pulumi-aws-native-kotlin/com.pulumi.awsnative.wafv2.kotlin.outputs

Package-level declarations

Types

data class GetIpSetResult(val addresses: List<String>? = null, val arn: String? = null, val description: String? = null, val id: String? = null, val ipAddressVersion: IpSetIpAddressVersion? = null, val tags: List<Tag>? = null)

GetLoggingConfigurationResult

data class GetLoggingConfigurationResult(val logDestinationConfigs: List<String>? = null, val loggingFilter: LoggingFilterProperties? = null, val managedByFirewallManager: Boolean? = null, val redactedFields: List<LoggingConfigurationFieldToMatch>? = null)

GetRegexPatternSetResult

data class GetRegexPatternSetResult(val arn: String? = null, val description: String? = null, val id: String? = null, val regularExpressionList: List<String>? = null, val tags: List<Tag>? = null)

GetRuleGroupResult

data class GetRuleGroupResult(val arn: String? = null, val availableLabels: List<RuleGroupLabelSummary>? = null, val capacity: Int? = null, val consumedLabels: List<RuleGroupLabelSummary>? = null, val customResponseBodies: Map<String, RuleGroupCustomResponseBody>? = null, val description: String? = null, val id: String? = null, val labelNamespace: String? = null, val rules: List<RuleGroupRule>? = null, val tags: List<Tag>? = null, val visibilityConfig: RuleGroupVisibilityConfig? = null)

GetWebAclResult

data class GetWebAclResult(val arn: String? = null, val associationConfig: WebAclAssociationConfig? = null, val capacity: Int? = null, val captchaConfig: WebAclCaptchaConfig? = null, val challengeConfig: WebAclChallengeConfig? = null, val customResponseBodies: Map<String, WebAclCustomResponseBody>? = null, val defaultAction: WebAclDefaultAction? = null, val description: String? = null, val id: String? = null, val labelNamespace: String? = null, val rules: List<WebAclRule>? = null, val tags: List<Tag>? = null, val tokenDomains: List<String>? = null, val visibilityConfig: WebAclVisibilityConfig? = null)

LoggingConfigurationCondition

data class LoggingConfigurationCondition(val actionCondition: LoggingConfigurationConditionActionConditionProperties? = null, val labelNameCondition: LoggingConfigurationConditionLabelNameConditionProperties? = null)

LoggingConfigurationConditionActionConditionProperties

data class LoggingConfigurationConditionActionConditionProperties(val action: LoggingConfigurationConditionActionConditionPropertiesAction)

A single action condition.

LoggingConfigurationConditionLabelNameConditionProperties

data class LoggingConfigurationConditionLabelNameConditionProperties(val labelName: String)

A single label name condition.

LoggingConfigurationFieldToMatch

data class LoggingConfigurationFieldToMatch(val method: Any? = null, val queryString: Any? = null, val singleHeader: LoggingConfigurationFieldToMatchSingleHeaderProperties? = null, val uriPath: Any? = null)

A key-value pair to associate with a resource.

LoggingConfigurationFieldToMatchSingleHeaderProperties

data class LoggingConfigurationFieldToMatchSingleHeaderProperties(val name: String)

Inspect a single header. Provide the name of the header to inspect, for example, User-Agent or Referer. This setting isn't case sensitive.

LoggingConfigurationFilter

data class LoggingConfigurationFilter(val behavior: LoggingConfigurationFilterBehavior, val conditions: List<LoggingConfigurationCondition>, val requirement: LoggingConfigurationFilterRequirement)

LoggingFilterProperties

data class LoggingFilterProperties(val defaultBehavior: LoggingConfigurationLoggingFilterPropertiesDefaultBehavior, val filters: List<LoggingConfigurationFilter>)

Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation.

RuleGroupAllowAction

data class RuleGroupAllowAction(val customRequestHandling: RuleGroupCustomRequestHandling? = null)

Allow traffic towards application.

RuleGroupAndStatement

data class RuleGroupAndStatement(val statements: List<RuleGroupStatement>)

RuleGroupBlockAction

data class RuleGroupBlockAction(val customResponse: RuleGroupCustomResponse? = null)

Block traffic towards application.

RuleGroupBody

data class RuleGroupBody(val oversizeHandling: RuleGroupOversizeHandling? = null)

The body of a web request. This immediately follows the request headers.

