AWS Native v0.102.0, Apr 16 24

AWS Native is in preview. AWS Classic is fully supported.

AWS Native v0.102.0 published on Tuesday, Apr 16, 2024 by Pulumi

pulumi/pulumi-aws-native

aws-native.wafv2.WebAcl

Explore with Pulumi AI

AWS Native is in preview. AWS Classic is fully supported.

AWS Native v0.102.0 published on Tuesday, Apr 16, 2024 by Pulumi

pulumi/pulumi-aws-native

Contains the Rules that identify the requests that you want to allow, block, or count. In a WebACL, you also specify a default action (ALLOW or BLOCK), and the action for each Rule that you add to a WebACL, for example, block requests from specified IP addresses or block requests from specified referrers. You also associate the WebACL with a CloudFront distribution to identify the requests that you want AWS WAF to filter. If you add more than one Rule to a WebACL, a request needs to match only one of the specifications to be allowed, blocked, or counted.

Create WebAcl Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new WebAcl(name: string, args: WebAclArgs, opts?: CustomResourceOptions);

@overload
def WebAcl(resource_name: str,
           args: WebAclArgs,
           opts: Optional[ResourceOptions] = None)

@overload
def WebAcl(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           default_action: Optional[WebAclDefaultActionArgs] = None,
           scope: Optional[WebAclScope] = None,
           visibility_config: Optional[WebAclVisibilityConfigArgs] = None,
           association_config: Optional[WebAclAssociationConfigArgs] = None,
           captcha_config: Optional[WebAclCaptchaConfigArgs] = None,
           challenge_config: Optional[WebAclChallengeConfigArgs] = None,
           custom_response_bodies: Optional[Mapping[str, WebAclCustomResponseBodyArgs]] = None,
           description: Optional[str] = None,
           name: Optional[str] = None,
           rules: Optional[Sequence[WebAclRuleArgs]] = None,
           tags: Optional[Sequence[_root_inputs.TagArgs]] = None,
           token_domains: Optional[Sequence[str]] = None)

func NewWebAcl(ctx *Context, name string, args WebAclArgs, opts ...ResourceOption) (*WebAcl, error)

public WebAcl(string name, WebAclArgs args, CustomResourceOptions? opts = null)

public WebAcl(String name, WebAclArgs args)
public WebAcl(String name, WebAclArgs args, CustomResourceOptions options)

type: aws-native:wafv2:WebAcl
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args WebAclArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args WebAclArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args WebAclArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args WebAclArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args WebAclArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Example

The following reference example uses placeholder values for all input properties.

Coming soon!

Coming soon!

Coming soon!

Coming soon!

