| Class | Description |
|---|---|
| ActionCondition |
A single action condition for a Condition in a logging filter.
|
| All |
Inspect all of the elements that WAF has parsed and extracted from the web request JSON body that are within the
JsonBody
MatchScope. |
| AllowAction |
Specifies that WAF should allow the request and optionally defines additional custom handling for the request.
|
| AllQueryArguments |
All query arguments of a web request.
|
| AndStatement |
A logical rule statement used to combine other rule statements with AND logic.
|
| AssociateWebAclRequest | |
| AssociateWebAclResponse | |
| BlockAction |
Specifies that WAF should block the request and optionally defines additional custom handling for the response to the
web request.
|
| Body |
The body of a web request.
|
| ByteMatchStatement |
A rule statement that defines a string match search for WAF to apply to web requests.
|
| CheckCapacityRequest | |
| CheckCapacityResponse | |
| Condition |
A single match condition for a Filter.
|
| CountAction |
Specifies that WAF should count the request.
|
| CreateIpSetRequest | |
| CreateIpSetResponse | |
| CreateRegexPatternSetRequest | |
| CreateRegexPatternSetResponse | |
| CreateRuleGroupRequest | |
| CreateRuleGroupResponse | |
| CreateWebAclRequest | |
| CreateWebAclResponse | |
| CustomHTTPHeader |
A custom header for custom request and response handling.
|
| CustomRequestHandling |
Custom request handling behavior that inserts custom headers into a web request.
|
| CustomResponse |
A custom response to send to the client.
|
| CustomResponseBody |
The response body to use in a custom response to a web request.
|
| DefaultAction |
In a WebACL, this is the action that you want WAF to perform when a web request doesn't match any of the rules
in the
WebACL. |
| DeleteFirewallManagerRuleGroupsRequest | |
| DeleteFirewallManagerRuleGroupsResponse | |
| DeleteIpSetRequest | |
| DeleteIpSetResponse | |
| DeleteLoggingConfigurationRequest | |
| DeleteLoggingConfigurationResponse | |
| DeletePermissionPolicyRequest | |
| DeletePermissionPolicyResponse | |
| DeleteRegexPatternSetRequest | |
| DeleteRegexPatternSetResponse | |
| DeleteRuleGroupRequest | |
| DeleteRuleGroupResponse | |
| DeleteWebAclRequest | |
| DeleteWebAclResponse | |
| DescribeManagedRuleGroupRequest | |
| DescribeManagedRuleGroupResponse | |
| DisassociateWebAclRequest | |
| DisassociateWebAclResponse | |
| ExcludedRule |
Specifies a single rule to exclude from the rule group.
|
| FieldToMatch |
The part of a web request that you want WAF to inspect.
|
| Filter |
A single logging filter, used in LoggingFilter.
|
| FirewallManagerRuleGroup |
A rule group that's defined for an Firewall Manager WAF policy.
|
| FirewallManagerStatement |
The processing guidance for an Firewall Manager rule.
|
| ForwardedIPConfig |
The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address
that's reported by the web request origin.
|
| GeoMatchStatement |
A rule statement used to identify web requests based on country of origin.
|
| GetIpSetRequest | |
| GetIpSetResponse | |
| GetLoggingConfigurationRequest | |
| GetLoggingConfigurationResponse | |
| GetManagedRuleSetRequest | |
| GetManagedRuleSetResponse | |
| GetPermissionPolicyRequest | |
| GetPermissionPolicyResponse | |
| GetRateBasedStatementManagedKeysRequest | |
| GetRateBasedStatementManagedKeysResponse | |
| GetRegexPatternSetRequest | |
| GetRegexPatternSetResponse | |
| GetRuleGroupRequest | |
| GetRuleGroupResponse | |
| GetSampledRequestsRequest | |
| GetSampledRequestsResponse | |
| GetWebAclForResourceRequest | |
| GetWebAclForResourceResponse | |
| GetWebAclRequest | |
| GetWebAclResponse | |
| HTTPHeader |
Part of the response from GetSampledRequests.
|
| HTTPRequest |
Part of the response from GetSampledRequests.
|
| IPSet |
Contains one or more IP addresses or blocks of IP addresses specified in Classless Inter-Domain Routing (CIDR)
notation.