RuleGroupByteMatchStatement

data class RuleGroupByteMatchStatement(val fieldToMatch: RuleGroupFieldToMatch, val positionalConstraint: RuleGroupPositionalConstraint, val searchString: String? = null, val searchStringBase64: String? = null, val textTransformations: List<RuleGroupTextTransformation>)

Byte Match statement.

RuleGroupCaptchaAction

data class RuleGroupCaptchaAction(val customRequestHandling: RuleGroupCustomRequestHandling? = null)

Checks valid token exists with request.

RuleGroupCaptchaConfig

data class RuleGroupCaptchaConfig(val immunityTimeProperty: RuleGroupImmunityTimeProperty? = null)

RuleGroupChallengeAction

data class RuleGroupChallengeAction(val customRequestHandling: RuleGroupCustomRequestHandling? = null)

Checks that the request has a valid token with an unexpired challenge timestamp and, if not, returns a browser challenge to the client.

RuleGroupChallengeConfig

data class RuleGroupChallengeConfig(val immunityTimeProperty: RuleGroupImmunityTimeProperty? = null)

RuleGroupCookieMatchPattern

data class RuleGroupCookieMatchPattern(val all: Any? = null, val excludedCookies: List<String>? = null, val includedCookies: List<String>? = null)

The pattern to look for in the request cookies.

RuleGroupCookies

data class RuleGroupCookies(val matchPattern: RuleGroupCookieMatchPattern, val matchScope: RuleGroupMapMatchScope, val oversizeHandling: RuleGroupOversizeHandling)

Includes cookies of a web request.

RuleGroupCountAction

data class RuleGroupCountAction(val customRequestHandling: RuleGroupCustomRequestHandling? = null)

Count traffic towards application.

RuleGroupCustomHttpHeader

data class RuleGroupCustomHttpHeader(val name: String, val value: String)

HTTP header.

RuleGroupCustomRequestHandling

data class RuleGroupCustomRequestHandling(val insertHeaders: List<RuleGroupCustomHttpHeader>)

Custom request handling.

RuleGroupCustomResponse

data class RuleGroupCustomResponse(val customResponseBodyKey: String? = null, val responseCode: Int, val responseHeaders: List<RuleGroupCustomHttpHeader>? = null)

Custom response.

RuleGroupCustomResponseBody

data class RuleGroupCustomResponseBody(val content: String, val contentType: RuleGroupResponseContentType)

Custom response body.

RuleGroupFieldToMatch

data class RuleGroupFieldToMatch(val allQueryArguments: Any? = null, val body: RuleGroupBody? = null, val cookies: RuleGroupCookies? = null, val headers: RuleGroupHeaders? = null, val ja3Fingerprint: RuleGroupJa3Fingerprint? = null, val jsonBody: RuleGroupJsonBody? = null, val method: Any? = null, val queryString: Any? = null, val singleHeader: RuleGroupFieldToMatchSingleHeaderProperties? = null, val singleQueryArgument: RuleGroupFieldToMatchSingleQueryArgumentProperties? = null, val uriPath: Any? = null)

Field of the request to match.

RuleGroupFieldToMatchSingleHeaderProperties

data class RuleGroupFieldToMatchSingleHeaderProperties(val name: String)

Inspect a single header. Provide the name of the header to inspect, for example, User-Agent or Referer . This setting isn't case sensitive. Example JSON: "SingleHeader": { "Name": "haystack" } Alternately, you can filter and inspect all headers with the Headers FieldToMatch setting.

RuleGroupFieldToMatchSingleQueryArgumentProperties

data class RuleGroupFieldToMatchSingleQueryArgumentProperties(val name: String)

One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.

RuleGroupForwardedIpConfiguration

data class RuleGroupForwardedIpConfiguration(val fallbackBehavior: RuleGroupForwardedIpConfigurationFallbackBehavior, val headerName: String)

RuleGroupGeoMatchStatement

data class RuleGroupGeoMatchStatement(val countryCodes: List<String>? = null, val forwardedIpConfig: RuleGroupForwardedIpConfiguration? = null)

RuleGroupHeaderMatchPattern

data class RuleGroupHeaderMatchPattern(val all: Any? = null, val excludedHeaders: List<String>? = null, val includedHeaders: List<String>? = null)

The pattern to look for in the request headers.