const webAclResource = new aws_native.wafv2.WebAcl("webAclResource", {
    defaultAction: {
        allow: {
            customRequestHandling: {
                insertHeaders: [{
                    name: "string",
                    value: "string",
                }],
            },
        },
        block: {
            customResponse: {
                responseCode: 0,
                customResponseBodyKey: "string",
                responseHeaders: [{
                    name: "string",
                    value: "string",
                }],
            },
        },
    },
    scope: aws_native.wafv2.WebAclScope.Cloudfront,
    visibilityConfig: {
        cloudWatchMetricsEnabled: false,
        metricName: "string",
        sampledRequestsEnabled: false,
    },
    associationConfig: {
        requestBody: {
            string: {
                defaultSizeInspectionLimit: aws_native.wafv2.WebAclSizeInspectionLimit.Kb16,
            },
        },
    },
    captchaConfig: {
        immunityTimeProperty: {
            immunityTime: 0,
        },
    },
    challengeConfig: {
        immunityTimeProperty: {
            immunityTime: 0,
        },
    },
    customResponseBodies: {
        string: {
            content: "string",
            contentType: aws_native.wafv2.WebAclResponseContentType.TextPlain,
        },
    },
    description: "string",
    name: "string",
    rules: [{
        name: "string",
        priority: 0,
        statement: {
            andStatement: {
                statements: [webAclStatement],
            },
            byteMatchStatement: {
                fieldToMatch: {
                    allQueryArguments: "any",
                    body: {
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    cookies: {
                        matchPattern: {
                            all: "any",
                            excludedCookies: ["string"],
                            includedCookies: ["string"],
                        },
                        matchScope: aws_native.wafv2.WebAclMapMatchScope.All,
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    headers: {
                        matchPattern: {
                            all: "any",
                            excludedHeaders: ["string"],
                            includedHeaders: ["string"],
                        },
                        matchScope: aws_native.wafv2.WebAclMapMatchScope.All,
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    ja3Fingerprint: {
                        fallbackBehavior: aws_native.wafv2.WebAclJa3FingerprintFallbackBehavior.Match,
                    },
                    jsonBody: {
                        matchPattern: {
                            all: "any",
                            includedPaths: ["string"],
                        },
                        matchScope: aws_native.wafv2.WebAclJsonMatchScope.All,
                        invalidFallbackBehavior: aws_native.wafv2.WebAclBodyParsingFallbackBehavior.Match,
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    method: "any",
                    queryString: "any",
                    singleHeader: {
                        name: "string",
                    },
                    singleQueryArgument: {
                        name: "string",
                    },
                    uriPath: "any",
                },
                positionalConstraint: aws_native.wafv2.WebAclPositionalConstraint.Exactly,
                textTransformations: [{
                    priority: 0,
                    type: aws_native.wafv2.WebAclTextTransformationType.None,
                }],
                searchString: "string",
                searchStringBase64: "string",
            },
            geoMatchStatement: {
                countryCodes: ["string"],
                forwardedIpConfig: {
                    fallbackBehavior: aws_native.wafv2.WebAclForwardedIpConfigurationFallbackBehavior.Match,
                    headerName: "string",
                },
            },
            ipSetReferenceStatement: {
                arn: "string",
                ipSetForwardedIpConfig: {
                    fallbackBehavior: aws_native.wafv2.WebAclIpSetForwardedIpConfigurationFallbackBehavior.Match,
                    headerName: "string",
                    position: aws_native.wafv2.WebAclIpSetForwardedIpConfigurationPosition.First,
                },
            },
            labelMatchStatement: {
                key: "string",
                scope: aws_native.wafv2.WebAclLabelMatchScope.Label,
            },
            managedRuleGroupStatement: {
                name: "string",
                vendorName: "string",
                excludedRules: [{
                    name: "string",
                }],
                managedRuleGroupConfigs: [{
                    awsManagedRulesAcfpRuleSet: {
                        creationPath: "string",
                        registrationPagePath: "string",
                        requestInspection: {
                            payloadType: aws_native.wafv2.WebAclRequestInspectionAcfpPayloadType.Json,
                            addressFields: [{
                                identifier: "string",
                            }],
                            emailField: {
                                identifier: "string",
                            },
                            passwordField: {
                                identifier: "string",
                            },
                            phoneNumberFields: [{
                                identifier: "string",
                            }],
                            usernameField: {
                                identifier: "string",
                            },
                        },
                        enableRegexInPath: false,
                        responseInspection: {
                            bodyContains: {
                                failureStrings: ["string"],
                                successStrings: ["string"],
                            },
                            header: {
                                failureValues: ["string"],
                                name: "string",
                                successValues: ["string"],
                            },
                            json: {
                                failureValues: ["string"],
                                identifier: "string",
                                successValues: ["string"],
                            },
                            statusCode: {
                                failureCodes: [0],
                                successCodes: [0],
                            },
                        },
                    },
                    awsManagedRulesAtpRuleSet: {
                        loginPath: "string",
                        enableRegexInPath: false,
                        requestInspection: {
                            passwordField: {
                                identifier: "string",
                            },
                            payloadType: aws_native.wafv2.WebAclRequestInspectionPayloadType.Json,
                            usernameField: {
                                identifier: "string",
                            },
                        },
                        responseInspection: {
                            bodyContains: {
                                failureStrings: ["string"],
                                successStrings: ["string"],
                            },
                            header: {
                                failureValues: ["string"],
                                name: "string",
                                successValues: ["string"],
                            },
                            json: {
                                failureValues: ["string"],
                                identifier: "string",
                                successValues: ["string"],
                            },
                            statusCode: {
                                failureCodes: [0],
                                successCodes: [0],
                            },
                        },
                    },
                    awsManagedRulesBotControlRuleSet: {
                        inspectionLevel: aws_native.wafv2.WebAclAwsManagedRulesBotControlRuleSetInspectionLevel.Common,
                        enableMachineLearning: false,
                    },
                    loginPath: "string",
                    passwordField: {
                        identifier: "string",
                    },
                    payloadType: aws_native.wafv2.WebAclManagedRuleGroupConfigPayloadType.Json,
                    usernameField: {
                        identifier: "string",
                    },
                }],
                ruleActionOverrides: [{
                    actionToUse: {
                        allow: {
                            customRequestHandling: {
                                insertHeaders: [{
                                    name: "string",
                                    value: "string",
