aws-cdk-lib 2.200.2__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_waf/__init__.py

@@ -64,9 +64,25 @@ from .. import (
     IResolvable as _IResolvable_da3f097b,
     TreeInspector as _TreeInspector_488e0dd5,
 )
+from ..interfaces.aws_waf import (
+    ByteMatchSetReference as _ByteMatchSetReference_32d58382,
+    IByteMatchSetRef as _IByteMatchSetRef_da566f9b,
+    IIPSetRef as _IIPSetRef_daf96c98,
+    IPSetReference as _IPSetReference_44e9af16,
+    IRuleRef as _IRuleRef_1eeb9646,
+    ISizeConstraintSetRef as _ISizeConstraintSetRef_55b3b762,
+    ISqlInjectionMatchSetRef as _ISqlInjectionMatchSetRef_f21faa9b,
+    IWebACLRef as _IWebACLRef_4edd511c,
+    IXssMatchSetRef as _IXssMatchSetRef_3fe7532c,
+    RuleReference as _RuleReference_9a37643a,
+    SizeConstraintSetReference as _SizeConstraintSetReference_e52c5521,
+    SqlInjectionMatchSetReference as _SqlInjectionMatchSetReference_d9d37dda,
+    WebACLReference as _WebACLReference_efbb1750,
+    XssMatchSetReference as _XssMatchSetReference_c1f2f9ab,
+)
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IByteMatchSetRef_da566f9b)
 class CfnByteMatchSet(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -122,7 +138,8 @@ class CfnByteMatchSet(
         name: builtins.str,
         byte_match_tuples: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnByteMatchSet.ByteMatchTupleProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WAF::ByteMatchSet``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name of the ``ByteMatchSet`` . You can't change ``Name`` after you create a ``ByteMatchSet`` .
@@ -174,6 +191,12 @@ class CfnByteMatchSet(
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrId"))
 
+    @builtins.property
+    @jsii.member(jsii_name="byteMatchSetRef")
+    def byte_match_set_ref(self) -> _ByteMatchSetReference_32d58382:
+        '''A reference to a ByteMatchSet resource.'''
+        return typing.cast(_ByteMatchSetReference_32d58382, jsii.get(self, "byteMatchSetRef"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
@@ -641,7 +664,7 @@ class CfnByteMatchSetProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IIPSetRef_daf96c98)
 class CfnIPSet(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -690,7 +713,8 @@ class CfnIPSet(
         name: builtins.str,
         ip_set_descriptors: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnIPSet.IPSetDescriptorProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WAF::IPSet``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name of the ``IPSet`` . You can't change the name of an ``IPSet`` after you create it.
@@ -747,6 +771,12 @@ class CfnIPSet(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="ipSetRef")
+    def ip_set_ref(self) -> _IPSetReference_44e9af16:
+        '''A reference to a IPSet resource.'''
+        return typing.cast(_IPSetReference_44e9af16, jsii.get(self, "ipSetRef"))
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
@@ -948,7 +978,7 @@ class CfnIPSetProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IRuleRef_1eeb9646)
 class CfnRule(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1002,7 +1032,8 @@ class CfnRule(
         name: builtins.str,
         predicates: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnRule.PredicateProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WAF::Rule``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param metric_name: The name of the metrics for this ``Rule`` . The name can contain only alphanumeric characters (A-Z, a-z, 0-9), with maximum length 128 and minimum length one. It can't contain whitespace or metric names reserved for AWS WAF , including "All" and "Default_Action." You can't change ``MetricName`` after you create the ``Rule`` .
@@ -1060,6 +1091,12 @@ class CfnRule(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="ruleRef")
+    def rule_ref(self) -> _RuleReference_9a37643a:
+        '''A reference to a Rule resource.'''
