Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS WAF Regional

AWS WAF Regional (service prefix: waf-regional) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS WAF Regional
Actions defined by AWS WAF Regional
Resource types defined by AWS WAF Regional
Condition keys for AWS WAF Regional

API operations defined by AWS WAF Regional

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Access level
AssociateWebACL	waf-regional:AssociateWebACL	Write
	apigateway:SetWebACL	Permissions management, Write
	elasticloadbalancing:SetWebAcl	Write
CreateByteMatchSet	waf-regional:CreateByteMatchSet	Write
CreateGeoMatchSet	waf-regional:CreateGeoMatchSet	Write
CreateIPSet	waf-regional:CreateIPSet	Write
CreateRateBasedRule	waf-regional:CreateRateBasedRule	Write
CreateRateBasedRule	waf-regional:TagResource	Tagging, Write
CreateRegexMatchSet	waf-regional:CreateRegexMatchSet	Write
CreateRegexPatternSet	waf-regional:CreateRegexPatternSet	Write
CreateRule	waf-regional:CreateRule	Write
CreateRule	waf-regional:TagResource	Tagging, Write
CreateRuleGroup	waf-regional:CreateRuleGroup	Write
CreateRuleGroup	waf-regional:TagResource	Tagging, Write
CreateSizeConstraintSet	waf-regional:CreateSizeConstraintSet	Write
CreateSqlInjectionMatchSet	waf-regional:CreateSqlInjectionMatchSet	Write
CreateWebACL	waf-regional:CreateWebACL	Permissions management, Write
CreateWebACL	waf-regional:TagResource	Tagging, Write
CreateWebACLMigrationStack	waf-regional:CreateWebACLMigrationStack	Write
CreateXssMatchSet	waf-regional:CreateXssMatchSet	Write
DeleteByteMatchSet	waf-regional:DeleteByteMatchSet	Write
DeleteGeoMatchSet	waf-regional:DeleteGeoMatchSet	Write
DeleteIPSet	waf-regional:DeleteIPSet	Write
DeleteLoggingConfiguration	waf-regional:DeleteLoggingConfiguration	Write
DeletePermissionPolicy	waf-regional:DeletePermissionPolicy	Permissions management, Write
DeleteRateBasedRule	waf-regional:DeleteRateBasedRule	Write
DeleteRegexMatchSet	waf-regional:DeleteRegexMatchSet	Write
DeleteRegexPatternSet	waf-regional:DeleteRegexPatternSet	Write
DeleteRule	waf-regional:DeleteRule	Write
DeleteRuleGroup	waf-regional:DeleteRuleGroup	Write
DeleteSizeConstraintSet	waf-regional:DeleteSizeConstraintSet	Write
DeleteSqlInjectionMatchSet	waf-regional:DeleteSqlInjectionMatchSet	Write
DeleteWebACL	waf-regional:DeleteWebACL	Permissions management, Write
DeleteXssMatchSet