wafv2

package
v0.106.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: May 20, 2024 License: Apache-2.0 Imports: 8 Imported by: 0

Documentation

Index

Constants

View Source
const (
	IpSetIpAddressVersionIpv4 = IpSetIpAddressVersion("IPV4")
	IpSetIpAddressVersionIpv6 = IpSetIpAddressVersion("IPV6")
)
View Source
const (
	IpSetScopeCloudfront = IpSetScope("CLOUDFRONT")
	IpSetScopeRegional   = IpSetScope("REGIONAL")
)
View Source
const (
	LoggingConfigurationConditionActionConditionPropertiesActionAllow           = LoggingConfigurationConditionActionConditionPropertiesAction("ALLOW")
	LoggingConfigurationConditionActionConditionPropertiesActionBlock           = LoggingConfigurationConditionActionConditionPropertiesAction("BLOCK")
	LoggingConfigurationConditionActionConditionPropertiesActionCount           = LoggingConfigurationConditionActionConditionPropertiesAction("COUNT")
	LoggingConfigurationConditionActionConditionPropertiesActionCaptcha         = LoggingConfigurationConditionActionConditionPropertiesAction("CAPTCHA")
	LoggingConfigurationConditionActionConditionPropertiesActionChallenge       = LoggingConfigurationConditionActionConditionPropertiesAction("CHALLENGE")
	LoggingConfigurationConditionActionConditionPropertiesActionExcludedAsCount = LoggingConfigurationConditionActionConditionPropertiesAction("EXCLUDED_AS_COUNT")
)
View Source
const (
	LoggingConfigurationFilterBehaviorKeep = LoggingConfigurationFilterBehavior("KEEP")
	LoggingConfigurationFilterBehaviorDrop = LoggingConfigurationFilterBehavior("DROP")
)
View Source
const (
	LoggingConfigurationFilterRequirementMeetsAll = LoggingConfigurationFilterRequirement("MEETS_ALL")
	LoggingConfigurationFilterRequirementMeetsAny = LoggingConfigurationFilterRequirement("MEETS_ANY")
)
View Source
const (
	LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorKeep = LoggingConfigurationLoggingFilterPropertiesDefaultBehavior("KEEP")
	LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorDrop = LoggingConfigurationLoggingFilterPropertiesDefaultBehavior("DROP")
)
View Source
const (
	RegexPatternSetScopeCloudfront = RegexPatternSetScope("CLOUDFRONT")
	RegexPatternSetScopeRegional   = RegexPatternSetScope("REGIONAL")
)
View Source
const (
	RuleGroupBodyParsingFallbackBehaviorMatch            = RuleGroupBodyParsingFallbackBehavior("MATCH")
	RuleGroupBodyParsingFallbackBehaviorNoMatch          = RuleGroupBodyParsingFallbackBehavior("NO_MATCH")
	RuleGroupBodyParsingFallbackBehaviorEvaluateAsString = RuleGroupBodyParsingFallbackBehavior("EVALUATE_AS_STRING")
)
View Source
const (
	RuleGroupForwardedIpConfigurationFallbackBehaviorMatch   = RuleGroupForwardedIpConfigurationFallbackBehavior("MATCH")
	RuleGroupForwardedIpConfigurationFallbackBehaviorNoMatch = RuleGroupForwardedIpConfigurationFallbackBehavior("NO_MATCH")
)
View Source
const (
	RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorMatch   = RuleGroupIpSetForwardedIpConfigurationFallbackBehavior("MATCH")
	RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorNoMatch = RuleGroupIpSetForwardedIpConfigurationFallbackBehavior("NO_MATCH")
)
View Source
const (
	RuleGroupIpSetForwardedIpConfigurationPositionFirst = RuleGroupIpSetForwardedIpConfigurationPosition("FIRST")
	RuleGroupIpSetForwardedIpConfigurationPositionLast  = RuleGroupIpSetForwardedIpConfigurationPosition("LAST")
	RuleGroupIpSetForwardedIpConfigurationPositionAny   = RuleGroupIpSetForwardedIpConfigurationPosition("ANY")
)
View Source
const (
	RuleGroupJa3FingerprintFallbackBehaviorMatch   = RuleGroupJa3FingerprintFallbackBehavior("MATCH")
	RuleGroupJa3FingerprintFallbackBehaviorNoMatch = RuleGroupJa3FingerprintFallbackBehavior("NO_MATCH")
)
View Source
const (
	RuleGroupJsonMatchScopeAll   = RuleGroupJsonMatchScope("ALL")
	RuleGroupJsonMatchScopeKey   = RuleGroupJsonMatchScope("KEY")
	RuleGroupJsonMatchScopeValue = RuleGroupJsonMatchScope("VALUE")
)
View Source
const (
	RuleGroupLabelMatchScopeLabel     = RuleGroupLabelMatchScope("LABEL")
	RuleGroupLabelMatchScopeNamespace = RuleGroupLabelMatchScope("NAMESPACE")
)
View Source
const (
	RuleGroupMapMatchScopeAll   = RuleGroupMapMatchScope("ALL")
	RuleGroupMapMatchScopeKey   = RuleGroupMapMatchScope("KEY")
	RuleGroupMapMatchScopeValue = RuleGroupMapMatchScope("VALUE")
)
View Source
const (
	RuleGroupOversizeHandlingContinue = RuleGroupOversizeHandling("CONTINUE")
	RuleGroupOversizeHandlingMatch    = RuleGroupOversizeHandling("MATCH")
	RuleGroupOversizeHandlingNoMatch  = RuleGroupOversizeHandling("NO_MATCH")
)
View Source
const (
	RuleGroupPositionalConstraintExactly      = RuleGroupPositionalConstraint("EXACTLY")
	RuleGroupPositionalConstraintStartsWith   = RuleGroupPositionalConstraint("STARTS_WITH")
	RuleGroupPositionalConstraintEndsWith     = RuleGroupPositionalConstraint("ENDS_WITH")
	RuleGroupPositionalConstraintContains     = RuleGroupPositionalConstraint("CONTAINS")
	RuleGroupPositionalConstraintContainsWord = RuleGroupPositionalConstraint("CONTAINS_WORD")
)
View Source
const (
	RuleGroupRateBasedStatementAggregateKeyTypeIp          = RuleGroupRateBasedStatementAggregateKeyType("IP")
	RuleGroupRateBasedStatementAggregateKeyTypeForwardedIp = RuleGroupRateBasedStatementAggregateKeyType("FORWARDED_IP")
	RuleGroupRateBasedStatementAggregateKeyTypeConstant    = RuleGroupRateBasedStatementAggregateKeyType("CONSTANT")
	RuleGroupRateBasedStatementAggregateKeyTypeCustomKeys  = RuleGroupRateBasedStatementAggregateKeyType("CUSTOM_KEYS")
)
View Source
const (
	RuleGroupResponseContentTypeTextPlain       = RuleGroupResponseContentType("TEXT_PLAIN")
	RuleGroupResponseContentTypeTextHtml        = RuleGroupResponseContentType("TEXT_HTML")
	RuleGroupResponseContentTypeApplicationJson = RuleGroupResponseContentType("APPLICATION_JSON")
)
View Source
const (
	RuleGroupScopeCloudfront = RuleGroupScope("CLOUDFRONT")
	RuleGroupScopeRegional   = RuleGroupScope("REGIONAL")
)
View Source
const (
	RuleGroupSensitivityLevelLow  = RuleGroupSensitivityLevel("LOW")
	RuleGroupSensitivityLevelHigh = RuleGroupSensitivityLevel("HIGH")
)
View Source
const (
	RuleGroupSizeConstraintStatementComparisonOperatorEq = RuleGroupSizeConstraintStatementComparisonOperator("EQ")
	RuleGroupSizeConstraintStatementComparisonOperatorNe = RuleGroupSizeConstraintStatementComparisonOperator("NE")
	RuleGroupSizeConstraintStatementComparisonOperatorLe = RuleGroupSizeConstraintStatementComparisonOperator("LE")
	RuleGroupSizeConstraintStatementComparisonOperatorLt = RuleGroupSizeConstraintStatementComparisonOperator("LT")
	RuleGroupSizeConstraintStatementComparisonOperatorGe = RuleGroupSizeConstraintStatementComparisonOperator("GE")
	RuleGroupSizeConstraintStatementComparisonOperatorGt = RuleGroupSizeConstraintStatementComparisonOperator("GT")
)
View Source
const (
	RuleGroupTextTransformationTypeNone               = RuleGroupTextTransformationType("NONE")
	RuleGroupTextTransformationTypeCompressWhiteSpace = RuleGroupTextTransformationType("COMPRESS_WHITE_SPACE")
	RuleGroupTextTransformationTypeHtmlEntityDecode   = RuleGroupTextTransformationType("HTML_ENTITY_DECODE")
	RuleGroupTextTransformationTypeLowercase          = RuleGroupTextTransformationType("LOWERCASE")
	RuleGroupTextTransformationTypeCmdLine            = RuleGroupTextTransformationType("CMD_LINE")
	RuleGroupTextTransformationTypeUrlDecode          = RuleGroupTextTransformationType("URL_DECODE")
	RuleGroupTextTransformationTypeBase64Decode       = RuleGroupTextTransformationType("BASE64_DECODE")
	RuleGroupTextTransformationTypeHexDecode          = RuleGroupTextTransformationType("HEX_DECODE")
	RuleGroupTextTransformationTypeMd5                = RuleGroupTextTransformationType("MD5")
	RuleGroupTextTransformationTypeReplaceComments    = RuleGroupTextTransformationType("REPLACE_COMMENTS")
	RuleGroupTextTransformationTypeEscapeSeqDecode    = RuleGroupTextTransformationType("ESCAPE_SEQ_DECODE")
	RuleGroupTextTransformationTypeSqlHexDecode       = RuleGroupTextTransformationType("SQL_HEX_DECODE")
	RuleGroupTextTransformationTypeCssDecode          = RuleGroupTextTransformationType("CSS_DECODE")
	RuleGroupTextTransformationTypeJsDecode           = RuleGroupTextTransformationType("JS_DECODE")