RuleGroupHeaders

data class RuleGroupHeaders(val matchPattern: RuleGroupHeaderMatchPattern, val matchScope: RuleGroupMapMatchScope, val oversizeHandling: RuleGroupOversizeHandling)

Includes headers of a web request.

RuleGroupImmunityTimeProperty

data class RuleGroupImmunityTimeProperty(val immunityTime: Int)

RuleGroupIpSetForwardedIpConfiguration

data class RuleGroupIpSetForwardedIpConfiguration(val fallbackBehavior: RuleGroupIpSetForwardedIpConfigurationFallbackBehavior, val headerName: String, val position: RuleGroupIpSetForwardedIpConfigurationPosition)

RuleGroupIpSetReferenceStatement

data class RuleGroupIpSetReferenceStatement(val arn: String, val ipSetForwardedIpConfig: RuleGroupIpSetForwardedIpConfiguration? = null)

RuleGroupJa3Fingerprint

data class RuleGroupJa3Fingerprint(val fallbackBehavior: RuleGroupJa3FingerprintFallbackBehavior)

Includes the JA3 fingerprint of a web request.

RuleGroupJsonBody

data class RuleGroupJsonBody(val invalidFallbackBehavior: RuleGroupBodyParsingFallbackBehavior? = null, val matchPattern: RuleGroupJsonMatchPattern, val matchScope: RuleGroupJsonMatchScope, val oversizeHandling: RuleGroupOversizeHandling? = null)

Inspect the request body as JSON. The request body immediately follows the request headers.

RuleGroupJsonMatchPattern

data class RuleGroupJsonMatchPattern(val all: Any? = null, val includedPaths: List<String>? = null)

The pattern to look for in the JSON body.

RuleGroupLabel

data class RuleGroupLabel(val name: String)

RuleGroupLabelMatchStatement

data class RuleGroupLabelMatchStatement(val key: String, val scope: RuleGroupLabelMatchScope)

RuleGroupLabelSummary

data class RuleGroupLabelSummary(val name: String? = null)

RuleGroupNotStatement

data class RuleGroupNotStatement(val statement: RuleGroupStatement)

RuleGroupOrStatement

data class RuleGroupOrStatement(val statements: List<RuleGroupStatement>)

RuleGroupRateBasedStatement

data class RuleGroupRateBasedStatement(val aggregateKeyType: RuleGroupRateBasedStatementAggregateKeyType, val customKeys: List<RuleGroupRateBasedStatementCustomKey>? = null, val evaluationWindowSec: Int? = null, val forwardedIpConfig: RuleGroupForwardedIpConfiguration? = null, val limit: Int, val scopeDownStatement: RuleGroupStatement? = null)

RuleGroupRateBasedStatementCustomKey

Specifies a single custom aggregate key for a rate-base rule.

RuleGroupRateLimitCookie

data class RuleGroupRateLimitCookie(val name: String, val textTransformations: List<RuleGroupTextTransformation>)

Specifies a cookie as an aggregate key for a rate-based rule.

RuleGroupRateLimitForwardedIp

class RuleGroupRateLimitForwardedIp

Specifies the first IP address in an HTTP header as an aggregate key for a rate-based rule.

RuleGroupRateLimitHeader

data class RuleGroupRateLimitHeader(val name: String, val textTransformations: List<RuleGroupTextTransformation>)

Specifies a header as an aggregate key for a rate-based rule.

RuleGroupRateLimitHttpMethod

class RuleGroupRateLimitHttpMethod

Specifies the request's HTTP method as an aggregate key for a rate-based rule.

RuleGroupRateLimitIp

class RuleGroupRateLimitIp

Specifies the IP address in the web request as an aggregate key for a rate-based rule.

RuleGroupRateLimitLabelNamespace

data class RuleGroupRateLimitLabelNamespace(val namespace: String)

Specifies a label namespace to use as an aggregate key for a rate-based rule.

RuleGroupRateLimitQueryArgument

data class RuleGroupRateLimitQueryArgument(val name: String, val textTransformations: List<RuleGroupTextTransformation>)

Specifies a query argument in the request as an aggregate key for a rate-based rule.

RuleGroupRateLimitQueryString

data class RuleGroupRateLimitQueryString(val textTransformations: List<RuleGroupTextTransformation>)

Specifies the request's query string as an aggregate key for a rate-based rule.

RuleGroupRateLimitUriPath

data class RuleGroupRateLimitUriPath(val textTransformations: List<RuleGroupTextTransformation>)

Specifies the request's URI Path as an aggregate key for a rate-based rule.