                                }],
                            },
                        },
                        block: {
                            customResponse: {
                                responseCode: 0,
                                customResponseBodyKey: "string",
                                responseHeaders: [{
                                    name: "string",
                                    value: "string",
                                }],
                            },
                        },
                        captcha: {
                            customRequestHandling: {
                                insertHeaders: [{
                                    name: "string",
                                    value: "string",
                                }],
                            },
                        },
                        challenge: {
                            customRequestHandling: {
                                insertHeaders: [{
                                    name: "string",
                                    value: "string",
                                }],
                            },
                        },
                        count: {
                            customRequestHandling: {
                                insertHeaders: [{
                                    name: "string",
                                    value: "string",
                                }],
                            },
                        },
                    },
                    name: "string",
                }],
                scopeDownStatement: webAclStatement,
                version: "string",
            },
            notStatement: {
                statement: webAclStatement,
            },
            orStatement: {
                statements: [webAclStatement],
            },
            rateBasedStatement: {
                aggregateKeyType: aws_native.wafv2.WebAclRateBasedStatementAggregateKeyType.Constant,
                limit: 0,
                customKeys: [{
                    cookie: {
                        name: "string",
                        textTransformations: [{
                            priority: 0,
                            type: aws_native.wafv2.WebAclTextTransformationType.None,
                        }],
                    },
                    forwardedIp: {},
                    header: {
                        name: "string",
                        textTransformations: [{
                            priority: 0,
                            type: aws_native.wafv2.WebAclTextTransformationType.None,
                        }],
                    },
                    httpMethod: {},
                    ip: {},
                    labelNamespace: {
                        namespace: "string",
                    },
                    queryArgument: {
                        name: "string",
                        textTransformations: [{
                            priority: 0,
                            type: aws_native.wafv2.WebAclTextTransformationType.None,
                        }],
                    },
                    queryString: {
                        textTransformations: [{
                            priority: 0,
                            type: aws_native.wafv2.WebAclTextTransformationType.None,
                        }],
                    },
                    uriPath: {
                        textTransformations: [{
                            priority: 0,
                            type: aws_native.wafv2.WebAclTextTransformationType.None,
                        }],
                    },
                }],
                evaluationWindowSec: 0,
                forwardedIpConfig: {
                    fallbackBehavior: aws_native.wafv2.WebAclForwardedIpConfigurationFallbackBehavior.Match,
                    headerName: "string",
                },
                scopeDownStatement: webAclStatement,
            },
            regexMatchStatement: {
                fieldToMatch: {
                    allQueryArguments: "any",
                    body: {
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    cookies: {
                        matchPattern: {
                            all: "any",
                            excludedCookies: ["string"],
                            includedCookies: ["string"],
                        },
                        matchScope: aws_native.wafv2.WebAclMapMatchScope.All,
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    headers: {
                        matchPattern: {
                            all: "any",
                            excludedHeaders: ["string"],
                            includedHeaders: ["string"],
                        },
                        matchScope: aws_native.wafv2.WebAclMapMatchScope.All,
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    ja3Fingerprint: {
                        fallbackBehavior: aws_native.wafv2.WebAclJa3FingerprintFallbackBehavior.Match,
                    },
                    jsonBody: {
                        matchPattern: {
                            all: "any",
                            includedPaths: ["string"],
                        },
                        matchScope: aws_native.wafv2.WebAclJsonMatchScope.All,
                        invalidFallbackBehavior: aws_native.wafv2.WebAclBodyParsingFallbackBehavior.Match,
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    method: "any",
                    queryString: "any",
                    singleHeader: {
                        name: "string",
                    },
                    singleQueryArgument: {
                        name: "string",
                    },
                    uriPath: "any",
                },
                regexString: "string",
                textTransformations: [{
                    priority: 0,
                    type: aws_native.wafv2.WebAclTextTransformationType.None,
                }],
            },
            regexPatternSetReferenceStatement: {
                arn: "string",
                fieldToMatch: {
                    allQueryArguments: "any",
                    body: {
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    cookies: {
                        matchPattern: {
                            all: "any",
                            excludedCookies: ["string"],
                            includedCookies: ["string"],
                        },
                        matchScope: aws_native.wafv2.WebAclMapMatchScope.All,
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    headers: {
                        matchPattern: {
                            all: "any",
                            excludedHeaders: ["string"],
                            includedHeaders: ["string"],
                        },
                        matchScope: aws_native.wafv2.WebAclMapMatchScope.All,
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    ja3Fingerprint: {
                        fallbackBehavior: aws_native.wafv2.WebAclJa3FingerprintFallbackBehavior.Match,
                    },
                    jsonBody: {
                        matchPattern: {
                            all: "any",
                            includedPaths: ["string"],
                        },
                        matchScope: aws_native.wafv2.WebAclJsonMatchScope.All,
                        invalidFallbackBehavior: aws_native.wafv2.WebAclBodyParsingFallbackBehavior.Match,
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    method: "any",
                    queryString: "any",
                    singleHeader: {
                        name: "string",
                    },
                    singleQueryArgument: {
                        name: "string",
                    },
                    uriPath: "any",
                },
                textTransformations: [{
                    priority: 0,
                    type: aws_native.wafv2.WebAclTextTransformationType.None,
                }],
            },
            ruleGroupReferenceStatement: {
                arn: "string",
                excludedRules: [{
                    name: "string",
                }],
                ruleActionOverrides: [{
                    actionToUse: {
                        allow: {
                            customRequestHandling: {
                                insertHeaders: [{
                                    name: "string",
                                    value: "string",
                                }],
                            },
                        },
                        block: {
                            customResponse: {
                                responseCode: 0,
                                customResponseBodyKey: "string",
                                responseHeaders: [{
                                    name: "string",
                                    value: "string",
                                }],
                            },
                        },
                        captcha: {
                            customRequestHandling: {
                                insertHeaders: [{