	RuleGroupTextTransformationTypeNormalizePath      = RuleGroupTextTransformationType("NORMALIZE_PATH")
	RuleGroupTextTransformationTypeNormalizePathWin   = RuleGroupTextTransformationType("NORMALIZE_PATH_WIN")
	RuleGroupTextTransformationTypeRemoveNulls        = RuleGroupTextTransformationType("REMOVE_NULLS")
	RuleGroupTextTransformationTypeReplaceNulls       = RuleGroupTextTransformationType("REPLACE_NULLS")
	RuleGroupTextTransformationTypeBase64DecodeExt    = RuleGroupTextTransformationType("BASE64_DECODE_EXT")
	RuleGroupTextTransformationTypeUrlDecodeUni       = RuleGroupTextTransformationType("URL_DECODE_UNI")
	RuleGroupTextTransformationTypeUtf8ToUnicode      = RuleGroupTextTransformationType("UTF8_TO_UNICODE")
)
View Source
const (
	WebAclAwsManagedRulesBotControlRuleSetInspectionLevelCommon   = WebAclAwsManagedRulesBotControlRuleSetInspectionLevel("COMMON")
	WebAclAwsManagedRulesBotControlRuleSetInspectionLevelTargeted = WebAclAwsManagedRulesBotControlRuleSetInspectionLevel("TARGETED")
)
View Source
const (
	WebAclBodyParsingFallbackBehaviorMatch            = WebAclBodyParsingFallbackBehavior("MATCH")
	WebAclBodyParsingFallbackBehaviorNoMatch          = WebAclBodyParsingFallbackBehavior("NO_MATCH")
	WebAclBodyParsingFallbackBehaviorEvaluateAsString = WebAclBodyParsingFallbackBehavior("EVALUATE_AS_STRING")
)
View Source
const (
	WebAclForwardedIpConfigurationFallbackBehaviorMatch   = WebAclForwardedIpConfigurationFallbackBehavior("MATCH")
	WebAclForwardedIpConfigurationFallbackBehaviorNoMatch = WebAclForwardedIpConfigurationFallbackBehavior("NO_MATCH")
)
View Source
const (
	WebAclIpSetForwardedIpConfigurationFallbackBehaviorMatch   = WebAclIpSetForwardedIpConfigurationFallbackBehavior("MATCH")
	WebAclIpSetForwardedIpConfigurationFallbackBehaviorNoMatch = WebAclIpSetForwardedIpConfigurationFallbackBehavior("NO_MATCH")
)
View Source
const (
	WebAclIpSetForwardedIpConfigurationPositionFirst = WebAclIpSetForwardedIpConfigurationPosition("FIRST")
	WebAclIpSetForwardedIpConfigurationPositionLast  = WebAclIpSetForwardedIpConfigurationPosition("LAST")
	WebAclIpSetForwardedIpConfigurationPositionAny   = WebAclIpSetForwardedIpConfigurationPosition("ANY")
)
View Source
const (
	WebAclJa3FingerprintFallbackBehaviorMatch   = WebAclJa3FingerprintFallbackBehavior("MATCH")
	WebAclJa3FingerprintFallbackBehaviorNoMatch = WebAclJa3FingerprintFallbackBehavior("NO_MATCH")
)
View Source
const (
	WebAclJsonMatchScopeAll   = WebAclJsonMatchScope("ALL")
	WebAclJsonMatchScopeKey   = WebAclJsonMatchScope("KEY")
	WebAclJsonMatchScopeValue = WebAclJsonMatchScope("VALUE")
)
View Source
const (
	WebAclLabelMatchScopeLabel     = WebAclLabelMatchScope("LABEL")
	WebAclLabelMatchScopeNamespace = WebAclLabelMatchScope("NAMESPACE")
)
View Source
const (
	WebAclManagedRuleGroupConfigPayloadTypeJson        = WebAclManagedRuleGroupConfigPayloadType("JSON")
	WebAclManagedRuleGroupConfigPayloadTypeFormEncoded = WebAclManagedRuleGroupConfigPayloadType("FORM_ENCODED")
)
View Source
const (
	WebAclMapMatchScopeAll   = WebAclMapMatchScope("ALL")
	WebAclMapMatchScopeKey   = WebAclMapMatchScope("KEY")
	WebAclMapMatchScopeValue = WebAclMapMatchScope("VALUE")
)
View Source
const (
	WebAclOversizeHandlingContinue = WebAclOversizeHandling("CONTINUE")
	WebAclOversizeHandlingMatch    = WebAclOversizeHandling("MATCH")
	WebAclOversizeHandlingNoMatch  = WebAclOversizeHandling("NO_MATCH")
)
View Source
const (
	WebAclPositionalConstraintExactly      = WebAclPositionalConstraint("EXACTLY")
	WebAclPositionalConstraintStartsWith   = WebAclPositionalConstraint("STARTS_WITH")
	WebAclPositionalConstraintEndsWith     = WebAclPositionalConstraint("ENDS_WITH")
	WebAclPositionalConstraintContains     = WebAclPositionalConstraint("CONTAINS")
	WebAclPositionalConstraintContainsWord = WebAclPositionalConstraint("CONTAINS_WORD")
)
View Source
const (
	WebAclRateBasedStatementAggregateKeyTypeConstant    = WebAclRateBasedStatementAggregateKeyType("CONSTANT")
	WebAclRateBasedStatementAggregateKeyTypeIp          = WebAclRateBasedStatementAggregateKeyType("IP")
	WebAclRateBasedStatementAggregateKeyTypeForwardedIp = WebAclRateBasedStatementAggregateKeyType("FORWARDED_IP")
	WebAclRateBasedStatementAggregateKeyTypeCustomKeys  = WebAclRateBasedStatementAggregateKeyType("CUSTOM_KEYS")
)
View Source
const (
	WebAclRequestInspectionAcfpPayloadTypeJson        = WebAclRequestInspectionAcfpPayloadType("JSON")
	WebAclRequestInspectionAcfpPayloadTypeFormEncoded = WebAclRequestInspectionAcfpPayloadType("FORM_ENCODED")
)
View Source
const (
	WebAclRequestInspectionPayloadTypeJson        = WebAclRequestInspectionPayloadType("JSON")
	WebAclRequestInspectionPayloadTypeFormEncoded = WebAclRequestInspectionPayloadType("FORM_ENCODED")
)
View Source
const (
	WebAclResponseContentTypeTextPlain       = WebAclResponseContentType("TEXT_PLAIN")
	WebAclResponseContentTypeTextHtml        = WebAclResponseContentType("TEXT_HTML")
	WebAclResponseContentTypeApplicationJson = WebAclResponseContentType("APPLICATION_JSON")
)
View Source
const (
	WebAclScopeCloudfront = WebAclScope("CLOUDFRONT")
	WebAclScopeRegional   = WebAclScope("REGIONAL")
)
View Source
const (
	WebAclSensitivityLevelLow  = WebAclSensitivityLevel("LOW")
	WebAclSensitivityLevelHigh = WebAclSensitivityLevel("HIGH")
)
View Source
const (
	WebAclSizeConstraintStatementComparisonOperatorEq = WebAclSizeConstraintStatementComparisonOperator("EQ")
	WebAclSizeConstraintStatementComparisonOperatorNe = WebAclSizeConstraintStatementComparisonOperator("NE")
	WebAclSizeConstraintStatementComparisonOperatorLe = WebAclSizeConstraintStatementComparisonOperator("LE")
	WebAclSizeConstraintStatementComparisonOperatorLt = WebAclSizeConstraintStatementComparisonOperator("LT")
	WebAclSizeConstraintStatementComparisonOperatorGe = WebAclSizeConstraintStatementComparisonOperator("GE")
	WebAclSizeConstraintStatementComparisonOperatorGt = WebAclSizeConstraintStatementComparisonOperator("GT")
)
View Source
const (
	WebAclSizeInspectionLimitKb16 = WebAclSizeInspectionLimit("KB_16")
	WebAclSizeInspectionLimitKb32 = WebAclSizeInspectionLimit("KB_32")
	WebAclSizeInspectionLimitKb48 = WebAclSizeInspectionLimit("KB_48")
	WebAclSizeInspectionLimitKb64 = WebAclSizeInspectionLimit("KB_64")
)
View Source
const (
	WebAclTextTransformationTypeNone               = WebAclTextTransformationType("NONE")
	WebAclTextTransformationTypeCompressWhiteSpace = WebAclTextTransformationType("COMPRESS_WHITE_SPACE")
	WebAclTextTransformationTypeHtmlEntityDecode   = WebAclTextTransformationType("HTML_ENTITY_DECODE")
	WebAclTextTransformationTypeLowercase          = WebAclTextTransformationType("LOWERCASE")
	WebAclTextTransformationTypeCmdLine            = WebAclTextTransformationType("CMD_LINE")
	WebAclTextTransformationTypeUrlDecode          = WebAclTextTransformationType("URL_DECODE")
	WebAclTextTransformationTypeBase64Decode       = WebAclTextTransformationType("BASE64_DECODE")
	WebAclTextTransformationTypeHexDecode          = WebAclTextTransformationType("HEX_DECODE")
	WebAclTextTransformationTypeMd5                = WebAclTextTransformationType("MD5")
	WebAclTextTransformationTypeReplaceComments    = WebAclTextTransformationType("REPLACE_COMMENTS")
	WebAclTextTransformationTypeEscapeSeqDecode    = WebAclTextTransformationType("ESCAPE_SEQ_DECODE")
	WebAclTextTransformationTypeSqlHexDecode       = WebAclTextTransformationType("SQL_HEX_DECODE")
	WebAclTextTransformationTypeCssDecode          = WebAclTextTransformationType("CSS_DECODE")
	WebAclTextTransformationTypeJsDecode           = WebAclTextTransformationType("JS_DECODE")
	WebAclTextTransformationTypeNormalizePath      = WebAclTextTransformationType("NORMALIZE_PATH")
	WebAclTextTransformationTypeNormalizePathWin   = WebAclTextTransformationType("NORMALIZE_PATH_WIN")
	WebAclTextTransformationTypeRemoveNulls        = WebAclTextTransformationType("REMOVE_NULLS")
	WebAclTextTransformationTypeReplaceNulls       = WebAclTextTransformationType("REPLACE_NULLS")
	WebAclTextTransformationTypeBase64DecodeExt    = WebAclTextTransformationType("BASE64_DECODE_EXT")
	WebAclTextTransformationTypeUrlDecodeUni       = WebAclTextTransformationType("URL_DECODE_UNI")
	WebAclTextTransformationTypeUtf8ToUnicode      = WebAclTextTransformationType("UTF8_TO_UNICODE")
)