+        return typing.cast(_RuleReference_9a37643a, jsii.get(self, "ruleRef"))
+
     @builtins.property
     @jsii.member(jsii_name="metricName")
     def metric_name(self) -> builtins.str:
@@ -1300,7 +1337,7 @@ class CfnRuleProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _ISizeConstraintSetRef_55b3b762)
 class CfnSizeConstraintSet(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1352,7 +1389,8 @@ class CfnSizeConstraintSet(
         name: builtins.str,
         size_constraints: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSizeConstraintSet.SizeConstraintProperty", typing.Dict[builtins.str, typing.Any]]]]],
     ) -> None:
-        '''
+        '''Create a new ``AWS::WAF::SizeConstraintSet``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name, if any, of the ``SizeConstraintSet`` .
@@ -1409,6 +1447,12 @@ class CfnSizeConstraintSet(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="sizeConstraintSetRef")
+    def size_constraint_set_ref(self) -> _SizeConstraintSetReference_e52c5521:
+        '''A reference to a SizeConstraintSet resource.'''
+        return typing.cast(_SizeConstraintSetReference_e52c5521, jsii.get(self, "sizeConstraintSetRef"))
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
@@ -1809,7 +1853,7 @@ class CfnSizeConstraintSetProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _ISqlInjectionMatchSetRef_f21faa9b)
 class CfnSqlInjectionMatchSet(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1861,7 +1905,8 @@ class CfnSqlInjectionMatchSet(
         name: builtins.str,
         sql_injection_match_tuples: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSqlInjectionMatchSet.SqlInjectionMatchTupleProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WAF::SqlInjectionMatchSet``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name, if any, of the ``SqlInjectionMatchSet`` .
@@ -1920,6 +1965,12 @@ class CfnSqlInjectionMatchSet(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="sqlInjectionMatchSetRef")
+    def sql_injection_match_set_ref(self) -> _SqlInjectionMatchSetReference_d9d37dda:
+        '''A reference to a SqlInjectionMatchSet resource.'''
+        return typing.cast(_SqlInjectionMatchSetReference_d9d37dda, jsii.get(self, "sqlInjectionMatchSetRef"))
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
@@ -2269,7 +2320,7 @@ class CfnSqlInjectionMatchSetProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IWebACLRef_4edd511c)
 class CfnWebACL(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2326,7 +2377,8 @@ class CfnWebACL(
         name: builtins.str,
         rules: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWebACL.ActivatedRuleProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WAF::WebACL``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param default_action: The action to perform if none of the ``Rules`` contained in the ``WebACL`` match. The action is specified by the ``WafAction`` object.
@@ -2390,6 +2442,12 @@ class CfnWebACL(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="webAclRef")
+    def web_acl_ref(self) -> _WebACLReference_efbb1750:
+        '''A reference to a WebACL resource.'''
+        return typing.cast(_WebACLReference_efbb1750, jsii.get(self, "webAclRef"))
+
     @builtins.property
     @jsii.member(jsii_name="defaultAction")
     def default_action(
@@ -2758,7 +2816,7 @@ class CfnWebACLProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IXssMatchSetRef_3fe7532c)
 class CfnXssMatchSet(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2808,7 +2866,8 @@ class CfnXssMatchSet(
         name: builtins.str,
         xss_match_tuples: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnXssMatchSet.XssMatchTupleProperty", typing.Dict[builtins.str, typing.Any]]]]],
     ) -> None:
-        '''
+        '''Create a new ``AWS::WAF::XssMatchSet``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name, if any, of the ``XssMatchSet`` .
@@ -2865,6 +2924,12 @@ class CfnXssMatchSet(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="xssMatchSetRef")
+    def xss_match_set_ref(self) -> _XssMatchSetReference_c1f2f9ab:
+        '''A reference to a XssMatchSet resource.'''