                                    name: "string",
                                    value: "string",
                                }],
                            },
                        },
                        challenge: {
                            customRequestHandling: {
                                insertHeaders: [{
                                    name: "string",
                                    value: "string",
                                }],
                            },
                        },
                        count: {
                            customRequestHandling: {
                                insertHeaders: [{
                                    name: "string",
                                    value: "string",
                                }],
                            },
                        },
                    },
                    name: "string",
                }],
            },
            sizeConstraintStatement: {
                comparisonOperator: aws_native.wafv2.WebAclSizeConstraintStatementComparisonOperator.Eq,
                fieldToMatch: {
                    allQueryArguments: "any",
                    body: {
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    cookies: {
                        matchPattern: {
                            all: "any",
                            excludedCookies: ["string"],
                            includedCookies: ["string"],
                        },
                        matchScope: aws_native.wafv2.WebAclMapMatchScope.All,
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    headers: {
                        matchPattern: {
                            all: "any",
                            excludedHeaders: ["string"],
                            includedHeaders: ["string"],
                        },
                        matchScope: aws_native.wafv2.WebAclMapMatchScope.All,
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    ja3Fingerprint: {
                        fallbackBehavior: aws_native.wafv2.WebAclJa3FingerprintFallbackBehavior.Match,
                    },
                    jsonBody: {
                        matchPattern: {
                            all: "any",
                            includedPaths: ["string"],
                        },
                        matchScope: aws_native.wafv2.WebAclJsonMatchScope.All,
                        invalidFallbackBehavior: aws_native.wafv2.WebAclBodyParsingFallbackBehavior.Match,
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    method: "any",
                    queryString: "any",
                    singleHeader: {
                        name: "string",
                    },
                    singleQueryArgument: {
                        name: "string",
                    },
                    uriPath: "any",
                },
                size: 0,
                textTransformations: [{
                    priority: 0,
                    type: aws_native.wafv2.WebAclTextTransformationType.None,
                }],
            },
            sqliMatchStatement: {
                fieldToMatch: {
                    allQueryArguments: "any",
                    body: {
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    cookies: {
                        matchPattern: {
                            all: "any",
                            excludedCookies: ["string"],
                            includedCookies: ["string"],
                        },
                        matchScope: aws_native.wafv2.WebAclMapMatchScope.All,
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    headers: {
                        matchPattern: {
                            all: "any",
                            excludedHeaders: ["string"],
                            includedHeaders: ["string"],
                        },
                        matchScope: aws_native.wafv2.WebAclMapMatchScope.All,
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    ja3Fingerprint: {
                        fallbackBehavior: aws_native.wafv2.WebAclJa3FingerprintFallbackBehavior.Match,
                    },
                    jsonBody: {
                        matchPattern: {
                            all: "any",
                            includedPaths: ["string"],
                        },
                        matchScope: aws_native.wafv2.WebAclJsonMatchScope.All,
                        invalidFallbackBehavior: aws_native.wafv2.WebAclBodyParsingFallbackBehavior.Match,
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    method: "any",
                    queryString: "any",
                    singleHeader: {
                        name: "string",
                    },
                    singleQueryArgument: {
                        name: "string",
                    },
                    uriPath: "any",
                },
                textTransformations: [{
                    priority: 0,
                    type: aws_native.wafv2.WebAclTextTransformationType.None,
                }],
                sensitivityLevel: aws_native.wafv2.WebAclSensitivityLevel.Low,
            },
            xssMatchStatement: {
                fieldToMatch: {
                    allQueryArguments: "any",
                    body: {
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    cookies: {
                        matchPattern: {
                            all: "any",
                            excludedCookies: ["string"],
                            includedCookies: ["string"],
                        },
                        matchScope: aws_native.wafv2.WebAclMapMatchScope.All,
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    headers: {
                        matchPattern: {
                            all: "any",
                            excludedHeaders: ["string"],
                            includedHeaders: ["string"],
                        },
                        matchScope: aws_native.wafv2.WebAclMapMatchScope.All,
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    ja3Fingerprint: {
                        fallbackBehavior: aws_native.wafv2.WebAclJa3FingerprintFallbackBehavior.Match,
                    },
                    jsonBody: {
                        matchPattern: {
                            all: "any",
                            includedPaths: ["string"],
                        },
                        matchScope: aws_native.wafv2.WebAclJsonMatchScope.All,
                        invalidFallbackBehavior: aws_native.wafv2.WebAclBodyParsingFallbackBehavior.Match,
                        oversizeHandling: aws_native.wafv2.WebAclOversizeHandling.Continue,
                    },
                    method: "any",
                    queryString: "any",
                    singleHeader: {
                        name: "string",
                    },
                    singleQueryArgument: {
                        name: "string",
                    },
                    uriPath: "any",
                },
                textTransformations: [{
                    priority: 0,
                    type: aws_native.wafv2.WebAclTextTransformationType.None,
                }],
            },
        },
        visibilityConfig: {
            cloudWatchMetricsEnabled: false,
            metricName: "string",
            sampledRequestsEnabled: false,
        },
        action: {
            allow: {
                customRequestHandling: {
                    insertHeaders: [{
                        name: "string",
                        value: "string",
                    }],
                },
            },
            block: {
                customResponse: {
                    responseCode: 0,
                    customResponseBodyKey: "string",
                    responseHeaders: [{
                        name: "string",
                        value: "string",
                    }],
                },
            },
            captcha: {
                customRequestHandling: {
                    insertHeaders: [{
                        name: "string",
                        value: "string",
                    }],
                },
            },
            challenge: {
                customRequestHandling: {
                    insertHeaders: [{
                        name: "string",
                        value: "string",
                    }],
                },
            },
            count: {
                customRequestHandling: {
                    insertHeaders: [{
                        name: "string",
                        value: "string",
                    }],
                },
            },
        },
        captchaConfig: {
            immunityTimeProperty: {
                immunityTime: 0,
            },
        },
        challengeConfig: {
            immunityTimeProperty: {
                immunityTime: 0,
            },
        },
        overrideAction: {
            count: "any",
            none: "any",
        },
        ruleLabels: [{
            name: "string",
        }],
    }],
    tags: [{
        key: "string",
        value: "string",
    }],
    tokenDomains: ["string"],
});