|
| IPSetForwardedIPConfig |
The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address
that's reported by the web request origin.
|
| IPSetReferenceStatement |
A rule statement used to detect web requests coming from particular IP addresses or address ranges.
|
| IPSetSummary |
High-level information about an IPSet, returned by operations like create and list.
|
| JsonBody |
The body of a web request, inspected as JSON.
|
| JsonMatchPattern |
The patterns to look for in the JSON body.
|
| Label |
A single label container.
|
| LabelMatchStatement |
A rule statement that defines a string match search against labels that have been added to the web request by rules
that have already run in the web ACL.
|
| LabelNameCondition |
A single label name condition for a Condition in a logging filter.
|
| LabelSummary |
List of labels used by one or more of the rules of a RuleGroup.
|
| ListAvailableManagedRuleGroupsRequest | |
| ListAvailableManagedRuleGroupsResponse | |
| ListAvailableManagedRuleGroupVersionsRequest | |
| ListAvailableManagedRuleGroupVersionsResponse | |
| ListIpSetsRequest | |
| ListIpSetsResponse | |
| ListLoggingConfigurationsRequest | |
| ListLoggingConfigurationsResponse | |
| ListManagedRuleSetsRequest | |
| ListManagedRuleSetsResponse | |
| ListRegexPatternSetsRequest | |
| ListRegexPatternSetsResponse | |
| ListResourcesForWebAclRequest | |
| ListResourcesForWebAclResponse | |
| ListRuleGroupsRequest | |
| ListRuleGroupsResponse | |
| ListTagsForResourceRequest | |
| ListTagsForResourceResponse | |
| ListWebAcLsRequest | |
| ListWebAcLsResponse | |
| LoggingConfiguration |
Defines an association between Amazon Kinesis Data Firehose destinations and a web ACL resource, for logging from
WAF.
|
| LoggingFilter |
Filtering that specifies which web requests are kept in the logs and which are dropped, defined for a web ACL's
LoggingConfiguration.
|
| ManagedRuleGroupStatement |
A rule statement used to run the rules that are defined in a managed rule group.
|
| ManagedRuleGroupSummary |
High-level information about a managed rule group, returned by ListAvailableManagedRuleGroups.
|
| ManagedRuleGroupVersion |
Describes a single version of a managed rule group.
|
| ManagedRuleSet |
A set of rules that is managed by Amazon Web Services and Amazon Web Services Marketplace sellers to provide
versioned managed rule groups for customers of WAF.
|
| ManagedRuleSetSummary |
High-level information for a managed rule set.
|
| ManagedRuleSetVersion |
Information for a single version of a managed rule set.
|
| Method |
The HTTP method of a web request.
|
| NoneAction |
Specifies that WAF should do nothing.
|
| NotStatement |
A logical rule statement used to negate the results of another rule statement.
|
| OrStatement |
A logical rule statement used to combine other rule statements with OR logic.
|
| OverrideAction |
The override action to apply to the rules in a rule group.
|
| PutLoggingConfigurationRequest | |
| PutLoggingConfigurationResponse | |
| PutManagedRuleSetVersionsRequest | |
| PutManagedRuleSetVersionsResponse | |
| PutPermissionPolicyRequest | |
| PutPermissionPolicyResponse | |
| QueryString |
The query string of a web request.
|
| RateBasedStatement |
A rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the
rate exceeds a limit that you specify on the number of requests in any 5-minute time span.
|
| RateBasedStatementManagedKeysIPSet |
The set of IP addresses that are currently blocked for a RateBasedStatement.
|
| Regex |
A single regular expression.
|
| RegexPatternSet |
Contains one or more regular expressions.
|
| RegexPatternSetReferenceStatement |
A rule statement used to search web request components for matches with regular expressions.
|
| RegexPatternSetSummary |
High-level information about a RegexPatternSet, returned by operations like create and list.
|
| Rule | |
| RuleAction |
The action that WAF should take on a web request when it matches a rule's statement.
|
| RuleGroup |
A rule group defines a collection of rules to inspect and control web requests that you can use in a WebACL.
|
| RuleGroupReferenceStatement |
A rule statement used to run the rules that are defined in a RuleGroup.