+        return typing.cast(_XssMatchSetReference_c1f2f9ab, jsii.get(self, "xssMatchSetRef"))
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:

aws_cdk/aws_wafregional/__init__.py

@@ -64,9 +64,33 @@ from .. import (
     IResolvable as _IResolvable_da3f097b,
     TreeInspector as _TreeInspector_488e0dd5,
 )
+from ..interfaces.aws_wafregional import (
+    ByteMatchSetReference as _ByteMatchSetReference_5c158195,
+    GeoMatchSetReference as _GeoMatchSetReference_d4923ca3,
+    IByteMatchSetRef as _IByteMatchSetRef_b9d7fa32,
+    IGeoMatchSetRef as _IGeoMatchSetRef_f1759bb3,
+    IIPSetRef as _IIPSetRef_9a2f73df,
+    IPSetReference as _IPSetReference_5a056f17,
+    IRateBasedRuleRef as _IRateBasedRuleRef_de35422e,
+    IRegexPatternSetRef as _IRegexPatternSetRef_de6fde66,
+    IRuleRef as _IRuleRef_dd339bf9,
+    ISizeConstraintSetRef as _ISizeConstraintSetRef_737bff91,
+    ISqlInjectionMatchSetRef as _ISqlInjectionMatchSetRef_232c3756,
+    IWebACLAssociationRef as _IWebACLAssociationRef_2298c022,
+    IWebACLRef as _IWebACLRef_0d047f34,
+    IXssMatchSetRef as _IXssMatchSetRef_f894cd38,
+    RateBasedRuleReference as _RateBasedRuleReference_f997101b,
+    RegexPatternSetReference as _RegexPatternSetReference_bd768ee6,
+    RuleReference as _RuleReference_7dc8cbc3,
+    SizeConstraintSetReference as _SizeConstraintSetReference_19288e69,
+    SqlInjectionMatchSetReference as _SqlInjectionMatchSetReference_8a4a45d5,
+    WebACLAssociationReference as _WebACLAssociationReference_732525ba,
+    WebACLReference as _WebACLReference_dd1a0593,
+    XssMatchSetReference as _XssMatchSetReference_3e9904bd,
+)
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IByteMatchSetRef_b9d7fa32)
 class CfnByteMatchSet(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -122,7 +146,8 @@ class CfnByteMatchSet(
         name: builtins.str,
         byte_match_tuples: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnByteMatchSet.ByteMatchTupleProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WAFRegional::ByteMatchSet``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: A friendly name or description of the ``ByteMatchSet`` . You can't change ``Name`` after you create a ``ByteMatchSet`` .
@@ -174,6 +199,12 @@ class CfnByteMatchSet(
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrId"))
 
+    @builtins.property
+    @jsii.member(jsii_name="byteMatchSetRef")
+    def byte_match_set_ref(self) -> _ByteMatchSetReference_5c158195:
+        '''A reference to a ByteMatchSet resource.'''
+        return typing.cast(_ByteMatchSetReference_5c158195, jsii.get(self, "byteMatchSetRef"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
@@ -641,7 +672,7 @@ class CfnByteMatchSetProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IGeoMatchSetRef_f1759bb3)
 class CfnGeoMatchSet(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -688,7 +719,8 @@ class CfnGeoMatchSet(
         name: builtins.str,
         geo_match_constraints: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnGeoMatchSet.GeoMatchConstraintProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WAFRegional::GeoMatchSet``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: A friendly name or description of the ``GeoMatchSet`` . You can't change the name of an ``GeoMatchSet`` after you create it.
@@ -747,6 +779,12 @@ class CfnGeoMatchSet(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="geoMatchSetRef")
+    def geo_match_set_ref(self) -> _GeoMatchSetReference_d4923ca3:
+        '''A reference to a GeoMatchSet resource.'''
+        return typing.cast(_GeoMatchSetReference_d4923ca3, jsii.get(self, "geoMatchSetRef"))
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
@@ -938,7 +976,7 @@ class CfnGeoMatchSetProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IIPSetRef_9a2f73df)
 class CfnIPSet(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -987,7 +1025,8 @@ class CfnIPSet(
         name: builtins.str,
         ip_set_descriptors: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnIPSet.IPSetDescriptorProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WAFRegional::IPSet``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: A friendly name or description of the ``IPSet`` . You can't change the name of an ``IPSet`` after you create it.