Coming soon!

WebAcl Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The WebAcl resource accepts the following input properties:

DefaultAction Pulumi.AwsNative.WaFv2.Inputs.WebAclDefaultAction
Scope Pulumi.AwsNative.WaFv2.WebAclScope
VisibilityConfig Pulumi.AwsNative.WaFv2.Inputs.WebAclVisibilityConfig
AssociationConfig Pulumi.AwsNative.WaFv2.Inputs.WebAclAssociationConfig
CaptchaConfig Pulumi.AwsNative.WaFv2.Inputs.WebAclCaptchaConfig
ChallengeConfig Pulumi.AwsNative.WaFv2.Inputs.WebAclChallengeConfig
CustomResponseBodies Dictionary<string, Pulumi.AwsNative.WaFv2.Inputs.WebAclCustomResponseBodyArgs>
Description string
Name string
Rules List<Pulumi.AwsNative.WaFv2.Inputs.WebAclRule>: Collection of Rules.
Tags List<Pulumi.AwsNative.Inputs.Tag>
TokenDomains List<string>

DefaultAction WebAclDefaultActionArgs
Scope WebAclScope
VisibilityConfig WebAclVisibilityConfigArgs
AssociationConfig WebAclAssociationConfigArgs
CaptchaConfig WebAclCaptchaConfigArgs
ChallengeConfig WebAclChallengeConfigArgs
CustomResponseBodies map[string]WebAclCustomResponseBodyArgs
Description string
Name string
Rules []WebAclRuleArgs: Collection of Rules.
Tags TagArgs
TokenDomains []string

defaultAction WebAclDefaultAction
scope WebAclScope
visibilityConfig WebAclVisibilityConfig
associationConfig WebAclAssociationConfig
captchaConfig WebAclCaptchaConfig
challengeConfig WebAclChallengeConfig
customResponseBodies Map<String,WebAclCustomResponseBodyArgs>
description String
name String
rules List<WebAclRule>: Collection of Rules.
tags List<Tag>
tokenDomains List<String>

defaultAction WebAclDefaultAction
scope WebAclScope
visibilityConfig WebAclVisibilityConfig
associationConfig WebAclAssociationConfig
captchaConfig WebAclCaptchaConfig
challengeConfig WebAclChallengeConfig
customResponseBodies {[key: string]: WebAclCustomResponseBodyArgs}
description string
name string
rules WebAclRule[]: Collection of Rules.
tags Tag[]
tokenDomains string[]

default_action WebAclDefaultActionArgs
scope WebAclScope
visibility_config WebAclVisibilityConfigArgs
association_config WebAclAssociationConfigArgs
captcha_config WebAclCaptchaConfigArgs
challenge_config WebAclChallengeConfigArgs
custom_response_bodies Mapping[str, WebAclCustomResponseBodyArgs]
description str
name str
rules Sequence[WebAclRuleArgs]: Collection of Rules.
tags Sequence[TagArgs]
token_domains Sequence[str]

defaultAction Property Map
scope "CLOUDFRONT" | "REGIONAL"
visibilityConfig Property Map
associationConfig Property Map
captchaConfig Property Map
challengeConfig Property Map
customResponseBodies Map<Property Map>
description String
name String
rules List<Property Map>: Collection of Rules.
tags List<Property Map>
tokenDomains List<String>

Outputs

All input properties are implicitly available as output properties. Additionally, the WebAcl resource produces the following output properties:

Arn string
AwsId string
Capacity int
Id string: The provider-assigned unique ID for this managed resource.
LabelNamespace string

Arn string
AwsId string
Capacity int
Id string: The provider-assigned unique ID for this managed resource.
LabelNamespace string

arn String
awsId String
capacity Integer
id String: The provider-assigned unique ID for this managed resource.
labelNamespace String

arn string
awsId string
capacity number
id string: The provider-assigned unique ID for this managed resource.
labelNamespace string

arn str
aws_id str
capacity int
id str: The provider-assigned unique ID for this managed resource.
label_namespace str

arn String
awsId String
capacity Number
id String: The provider-assigned unique ID for this managed resource.
labelNamespace String

Supporting Types

Tag, TagArgs

Key string: The key name of the tag
Value string: The value of the tag

Key string: The key name of the tag
Value string: The value of the tag

key String: The key name of the tag
value String: The value of the tag

key string: The key name of the tag
value string: The value of the tag

key str: The key name of the tag
value str: The value of the tag

key String: The key name of the tag
value String: The value of the tag

WebAclAllowAction, WebAclAllowActionArgs

CustomRequestHandling Pulumi.AwsNative.WaFv2.Inputs.WebAclCustomRequestHandling

CustomRequestHandling WebAclCustomRequestHandling

customRequestHandling WebAclCustomRequestHandling

customRequestHandling WebAclCustomRequestHandling

custom_request_handling WebAclCustomRequestHandling

customRequestHandling Property Map

WebAclAndStatement, WebAclAndStatementArgs

Statements List<Pulumi.AwsNative.WaFv2.Inputs.WebAclStatement>

Statements []WebAclStatement

statements List<WebAclStatement>

statements WebAclStatement[]

statements Sequence[WebAclStatement]

statements List<Property Map>

WebAclAssociationConfig, WebAclAssociationConfigArgs

RequestBody Dictionary<string, Pulumi.AwsNative.WaFv2.Inputs.WebAclRequestBodyAssociatedResourceTypeConfig>