Variables

This section is empty.

Functions

This section is empty.

Types

type IpSet added in v0.72.0

type IpSet struct {
	pulumi.CustomResourceState

	// List of IPAddresses.
	Addresses pulumi.StringArrayOutput `pulumi:"addresses"`
	// The Amazon Resource Name (ARN) of the IP set.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// The ID of the IP set.
	AwsId pulumi.StringOutput `pulumi:"awsId"`
	// A description of the IP set that helps with identification.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// The version of the IP addresses, either `IPV4` or `IPV6` .
	IpAddressVersion IpSetIpAddressVersionOutput `pulumi:"ipAddressVersion"`
	// The name of the IP set. You cannot change the name of an `IPSet` after you create it.
	Name pulumi.StringPtrOutput `pulumi:"name"`
	// Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .
	//
	// > For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .
	Scope IpSetScopeOutput `pulumi:"scope"`
	// Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.
	//
	// > To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.
	Tags aws.TagArrayOutput `pulumi:"tags"`
}

Contains a list of IP addresses. This can be either IPV4 or IPV6. The list will be mutually

func GetIpSet added in v0.72.0

func GetIpSet(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *IpSetState, opts ...pulumi.ResourceOption) (*IpSet, error)

GetIpSet gets an existing IpSet resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewIpSet added in v0.72.0

func NewIpSet(ctx *pulumi.Context,
	name string, args *IpSetArgs, opts ...pulumi.ResourceOption) (*IpSet, error)

NewIpSet registers a new resource with the given unique name, arguments, and options.

func (*IpSet) ElementType added in v0.72.0

func (*IpSet) ElementType() reflect.Type

func (*IpSet) ToIpSetOutput added in v0.72.0

func (i *IpSet) ToIpSetOutput() IpSetOutput

func (*IpSet) ToIpSetOutputWithContext added in v0.72.0

func (i *IpSet) ToIpSetOutputWithContext(ctx context.Context) IpSetOutput

type IpSetArgs added in v0.72.0

type IpSetArgs struct {
	// List of IPAddresses.
	Addresses pulumi.StringArrayInput
	// A description of the IP set that helps with identification.
	Description pulumi.StringPtrInput
	// The version of the IP addresses, either `IPV4` or `IPV6` .
	IpAddressVersion IpSetIpAddressVersionInput
	// The name of the IP set. You cannot change the name of an `IPSet` after you create it.
	Name pulumi.StringPtrInput
	// Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .
	//
	// > For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .
	Scope IpSetScopeInput
	// Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.
	//
	// > To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.
	Tags aws.TagArrayInput
}

The set of arguments for constructing a IpSet resource.

func (IpSetArgs) ElementType added in v0.72.0

func (IpSetArgs) ElementType() reflect.Type

type IpSetInput added in v0.72.0

type IpSetInput interface {
	pulumi.Input

	ToIpSetOutput() IpSetOutput
	ToIpSetOutputWithContext(ctx context.Context) IpSetOutput
}

type IpSetIpAddressVersion added in v0.72.0

type IpSetIpAddressVersion string

Type of addresses in the IPSet, use IPV4 for IPV4 IP addresses, IPV6 for IPV6 address.

func (IpSetIpAddressVersion) ElementType added in v0.72.0

func (IpSetIpAddressVersion) ElementType() reflect.Type

func (IpSetIpAddressVersion) ToIpSetIpAddressVersionOutput added in v0.72.0

func (e IpSetIpAddressVersion) ToIpSetIpAddressVersionOutput() IpSetIpAddressVersionOutput

func (IpSetIpAddressVersion) ToIpSetIpAddressVersionOutputWithContext added in v0.72.0

func (e IpSetIpAddressVersion) ToIpSetIpAddressVersionOutputWithContext(ctx context.Context) IpSetIpAddressVersionOutput

func (IpSetIpAddressVersion) ToIpSetIpAddressVersionPtrOutput added in v0.72.0

func (e IpSetIpAddressVersion) ToIpSetIpAddressVersionPtrOutput() IpSetIpAddressVersionPtrOutput

func (IpSetIpAddressVersion) ToIpSetIpAddressVersionPtrOutputWithContext added in v0.72.0

func (e IpSetIpAddressVersion) ToIpSetIpAddressVersionPtrOutputWithContext(ctx context.Context) IpSetIpAddressVersionPtrOutput

func (IpSetIpAddressVersion) ToStringOutput added in v0.72.0

func (e IpSetIpAddressVersion) ToStringOutput() pulumi.StringOutput

func (IpSetIpAddressVersion) ToStringOutputWithContext added in v0.72.0

func (e IpSetIpAddressVersion) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (IpSetIpAddressVersion) ToStringPtrOutput added in v0.72.0

func (e IpSetIpAddressVersion) ToStringPtrOutput() pulumi.StringPtrOutput

func (IpSetIpAddressVersion) ToStringPtrOutputWithContext added in v0.72.0

func (e IpSetIpAddressVersion) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type IpSetIpAddressVersionInput added in v0.72.0

type IpSetIpAddressVersionInput interface {
	pulumi.Input

	ToIpSetIpAddressVersionOutput() IpSetIpAddressVersionOutput
	ToIpSetIpAddressVersionOutputWithContext(context.Context) IpSetIpAddressVersionOutput
}

IpSetIpAddressVersionInput is an input type that accepts values of the IpSetIpAddressVersion enum A concrete instance of `IpSetIpAddressVersionInput` can be one of the following:

IpSetIpAddressVersionIpv4
IpSetIpAddressVersionIpv6

type IpSetIpAddressVersionOutput added in v0.72.0

type IpSetIpAddressVersionOutput struct{ *pulumi.OutputState }

func (IpSetIpAddressVersionOutput) ElementType added in v0.72.0

func (IpSetIpAddressVersionOutput) ToIpSetIpAddressVersionOutput added in v0.72.0

func (o IpSetIpAddressVersionOutput) ToIpSetIpAddressVersionOutput() IpSetIpAddressVersionOutput

func (IpSetIpAddressVersionOutput) ToIpSetIpAddressVersionOutputWithContext added in v0.72.0

func (o IpSetIpAddressVersionOutput) ToIpSetIpAddressVersionOutputWithContext(ctx context.Context) IpSetIpAddressVersionOutput

func (IpSetIpAddressVersionOutput) ToIpSetIpAddressVersionPtrOutput added in v0.72.0

func (o IpSetIpAddressVersionOutput) ToIpSetIpAddressVersionPtrOutput() IpSetIpAddressVersionPtrOutput

func (IpSetIpAddressVersionOutput) ToIpSetIpAddressVersionPtrOutputWithContext added in v0.72.0

func (o IpSetIpAddressVersionOutput) ToIpSetIpAddressVersionPtrOutputWithContext(ctx context.Context) IpSetIpAddressVersionPtrOutput

func (IpSetIpAddressVersionOutput) ToStringOutput added in v0.72.0

func (o IpSetIpAddressVersionOutput) ToStringOutput() pulumi.StringOutput

func (IpSetIpAddressVersionOutput) ToStringOutputWithContext added in v0.72.0

func (o IpSetIpAddressVersionOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (IpSetIpAddressVersionOutput) ToStringPtrOutput added in v0.72.0

func (o IpSetIpAddressVersionOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (IpSetIpAddressVersionOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o IpSetIpAddressVersionOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type IpSetIpAddressVersionPtrInput added in v0.72.0

type IpSetIpAddressVersionPtrInput interface {
	pulumi.Input

	ToIpSetIpAddressVersionPtrOutput() IpSetIpAddressVersionPtrOutput
	ToIpSetIpAddressVersionPtrOutputWithContext(context.Context) IpSetIpAddressVersionPtrOutput
}

func IpSetIpAddressVersionPtr added in v0.72.0

func IpSetIpAddressVersionPtr(v string) IpSetIpAddressVersionPtrInput

type IpSetIpAddressVersionPtrOutput added in v0.72.0

type IpSetIpAddressVersionPtrOutput struct{ *pulumi.OutputState }

func (IpSetIpAddressVersionPtrOutput) Elem added in v0.72.0

func (IpSetIpAddressVersionPtrOutput) ElementType added in v0.72.0

func (IpSetIpAddressVersionPtrOutput) ToIpSetIpAddressVersionPtrOutput added in v0.72.0

func (o IpSetIpAddressVersionPtrOutput) ToIpSetIpAddressVersionPtrOutput() IpSetIpAddressVersionPtrOutput

func (IpSetIpAddressVersionPtrOutput) ToIpSetIpAddressVersionPtrOutputWithContext added in v0.72.0

func (o IpSetIpAddressVersionPtrOutput) ToIpSetIpAddressVersionPtrOutputWithContext(ctx context.Context) IpSetIpAddressVersionPtrOutput

func (IpSetIpAddressVersionPtrOutput) ToStringPtrOutput added in v0.72.0

func (IpSetIpAddressVersionPtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o IpSetIpAddressVersionPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type IpSetOutput added in v0.72.0

type IpSetOutput struct{ *pulumi.OutputState }

func (IpSetOutput) Addresses added in v0.72.0

func (o IpSetOutput) Addresses() pulumi.StringArrayOutput

List of IPAddresses.

func (IpSetOutput) Arn added in v0.72.0

The Amazon Resource Name (ARN) of the IP set.

func (IpSetOutput) AwsId added in v0.99.0

func (o IpSetOutput) AwsId() pulumi.StringOutput

The ID of the IP set.

func (IpSetOutput) Description added in v0.72.0

func (o IpSetOutput) Description() pulumi.StringPtrOutput

A description of the IP set that helps with identification.

func (IpSetOutput) ElementType added in v0.72.0

func (IpSetOutput) ElementType() reflect.Type

func (IpSetOutput) IpAddressVersion added in v0.72.0

func (o IpSetOutput) IpAddressVersion() IpSetIpAddressVersionOutput

The version of the IP addresses, either `IPV4` or `IPV6` .

func (IpSetOutput) Name added in v0.72.0

The name of the IP set. You cannot change the name of an `IPSet` after you create it.

func (IpSetOutput) Scope added in v0.72.0

func (o IpSetOutput) Scope() IpSetScopeOutput

Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .

> For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .

func (IpSetOutput) Tags added in v0.72.0

func (o IpSetOutput) Tags() aws.TagArrayOutput

Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.