@@ -1044,6 +1083,12 @@ class CfnIPSet(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="ipSetRef")
+    def ip_set_ref(self) -> _IPSetReference_5a056f17:
+        '''A reference to a IPSet resource.'''
+        return typing.cast(_IPSetReference_5a056f17, jsii.get(self, "ipSetRef"))
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
@@ -1243,7 +1288,7 @@ class CfnIPSetProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IRateBasedRuleRef_de35422e)
 class CfnRateBasedRule(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1305,7 +1350,8 @@ class CfnRateBasedRule(
         rate_limit: jsii.Number,
         match_predicates: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnRateBasedRule.PredicateProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WAFRegional::RateBasedRule``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param metric_name: A name for the metrics for a ``RateBasedRule`` . The name can contain only alphanumeric characters (A-Z, a-z, 0-9), with maximum length 128 and minimum length one. It can't contain whitespace or metric names reserved for AWS WAF , including "All" and "Default_Action." You can't change the name of the metric after you create the ``RateBasedRule`` .
@@ -1371,6 +1417,12 @@ class CfnRateBasedRule(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="rateBasedRuleRef")
+    def rate_based_rule_ref(self) -> _RateBasedRuleReference_f997101b:
+        '''A reference to a RateBasedRule resource.'''
+        return typing.cast(_RateBasedRuleReference_f997101b, jsii.get(self, "rateBasedRuleRef"))
+
     @builtins.property
     @jsii.member(jsii_name="metricName")
     def metric_name(self) -> builtins.str:
@@ -1673,7 +1725,7 @@ class CfnRateBasedRuleProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IRegexPatternSetRef_de6fde66)
 class CfnRegexPatternSet(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1709,7 +1761,8 @@ class CfnRegexPatternSet(
         name: builtins.str,
         regex_pattern_strings: typing.Sequence[builtins.str],
     ) -> None:
-        '''
+        '''Create a new ``AWS::WAFRegional::RegexPatternSet``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: A friendly name or description of the ``RegexPatternSet`` . You can't change ``Name`` after you create a ``RegexPatternSet`` .
@@ -1768,6 +1821,12 @@ class CfnRegexPatternSet(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="regexPatternSetRef")
+    def regex_pattern_set_ref(self) -> _RegexPatternSetReference_bd768ee6:
+        '''A reference to a RegexPatternSet resource.'''
+        return typing.cast(_RegexPatternSetReference_bd768ee6, jsii.get(self, "regexPatternSetRef"))
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
@@ -1869,7 +1928,7 @@ class CfnRegexPatternSetProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IRuleRef_dd339bf9)
 class CfnRule(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1923,7 +1982,8 @@ class CfnRule(
         name: builtins.str,
         predicates: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnRule.PredicateProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WAFRegional::Rule``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param metric_name: A name for the metrics for this ``Rule`` . The name can contain only alphanumeric characters (A-Z, a-z, 0-9), with maximum length 128 and minimum length one. It can't contain whitespace or metric names reserved for AWS WAF, including "All" and "Default_Action." You can't change ``MetricName`` after you create the ``Rule`` .
@@ -1981,6 +2041,12 @@ class CfnRule(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="ruleRef")
+    def rule_ref(self) -> _RuleReference_7dc8cbc3:
+        '''A reference to a Rule resource.'''
+        return typing.cast(_RuleReference_7dc8cbc3, jsii.get(self, "ruleRef"))
+
     @builtins.property
     @jsii.member(jsii_name="metricName")
     def metric_name(self) -> builtins.str:
@@ -2221,7 +2287,7 @@ class CfnRuleProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _ISizeConstraintSetRef_737bff91)
 class CfnSizeConstraintSet(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2275,7 +2341,8 @@ class CfnSizeConstraintSet(
         name: builtins.str,
         size_constraints: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSizeConstraintSet.SizeConstraintProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WAFRegional::SizeConstraintSet``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name, if any, of the ``SizeConstraintSet`` .
