From e11d2f95c0c12c79b08c3cbbcf28836d4d60c9e3 Mon Sep 17 00:00:00 2001 From: awstools Date: Mon, 3 Apr 2023 18:12:58 +0000 Subject: [PATCH] feat(client-wafv2): For web ACLs that protect CloudFront protections, the default request body inspection size is now 16 KB, and you can use the new association configuration to increase the inspection size further, up to 64 KB. Sizes over 16 KB can incur additional costs. --- clients/client-wafv2/README.md | 2 +- clients/client-wafv2/src/WAFV2.ts | 24 +- clients/client-wafv2/src/WAFV2Client.ts | 2 +- .../src/commands/AssociateWebACLCommand.ts | 4 +- .../src/commands/CheckCapacityCommand.ts | 4 +- .../src/commands/CreateWebACLCommand.ts | 9 +- .../src/commands/DeleteWebACLCommand.ts | 6 +- .../src/commands/DisassociateWebACLCommand.ts | 4 +- .../commands/PutPermissionPolicyCommand.ts | 2 +- .../src/commands/UpdateWebACLCommand.ts | 9 +- clients/client-wafv2/src/endpoint/ruleset.ts | 34 +- clients/client-wafv2/src/models/models_0.ts | 384 +++--- .../client-wafv2/src/protocols/Aws_json1_1.ts | 79 ++ codegen/sdk-codegen/aws-models/wafv2.json | 1060 ++++++----------- 14 files changed, 744 insertions(+), 879 deletions(-) diff --git a/clients/client-wafv2/README.md b/clients/client-wafv2/README.md index 9e7890568fe3..9c5cbb9b69d8 100644 --- a/clients/client-wafv2/README.md +++ b/clients/client-wafv2/README.md @@ -39,7 +39,7 @@ Guide.

* @@ -778,10 +780,10 @@ export class WAFV2 extends WAFV2Client { /** * @public *

Disassociates the specified regional application resource from any existing web ACL - * association. A resource can have at most one web ACL association. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.

+ * association. A resource can have at most one web ACL association. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.

*

For Amazon CloudFront, don't use this call. Instead, use your CloudFront distribution configuration. To * disassociate a web ACL, provide an empty web ACL ID in the CloudFront call - * UpdateDistribution. For information, see UpdateDistribution.

+ * UpdateDistribution. For information, see UpdateDistribution in the Amazon CloudFront API Reference.

*/ public disassociateWebACL( args: DisassociateWebACLCommandInput, @@ -2045,7 +2047,7 @@ export class WAFV2 extends WAFV2Client { * * *

When you make changes to web ACLs or web ACL components, like rules and rule groups, WAF propagates the changes everywhere that the web ACL and its components are stored and used. Your changes are applied within seconds, but there might be a brief period of inconsistency when the changes have arrived in some places and not in others. So, for example, if you change a rule action setting, the action might be the old action in one area and the new action in another area. Or if you add an IP address to an IP set used in a blocking rule, the new address might briefly be blocked in one area while still allowed in another. This temporary inconsistency can occur when you first associate a web ACL with an Amazon Web Services resource and when you change a web ACL that is already associated with a resource. Generally, any inconsistencies of this type last only a few seconds.

- *

A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types Rule, RuleGroup, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, Amazon Cognito user pool, or an App Runner service.

+ *

A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types Rule, RuleGroup, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.

*/ public updateWebACL( args: UpdateWebACLCommandInput, diff --git a/clients/client-wafv2/src/WAFV2Client.ts b/clients/client-wafv2/src/WAFV2Client.ts index 0a8cdc80c00b..8b1b2e672ee1 100644 --- a/clients/client-wafv2/src/WAFV2Client.ts +++ b/clients/client-wafv2/src/WAFV2Client.ts @@ -479,7 +479,7 @@ export interface WAFV2ClientResolvedConfig extends WAFV2ClientResolvedConfigType * * @@ -62,7 +63,8 @@ export interface DeleteWebACLCommandOutput extends DeleteWebACLResponse, __Metad * *
  • *

    For Amazon CloudFront distributions, provide an empty web ACL ID in the CloudFront call - * UpdateDistribution. For information, see UpdateDistribution.

    + * UpdateDistribution. For information, see UpdateDistribution + * in the Amazon CloudFront API Reference.

    *
    • * * diff --git a/clients/client-wafv2/src/commands/DisassociateWebACLCommand.ts b/clients/client-wafv2/src/commands/DisassociateWebACLCommand.ts index 8df16415ac22..de735a7bac36 100644 --- a/clients/client-wafv2/src/commands/DisassociateWebACLCommand.ts +++ b/clients/client-wafv2/src/commands/DisassociateWebACLCommand.ts @@ -36,10 +36,10 @@ export interface DisassociateWebACLCommandOutput extends DisassociateWebACLRespo /** * @public *

    Disassociates the specified regional application resource from any existing web ACL - * association. A resource can have at most one web ACL association. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.

    + * association. A resource can have at most one web ACL association. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.

    *

    For Amazon CloudFront, don't use this call. Instead, use your CloudFront distribution configuration. To * disassociate a web ACL, provide an empty web ACL ID in the CloudFront call - * UpdateDistribution. For information, see UpdateDistribution.

    + * UpdateDistribution. For information, see UpdateDistribution in the Amazon CloudFront API Reference.

    * @example * Use a bare-bones client and the command you need to make an API call. * ```javascript diff --git a/clients/client-wafv2/src/commands/PutPermissionPolicyCommand.ts b/clients/client-wafv2/src/commands/PutPermissionPolicyCommand.ts index 40cb1bf84b46..cdd588d2265c 100644 --- a/clients/client-wafv2/src/commands/PutPermissionPolicyCommand.ts +++ b/clients/client-wafv2/src/commands/PutPermissionPolicyCommand.ts @@ -102,7 +102,7 @@ export interface PutPermissionPolicyCommandOutput extends PutPermissionPolicyRes *

    The policy specifications must conform to the following:

    *