> To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.

func (IpSetOutput) ToIpSetOutput added in v0.72.0

func (o IpSetOutput) ToIpSetOutput() IpSetOutput

func (IpSetOutput) ToIpSetOutputWithContext added in v0.72.0

func (o IpSetOutput) ToIpSetOutputWithContext(ctx context.Context) IpSetOutput

type IpSetScope added in v0.72.0

type IpSetScope string

Use CLOUDFRONT for CloudFront IPSet, use REGIONAL for Application Load Balancer and API Gateway.

func (IpSetScope) ElementType added in v0.72.0

func (IpSetScope) ElementType() reflect.Type

func (IpSetScope) ToIpSetScopeOutput added in v0.72.0

func (e IpSetScope) ToIpSetScopeOutput() IpSetScopeOutput

func (IpSetScope) ToIpSetScopeOutputWithContext added in v0.72.0

func (e IpSetScope) ToIpSetScopeOutputWithContext(ctx context.Context) IpSetScopeOutput

func (IpSetScope) ToIpSetScopePtrOutput added in v0.72.0

func (e IpSetScope) ToIpSetScopePtrOutput() IpSetScopePtrOutput

func (IpSetScope) ToIpSetScopePtrOutputWithContext added in v0.72.0

func (e IpSetScope) ToIpSetScopePtrOutputWithContext(ctx context.Context) IpSetScopePtrOutput

func (IpSetScope) ToStringOutput added in v0.72.0

func (e IpSetScope) ToStringOutput() pulumi.StringOutput

func (IpSetScope) ToStringOutputWithContext added in v0.72.0

func (e IpSetScope) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (IpSetScope) ToStringPtrOutput added in v0.72.0

func (e IpSetScope) ToStringPtrOutput() pulumi.StringPtrOutput

func (IpSetScope) ToStringPtrOutputWithContext added in v0.72.0

func (e IpSetScope) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type IpSetScopeInput added in v0.72.0

type IpSetScopeInput interface {
	pulumi.Input

	ToIpSetScopeOutput() IpSetScopeOutput
	ToIpSetScopeOutputWithContext(context.Context) IpSetScopeOutput
}

IpSetScopeInput is an input type that accepts values of the IpSetScope enum A concrete instance of `IpSetScopeInput` can be one of the following:

IpSetScopeCloudfront
IpSetScopeRegional

type IpSetScopeOutput added in v0.72.0

type IpSetScopeOutput struct{ *pulumi.OutputState }

func (IpSetScopeOutput) ElementType added in v0.72.0

func (IpSetScopeOutput) ElementType() reflect.Type

func (IpSetScopeOutput) ToIpSetScopeOutput added in v0.72.0

func (o IpSetScopeOutput) ToIpSetScopeOutput() IpSetScopeOutput

func (IpSetScopeOutput) ToIpSetScopeOutputWithContext added in v0.72.0

func (o IpSetScopeOutput) ToIpSetScopeOutputWithContext(ctx context.Context) IpSetScopeOutput

func (IpSetScopeOutput) ToIpSetScopePtrOutput added in v0.72.0

func (o IpSetScopeOutput) ToIpSetScopePtrOutput() IpSetScopePtrOutput

func (IpSetScopeOutput) ToIpSetScopePtrOutputWithContext added in v0.72.0

func (o IpSetScopeOutput) ToIpSetScopePtrOutputWithContext(ctx context.Context) IpSetScopePtrOutput

func (IpSetScopeOutput) ToStringOutput added in v0.72.0

func (o IpSetScopeOutput) ToStringOutput() pulumi.StringOutput

func (IpSetScopeOutput) ToStringOutputWithContext added in v0.72.0

func (o IpSetScopeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (IpSetScopeOutput) ToStringPtrOutput added in v0.72.0

func (o IpSetScopeOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (IpSetScopeOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o IpSetScopeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type IpSetScopePtrInput added in v0.72.0

type IpSetScopePtrInput interface {
	pulumi.Input

	ToIpSetScopePtrOutput() IpSetScopePtrOutput
	ToIpSetScopePtrOutputWithContext(context.Context) IpSetScopePtrOutput
}

func IpSetScopePtr added in v0.72.0

func IpSetScopePtr(v string) IpSetScopePtrInput

type IpSetScopePtrOutput added in v0.72.0

type IpSetScopePtrOutput struct{ *pulumi.OutputState }

func (IpSetScopePtrOutput) Elem added in v0.72.0

func (IpSetScopePtrOutput) ElementType added in v0.72.0

func (IpSetScopePtrOutput) ElementType() reflect.Type

func (IpSetScopePtrOutput) ToIpSetScopePtrOutput added in v0.72.0

func (o IpSetScopePtrOutput) ToIpSetScopePtrOutput() IpSetScopePtrOutput

func (IpSetScopePtrOutput) ToIpSetScopePtrOutputWithContext added in v0.72.0

func (o IpSetScopePtrOutput) ToIpSetScopePtrOutputWithContext(ctx context.Context) IpSetScopePtrOutput

func (IpSetScopePtrOutput) ToStringPtrOutput added in v0.72.0

func (o IpSetScopePtrOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (IpSetScopePtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o IpSetScopePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type IpSetState added in v0.72.0

type IpSetState struct {
}

func (IpSetState) ElementType added in v0.72.0

func (IpSetState) ElementType() reflect.Type

type IpSetTag added in v0.72.0

type IpSetTag struct {
	// Part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as "customer." Tag keys are case-sensitive.
	Key *string `pulumi:"key"`
	// Part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as "companyA" or "companyB." Tag values are case-sensitive.
	Value *string `pulumi:"value"`
}

type LoggingConfiguration

type LoggingConfiguration struct {
	pulumi.CustomResourceState

	// The Amazon Resource Names (ARNs) of the logging destinations that you want to associate with the web ACL.
	LogDestinationConfigs pulumi.StringArrayOutput `pulumi:"logDestinationConfigs"`
	// Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation.
	LoggingFilter LoggingFilterPropertiesPtrOutput `pulumi:"loggingFilter"`
	// Indicates whether the logging configuration was created by AWS Firewall Manager, as part of an AWS WAF policy configuration. If true, only Firewall Manager can modify or delete the configuration.
	ManagedByFirewallManager pulumi.BoolOutput `pulumi:"managedByFirewallManager"`
	// The parts of the request that you want to keep out of the logs. For example, if you redact the HEADER field, the HEADER field in the firehose will be xxx.
	RedactedFields LoggingConfigurationFieldToMatchArrayOutput `pulumi:"redactedFields"`
	// The Amazon Resource Name (ARN) of the web ACL that you want to associate with LogDestinationConfigs.
	ResourceArn pulumi.StringOutput `pulumi:"resourceArn"`
}

A WAFv2 Logging Configuration Resource Provider

func GetLoggingConfiguration

func GetLoggingConfiguration(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *LoggingConfigurationState, opts ...pulumi.ResourceOption) (*LoggingConfiguration, error)

GetLoggingConfiguration gets an existing LoggingConfiguration resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewLoggingConfiguration

func NewLoggingConfiguration(ctx *pulumi.Context,
	name string, args *LoggingConfigurationArgs, opts ...pulumi.ResourceOption) (*LoggingConfiguration, error)

NewLoggingConfiguration registers a new resource with the given unique name, arguments, and options.

func (*LoggingConfiguration) ElementType

func (*LoggingConfiguration) ElementType() reflect.Type

func (*LoggingConfiguration) ToLoggingConfigurationOutput

func (i *LoggingConfiguration) ToLoggingConfigurationOutput() LoggingConfigurationOutput

func (*LoggingConfiguration) ToLoggingConfigurationOutputWithContext

func (i *LoggingConfiguration) ToLoggingConfigurationOutputWithContext(ctx context.Context) LoggingConfigurationOutput

type LoggingConfigurationArgs

type LoggingConfigurationArgs struct {
	// The Amazon Resource Names (ARNs) of the logging destinations that you want to associate with the web ACL.
	LogDestinationConfigs pulumi.StringArrayInput
	// Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation.
	LoggingFilter LoggingFilterPropertiesPtrInput
	// The parts of the request that you want to keep out of the logs. For example, if you redact the HEADER field, the HEADER field in the firehose will be xxx.
	RedactedFields LoggingConfigurationFieldToMatchArrayInput
	// The Amazon Resource Name (ARN) of the web ACL that you want to associate with LogDestinationConfigs.
	ResourceArn pulumi.StringInput
}

The set of arguments for constructing a LoggingConfiguration resource.

func (LoggingConfigurationArgs) ElementType

func (LoggingConfigurationArgs) ElementType() reflect.Type

type LoggingConfigurationCondition added in v0.2.0

type LoggingConfigurationCondition struct {
	// A single action condition.
	ActionCondition *LoggingConfigurationConditionActionConditionProperties `pulumi:"actionCondition"`
	// A single label name condition.
	LabelNameCondition *LoggingConfigurationConditionLabelNameConditionProperties `pulumi:"labelNameCondition"`
}

type LoggingConfigurationConditionActionConditionProperties added in v0.2.0

type LoggingConfigurationConditionActionConditionProperties struct {
	// Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.
	Action LoggingConfigurationConditionActionConditionPropertiesAction `pulumi:"action"`
}

A single action condition.

type LoggingConfigurationConditionActionConditionPropertiesAction added in v0.2.0

type LoggingConfigurationConditionActionConditionPropertiesAction string

Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.

func (LoggingConfigurationConditionActionConditionPropertiesAction) ElementType added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesAction) ToLoggingConfigurationConditionActionConditionPropertiesActionOutput added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesAction) ToLoggingConfigurationConditionActionConditionPropertiesActionOutputWithContext added in v0.2.0

func (e LoggingConfigurationConditionActionConditionPropertiesAction) ToLoggingConfigurationConditionActionConditionPropertiesActionOutputWithContext(ctx context.Context) LoggingConfigurationConditionActionConditionPropertiesActionOutput

func (LoggingConfigurationConditionActionConditionPropertiesAction) ToLoggingConfigurationConditionActionConditionPropertiesActionPtrOutput added in v0.2.0

func (e LoggingConfigurationConditionActionConditionPropertiesAction) ToLoggingConfigurationConditionActionConditionPropertiesActionPtrOutput() LoggingConfigurationConditionActionConditionPropertiesActionPtrOutput

func (LoggingConfigurationConditionActionConditionPropertiesAction) ToLoggingConfigurationConditionActionConditionPropertiesActionPtrOutputWithContext added in v0.2.0

func (e LoggingConfigurationConditionActionConditionPropertiesAction) ToLoggingConfigurationConditionActionConditionPropertiesActionPtrOutputWithContext(ctx context.Context) LoggingConfigurationConditionActionConditionPropertiesActionPtrOutput

func (LoggingConfigurationConditionActionConditionPropertiesAction) ToStringOutput added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesAction) ToStringOutputWithContext added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesAction) ToStringPtrOutput added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesAction) ToStringPtrOutputWithContext added in v0.2.0

type LoggingConfigurationConditionActionConditionPropertiesActionInput added in v0.2.0

type LoggingConfigurationConditionActionConditionPropertiesActionInput interface {
	pulumi.Input

	ToLoggingConfigurationConditionActionConditionPropertiesActionOutput() LoggingConfigurationConditionActionConditionPropertiesActionOutput
	ToLoggingConfigurationConditionActionConditionPropertiesActionOutputWithContext(context.Context) LoggingConfigurationConditionActionConditionPropertiesActionOutput
}