|
| RuleGroupSummary |
High-level information about a RuleGroup, returned by operations like create and list.
|
| RuleSummary |
High-level information about a Rule, returned by operations like DescribeManagedRuleGroup.
|
| SampledHTTPRequest |
Represents a single sampled web request.
|
| SingleHeader |
One of the headers in a web request, identified by name, for example,
User-Agent or Referer
. |
| SingleQueryArgument |
One query argument in a web request, identified by name, for example UserName or SalesRegion.
|
| SizeConstraintStatement |
A rule statement that compares a number of bytes against the size of a request component, using a comparison
operator, such as greater than (>) or less than (<).
|
| SqliMatchStatement |
Attackers sometimes insert malicious SQL code into web requests in an effort to extract data from your database.
|
| Statement |
The processing guidance for a Rule, used by WAF to determine whether a web request matches the rule.
|
| Tag |
A tag associated with an Amazon Web Services resource.
|
| TagInfoForResource |
The collection of tagging definitions for an Amazon Web Services resource.
|
| TagResourceRequest | |
| TagResourceResponse | |
| TextTransformation |
Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to
bypass detection.
|
| TimeWindow |
In a GetSampledRequests request, the
StartTime and EndTime objects specify the time
range for which you want WAF to return a sample of web requests. |
| UntagResourceRequest | |
| UntagResourceResponse | |
| UpdateIpSetRequest | |
| UpdateIpSetResponse | |
| UpdateManagedRuleSetVersionExpiryDateRequest | |
| UpdateManagedRuleSetVersionExpiryDateResponse | |
| UpdateRegexPatternSetRequest | |
| UpdateRegexPatternSetResponse | |
| UpdateRuleGroupRequest | |
| UpdateRuleGroupResponse | |
| UpdateWebAclRequest | |
| UpdateWebAclResponse | |
| UriPath |
The path component of the URI of a web request.
|
| VersionToPublish |
A version of the named managed rule group, that the rule group's vendor publishes for use by customers.
|
| VisibilityConfig |
Defines and enables Amazon CloudWatch metrics and web request sample collection.
|
| Wafv2Request | |
| Wafv2Response | |
| Wafv2ResponseMetadata | |
| WebACL |
A web ACL defines a collection of rules to use to inspect and control web requests.
|
| WebACLSummary |
High-level information about a WebACL, returned by operations like create and list.
|
| XssMatchStatement |
A rule statement that defines a cross-site scripting (XSS) match search for WAF to apply to web requests.
|
| Exception | Description |
|---|---|
| WafAssociatedItemException |
WAF couldn’t perform the operation because your resource is being used by another resource or it’s associated with
another resource.
|
| WafDuplicateItemException |
WAF couldn’t perform the operation because the resource that you tried to save is a duplicate of an existing one.
|
| WafExpiredManagedRuleGroupVersionException |
The operation failed because the specified version for the managed rule group has expired.
|
| WafInternalErrorException |
Your request is valid, but WAF couldn’t perform the operation because of a system problem.
|
| WafInvalidOperationException |
The operation isn't valid.
|
| WafInvalidParameterException |
The operation failed because WAF didn't recognize a parameter in the request.
|
| WafInvalidPermissionPolicyException |
The operation failed because the specified policy isn't in the proper format.
|
| WafInvalidResourceException |
WAF couldn’t perform the operation because the resource that you requested isn’t valid.
|
| WafLimitsExceededException |
WAF couldn’t perform the operation because you exceeded your resource limit.
|
| WafNonexistentItemException |
WAF couldn’t perform the operation because your resource doesn’t exist.
|
| WafOptimisticLockException |
WAF couldn’t save your changes because you tried to update or delete a resource that has changed since you last
retrieved it.
|
| WafServiceLinkedRoleErrorException |
WAF is not able to access the service linked role.
|
| WafSubscriptionNotFoundException |
You tried to use a managed rule group that's available by subscription, but you aren't subscribed to it yet.
|
| WafTagOperationException |
An error occurred during the tagging operation.
|
| WafTagOperationInternalErrorException |
WAF couldn’t perform your tagging operation because of an internal error.
|
| WafUnavailableEntityException |
WAF couldn’t retrieve the resource that you requested.
|
| Wafv2Exception |