RuleGroupRegexMatchStatement

data class RuleGroupRegexMatchStatement(val fieldToMatch: RuleGroupFieldToMatch, val regexString: String, val textTransformations: List<RuleGroupTextTransformation>)

RuleGroupRegexPatternSetReferenceStatement

data class RuleGroupRegexPatternSetReferenceStatement(val arn: String, val fieldToMatch: RuleGroupFieldToMatch, val textTransformations: List<RuleGroupTextTransformation>)

RuleGroupRule

data class RuleGroupRule(val action: RuleGroupRuleAction? = null, val captchaConfig: RuleGroupCaptchaConfig? = null, val challengeConfig: RuleGroupChallengeConfig? = null, val name: String, val priority: Int, val ruleLabels: List<RuleGroupLabel>? = null, val statement: RuleGroupStatement, val visibilityConfig: RuleGroupVisibilityConfig)

Rule of RuleGroup that contains condition and action.

RuleGroupRuleAction

data class RuleGroupRuleAction(val allow: RuleGroupAllowAction? = null, val block: RuleGroupBlockAction? = null, val captcha: RuleGroupCaptchaAction? = null, val challenge: RuleGroupChallengeAction? = null, val count: RuleGroupCountAction? = null)

Action taken when Rule matches its condition.

RuleGroupSizeConstraintStatement

data class RuleGroupSizeConstraintStatement(val comparisonOperator: RuleGroupSizeConstraintStatementComparisonOperator, val fieldToMatch: RuleGroupFieldToMatch, val size: Double, val textTransformations: List<RuleGroupTextTransformation>)

Size Constraint statement.

RuleGroupSqliMatchStatement

data class RuleGroupSqliMatchStatement(val fieldToMatch: RuleGroupFieldToMatch, val sensitivityLevel: RuleGroupSensitivityLevel? = null, val textTransformations: List<RuleGroupTextTransformation>)

Sqli Match Statement.

RuleGroupStatement

data class RuleGroupStatement(val andStatement: RuleGroupAndStatement? = null, val byteMatchStatement: RuleGroupByteMatchStatement? = null, val geoMatchStatement: RuleGroupGeoMatchStatement? = null, val ipSetReferenceStatement: RuleGroupIpSetReferenceStatement? = null, val labelMatchStatement: RuleGroupLabelMatchStatement? = null, val notStatement: RuleGroupNotStatement? = null, val orStatement: RuleGroupOrStatement? = null, val rateBasedStatement: RuleGroupRateBasedStatement? = null, val regexMatchStatement: RuleGroupRegexMatchStatement? = null, val regexPatternSetReferenceStatement: RuleGroupRegexPatternSetReferenceStatement? = null, val sizeConstraintStatement: RuleGroupSizeConstraintStatement? = null, val sqliMatchStatement: RuleGroupSqliMatchStatement? = null, val xssMatchStatement: RuleGroupXssMatchStatement? = null)

First level statement that contains conditions, such as ByteMatch, SizeConstraint, etc

RuleGroupTextTransformation

data class RuleGroupTextTransformation(val priority: Int, val type: RuleGroupTextTransformationType)

Text Transformation on the Search String before match.

RuleGroupVisibilityConfig

data class RuleGroupVisibilityConfig(val cloudWatchMetricsEnabled: Boolean, val metricName: String, val sampledRequestsEnabled: Boolean)

Visibility Metric of the RuleGroup.

RuleGroupXssMatchStatement

data class RuleGroupXssMatchStatement(val fieldToMatch: RuleGroupFieldToMatch, val textTransformations: List<RuleGroupTextTransformation>)

Xss Match Statement.

WebAclAllowAction

data class WebAclAllowAction(val customRequestHandling: WebAclCustomRequestHandling? = null)

Allow traffic towards application.