LoggingConfigurationConditionActionConditionPropertiesActionInput is an input type that accepts values of the LoggingConfigurationConditionActionConditionPropertiesAction enum A concrete instance of `LoggingConfigurationConditionActionConditionPropertiesActionInput` can be one of the following:

LoggingConfigurationConditionActionConditionPropertiesActionAllow
LoggingConfigurationConditionActionConditionPropertiesActionBlock
LoggingConfigurationConditionActionConditionPropertiesActionCount
LoggingConfigurationConditionActionConditionPropertiesActionCaptcha
LoggingConfigurationConditionActionConditionPropertiesActionChallenge
LoggingConfigurationConditionActionConditionPropertiesActionExcludedAsCount

type LoggingConfigurationConditionActionConditionPropertiesActionOutput added in v0.2.0

type LoggingConfigurationConditionActionConditionPropertiesActionOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationConditionActionConditionPropertiesActionOutput) ElementType added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesActionOutput) ToLoggingConfigurationConditionActionConditionPropertiesActionOutput added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesActionOutput) ToLoggingConfigurationConditionActionConditionPropertiesActionOutputWithContext added in v0.2.0

func (o LoggingConfigurationConditionActionConditionPropertiesActionOutput) ToLoggingConfigurationConditionActionConditionPropertiesActionOutputWithContext(ctx context.Context) LoggingConfigurationConditionActionConditionPropertiesActionOutput

func (LoggingConfigurationConditionActionConditionPropertiesActionOutput) ToLoggingConfigurationConditionActionConditionPropertiesActionPtrOutput added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesActionOutput) ToLoggingConfigurationConditionActionConditionPropertiesActionPtrOutputWithContext added in v0.2.0

func (o LoggingConfigurationConditionActionConditionPropertiesActionOutput) ToLoggingConfigurationConditionActionConditionPropertiesActionPtrOutputWithContext(ctx context.Context) LoggingConfigurationConditionActionConditionPropertiesActionPtrOutput

func (LoggingConfigurationConditionActionConditionPropertiesActionOutput) ToStringOutput added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesActionOutput) ToStringOutputWithContext added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesActionOutput) ToStringPtrOutput added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesActionOutput) ToStringPtrOutputWithContext added in v0.2.0

type LoggingConfigurationConditionActionConditionPropertiesActionPtrInput added in v0.2.0

type LoggingConfigurationConditionActionConditionPropertiesActionPtrInput interface {
	pulumi.Input

	ToLoggingConfigurationConditionActionConditionPropertiesActionPtrOutput() LoggingConfigurationConditionActionConditionPropertiesActionPtrOutput
	ToLoggingConfigurationConditionActionConditionPropertiesActionPtrOutputWithContext(context.Context) LoggingConfigurationConditionActionConditionPropertiesActionPtrOutput
}

func LoggingConfigurationConditionActionConditionPropertiesActionPtr added in v0.2.0

func LoggingConfigurationConditionActionConditionPropertiesActionPtr(v string) LoggingConfigurationConditionActionConditionPropertiesActionPtrInput

type LoggingConfigurationConditionActionConditionPropertiesActionPtrOutput added in v0.2.0

type LoggingConfigurationConditionActionConditionPropertiesActionPtrOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationConditionActionConditionPropertiesActionPtrOutput) Elem added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesActionPtrOutput) ElementType added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesActionPtrOutput) ToLoggingConfigurationConditionActionConditionPropertiesActionPtrOutput added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesActionPtrOutput) ToLoggingConfigurationConditionActionConditionPropertiesActionPtrOutputWithContext added in v0.2.0

func (o LoggingConfigurationConditionActionConditionPropertiesActionPtrOutput) ToLoggingConfigurationConditionActionConditionPropertiesActionPtrOutputWithContext(ctx context.Context) LoggingConfigurationConditionActionConditionPropertiesActionPtrOutput

func (LoggingConfigurationConditionActionConditionPropertiesActionPtrOutput) ToStringPtrOutput added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesActionPtrOutput) ToStringPtrOutputWithContext added in v0.2.0

type LoggingConfigurationConditionActionConditionPropertiesArgs added in v0.2.0

type LoggingConfigurationConditionActionConditionPropertiesArgs struct {
	// Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.
	Action LoggingConfigurationConditionActionConditionPropertiesActionInput `pulumi:"action"`
}

A single action condition.

func (LoggingConfigurationConditionActionConditionPropertiesArgs) ElementType added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesArgs) ToLoggingConfigurationConditionActionConditionPropertiesOutput added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesArgs) ToLoggingConfigurationConditionActionConditionPropertiesOutputWithContext added in v0.2.0

func (i LoggingConfigurationConditionActionConditionPropertiesArgs) ToLoggingConfigurationConditionActionConditionPropertiesOutputWithContext(ctx context.Context) LoggingConfigurationConditionActionConditionPropertiesOutput

func (LoggingConfigurationConditionActionConditionPropertiesArgs) ToLoggingConfigurationConditionActionConditionPropertiesPtrOutput added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesArgs) ToLoggingConfigurationConditionActionConditionPropertiesPtrOutputWithContext added in v0.2.0

func (i LoggingConfigurationConditionActionConditionPropertiesArgs) ToLoggingConfigurationConditionActionConditionPropertiesPtrOutputWithContext(ctx context.Context) LoggingConfigurationConditionActionConditionPropertiesPtrOutput

type LoggingConfigurationConditionActionConditionPropertiesInput added in v0.2.0

type LoggingConfigurationConditionActionConditionPropertiesInput interface {
	pulumi.Input

	ToLoggingConfigurationConditionActionConditionPropertiesOutput() LoggingConfigurationConditionActionConditionPropertiesOutput
	ToLoggingConfigurationConditionActionConditionPropertiesOutputWithContext(context.Context) LoggingConfigurationConditionActionConditionPropertiesOutput
}

LoggingConfigurationConditionActionConditionPropertiesInput is an input type that accepts LoggingConfigurationConditionActionConditionPropertiesArgs and LoggingConfigurationConditionActionConditionPropertiesOutput values. You can construct a concrete instance of `LoggingConfigurationConditionActionConditionPropertiesInput` via:

LoggingConfigurationConditionActionConditionPropertiesArgs{...}

type LoggingConfigurationConditionActionConditionPropertiesOutput added in v0.2.0

type LoggingConfigurationConditionActionConditionPropertiesOutput struct{ *pulumi.OutputState }

A single action condition.

func (LoggingConfigurationConditionActionConditionPropertiesOutput) Action added in v0.2.0

Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.

func (LoggingConfigurationConditionActionConditionPropertiesOutput) ElementType added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesOutput) ToLoggingConfigurationConditionActionConditionPropertiesOutput added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesOutput) ToLoggingConfigurationConditionActionConditionPropertiesOutputWithContext added in v0.2.0

func (o LoggingConfigurationConditionActionConditionPropertiesOutput) ToLoggingConfigurationConditionActionConditionPropertiesOutputWithContext(ctx context.Context) LoggingConfigurationConditionActionConditionPropertiesOutput

func (LoggingConfigurationConditionActionConditionPropertiesOutput) ToLoggingConfigurationConditionActionConditionPropertiesPtrOutput added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesOutput) ToLoggingConfigurationConditionActionConditionPropertiesPtrOutputWithContext added in v0.2.0

func (o LoggingConfigurationConditionActionConditionPropertiesOutput) ToLoggingConfigurationConditionActionConditionPropertiesPtrOutputWithContext(ctx context.Context) LoggingConfigurationConditionActionConditionPropertiesPtrOutput

type LoggingConfigurationConditionActionConditionPropertiesPtrInput added in v0.2.0

type LoggingConfigurationConditionActionConditionPropertiesPtrInput interface {
	pulumi.Input

	ToLoggingConfigurationConditionActionConditionPropertiesPtrOutput() LoggingConfigurationConditionActionConditionPropertiesPtrOutput
	ToLoggingConfigurationConditionActionConditionPropertiesPtrOutputWithContext(context.Context) LoggingConfigurationConditionActionConditionPropertiesPtrOutput
}

LoggingConfigurationConditionActionConditionPropertiesPtrInput is an input type that accepts LoggingConfigurationConditionActionConditionPropertiesArgs, LoggingConfigurationConditionActionConditionPropertiesPtr and LoggingConfigurationConditionActionConditionPropertiesPtrOutput values. You can construct a concrete instance of `LoggingConfigurationConditionActionConditionPropertiesPtrInput` via:

        LoggingConfigurationConditionActionConditionPropertiesArgs{...}

or:

        nil

type LoggingConfigurationConditionActionConditionPropertiesPtrOutput added in v0.2.0

type LoggingConfigurationConditionActionConditionPropertiesPtrOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationConditionActionConditionPropertiesPtrOutput) Action added in v0.2.0

Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.

func (LoggingConfigurationConditionActionConditionPropertiesPtrOutput) Elem added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesPtrOutput) ElementType added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesPtrOutput) ToLoggingConfigurationConditionActionConditionPropertiesPtrOutput added in v0.2.0

func (LoggingConfigurationConditionActionConditionPropertiesPtrOutput) ToLoggingConfigurationConditionActionConditionPropertiesPtrOutputWithContext added in v0.2.0

func (o LoggingConfigurationConditionActionConditionPropertiesPtrOutput) ToLoggingConfigurationConditionActionConditionPropertiesPtrOutputWithContext(ctx context.Context) LoggingConfigurationConditionActionConditionPropertiesPtrOutput

type LoggingConfigurationConditionArgs added in v0.2.0

type LoggingConfigurationConditionArgs struct {
	// A single action condition.
	ActionCondition LoggingConfigurationConditionActionConditionPropertiesPtrInput `pulumi:"actionCondition"`
	// A single label name condition.
	LabelNameCondition LoggingConfigurationConditionLabelNameConditionPropertiesPtrInput `pulumi:"labelNameCondition"`
}

func (LoggingConfigurationConditionArgs) ElementType added in v0.2.0

func (LoggingConfigurationConditionArgs) ToLoggingConfigurationConditionOutput added in v0.2.0

func (i LoggingConfigurationConditionArgs) ToLoggingConfigurationConditionOutput() LoggingConfigurationConditionOutput

func (LoggingConfigurationConditionArgs) ToLoggingConfigurationConditionOutputWithContext added in v0.2.0

func (i LoggingConfigurationConditionArgs) ToLoggingConfigurationConditionOutputWithContext(ctx context.Context) LoggingConfigurationConditionOutput

type LoggingConfigurationConditionArray added in v0.2.0

type LoggingConfigurationConditionArray []LoggingConfigurationConditionInput

func (LoggingConfigurationConditionArray) ElementType added in v0.2.0

func (LoggingConfigurationConditionArray) ToLoggingConfigurationConditionArrayOutput added in v0.2.0

func (i LoggingConfigurationConditionArray) ToLoggingConfigurationConditionArrayOutput() LoggingConfigurationConditionArrayOutput

func (LoggingConfigurationConditionArray) ToLoggingConfigurationConditionArrayOutputWithContext added in v0.2.0

func (i LoggingConfigurationConditionArray) ToLoggingConfigurationConditionArrayOutputWithContext(ctx context.Context) LoggingConfigurationConditionArrayOutput

type LoggingConfigurationConditionArrayInput added in v0.2.0

type LoggingConfigurationConditionArrayInput interface {
	pulumi.Input

	ToLoggingConfigurationConditionArrayOutput() LoggingConfigurationConditionArrayOutput
	ToLoggingConfigurationConditionArrayOutputWithContext(context.Context) LoggingConfigurationConditionArrayOutput
}

LoggingConfigurationConditionArrayInput is an input type that accepts LoggingConfigurationConditionArray and LoggingConfigurationConditionArrayOutput values. You can construct a concrete instance of `LoggingConfigurationConditionArrayInput` via:

LoggingConfigurationConditionArray{ LoggingConfigurationConditionArgs{...} }

type LoggingConfigurationConditionArrayOutput added in v0.2.0

type LoggingConfigurationConditionArrayOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationConditionArrayOutput) ElementType added in v0.2.0

func (LoggingConfigurationConditionArrayOutput) Index added in v0.2.0

func (LoggingConfigurationConditionArrayOutput) ToLoggingConfigurationConditionArrayOutput added in v0.2.0

func (o LoggingConfigurationConditionArrayOutput) ToLoggingConfigurationConditionArrayOutput() LoggingConfigurationConditionArrayOutput

func (LoggingConfigurationConditionArrayOutput) ToLoggingConfigurationConditionArrayOutputWithContext added in v0.2.0

func (o LoggingConfigurationConditionArrayOutput) ToLoggingConfigurationConditionArrayOutputWithContext(ctx context.Context) LoggingConfigurationConditionArrayOutput

type LoggingConfigurationConditionInput added in v0.2.0

type LoggingConfigurationConditionInput interface {
	pulumi.Input

	ToLoggingConfigurationConditionOutput() LoggingConfigurationConditionOutput
	ToLoggingConfigurationConditionOutputWithContext(context.Context) LoggingConfigurationConditionOutput
}

LoggingConfigurationConditionInput is an input type that accepts LoggingConfigurationConditionArgs and LoggingConfigurationConditionOutput values. You can construct a concrete instance of `LoggingConfigurationConditionInput` via:

LoggingConfigurationConditionArgs{...}

type LoggingConfigurationConditionLabelNameConditionProperties added in v0.2.0

type LoggingConfigurationConditionLabelNameConditionProperties struct {
	// The label name that a log record must contain in order to meet the condition. This must be a fully qualified label name. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label.
	LabelName string `pulumi:"labelName"`
}

A single label name condition.

type LoggingConfigurationConditionLabelNameConditionPropertiesArgs added in v0.2.0

type LoggingConfigurationConditionLabelNameConditionPropertiesArgs struct {
	// The label name that a log record must contain in order to meet the condition. This must be a fully qualified label name. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label.
	LabelName pulumi.StringInput `pulumi:"labelName"`
}

A single label name condition.

func (LoggingConfigurationConditionLabelNameConditionPropertiesArgs) ElementType added in v0.2.0

func (LoggingConfigurationConditionLabelNameConditionPropertiesArgs) ToLoggingConfigurationConditionLabelNameConditionPropertiesOutput added in v0.2.0

func (LoggingConfigurationConditionLabelNameConditionPropertiesArgs) ToLoggingConfigurationConditionLabelNameConditionPropertiesOutputWithContext added in v0.2.0

func (i LoggingConfigurationConditionLabelNameConditionPropertiesArgs) ToLoggingConfigurationConditionLabelNameConditionPropertiesOutputWithContext(ctx context.Context) LoggingConfigurationConditionLabelNameConditionPropertiesOutput

func (LoggingConfigurationConditionLabelNameConditionPropertiesArgs) ToLoggingConfigurationConditionLabelNameConditionPropertiesPtrOutput added in v0.2.0

func (LoggingConfigurationConditionLabelNameConditionPropertiesArgs) ToLoggingConfigurationConditionLabelNameConditionPropertiesPtrOutputWithContext added in v0.2.0

func (i LoggingConfigurationConditionLabelNameConditionPropertiesArgs) ToLoggingConfigurationConditionLabelNameConditionPropertiesPtrOutputWithContext(ctx context.Context) LoggingConfigurationConditionLabelNameConditionPropertiesPtrOutput

type LoggingConfigurationConditionLabelNameConditionPropertiesInput added in v0.2.0

type LoggingConfigurationConditionLabelNameConditionPropertiesInput interface {
	pulumi.Input

	ToLoggingConfigurationConditionLabelNameConditionPropertiesOutput() LoggingConfigurationConditionLabelNameConditionPropertiesOutput
	ToLoggingConfigurationConditionLabelNameConditionPropertiesOutputWithContext(context.Context) LoggingConfigurationConditionLabelNameConditionPropertiesOutput
}

LoggingConfigurationConditionLabelNameConditionPropertiesInput is an input type that accepts LoggingConfigurationConditionLabelNameConditionPropertiesArgs and LoggingConfigurationConditionLabelNameConditionPropertiesOutput values. You can construct a concrete instance of `LoggingConfigurationConditionLabelNameConditionPropertiesInput` via:

LoggingConfigurationConditionLabelNameConditionPropertiesArgs{...}

type LoggingConfigurationConditionLabelNameConditionPropertiesOutput added in v0.2.0

type LoggingConfigurationConditionLabelNameConditionPropertiesOutput struct{ *pulumi.OutputState }

A single label name condition.

func (LoggingConfigurationConditionLabelNameConditionPropertiesOutput) ElementType added in v0.2.0

func (LoggingConfigurationConditionLabelNameConditionPropertiesOutput) LabelName added in v0.2.0

The label name that a log record must contain in order to meet the condition. This must be a fully qualified label name. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label.

func (LoggingConfigurationConditionLabelNameConditionPropertiesOutput) ToLoggingConfigurationConditionLabelNameConditionPropertiesOutput added in v0.2.0

func (LoggingConfigurationConditionLabelNameConditionPropertiesOutput) ToLoggingConfigurationConditionLabelNameConditionPropertiesOutputWithContext added in v0.2.0

func (o LoggingConfigurationConditionLabelNameConditionPropertiesOutput) ToLoggingConfigurationConditionLabelNameConditionPropertiesOutputWithContext(ctx context.Context) LoggingConfigurationConditionLabelNameConditionPropertiesOutput

func (LoggingConfigurationConditionLabelNameConditionPropertiesOutput) ToLoggingConfigurationConditionLabelNameConditionPropertiesPtrOutput added in v0.2.0

func (LoggingConfigurationConditionLabelNameConditionPropertiesOutput) ToLoggingConfigurationConditionLabelNameConditionPropertiesPtrOutputWithContext added in v0.2.0

func (o LoggingConfigurationConditionLabelNameConditionPropertiesOutput) ToLoggingConfigurationConditionLabelNameConditionPropertiesPtrOutputWithContext(ctx context.Context) LoggingConfigurationConditionLabelNameConditionPropertiesPtrOutput

type LoggingConfigurationConditionLabelNameConditionPropertiesPtrInput added in v0.2.0

type LoggingConfigurationConditionLabelNameConditionPropertiesPtrInput interface {
	pulumi.Input

	ToLoggingConfigurationConditionLabelNameConditionPropertiesPtrOutput() LoggingConfigurationConditionLabelNameConditionPropertiesPtrOutput
	ToLoggingConfigurationConditionLabelNameConditionPropertiesPtrOutputWithContext(context.Context) LoggingConfigurationConditionLabelNameConditionPropertiesPtrOutput
}

LoggingConfigurationConditionLabelNameConditionPropertiesPtrInput is an input type that accepts LoggingConfigurationConditionLabelNameConditionPropertiesArgs, LoggingConfigurationConditionLabelNameConditionPropertiesPtr and LoggingConfigurationConditionLabelNameConditionPropertiesPtrOutput values. You can construct a concrete instance of `LoggingConfigurationConditionLabelNameConditionPropertiesPtrInput` via:

        LoggingConfigurationConditionLabelNameConditionPropertiesArgs{...}

or:

        nil

type LoggingConfigurationConditionLabelNameConditionPropertiesPtrOutput added in v0.2.0

type LoggingConfigurationConditionLabelNameConditionPropertiesPtrOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationConditionLabelNameConditionPropertiesPtrOutput) Elem added in v0.2.0

func (LoggingConfigurationConditionLabelNameConditionPropertiesPtrOutput) ElementType added in v0.2.0

func (LoggingConfigurationConditionLabelNameConditionPropertiesPtrOutput) LabelName added in v0.2.0

The label name that a log record must contain in order to meet the condition. This must be a fully qualified label name. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label.

func (LoggingConfigurationConditionLabelNameConditionPropertiesPtrOutput) ToLoggingConfigurationConditionLabelNameConditionPropertiesPtrOutput added in v0.2.0

func (LoggingConfigurationConditionLabelNameConditionPropertiesPtrOutput) ToLoggingConfigurationConditionLabelNameConditionPropertiesPtrOutputWithContext added in v0.2.0

func (o LoggingConfigurationConditionLabelNameConditionPropertiesPtrOutput) ToLoggingConfigurationConditionLabelNameConditionPropertiesPtrOutputWithContext(ctx context.Context) LoggingConfigurationConditionLabelNameConditionPropertiesPtrOutput

type LoggingConfigurationConditionOutput added in v0.2.0

type LoggingConfigurationConditionOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationConditionOutput) ActionCondition added in v0.2.0

A single action condition.

func (LoggingConfigurationConditionOutput) ElementType added in v0.2.0

func (LoggingConfigurationConditionOutput) LabelNameCondition added in v0.2.0

A single label name condition.

func (LoggingConfigurationConditionOutput) ToLoggingConfigurationConditionOutput added in v0.2.0

func (o LoggingConfigurationConditionOutput) ToLoggingConfigurationConditionOutput() LoggingConfigurationConditionOutput

func (LoggingConfigurationConditionOutput) ToLoggingConfigurationConditionOutputWithContext added in v0.2.0

func (o LoggingConfigurationConditionOutput) ToLoggingConfigurationConditionOutputWithContext(ctx context.Context) LoggingConfigurationConditionOutput

type LoggingConfigurationFieldToMatch

type LoggingConfigurationFieldToMatch struct {
	// Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
	Method interface{} `pulumi:"method"`
	// Inspect the query string. This is the part of a URL that appears after a ? character, if any.
	QueryString interface{} `pulumi:"queryString"`
	// Inspect a single header. Provide the name of the header to inspect, for example, User-Agent or Referer. This setting isn't case sensitive.
	SingleHeader *LoggingConfigurationFieldToMatchSingleHeaderProperties `pulumi:"singleHeader"`
	// Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
	UriPath interface{} `pulumi:"uriPath"`
}

