWebACL(
             result = self._values.get("single_query_argument")
             return typing.cast(typing.Any, result)
 
+        @builtins.property
+        def uri_fragment(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWebACL.UriFragmentProperty"]]:
+            '''The path component of the URI Fragment.
+
+            This is the part of a web request that identifies a fragment uri, for example, /abcd#introduction
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-fieldtomatch.html#cfn-wafv2-webacl-fieldtomatch-urifragment
+            '''
+            result = self._values.get("uri_fragment")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWebACL.UriFragmentProperty"]], result)
+
         @builtins.property
         def uri_path(self) -> typing.Any:
             '''Inspect the request URI path.
@@ -14703,6 +14156,83 @@ class CfnWebACL(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_wafv2.CfnWebACL.FieldToProtectProperty",
+        jsii_struct_bases=[],
+        name_mapping={"field_type": "fieldType", "field_keys": "fieldKeys"},
+    )
+    class FieldToProtectProperty:
+        def __init__(
+            self,
+            *,
+            field_type: builtins.str,
+            field_keys: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''Specifies a field type and keys to protect in stored web request data.
+
+            This is part of the data protection configuration for a web ACL.
+
+            :param field_type: Specifies the web request component type to protect.
+            :param field_keys: Specifies the keys to protect for the specified field type. If you don't specify any key, then all keys for the field type are protected.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-fieldtoprotect.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_wafv2 as wafv2
+                
+                field_to_protect_property = wafv2.CfnWebACL.FieldToProtectProperty(
+                    field_type="fieldType",
+                
+                    # the properties below are optional
+                    field_keys=["fieldKeys"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__b289950ea26daa0c8967a6c0a3a4de1a0fa062f7bc5f28fcf70ab8e7fa4989f0)
+                check_type(argname="argument field_type", value=field_type, expected_type=type_hints["field_type"])
+                check_type(argname="argument field_keys", value=field_keys, expected_type=type_hints["field_keys"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "field_type": field_type,
+            }
+            if field_keys is not None:
+                self._values["field_keys"] = field_keys
+
+        @builtins.property
+        def field_type(self) -> builtins.str:
+            '''Specifies the web request component type to protect.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-fieldtoprotect.html#cfn-wafv2-webacl-fieldtoprotect-fieldtype
+            '''
+            result = self._values.get("field_type")
+            assert result is not None, "Required property 'field_type' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def field_keys(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''Specifies the keys to protect for the specified field type.
+
+            If you don't specify any key, then all keys for the field type are protected.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-fieldtoprotect.html#cfn-wafv2-webacl-fieldtoprotect-fieldkeys
+            '''
+            result = self._values.get("field_keys")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "FieldToProtectProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_wafv2.CfnWebACL.ForwardedIPConfigurationProperty",
         jsii_struct_bases=[],
@@ -17692,6 +17222,9 @@ class CfnWebACL(
                         query_string=query_string,
                         single_header=single_header,
                         single_query_argument=single_query_argument,
+                        uri_fragment=wafv2.CfnWebACL.UriFragmentProperty(
+                            fallback_behavior="fallbackBehavior"
+                        ),
                         uri_path=uri_path
                     ),
                     regex_string="regexString",
@@ -17849,6 +17382,9 @@ class CfnWebACL(
                         query_string=query_string,
                         single_header=single_header,
                         single_query_argument=single_query_argument,
+                        uri_fragment=wafv2.CfnWebACL.UriFragmentProperty(
+                            fallback_behavior="fallbackBehavior"
+                        ),
                         uri_path=uri_path
                     ),
                     text_transformations=[wafv2.CfnWebACL.TextTransformationProperty(
@@ -19764,6 +19300,9 @@ class CfnWebACL(
                         query_string=query_string,
                         single_header=single_header,
                         single_query_argument=single_query_argument,
+                        uri_fragment=wafv2.CfnWebACL.UriFragmentProperty(
+                            fallback_behavior="fallbackBehavior"
+                        ),
                         uri_path=uri_path
                     ),
                     size=123,
@@ -19930,6 +19469,9 @@ class CfnWebACL(
                         query_string=query_string,
                         single_header=single_header,
                         single_query_argument=single_query_argument,
+                        uri_fragment=wafv2.CfnWebACL.UriFragmentProperty(
+                            fallback_behavior="fallbackBehavior"
+                        ),
                         uri_path=uri_path
                     ),
                     text_transformations=[wafv2.CfnWebACL.TextTransformationProperty(
@@ -20457,6 +19999,62 @@ class CfnWebACL(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_wafv2.CfnWebACL.UriFragmentProperty",
+        jsii_struct_bases=[],
+        name_mapping={"fallback_behavior": "fallbackBehavior"},
+    )
+    class UriFragmentProperty:
+        def __init__(
+            self,
+            *,
+            fallback_behavior: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''The path component of the URI Fragment.
+
+            This is the part of a web request that identifies a fragment uri, for example, /abcd#introduction
+
+            :param fallback_behavior: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-urifragment.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_wafv2 as wafv2
+                
+                uri_fragment_property = wafv2.CfnWebACL.UriFragmentProperty(
+                    fallback_behavior="fallbackBehavior"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__ff710cae8471ff92b17239c2eddf3d9fc58fc160b82b4603e07b06b6dc3a6dd1)
+                check_type(argname="argument fallback_behavior", value=fallback_behavior, expected_type=type_hints["fallback_behavior"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if fallback_behavior is not None:
+                self._values["fallback_behavior"] = fallback_behavior
+
+        @builtins.property
+        def fallback_behavior(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-urifragment.html#cfn-wafv2-webacl-urifragment-fallbackbehavior
+            '''
+            result = self._values.get("fallback_behavior")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "UriFragmentProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_wafv2.CfnWebACL.VisibilityConfigProperty",
         jsii_struct_bases=[],
@@ -20649,6 +20247,9 @@ class CfnWebACL(
                         query_string=query_string,
                         single_header=single_header,
                         single_query_argument=single_query_argument,
+                        uri_fragment=wafv2.CfnWebACL.UriFragmentProperty(
+                            fallback_behavior="fallbackBehavior"
+                        ),
                         uri_path=uri_path
                     ),
                     text_transformations=[wafv2.CfnWebACL.TextTransformationProperty(
@@ -20931,6 +20532,7 @@ class CfnWebACLAssociationProps:
         "captcha_config": "captchaConfig",
         "challenge_config": "challengeConfig",
         "custom_response_bodies": "customResponseBodies",
+        "data_protection_config": "dataProtectionConfig",
         "description": "description",
         "name": "name",
         "rules": "rules",
@@ -20949,6 +20551,7 @@ class CfnWebACLProps:
         captcha_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebACL.CaptchaConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         challenge_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebACL.ChallengeConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         custom_response_bodies: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebACL.CustomResponseBodyProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        data_protection_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebACL.DataProtectionConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         description: typing.Optional[builtins.str] = None,
         name: typing.Optional[builtins.str] = None,
         rules: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebACL.RuleProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
@@ -20964,6 +20567,7 @@ class CfnWebACLProps:
         :param captcha_config: Specifies how AWS WAF should handle ``CAPTCHA`` evaluations for rules that don't have their own ``CaptchaConfig`` settings. If you don't specify this, AWS WAF uses its default settings for ``CaptchaConfig`` .
         :param challenge_config: Specifies how AWS WAF should handle challenge evaluations for rules that don't have their own ``ChallengeConfig`` settings. If you don't specify this, AWS WAF uses its default settings for ``ChallengeConfig`` .
         :param custom_response_bodies: A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the web ACL, and then use them in the rules and default actions that you define in the web ACL. For information about customizing web requests and responses, see `Customizing web requests and responses in AWS WAF <https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html>`_ in the *AWS WAF Developer Guide* . For information about the limits on count and size for custom request and response settings, see `AWS WAF quotas <https://docs.aws.amazon.com/waf/latest/developerguide/limits.html>`_ in the *AWS WAF Developer Guide* .
+        :param data_protection_config: Specifies data protection to apply to the web request data for the web ACL. This is a web ACL level data protection option. The data protection that you configure for the web ACL alters the data that's available for any other data collection activity, including your AWS WAF logging destinations, web ACL request sampling, and Amazon Security Lake data collection and management. Your other option for data protection is in the logging configuration, which only affects logging.
         :param description: A description of the web ACL that helps with identification.
         :param name: The name of the web ACL. You cannot change the name of a web ACL after you create it.
         :param rules: The rule statements used to identify the web requests that you want to manage. Each rule includes one top-level statement that AWS WAF uses to identify matching web requests, and parameters that govern how AWS WAF handles them.
@@ -20986,6 +20590,7 @@ class CfnWebACLProps:
             check_type(argname="argument captcha_config", value=captcha_config, expected_type=type_hints["captcha_config"])
             check_type(argname="argument challenge_config", value=challenge_config, expected_type=type_hints["challenge_config"])
             check_type(argname="argument custom_response_bodies", value=custom_response_bodies, expected_type=type_hints["custom_response_bodies"])
+            check_type(argname="argument data_protection_config", value=data_protection_config, expected_type=type_hints["data_protection_config"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
             check_type(argname="argument rules", value=rules, expected_type=type_hints["rules"])
@@ -21004,6 +20609,8 @@ class CfnWebACLProps:
             self._values["challenge_config"] = challenge_config
         if custom_response_bodies is not None:
             self._values["custom_response_bodies"] = custom_response_bodies
+        if data_protection_config is not None:
+            self._values["data_protection_config"] = data_protection_config
         if description is not None:
             self._values["description"] = description
         if name is not None:
@@ -21117,6 +20724,21 @@ class CfnWebACLProps:
         result = self._values.get("custom_response_bodies")
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, typing.Union[_IResolvable_da3f097b, CfnWebACL.CustomResponseBodyProperty]]]], result)
 
+    @builtins.property
+    def data_protection_config(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnWebACL.DataProtectionConfigProperty]]:
+        '''Specifies data protection to apply to the web request data for the web ACL.
+
+        This is a web ACL level data protection option.