WebAclAndStatement

data class WebAclAndStatement(val statements: List<WebAclStatement>)

WebAclAssociationConfig

data class WebAclAssociationConfig(val requestBody: Map<String, WebAclRequestBodyAssociatedResourceTypeConfig>? = null)

AssociationConfig for body inspection

WebAclAwsManagedRulesAcfpRuleSet

data class WebAclAwsManagedRulesAcfpRuleSet(val creationPath: String, val enableRegexInPath: Boolean? = null, val registrationPagePath: String, val requestInspection: WebAclRequestInspectionAcfp, val responseInspection: WebAclResponseInspection? = null)

Configures how to use the Account creation fraud prevention managed rule group in the web ACL

WebAclAwsManagedRulesAtpRuleSet

data class WebAclAwsManagedRulesAtpRuleSet(val enableRegexInPath: Boolean? = null, val loginPath: String, val requestInspection: WebAclRequestInspection? = null, val responseInspection: WebAclResponseInspection? = null)

Configures how to use the Account Takeover Prevention managed rule group in the web ACL

WebAclAwsManagedRulesBotControlRuleSet

data class WebAclAwsManagedRulesBotControlRuleSet(val enableMachineLearning: Boolean? = null, val inspectionLevel: WebAclAwsManagedRulesBotControlRuleSetInspectionLevel)

Configures how to use the Bot Control managed rule group in the web ACL

WebAclBlockAction

data class WebAclBlockAction(val customResponse: WebAclCustomResponse? = null)

Block traffic towards application.

WebAclBody

data class WebAclBody(val oversizeHandling: WebAclOversizeHandling? = null)

The body of a web request. This immediately follows the request headers.

WebAclByteMatchStatement

data class WebAclByteMatchStatement(val fieldToMatch: WebAclFieldToMatch, val positionalConstraint: WebAclPositionalConstraint, val searchString: String? = null, val searchStringBase64: String? = null, val textTransformations: List<WebAclTextTransformation>)

Byte Match statement.

WebAclCaptchaAction

data class WebAclCaptchaAction(val customRequestHandling: WebAclCustomRequestHandling? = null)

Checks valid token exists with request.

WebAclCaptchaConfig

data class WebAclCaptchaConfig(val immunityTimeProperty: WebAclImmunityTimeProperty? = null)

WebAclChallengeAction

data class WebAclChallengeAction(val customRequestHandling: WebAclCustomRequestHandling? = null)

Checks that the request has a valid token with an unexpired challenge timestamp and, if not, returns a browser challenge to the client.

WebAclChallengeConfig

data class WebAclChallengeConfig(val immunityTimeProperty: WebAclImmunityTimeProperty? = null)

WebAclCookieMatchPattern

data class WebAclCookieMatchPattern(val all: Any? = null, val excludedCookies: List<String>? = null, val includedCookies: List<String>? = null)

The pattern to look for in the request cookies.

WebAclCookies

data class WebAclCookies(val matchPattern: WebAclCookieMatchPattern, val matchScope: WebAclMapMatchScope, val oversizeHandling: WebAclOversizeHandling)

Includes cookies of a web request.

WebAclCountAction

data class WebAclCountAction(val customRequestHandling: WebAclCustomRequestHandling? = null)

Allow traffic towards application.

WebAclCustomHttpHeader

data class WebAclCustomHttpHeader(val name: String, val value: String)

HTTP header.

WebAclCustomRequestHandling

data class WebAclCustomRequestHandling(val insertHeaders: List<WebAclCustomHttpHeader>)

Custom request handling.

WebAclCustomResponse

data class WebAclCustomResponse(val customResponseBodyKey: String? = null, val responseCode: Int, val responseHeaders: List<WebAclCustomHttpHeader>? = null)

Custom response.

WebAclCustomResponseBody

data class WebAclCustomResponseBody(val content: String, val contentType: WebAclResponseContentType)

Custom response body.

WebAclDefaultAction

data class WebAclDefaultAction(val allow: WebAclAllowAction? = null, val block: WebAclBlockAction? = null)

Default Action WebACL will take against ingress traffic when there is no matching Rule.

WebAclExcludedRule

data class WebAclExcludedRule(val name: String)

Excluded Rule in the RuleGroup or ManagedRuleGroup will not be evaluated.

WebAclFieldIdentifier

data class WebAclFieldIdentifier(val identifier: String)

WebAclFieldToMatch

data class WebAclFieldToMatch(val allQueryArguments: Any? = null, val body: WebAclBody? = null, val cookies: WebAclCookies? = null, val headers: WebAclHeaders? = null, val ja3Fingerprint: WebAclJa3Fingerprint? = null, val jsonBody: WebAclJsonBody? = null, val method: Any? = null, val queryString: Any? = null, val singleHeader: WebAclFieldToMatchSingleHeaderProperties? = null, val singleQueryArgument: WebAclFieldToMatchSingleQueryArgumentProperties? = null, val uriPath: Any? = null)

Field of the request to match.