RequestBody map[string]WebAclRequestBodyAssociatedResourceTypeConfig

requestBody Map<String,WebAclRequestBodyAssociatedResourceTypeConfig>

requestBody {[key: string]: WebAclRequestBodyAssociatedResourceTypeConfig}

request_body Mapping[str, WebAclRequestBodyAssociatedResourceTypeConfig]

requestBody Map<Property Map>

WebAclAwsManagedRulesAcfpRuleSet, WebAclAwsManagedRulesAcfpRuleSetArgs

CreationPath string
RegistrationPagePath string
RequestInspection Pulumi.AwsNative.WaFv2.Inputs.WebAclRequestInspectionAcfp
EnableRegexInPath bool
ResponseInspection Pulumi.AwsNative.WaFv2.Inputs.WebAclResponseInspection

CreationPath string
RegistrationPagePath string
RequestInspection WebAclRequestInspectionAcfp
EnableRegexInPath bool
ResponseInspection WebAclResponseInspection

creationPath String
registrationPagePath String
requestInspection WebAclRequestInspectionAcfp
enableRegexInPath Boolean
responseInspection WebAclResponseInspection

creationPath string
registrationPagePath string
requestInspection WebAclRequestInspectionAcfp
enableRegexInPath boolean
responseInspection WebAclResponseInspection

creation_path str
registration_page_path str
request_inspection WebAclRequestInspectionAcfp
enable_regex_in_path bool
response_inspection WebAclResponseInspection

creationPath String
registrationPagePath String
requestInspection Property Map
enableRegexInPath Boolean
responseInspection Property Map

WebAclAwsManagedRulesAtpRuleSet, WebAclAwsManagedRulesAtpRuleSetArgs

LoginPath string
EnableRegexInPath bool
RequestInspection Pulumi.AwsNative.WaFv2.Inputs.WebAclRequestInspection
ResponseInspection Pulumi.AwsNative.WaFv2.Inputs.WebAclResponseInspection

LoginPath string
EnableRegexInPath bool
RequestInspection WebAclRequestInspection
ResponseInspection WebAclResponseInspection

loginPath String
enableRegexInPath Boolean
requestInspection WebAclRequestInspection
responseInspection WebAclResponseInspection

loginPath string
enableRegexInPath boolean
requestInspection WebAclRequestInspection
responseInspection WebAclResponseInspection

login_path str
enable_regex_in_path bool
request_inspection WebAclRequestInspection
response_inspection WebAclResponseInspection

loginPath String
enableRegexInPath Boolean
requestInspection Property Map
responseInspection Property Map

WebAclAwsManagedRulesBotControlRuleSet, WebAclAwsManagedRulesBotControlRuleSetArgs

InspectionLevel Pulumi.AwsNative.WaFv2.WebAclAwsManagedRulesBotControlRuleSetInspectionLevel
EnableMachineLearning bool

InspectionLevel WebAclAwsManagedRulesBotControlRuleSetInspectionLevel
EnableMachineLearning bool

inspectionLevel WebAclAwsManagedRulesBotControlRuleSetInspectionLevel
enableMachineLearning Boolean

inspectionLevel WebAclAwsManagedRulesBotControlRuleSetInspectionLevel
enableMachineLearning boolean

inspection_level WebAclAwsManagedRulesBotControlRuleSetInspectionLevel
enable_machine_learning bool

inspectionLevel "COMMON" | "TARGETED"
enableMachineLearning Boolean

WebAclAwsManagedRulesBotControlRuleSetInspectionLevel, WebAclAwsManagedRulesBotControlRuleSetInspectionLevelArgs

Common: COMMON
Targeted: TARGETED

WebAclAwsManagedRulesBotControlRuleSetInspectionLevelCommon: COMMON
WebAclAwsManagedRulesBotControlRuleSetInspectionLevelTargeted: TARGETED

Common: COMMON
Targeted: TARGETED

Common: COMMON
Targeted: TARGETED

COMMON: COMMON
TARGETED: TARGETED

"COMMON": COMMON
"TARGETED": TARGETED

WebAclBlockAction, WebAclBlockActionArgs

CustomResponse Pulumi.AwsNative.WaFv2.Inputs.WebAclCustomResponse

CustomResponse WebAclCustomResponse

customResponse WebAclCustomResponse

customResponse WebAclCustomResponse

custom_response WebAclCustomResponse

customResponse Property Map

WebAclBody, WebAclBodyArgs

OversizeHandling Pulumi.AwsNative.WaFv2.WebAclOversizeHandling

OversizeHandling WebAclOversizeHandling

oversizeHandling WebAclOversizeHandling

oversizeHandling WebAclOversizeHandling

oversize_handling WebAclOversizeHandling

oversizeHandling "CONTINUE" | "MATCH" | "NO_MATCH"

WebAclBodyParsingFallbackBehavior, WebAclBodyParsingFallbackBehaviorArgs

Match: MATCH
NoMatch: NO_MATCH
EvaluateAsString: EVALUATE_AS_STRING

WebAclBodyParsingFallbackBehaviorMatch: MATCH
WebAclBodyParsingFallbackBehaviorNoMatch: NO_MATCH
WebAclBodyParsingFallbackBehaviorEvaluateAsString: EVALUATE_AS_STRING

Match: MATCH
NoMatch: NO_MATCH
EvaluateAsString: EVALUATE_AS_STRING

Match: MATCH
NoMatch: NO_MATCH
EvaluateAsString: EVALUATE_AS_STRING

MATCH: MATCH
NO_MATCH: NO_MATCH
EVALUATE_AS_STRING: EVALUATE_AS_STRING

"MATCH": MATCH
"NO_MATCH": NO_MATCH
"EVALUATE_AS_STRING": EVALUATE_AS_STRING

WebAclCookieMatchPattern, WebAclCookieMatchPatternArgs

All object: Inspect all parts of the web request cookies.
ExcludedCookies List<string>
IncludedCookies List<string>

All interface{}: Inspect all parts of the web request cookies.
ExcludedCookies []string
IncludedCookies []string

all Object: Inspect all parts of the web request cookies.
excludedCookies List<String>
includedCookies List<String>

all any: Inspect all parts of the web request cookies.
excludedCookies string[]
includedCookies string[]

all Any: Inspect all parts of the web request cookies.
excluded_cookies Sequence[str]
included_cookies Sequence[str]

all Any: Inspect all parts of the web request cookies.
excludedCookies List<String>
includedCookies List<String>

WebAclCookies, WebAclCookiesArgs

MatchPattern Pulumi.AwsNative.WaFv2.Inputs.WebAclCookieMatchPattern
MatchScope Pulumi.AwsNative.WaFv2.WebAclMapMatchScope
OversizeHandling Pulumi.AwsNative.WaFv2.WebAclOversizeHandling

MatchPattern WebAclCookieMatchPattern
MatchScope WebAclMapMatchScope
OversizeHandling WebAclOversizeHandling

matchPattern WebAclCookieMatchPattern
matchScope WebAclMapMatchScope
oversizeHandling WebAclOversizeHandling

matchPattern WebAclCookieMatchPattern
matchScope WebAclMapMatchScope
oversizeHandling WebAclOversizeHandling

match_pattern WebAclCookieMatchPattern
match_scope WebAclMapMatchScope
oversize_handling WebAclOversizeHandling

matchPattern Property Map
matchScope "ALL" | "KEY" | "VALUE"
oversizeHandling "CONTINUE" | "MATCH" | "NO_MATCH"

WebAclCountAction, WebAclCountActionArgs

CustomRequestHandling Pulumi.AwsNative.WaFv2.Inputs.WebAclCustomRequestHandling

CustomRequestHandling WebAclCustomRequestHandling

customRequestHandling WebAclCustomRequestHandling

customRequestHandling WebAclCustomRequestHandling

custom_request_handling WebAclCustomRequestHandling

customRequestHandling Property Map

WebAclCustomHttpHeader, WebAclCustomHttpHeaderArgs

Name string
Value string

Name string
Value string

name String
value String

name string
value string

name str
value str

name String
value String

WebAclCustomRequestHandling, WebAclCustomRequestHandlingArgs

InsertHeaders List<Pulumi.AwsNative.WaFv2.Inputs.WebAclCustomHttpHeader>: Collection of HTTP headers.

InsertHeaders []WebAclCustomHttpHeader: Collection of HTTP headers.

insertHeaders List<WebAclCustomHttpHeader>: Collection of HTTP headers.

insertHeaders WebAclCustomHttpHeader[]: Collection of HTTP headers.

insert_headers Sequence[WebAclCustomHttpHeader]: Collection of HTTP headers.

insertHeaders List<Property Map>: Collection of HTTP headers.

WebAclCustomResponse, WebAclCustomResponseArgs

ResponseCode int
CustomResponseBodyKey string: Custom response body key.
ResponseHeaders List<Pulumi.AwsNative.WaFv2.Inputs.WebAclCustomHttpHeader>: Collection of HTTP headers.

ResponseCode int
CustomResponseBodyKey string: Custom response body key.
ResponseHeaders []WebAclCustomHttpHeader: Collection of HTTP headers.

responseCode Integer
customResponseBodyKey String: Custom response body key.
responseHeaders List<WebAclCustomHttpHeader>: Collection of HTTP headers.

responseCode number
customResponseBodyKey string: Custom response body key.
responseHeaders WebAclCustomHttpHeader[]: Collection of HTTP headers.

response_code int
custom_response_body_key str: Custom response body key.
response_headers Sequence[WebAclCustomHttpHeader]: Collection of HTTP headers.

responseCode Number
customResponseBodyKey String: Custom response body key.
responseHeaders List<Property Map>: Collection of HTTP headers.