+
+        The data protection that you configure for the web ACL alters the data that's available for any other data collection activity, including your AWS WAF logging destinations, web ACL request sampling, and Amazon Security Lake data collection and management. Your other option for data protection is in the logging configuration, which only affects logging.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html#cfn-wafv2-webacl-dataprotectionconfig
+        '''
+        result = self._values.get("data_protection_config")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnWebACL.DataProtectionConfigProperty]], result)
+
     @builtins.property
     def description(self) -> typing.Optional[builtins.str]:
         '''A description of the web ACL that helps with identification.
@@ -21703,6 +21325,7 @@ def _typecheckingstub__dcb790c3130e52c64e6b7cf00db86b37d1b54427689c46b6c9e6a7122
     query_string: typing.Any = None,
     single_header: typing.Any = None,
     single_query_argument: typing.Any = None,
+    uri_fragment: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnRuleGroup.UriFragmentProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     uri_path: typing.Any = None,
 ) -> None:
     """Type checking stubs"""
@@ -22025,6 +21648,13 @@ def _typecheckingstub__cbdf04ef9e923368f792f61fdb73e804a219fcd9c66ffb20e85214a5a
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__fe1c476d259659923a1664b8e966720fc48cf48f725562b81ef2c02997f8998a(
+    *,
+    fallback_behavior: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__ffc3de9fa9cd77d11c4487ad80fc48948664b917c8642b35ca709762ce71fddf(
     *,
     cloud_watch_metrics_enabled: typing.Union[builtins.bool, _IResolvable_da3f097b],
@@ -22069,6 +21699,7 @@ def _typecheckingstub__03030a65c492e95a1d1ae5ddafd6acbb9efdfa7e18b6367ac7e03eb8f
     captcha_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebACL.CaptchaConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     challenge_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebACL.ChallengeConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     custom_response_bodies: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebACL.CustomResponseBodyProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+    data_protection_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebACL.DataProtectionConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     description: typing.Optional[builtins.str] = None,
     name: typing.Optional[builtins.str] = None,
     rules: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebACL.RuleProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
@@ -22132,6 +21763,12 @@ def _typecheckingstub__5782b9cc65df721fabb81b38101a49b0dce480579e9b262edcfe915ec
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__c8fdb8c606175920c3facb5c8db0632e7cdc7bedffcd3c6c787bab31ba6f6474(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnWebACL.DataProtectionConfigProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__b7cfda3db6502d36377ec778a8c90e7487c0f54a00cb343261a4d256ace27df9(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -22322,6 +21959,23 @@ def _typecheckingstub__6dbc9439dfbaeae9e0932894939e1048a58a2d028d4ee3fbdcead25e1
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__426b9eaa484bd1569796d5a87210701ae64a082cfa2a2f0342a5b25283344e18(
+    *,
+    action: builtins.str,
+    field: typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebACL.FieldToProtectProperty, typing.Dict[builtins.str, typing.Any]]],
+    exclude_rate_based_details: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    exclude_rule_match_details: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__00facdbed1fde99291b1bde086b472ce66ee6dd143e53d5639cc3ea8b02e5eac(
+    *,
+    data_protections: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebACL.DataProtectProperty, typing.Dict[builtins.str, typing.Any]]]]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__4f9b2681c5a7f99be956a44a9c1d132bd2244e6fdc65ac82690f66a9402698b5(
     *,
     allow: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebACL.AllowActionProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -22357,11 +22011,20 @@ def _typecheckingstub__25d147c856e9a8fd64f4cc05856e4813e584f37ef787792ad3c4e0790
     query_string: typing.Any = None,
     single_header: typing.Any = None,
     single_query_argument: typing.Any = None,
+    uri_fragment: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebACL.UriFragmentProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     uri_path: typing.Any = None,
 ) -> None:
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__b289950ea26daa0c8967a6c0a3a4de1a0fa062f7bc5f28fcf70ab8e7fa4989f0(
+    *,
+    field_type: builtins.str,
+    field_keys: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__db1f5e352c4a5fdd9a13196892955f19f25065d63109402ea882298152866a75(
     *,
     fallback_behavior: builtins.str,
@@ -22798,6 +22461,13 @@ def _typecheckingstub__a7a1f13087f44f2554ec3d9d35f967247b32fc5b6c94bf2eacd3379ce
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__ff710cae8471ff92b17239c2eddf3d9fc58fc160b82b4603e07b06b6dc3a6dd1(
+    *,
+    fallback_behavior: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__f805e71e3de782928ad1bdb95c4cddf9f28e9dbda49ae45324c0dc8316955eaa(
     *,
     cloud_watch_metrics_enabled: typing.Union[builtins.bool, _IResolvable_da3f097b],
@@ -22866,6 +22536,7 @@ def _typecheckingstub__6e738df983d65d43590c0a02c03e6e0daa3a2097ae335371d22711838
     captcha_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebACL.CaptchaConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     challenge_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebACL.ChallengeConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     custom_response_bodies: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebACL.CustomResponseBodyProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+    data_protection_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebACL.DataProtectionConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     description: typing.Optional[builtins.str] = None,
     name: typing.Optional[builtins.str] = None,
     rules: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebACL.RuleProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,