WebAclFieldToMatchSingleHeaderProperties

data class WebAclFieldToMatchSingleHeaderProperties(val name: String)

WebAclFieldToMatchSingleQueryArgumentProperties

data class WebAclFieldToMatchSingleQueryArgumentProperties(val name: String)

One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.

WebAclForwardedIpConfiguration

data class WebAclForwardedIpConfiguration(val fallbackBehavior: WebAclForwardedIpConfigurationFallbackBehavior, val headerName: String)

WebAclGeoMatchStatement

data class WebAclGeoMatchStatement(val countryCodes: List<String>? = null, val forwardedIpConfig: WebAclForwardedIpConfiguration? = null)

WebAclHeaderMatchPattern

data class WebAclHeaderMatchPattern(val all: Any? = null, val excludedHeaders: List<String>? = null, val includedHeaders: List<String>? = null)

The pattern to look for in the request headers.

WebAclHeaders

data class WebAclHeaders(val matchPattern: WebAclHeaderMatchPattern, val matchScope: WebAclMapMatchScope, val oversizeHandling: WebAclOversizeHandling)

Includes headers of a web request.

WebAclImmunityTimeProperty

data class WebAclImmunityTimeProperty(val immunityTime: Int)

WebAclIpSetForwardedIpConfiguration

data class WebAclIpSetForwardedIpConfiguration(val fallbackBehavior: WebAclIpSetForwardedIpConfigurationFallbackBehavior, val headerName: String, val position: WebAclIpSetForwardedIpConfigurationPosition)

WebAclIpSetReferenceStatement

data class WebAclIpSetReferenceStatement(val arn: String, val ipSetForwardedIpConfig: WebAclIpSetForwardedIpConfiguration? = null)

WebAclJa3Fingerprint

data class WebAclJa3Fingerprint(val fallbackBehavior: WebAclJa3FingerprintFallbackBehavior)

Includes the JA3 fingerprint of a web request.

WebAclJsonBody

data class WebAclJsonBody(val invalidFallbackBehavior: WebAclBodyParsingFallbackBehavior? = null, val matchPattern: WebAclJsonMatchPattern, val matchScope: WebAclJsonMatchScope, val oversizeHandling: WebAclOversizeHandling? = null)

Inspect the request body as JSON. The request body immediately follows the request headers.

WebAclJsonMatchPattern

data class WebAclJsonMatchPattern(val all: Any? = null, val includedPaths: List<String>? = null)

The pattern to look for in the JSON body.

WebAclLabel

data class WebAclLabel(val name: String)

WebAclLabelMatchStatement

data class WebAclLabelMatchStatement(val key: String, val scope: WebAclLabelMatchScope)

WebAclManagedRuleGroupConfig

data class WebAclManagedRuleGroupConfig(val awsManagedRulesAcfpRuleSet: WebAclAwsManagedRulesAcfpRuleSet? = null, val awsManagedRulesAtpRuleSet: WebAclAwsManagedRulesAtpRuleSet? = null, val awsManagedRulesBotControlRuleSet: WebAclAwsManagedRulesBotControlRuleSet? = null, val loginPath: String? = null, val passwordField: WebAclFieldIdentifier? = null, val payloadType: WebAclManagedRuleGroupConfigPayloadType? = null, val usernameField: WebAclFieldIdentifier? = null)

ManagedRuleGroupConfig.

WebAclManagedRuleGroupStatement

data class WebAclManagedRuleGroupStatement(val excludedRules: List<WebAclExcludedRule>? = null, val managedRuleGroupConfigs: List<WebAclManagedRuleGroupConfig>? = null, val name: String, val ruleActionOverrides: List<WebAclRuleActionOverride>? = null, val scopeDownStatement: WebAclStatement? = null, val vendorName: String, val version: String? = null)

WebAclNotStatement

data class WebAclNotStatement(val statement: WebAclStatement)

WebAclOrStatement

data class WebAclOrStatement(val statements: List<WebAclStatement>)

WebAclOverrideAction

data class WebAclOverrideAction(val count: Any? = null, val none: Any? = null)

Override a RuleGroup or ManagedRuleGroup behavior. This can only be applied to Rule that has RuleGroupReferenceStatement or ManagedRuleGroupReferenceStatement.