@@ -2332,6 +2399,12 @@ class CfnSizeConstraintSet(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="sizeConstraintSetRef")
+    def size_constraint_set_ref(self) -> _SizeConstraintSetReference_19288e69:
+        '''A reference to a SizeConstraintSet resource.'''
+        return typing.cast(_SizeConstraintSetReference_19288e69, jsii.get(self, "sizeConstraintSetRef"))
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
@@ -2734,7 +2807,7 @@ class CfnSizeConstraintSetProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _ISqlInjectionMatchSetRef_232c3756)
 class CfnSqlInjectionMatchSet(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2786,7 +2859,8 @@ class CfnSqlInjectionMatchSet(
         name: builtins.str,
         sql_injection_match_tuples: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSqlInjectionMatchSet.SqlInjectionMatchTupleProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WAFRegional::SqlInjectionMatchSet``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name, if any, of the ``SqlInjectionMatchSet`` .
@@ -2845,6 +2919,12 @@ class CfnSqlInjectionMatchSet(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="sqlInjectionMatchSetRef")
+    def sql_injection_match_set_ref(self) -> _SqlInjectionMatchSetReference_8a4a45d5:
+        '''A reference to a SqlInjectionMatchSet resource.'''
+        return typing.cast(_SqlInjectionMatchSetReference_8a4a45d5, jsii.get(self, "sqlInjectionMatchSetRef"))
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
@@ -3194,7 +3274,7 @@ class CfnSqlInjectionMatchSetProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IWebACLRef_0d047f34)
 class CfnWebACL(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3251,7 +3331,8 @@ class CfnWebACL(
         name: builtins.str,
         rules: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWebACL.RuleProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WAFRegional::WebACL``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param default_action: The action to perform if none of the ``Rules`` contained in the ``WebACL`` match. The action is specified by the ``WafAction`` object.
@@ -3315,6 +3396,12 @@ class CfnWebACL(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="webAclRef")
+    def web_acl_ref(self) -> _WebACLReference_dd1a0593:
+        '''A reference to a WebACL resource.'''
+        return typing.cast(_WebACLReference_dd1a0593, jsii.get(self, "webAclRef"))
+
     @builtins.property
     @jsii.member(jsii_name="defaultAction")
     def default_action(
@@ -3537,7 +3624,7 @@ class CfnWebACL(
             )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IWebACLAssociationRef_2298c022)
 class CfnWebACLAssociation(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3578,7 +3665,8 @@ class CfnWebACLAssociation(
         resource_arn: builtins.str,
         web_acl_id: builtins.str,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WAFRegional::WebACLAssociation``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param resource_arn: The Amazon Resource Name (ARN) of the resource to protect with the web ACL.
@@ -3637,6 +3725,12 @@ class CfnWebACLAssociation(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="webAclAssociationRef")
+    def web_acl_association_ref(self) -> _WebACLAssociationReference_732525ba:
+        '''A reference to a WebACLAssociation resource.'''
+        return typing.cast(_WebACLAssociationReference_732525ba, jsii.get(self, "webAclAssociationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="resourceArn")
     def resource_arn(self) -> builtins.str:
@@ -3858,7 +3952,7 @@ class CfnWebACLProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IXssMatchSetRef_f894cd38)
 class CfnXssMatchSet(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3910,7 +4004,8 @@ class CfnXssMatchSet(
         name: builtins.str,
         xss_match_tuples: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnXssMatchSet.XssMatchTupleProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WAFRegional::XssMatchSet``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name, if any, of the ``XssMatchSet`` .
@@ -3967,6 +4062,12 @@ class CfnXssMatchSet(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="xssMatchSetRef")
+    def xss_match_set_ref(self) -> _XssMatchSetReference_3e9904bd:
+        '''A reference to a XssMatchSet resource.'''
+        return typing.cast(_XssMatchSetReference_3e9904bd, jsii.get(self, "xssMatchSetRef"))
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str: