Class: AWS.WAFV2
- Inherits:
-
AWS.Service
- Object
- AWS.Service
- AWS.WAFV2
- Identifier:
- wafv2
- API Version:
- 2019-07-29
- Defined in:
- (unknown)
Overview
Constructs a service interface object. Each API operation is exposed as a function on service.
Service Description
WAF is a web application firewall that lets you monitor the HTTP and HTTPS requests that are forwarded to an Amazon CloudFront distribution, Amazon API Gateway REST API, Application Load Balancer, AppSync GraphQL API, Amazon Cognito user pool, App Runner service, or Amazon Web Services Verified Access instance. WAF also lets you control access to your content, to protect the Amazon Web Services resource that WAF is monitoring. Based on conditions that you specify, such as the IP addresses that requests originate from or the values of query strings, the protected resource responds to requests with either the requested content, an HTTP 403 status code (Forbidden), or with a custom response.
This API guide is for developers who need detailed information about WAF API actions, data types, and errors. For detailed information about WAF features and guidance for configuring and using WAF, see the WAF Developer Guide.
You can make calls using the endpoints listed in WAF endpoints and quotas.
-
For regional applications, you can use any of the endpoints in the list. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, an App Runner service, or an Amazon Web Services Verified Access instance.
-
For Amazon CloudFront applications, you must use the API endpoint listed for US East (N. Virginia): us-east-1.
Alternatively, you can use one of the Amazon Web Services SDKs to access an API that's tailored to the programming language or platform that you're using. For more information, see Amazon Web Services SDKs.
We currently provide two versions of the WAF API: this API and the prior versions, the classic WAF APIs. This new API provides the same functionality as the older versions, with the following major improvements:
-
You use one API for both global and regional applications. Where you need to distinguish the scope, you specify a
Scopeparameter and set it toCLOUDFRONTorREGIONAL. -
You can define a web ACL or rule group with a single call, and update it with a single call. You define all rule specifications in JSON format, and pass them to your rule group or web ACL calls.
-
The limits WAF places on the use of rules more closely reflects the cost of running each type of rule. Rule groups include capacity settings, so you know the maximum cost of a rule group when you use it.
Sending a Request Using WAFV2
var wafv2 = new AWS.WAFV2();
wafv2.associateWebACL(params, function (err, data) {
if (err) console.log(err, err.stack); // an error occurred
else console.log(data); // successful response
});
Locking the API Version
In order to ensure that the WAFV2 object uses this specific API, you can
construct the object by passing the apiVersion option to the constructor:
var wafv2 = new AWS.WAFV2({apiVersion: '2019-07-29'});
You can also set the API version globally in AWS.config.apiVersions using
the wafv2 service identifier:
AWS.config.apiVersions = {
wafv2: '2019-07-29',
// other service API versions
};
var wafv2 = new AWS.WAFV2();
Constructor Summary collapse
-
new AWS.WAFV2(options = {}) ⇒ Object
constructor
Constructs a service object.
Property Summary collapse
-
endpoint ⇒ AWS.Endpoint
readwrite
An Endpoint object representing the endpoint URL for service requests.
Properties inherited from AWS.Service
Method Summary collapse
-
associateWebACL(params = {}, callback) ⇒ AWS.Request
Associates a web ACL with a regional application resource, to protect the resource.
-
checkCapacity(params = {}, callback) ⇒ AWS.Request
Returns the web ACL capacity unit (WCU) requirements for a specified scope and set of rules.
-
createAPIKey(params = {}, callback) ⇒ AWS.Request
Creates an API key that contains a set of token domains.
API keys are required for the integration of the CAPTCHA API in your JavaScript client applications.
-
createIPSet(params = {}, callback) ⇒ AWS.Request
Creates an IPSet, which you use to identify web requests that originate from specific IP addresses or ranges of IP addresses.
-
createRegexPatternSet(params = {}, callback) ⇒ AWS.Request
Creates a RegexPatternSet, which you reference in a RegexPatternSetReferenceStatement, to have WAF inspect a web request component for the specified patterns.
.
-
createRuleGroup(params = {}, callback) ⇒ AWS.Request
Creates a RuleGroup per the specifications provided.
-
createWebACL(params = {}, callback) ⇒ AWS.Request
Creates a WebACL per the specifications provided.
A web ACL defines a collection of rules to use to inspect and control web requests.
-
deleteAPIKey(params = {}, callback) ⇒ AWS.Request
Deletes the specified API key.
-
deleteFirewallManagerRuleGroups(params = {}, callback) ⇒ AWS.Request
Deletes all rule groups that are managed by Firewall Manager for the specified web ACL.
-
deleteIPSet(params = {}, callback) ⇒ AWS.Request
Deletes the specified IPSet.
-
deleteLoggingConfiguration(params = {}, callback) ⇒ AWS.Request
Deletes the LoggingConfiguration from the specified web ACL.
.
-
deletePermissionPolicy(params = {}, callback) ⇒ AWS.Request
Permanently deletes an IAM policy from the specified rule group.
You must be the owner of the rule group to perform this operation.
. -
deleteRegexPatternSet(params = {}, callback) ⇒ AWS.Request
Deletes the specified RegexPatternSet.
.
-
deleteRuleGroup(params = {}, callback) ⇒ AWS.Request
Deletes the specified RuleGroup.
.
-
deleteWebACL(params = {}, callback) ⇒ AWS.Request
Deletes the specified WebACL.
-
describeAllManagedProducts(params = {}, callback) ⇒ AWS.Request
Provides high-level information for the Amazon Web Services Managed Rules rule groups and Amazon Web Services Marketplace managed rule groups.
-
describeManagedProductsByVendor(params = {}, callback) ⇒ AWS.Request
Provides high-level information for the managed rule groups owned by a specific vendor.
-
describeManagedRuleGroup(params = {}, callback) ⇒ AWS.Request
Provides high-level information for a managed rule group, including descriptions of the rules.
-
disassociateWebACL(params = {}, callback) ⇒ AWS.Request
Disassociates the specified regional application resource from any existing web ACL association.
-
generateMobileSdkReleaseUrl(params = {}, callback) ⇒ AWS.Request
Generates a presigned download URL for the specified release of the mobile SDK.
The mobile SDK is not generally available.
-
getDecryptedAPIKey(params = {}, callback) ⇒ AWS.Request
Returns your API key in decrypted form.
-
getIPSet(params = {}, callback) ⇒ AWS.Request
Retrieves the specified IPSet.
.