WebAclRateBasedStatement

data class WebAclRateBasedStatement(val aggregateKeyType: WebAclRateBasedStatementAggregateKeyType, val customKeys: List<WebAclRateBasedStatementCustomKey>? = null, val evaluationWindowSec: Int? = null, val forwardedIpConfig: WebAclForwardedIpConfiguration? = null, val limit: Int, val scopeDownStatement: WebAclStatement? = null)

WebAclRateBasedStatementCustomKey

data class WebAclRateBasedStatementCustomKey(val cookie: WebAclRateLimitCookie? = null, val forwardedIp: WebAclRateLimitForwardedIp? = null, val header: WebAclRateLimitHeader? = null, val httpMethod: WebAclRateLimitHttpMethod? = null, val ip: WebAclRateLimitIp? = null, val labelNamespace: WebAclRateLimitLabelNamespace? = null, val queryArgument: WebAclRateLimitQueryArgument? = null, val queryString: WebAclRateLimitQueryString? = null, val uriPath: WebAclRateLimitUriPath? = null)

Specifies a single custom aggregate key for a rate-base rule.

WebAclRateLimitCookie

data class WebAclRateLimitCookie(val name: String, val textTransformations: List<WebAclTextTransformation>)

Specifies a cookie as an aggregate key for a rate-based rule.

WebAclRateLimitForwardedIp

class WebAclRateLimitForwardedIp

Specifies the first IP address in an HTTP header as an aggregate key for a rate-based rule.

WebAclRateLimitHeader

data class WebAclRateLimitHeader(val name: String, val textTransformations: List<WebAclTextTransformation>)

Specifies a header as an aggregate key for a rate-based rule.

WebAclRateLimitHttpMethod

class WebAclRateLimitHttpMethod

Specifies the request's HTTP method as an aggregate key for a rate-based rule.

WebAclRateLimitIp

class WebAclRateLimitIp

Specifies the IP address in the web request as an aggregate key for a rate-based rule.

WebAclRateLimitLabelNamespace

data class WebAclRateLimitLabelNamespace(val namespace: String)

Specifies a label namespace to use as an aggregate key for a rate-based rule.

WebAclRateLimitQueryArgument

data class WebAclRateLimitQueryArgument(val name: String, val textTransformations: List<WebAclTextTransformation>)

Specifies a query argument in the request as an aggregate key for a rate-based rule.

WebAclRateLimitQueryString

data class WebAclRateLimitQueryString(val textTransformations: List<WebAclTextTransformation>)

Specifies the request's query string as an aggregate key for a rate-based rule.

WebAclRateLimitUriPath

data class WebAclRateLimitUriPath(val textTransformations: List<WebAclTextTransformation>)

Specifies the request's URI Path as an aggregate key for a rate-based rule.

WebAclRegexMatchStatement

data class WebAclRegexMatchStatement(val fieldToMatch: WebAclFieldToMatch, val regexString: String, val textTransformations: List<WebAclTextTransformation>)

WebAclRegexPatternSetReferenceStatement

data class WebAclRegexPatternSetReferenceStatement(val arn: String, val fieldToMatch: WebAclFieldToMatch, val textTransformations: List<WebAclTextTransformation>)

WebAclRequestBodyAssociatedResourceTypeConfig

data class WebAclRequestBodyAssociatedResourceTypeConfig(val defaultSizeInspectionLimit: WebAclSizeInspectionLimit)

Configures the inspection size in the request body.

WebAclRequestInspection

data class WebAclRequestInspection(val passwordField: WebAclFieldIdentifier, val payloadType: WebAclRequestInspectionPayloadType, val usernameField: WebAclFieldIdentifier)

Configures the inspection of login requests

WebAclRequestInspectionAcfp

data class WebAclRequestInspectionAcfp(val addressFields: List<WebAclFieldIdentifier>? = null, val emailField: WebAclFieldIdentifier? = null, val passwordField: WebAclFieldIdentifier? = null, val payloadType: WebAclRequestInspectionAcfpPayloadType, val phoneNumberFields: List<WebAclFieldIdentifier>? = null, val usernameField: WebAclFieldIdentifier? = null)

Configures the inspection of sign-up requests

WebAclResponseInspection

data class WebAclResponseInspection(val bodyContains: WebAclResponseInspectionBodyContains? = null, val header: WebAclResponseInspectionHeader? = null, val json: WebAclResponseInspectionJson? = null, val statusCode: WebAclResponseInspectionStatusCode? = null)

Configures the inspection of login responses

WebAclResponseInspectionBodyContains

data class WebAclResponseInspectionBodyContains(val failureStrings: List<String>, val successStrings: List<String>)

Response body contents that indicate success or failure of a login request

WebAclResponseInspectionHeader

data class WebAclResponseInspectionHeader(val failureValues: List<String>, val name: String, val successValues: List<String>)

Response headers that indicate success or failure of a login request

WebAclResponseInspectionJson

data class WebAclResponseInspectionJson(val failureValues: List<String>, val identifier: String, val successValues: List<String>)

Response JSON that indicate success or failure of a login request

WebAclResponseInspectionStatusCode

data class WebAclResponseInspectionStatusCode(val failureCodes: List<Int>, val successCodes: List<Int>)

Response status codes that indicate success or failure of a login request

WebAclRule

data class WebAclRule(val action: WebAclRuleAction? = null, val captchaConfig: WebAclCaptchaConfig? = null, val challengeConfig: WebAclChallengeConfig? = null, val name: String, val overrideAction: WebAclOverrideAction? = null, val priority: Int, val ruleLabels: List<WebAclLabel>? = null, val statement: WebAclStatement, val visibilityConfig: WebAclVisibilityConfig)

Rule of WebACL that contains condition and action.

WebAclRuleAction

data class WebAclRuleAction(val allow: WebAclAllowAction? = null, val block: WebAclBlockAction? = null, val captcha: WebAclCaptchaAction? = null, val challenge: WebAclChallengeAction? = null, val count: WebAclCountAction? = null)

Action taken when Rule matches its condition.

WebAclRuleActionOverride

data class WebAclRuleActionOverride(val actionToUse: WebAclRuleAction, val name: String)

Action override for rules in the rule group.

WebAclRuleGroupReferenceStatement

data class WebAclRuleGroupReferenceStatement(val arn: String, val excludedRules: List<WebAclExcludedRule>? = null, val ruleActionOverrides: List<WebAclRuleActionOverride>? = null)

WebAclSizeConstraintStatement

data class WebAclSizeConstraintStatement(val comparisonOperator: WebAclSizeConstraintStatementComparisonOperator, val fieldToMatch: WebAclFieldToMatch, val size: Double, val textTransformations: List<WebAclTextTransformation>)

Size Constraint statement.

WebAclSqliMatchStatement

data class WebAclSqliMatchStatement(val fieldToMatch: WebAclFieldToMatch, val sensitivityLevel: WebAclSensitivityLevel? = null, val textTransformations: List<WebAclTextTransformation>)

Sqli Match Statement.

WebAclStatement

data class WebAclStatement(val andStatement: WebAclAndStatement? = null, val byteMatchStatement: WebAclByteMatchStatement? = null, val geoMatchStatement: WebAclGeoMatchStatement? = null, val ipSetReferenceStatement: WebAclIpSetReferenceStatement? = null, val labelMatchStatement: WebAclLabelMatchStatement? = null, val managedRuleGroupStatement: WebAclManagedRuleGroupStatement? = null, val notStatement: WebAclNotStatement? = null, val orStatement: WebAclOrStatement? = null, val rateBasedStatement: WebAclRateBasedStatement? = null, val regexMatchStatement: WebAclRegexMatchStatement? = null, val regexPatternSetReferenceStatement: WebAclRegexPatternSetReferenceStatement? = null, val ruleGroupReferenceStatement: WebAclRuleGroupReferenceStatement? = null, val sizeConstraintStatement: WebAclSizeConstraintStatement? = null, val sqliMatchStatement: WebAclSqliMatchStatement? = null, val xssMatchStatement: WebAclXssMatchStatement? = null)

First level statement that contains conditions, such as ByteMatch, SizeConstraint, etc

WebAclTextTransformation

data class WebAclTextTransformation(val priority: Int, val type: WebAclTextTransformationType)

Text Transformation on the Search String before match.

WebAclVisibilityConfig

data class WebAclVisibilityConfig(val cloudWatchMetricsEnabled: Boolean, val metricName: String, val sampledRequestsEnabled: Boolean)

Visibility Metric of the WebACL.

WebAclXssMatchStatement

data class WebAclXssMatchStatement(val fieldToMatch: WebAclFieldToMatch, val textTransformations: List<WebAclTextTransformation>)

Xss Match Statement.