WebAclCustomResponseBody, WebAclCustomResponseBodyArgs

Content string
ContentType Pulumi.AwsNative.WaFv2.WebAclResponseContentType

Content string
ContentType WebAclResponseContentType

content String
contentType WebAclResponseContentType

content string
contentType WebAclResponseContentType

content str
content_type WebAclResponseContentType

content String
contentType "TEXT_PLAIN" | "TEXT_HTML" | "APPLICATION_JSON"

WebAclDefaultAction, WebAclDefaultActionArgs

Allow Pulumi.AwsNative.WaFv2.Inputs.WebAclAllowAction
Block Pulumi.AwsNative.WaFv2.Inputs.WebAclBlockAction

Allow WebAclAllowAction
Block WebAclBlockAction

allow WebAclAllowAction
block WebAclBlockAction

allow WebAclAllowAction
block WebAclBlockAction

allow WebAclAllowAction
block WebAclBlockAction

allow Property Map
block Property Map

WebAclExcludedRule, WebAclExcludedRuleArgs

Name string

Name string

name String

name string

name str

name String

WebAclFieldIdentifier, WebAclFieldIdentifierArgs

Identifier string

Identifier string

identifier String

identifier string

identifier str

identifier String

WebAclFieldToMatch, WebAclFieldToMatchArgs

AllQueryArguments object: All query arguments of a web request.
Body Pulumi.AwsNative.WaFv2.Inputs.WebAclBody
Cookies Pulumi.AwsNative.WaFv2.Inputs.WebAclCookies
Headers Pulumi.AwsNative.WaFv2.Inputs.WebAclHeaders
Ja3Fingerprint Pulumi.AwsNative.WaFv2.Inputs.WebAclJa3Fingerprint
JsonBody Pulumi.AwsNative.WaFv2.Inputs.WebAclJsonBody
Method object: The HTTP method of a web request. The method indicates the type of operation that the request is asking the origin to perform.
QueryString object: The query string of a web request. This is the part of a URL that appears after a ? character, if any.
SingleHeader Pulumi.AwsNative.WaFv2.Inputs.WebAclFieldToMatchSingleHeaderProperties
SingleQueryArgument Pulumi.AwsNative.WaFv2.Inputs.WebAclFieldToMatchSingleQueryArgumentProperties: One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.
UriPath object: The path component of the URI of a web request. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

AllQueryArguments interface{}: All query arguments of a web request.
Body WebAclBody
Cookies WebAclCookies
Headers WebAclHeaders
Ja3Fingerprint WebAclJa3Fingerprint
JsonBody WebAclJsonBody
Method interface{}: The HTTP method of a web request. The method indicates the type of operation that the request is asking the origin to perform.
QueryString interface{}: The query string of a web request. This is the part of a URL that appears after a ? character, if any.
SingleHeader WebAclFieldToMatchSingleHeaderProperties
SingleQueryArgument WebAclFieldToMatchSingleQueryArgumentProperties: One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.
UriPath interface{}: The path component of the URI of a web request. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

allQueryArguments Object: All query arguments of a web request.
body WebAclBody
cookies WebAclCookies
headers WebAclHeaders
ja3Fingerprint WebAclJa3Fingerprint
jsonBody WebAclJsonBody
method Object: The HTTP method of a web request. The method indicates the type of operation that the request is asking the origin to perform.
queryString Object: The query string of a web request. This is the part of a URL that appears after a ? character, if any.
singleHeader WebAclFieldToMatchSingleHeaderProperties
singleQueryArgument WebAclFieldToMatchSingleQueryArgumentProperties: One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.
uriPath Object: The path component of the URI of a web request. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

allQueryArguments any: All query arguments of a web request.
body WebAclBody
cookies WebAclCookies
headers WebAclHeaders
ja3Fingerprint WebAclJa3Fingerprint
jsonBody WebAclJsonBody
method any: The HTTP method of a web request. The method indicates the type of operation that the request is asking the origin to perform.
queryString any: The query string of a web request. This is the part of a URL that appears after a ? character, if any.
singleHeader WebAclFieldToMatchSingleHeaderProperties
singleQueryArgument WebAclFieldToMatchSingleQueryArgumentProperties: One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.
uriPath any: The path component of the URI of a web request. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

all_query_arguments Any: All query arguments of a web request.
body WebAclBody
cookies WebAclCookies
headers WebAclHeaders
ja3_fingerprint WebAclJa3Fingerprint
json_body WebAclJsonBody
method Any: The HTTP method of a web request. The method indicates the type of operation that the request is asking the origin to perform.
query_string Any: The query string of a web request. This is the part of a URL that appears after a ? character, if any.
single_header WebAclFieldToMatchSingleHeaderProperties
single_query_argument WebAclFieldToMatchSingleQueryArgumentProperties: One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.
uri_path Any: The path component of the URI of a web request. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

allQueryArguments Any: All query arguments of a web request.
body Property Map
cookies Property Map
headers Property Map
ja3Fingerprint Property Map
jsonBody Property Map
method Any: The HTTP method of a web request. The method indicates the type of operation that the request is asking the origin to perform.
queryString Any: The query string of a web request. This is the part of a URL that appears after a ? character, if any.
singleHeader Property Map
singleQueryArgument Property Map: One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.
uriPath Any: The path component of the URI of a web request. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.