A key-value pair to associate with a resource.

type LoggingConfigurationFieldToMatchArgs

type LoggingConfigurationFieldToMatchArgs struct {
	// Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
	Method pulumi.Input `pulumi:"method"`
	// Inspect the query string. This is the part of a URL that appears after a ? character, if any.
	QueryString pulumi.Input `pulumi:"queryString"`
	// Inspect a single header. Provide the name of the header to inspect, for example, User-Agent or Referer. This setting isn't case sensitive.
	SingleHeader LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrInput `pulumi:"singleHeader"`
	// Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
	UriPath pulumi.Input `pulumi:"uriPath"`
}

A key-value pair to associate with a resource.

func (LoggingConfigurationFieldToMatchArgs) ElementType

func (LoggingConfigurationFieldToMatchArgs) ToLoggingConfigurationFieldToMatchOutput

func (i LoggingConfigurationFieldToMatchArgs) ToLoggingConfigurationFieldToMatchOutput() LoggingConfigurationFieldToMatchOutput

func (LoggingConfigurationFieldToMatchArgs) ToLoggingConfigurationFieldToMatchOutputWithContext

func (i LoggingConfigurationFieldToMatchArgs) ToLoggingConfigurationFieldToMatchOutputWithContext(ctx context.Context) LoggingConfigurationFieldToMatchOutput

type LoggingConfigurationFieldToMatchArray

type LoggingConfigurationFieldToMatchArray []LoggingConfigurationFieldToMatchInput

func (LoggingConfigurationFieldToMatchArray) ElementType

func (LoggingConfigurationFieldToMatchArray) ToLoggingConfigurationFieldToMatchArrayOutput

func (i LoggingConfigurationFieldToMatchArray) ToLoggingConfigurationFieldToMatchArrayOutput() LoggingConfigurationFieldToMatchArrayOutput

func (LoggingConfigurationFieldToMatchArray) ToLoggingConfigurationFieldToMatchArrayOutputWithContext

func (i LoggingConfigurationFieldToMatchArray) ToLoggingConfigurationFieldToMatchArrayOutputWithContext(ctx context.Context) LoggingConfigurationFieldToMatchArrayOutput

type LoggingConfigurationFieldToMatchArrayInput

type LoggingConfigurationFieldToMatchArrayInput interface {
	pulumi.Input

	ToLoggingConfigurationFieldToMatchArrayOutput() LoggingConfigurationFieldToMatchArrayOutput
	ToLoggingConfigurationFieldToMatchArrayOutputWithContext(context.Context) LoggingConfigurationFieldToMatchArrayOutput
}

LoggingConfigurationFieldToMatchArrayInput is an input type that accepts LoggingConfigurationFieldToMatchArray and LoggingConfigurationFieldToMatchArrayOutput values. You can construct a concrete instance of `LoggingConfigurationFieldToMatchArrayInput` via:

LoggingConfigurationFieldToMatchArray{ LoggingConfigurationFieldToMatchArgs{...} }

type LoggingConfigurationFieldToMatchArrayOutput

type LoggingConfigurationFieldToMatchArrayOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationFieldToMatchArrayOutput) ElementType

func (LoggingConfigurationFieldToMatchArrayOutput) Index

func (LoggingConfigurationFieldToMatchArrayOutput) ToLoggingConfigurationFieldToMatchArrayOutput

func (o LoggingConfigurationFieldToMatchArrayOutput) ToLoggingConfigurationFieldToMatchArrayOutput() LoggingConfigurationFieldToMatchArrayOutput

func (LoggingConfigurationFieldToMatchArrayOutput) ToLoggingConfigurationFieldToMatchArrayOutputWithContext

func (o LoggingConfigurationFieldToMatchArrayOutput) ToLoggingConfigurationFieldToMatchArrayOutputWithContext(ctx context.Context) LoggingConfigurationFieldToMatchArrayOutput

type LoggingConfigurationFieldToMatchInput

type LoggingConfigurationFieldToMatchInput interface {
	pulumi.Input

	ToLoggingConfigurationFieldToMatchOutput() LoggingConfigurationFieldToMatchOutput
	ToLoggingConfigurationFieldToMatchOutputWithContext(context.Context) LoggingConfigurationFieldToMatchOutput
}

LoggingConfigurationFieldToMatchInput is an input type that accepts LoggingConfigurationFieldToMatchArgs and LoggingConfigurationFieldToMatchOutput values. You can construct a concrete instance of `LoggingConfigurationFieldToMatchInput` via:

LoggingConfigurationFieldToMatchArgs{...}

type LoggingConfigurationFieldToMatchOutput

type LoggingConfigurationFieldToMatchOutput struct{ *pulumi.OutputState }

A key-value pair to associate with a resource.

func (LoggingConfigurationFieldToMatchOutput) ElementType

func (LoggingConfigurationFieldToMatchOutput) Method

Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.

func (LoggingConfigurationFieldToMatchOutput) QueryString

Inspect the query string. This is the part of a URL that appears after a ? character, if any.

func (LoggingConfigurationFieldToMatchOutput) SingleHeader

Inspect a single header. Provide the name of the header to inspect, for example, User-Agent or Referer. This setting isn't case sensitive.

func (LoggingConfigurationFieldToMatchOutput) ToLoggingConfigurationFieldToMatchOutput

func (o LoggingConfigurationFieldToMatchOutput) ToLoggingConfigurationFieldToMatchOutput() LoggingConfigurationFieldToMatchOutput

func (LoggingConfigurationFieldToMatchOutput) ToLoggingConfigurationFieldToMatchOutputWithContext

func (o LoggingConfigurationFieldToMatchOutput) ToLoggingConfigurationFieldToMatchOutputWithContext(ctx context.Context) LoggingConfigurationFieldToMatchOutput

func (LoggingConfigurationFieldToMatchOutput) UriPath

Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

type LoggingConfigurationFieldToMatchSingleHeaderProperties added in v0.2.0

type LoggingConfigurationFieldToMatchSingleHeaderProperties struct {
	// The name of the query header to inspect.
	Name string `pulumi:"name"`
}

Inspect a single header. Provide the name of the header to inspect, for example, User-Agent or Referer. This setting isn't case sensitive.

type LoggingConfigurationFieldToMatchSingleHeaderPropertiesArgs added in v0.2.0

type LoggingConfigurationFieldToMatchSingleHeaderPropertiesArgs struct {
	// The name of the query header to inspect.
	Name pulumi.StringInput `pulumi:"name"`
}

Inspect a single header. Provide the name of the header to inspect, for example, User-Agent or Referer. This setting isn't case sensitive.

func (LoggingConfigurationFieldToMatchSingleHeaderPropertiesArgs) ElementType added in v0.2.0

func (LoggingConfigurationFieldToMatchSingleHeaderPropertiesArgs) ToLoggingConfigurationFieldToMatchSingleHeaderPropertiesOutput added in v0.2.0

func (LoggingConfigurationFieldToMatchSingleHeaderPropertiesArgs) ToLoggingConfigurationFieldToMatchSingleHeaderPropertiesOutputWithContext added in v0.2.0

func (i LoggingConfigurationFieldToMatchSingleHeaderPropertiesArgs) ToLoggingConfigurationFieldToMatchSingleHeaderPropertiesOutputWithContext(ctx context.Context) LoggingConfigurationFieldToMatchSingleHeaderPropertiesOutput

func (LoggingConfigurationFieldToMatchSingleHeaderPropertiesArgs) ToLoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutput added in v0.2.0

func (LoggingConfigurationFieldToMatchSingleHeaderPropertiesArgs) ToLoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutputWithContext added in v0.2.0

func (i LoggingConfigurationFieldToMatchSingleHeaderPropertiesArgs) ToLoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutputWithContext(ctx context.Context) LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutput

type LoggingConfigurationFieldToMatchSingleHeaderPropertiesInput added in v0.2.0

type LoggingConfigurationFieldToMatchSingleHeaderPropertiesInput interface {
	pulumi.Input

	ToLoggingConfigurationFieldToMatchSingleHeaderPropertiesOutput() LoggingConfigurationFieldToMatchSingleHeaderPropertiesOutput
	ToLoggingConfigurationFieldToMatchSingleHeaderPropertiesOutputWithContext(context.Context) LoggingConfigurationFieldToMatchSingleHeaderPropertiesOutput
}

LoggingConfigurationFieldToMatchSingleHeaderPropertiesInput is an input type that accepts LoggingConfigurationFieldToMatchSingleHeaderPropertiesArgs and LoggingConfigurationFieldToMatchSingleHeaderPropertiesOutput values. You can construct a concrete instance of `LoggingConfigurationFieldToMatchSingleHeaderPropertiesInput` via:

LoggingConfigurationFieldToMatchSingleHeaderPropertiesArgs{...}

type LoggingConfigurationFieldToMatchSingleHeaderPropertiesOutput added in v0.2.0

type LoggingConfigurationFieldToMatchSingleHeaderPropertiesOutput struct{ *pulumi.OutputState }

Inspect a single header. Provide the name of the header to inspect, for example, User-Agent or Referer. This setting isn't case sensitive.

func (LoggingConfigurationFieldToMatchSingleHeaderPropertiesOutput) ElementType added in v0.2.0

func (LoggingConfigurationFieldToMatchSingleHeaderPropertiesOutput) Name added in v0.2.0

The name of the query header to inspect.

func (LoggingConfigurationFieldToMatchSingleHeaderPropertiesOutput) ToLoggingConfigurationFieldToMatchSingleHeaderPropertiesOutput added in v0.2.0

func (LoggingConfigurationFieldToMatchSingleHeaderPropertiesOutput) ToLoggingConfigurationFieldToMatchSingleHeaderPropertiesOutputWithContext added in v0.2.0

func (o LoggingConfigurationFieldToMatchSingleHeaderPropertiesOutput) ToLoggingConfigurationFieldToMatchSingleHeaderPropertiesOutputWithContext(ctx context.Context) LoggingConfigurationFieldToMatchSingleHeaderPropertiesOutput

func (LoggingConfigurationFieldToMatchSingleHeaderPropertiesOutput) ToLoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutput added in v0.2.0

func (LoggingConfigurationFieldToMatchSingleHeaderPropertiesOutput) ToLoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutputWithContext added in v0.2.0

func (o LoggingConfigurationFieldToMatchSingleHeaderPropertiesOutput) ToLoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutputWithContext(ctx context.Context) LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutput

type LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrInput added in v0.2.0

type LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrInput interface {
	pulumi.Input

	ToLoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutput() LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutput
	ToLoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutputWithContext(context.Context) LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutput
}

LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrInput is an input type that accepts LoggingConfigurationFieldToMatchSingleHeaderPropertiesArgs, LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtr and LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutput values. You can construct a concrete instance of `LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrInput` via:

        LoggingConfigurationFieldToMatchSingleHeaderPropertiesArgs{...}

or:

        nil

type LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutput added in v0.2.0

type LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutput) Elem added in v0.2.0

func (LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutput) ElementType added in v0.2.0

func (LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutput) Name added in v0.2.0

The name of the query header to inspect.

func (LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutput) ToLoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutput added in v0.2.0

func (LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutput) ToLoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutputWithContext added in v0.2.0

func (o LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutput) ToLoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutputWithContext(ctx context.Context) LoggingConfigurationFieldToMatchSingleHeaderPropertiesPtrOutput

type LoggingConfigurationFilter added in v0.2.0

type LoggingConfigurationFilter struct {
	// How to handle logs that satisfy the filter's conditions and requirement.
	Behavior LoggingConfigurationFilterBehavior `pulumi:"behavior"`
	// Match conditions for the filter.
	Conditions []LoggingConfigurationCondition `pulumi:"conditions"`
	// Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.
	Requirement LoggingConfigurationFilterRequirement `pulumi:"requirement"`
}

type LoggingConfigurationFilterArgs added in v0.2.0

type LoggingConfigurationFilterArgs struct {
	// How to handle logs that satisfy the filter's conditions and requirement.
	Behavior LoggingConfigurationFilterBehaviorInput `pulumi:"behavior"`
	// Match conditions for the filter.
	Conditions LoggingConfigurationConditionArrayInput `pulumi:"conditions"`
	// Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.
	Requirement LoggingConfigurationFilterRequirementInput `pulumi:"requirement"`
}

func (LoggingConfigurationFilterArgs) ElementType added in v0.2.0

func (LoggingConfigurationFilterArgs) ToLoggingConfigurationFilterOutput added in v0.2.0

func (i LoggingConfigurationFilterArgs) ToLoggingConfigurationFilterOutput() LoggingConfigurationFilterOutput

func (LoggingConfigurationFilterArgs) ToLoggingConfigurationFilterOutputWithContext added in v0.2.0

func (i LoggingConfigurationFilterArgs) ToLoggingConfigurationFilterOutputWithContext(ctx context.Context) LoggingConfigurationFilterOutput

type LoggingConfigurationFilterArray added in v0.2.0

type LoggingConfigurationFilterArray []LoggingConfigurationFilterInput

func (LoggingConfigurationFilterArray) ElementType added in v0.2.0

func (LoggingConfigurationFilterArray) ToLoggingConfigurationFilterArrayOutput added in v0.2.0

func (i LoggingConfigurationFilterArray) ToLoggingConfigurationFilterArrayOutput() LoggingConfigurationFilterArrayOutput

func (LoggingConfigurationFilterArray) ToLoggingConfigurationFilterArrayOutputWithContext added in v0.2.0

func (i LoggingConfigurationFilterArray) ToLoggingConfigurationFilterArrayOutputWithContext(ctx context.Context) LoggingConfigurationFilterArrayOutput

type LoggingConfigurationFilterArrayInput added in v0.2.0

type LoggingConfigurationFilterArrayInput interface {
	pulumi.Input

	ToLoggingConfigurationFilterArrayOutput() LoggingConfigurationFilterArrayOutput
	ToLoggingConfigurationFilterArrayOutputWithContext(context.Context) LoggingConfigurationFilterArrayOutput
}

LoggingConfigurationFilterArrayInput is an input type that accepts LoggingConfigurationFilterArray and LoggingConfigurationFilterArrayOutput values. You can construct a concrete instance of `LoggingConfigurationFilterArrayInput` via:

LoggingConfigurationFilterArray{ LoggingConfigurationFilterArgs{...} }

type LoggingConfigurationFilterArrayOutput added in v0.2.0

type LoggingConfigurationFilterArrayOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationFilterArrayOutput) ElementType added in v0.2.0

func (LoggingConfigurationFilterArrayOutput) Index added in v0.2.0

func (LoggingConfigurationFilterArrayOutput) ToLoggingConfigurationFilterArrayOutput added in v0.2.0

func (o LoggingConfigurationFilterArrayOutput) ToLoggingConfigurationFilterArrayOutput() LoggingConfigurationFilterArrayOutput

func (LoggingConfigurationFilterArrayOutput) ToLoggingConfigurationFilterArrayOutputWithContext added in v0.2.0

func (o LoggingConfigurationFilterArrayOutput) ToLoggingConfigurationFilterArrayOutputWithContext(ctx context.Context) LoggingConfigurationFilterArrayOutput

type LoggingConfigurationFilterBehavior added in v0.2.0

type LoggingConfigurationFilterBehavior string

How to handle logs that satisfy the filter's conditions and requirement.

func (LoggingConfigurationFilterBehavior) ElementType added in v0.2.0

func (LoggingConfigurationFilterBehavior) ToLoggingConfigurationFilterBehaviorOutput added in v0.2.0

func (e LoggingConfigurationFilterBehavior) ToLoggingConfigurationFilterBehaviorOutput() LoggingConfigurationFilterBehaviorOutput

func (LoggingConfigurationFilterBehavior) ToLoggingConfigurationFilterBehaviorOutputWithContext added in v0.2.0

func (e LoggingConfigurationFilterBehavior) ToLoggingConfigurationFilterBehaviorOutputWithContext(ctx context.Context) LoggingConfigurationFilterBehaviorOutput

func (LoggingConfigurationFilterBehavior) ToLoggingConfigurationFilterBehaviorPtrOutput added in v0.2.0

func (e LoggingConfigurationFilterBehavior) ToLoggingConfigurationFilterBehaviorPtrOutput() LoggingConfigurationFilterBehaviorPtrOutput

func (LoggingConfigurationFilterBehavior) ToLoggingConfigurationFilterBehaviorPtrOutputWithContext added in v0.2.0

func (e LoggingConfigurationFilterBehavior) ToLoggingConfigurationFilterBehaviorPtrOutputWithContext(ctx context.Context) LoggingConfigurationFilterBehaviorPtrOutput

func (LoggingConfigurationFilterBehavior) ToStringOutput added in v0.2.0

func (LoggingConfigurationFilterBehavior) ToStringOutputWithContext added in v0.2.0

func (e LoggingConfigurationFilterBehavior) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (LoggingConfigurationFilterBehavior) ToStringPtrOutput added in v0.2.0

func (LoggingConfigurationFilterBehavior) ToStringPtrOutputWithContext added in v0.2.0

func (e LoggingConfigurationFilterBehavior) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type LoggingConfigurationFilterBehaviorInput added in v0.2.0

type LoggingConfigurationFilterBehaviorInput interface {
	pulumi.Input

	ToLoggingConfigurationFilterBehaviorOutput() LoggingConfigurationFilterBehaviorOutput
	ToLoggingConfigurationFilterBehaviorOutputWithContext(context.Context) LoggingConfigurationFilterBehaviorOutput
}

LoggingConfigurationFilterBehaviorInput is an input type that accepts values of the LoggingConfigurationFilterBehavior enum A concrete instance of `LoggingConfigurationFilterBehaviorInput` can be one of the following:

LoggingConfigurationFilterBehaviorKeep
LoggingConfigurationFilterBehaviorDrop

type LoggingConfigurationFilterBehaviorOutput added in v0.2.0

type LoggingConfigurationFilterBehaviorOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationFilterBehaviorOutput) ElementType added in v0.2.0

func (LoggingConfigurationFilterBehaviorOutput) ToLoggingConfigurationFilterBehaviorOutput added in v0.2.0

func (o LoggingConfigurationFilterBehaviorOutput) ToLoggingConfigurationFilterBehaviorOutput() LoggingConfigurationFilterBehaviorOutput

func (LoggingConfigurationFilterBehaviorOutput) ToLoggingConfigurationFilterBehaviorOutputWithContext added in v0.2.0

func (o LoggingConfigurationFilterBehaviorOutput) ToLoggingConfigurationFilterBehaviorOutputWithContext(ctx context.Context) LoggingConfigurationFilterBehaviorOutput

func (LoggingConfigurationFilterBehaviorOutput) ToLoggingConfigurationFilterBehaviorPtrOutput added in v0.2.0

func (o LoggingConfigurationFilterBehaviorOutput) ToLoggingConfigurationFilterBehaviorPtrOutput() LoggingConfigurationFilterBehaviorPtrOutput

func (LoggingConfigurationFilterBehaviorOutput) ToLoggingConfigurationFilterBehaviorPtrOutputWithContext added in v0.2.0

func (o LoggingConfigurationFilterBehaviorOutput) ToLoggingConfigurationFilterBehaviorPtrOutputWithContext(ctx context.Context) LoggingConfigurationFilterBehaviorPtrOutput

func (LoggingConfigurationFilterBehaviorOutput) ToStringOutput added in v0.2.0

func (LoggingConfigurationFilterBehaviorOutput) ToStringOutputWithContext added in v0.2.0

func (LoggingConfigurationFilterBehaviorOutput) ToStringPtrOutput added in v0.2.0

func (LoggingConfigurationFilterBehaviorOutput) ToStringPtrOutputWithContext added in v0.2.0

type LoggingConfigurationFilterBehaviorPtrInput added in v0.2.0

type LoggingConfigurationFilterBehaviorPtrInput interface {
	pulumi.Input

	ToLoggingConfigurationFilterBehaviorPtrOutput() LoggingConfigurationFilterBehaviorPtrOutput
	ToLoggingConfigurationFilterBehaviorPtrOutputWithContext(context.Context) LoggingConfigurationFilterBehaviorPtrOutput
}

func LoggingConfigurationFilterBehaviorPtr added in v0.2.0

func LoggingConfigurationFilterBehaviorPtr(v string) LoggingConfigurationFilterBehaviorPtrInput

type LoggingConfigurationFilterBehaviorPtrOutput added in v0.2.0

type LoggingConfigurationFilterBehaviorPtrOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationFilterBehaviorPtrOutput) Elem added in v0.2.0

func (LoggingConfigurationFilterBehaviorPtrOutput) ElementType added in v0.2.0

func (LoggingConfigurationFilterBehaviorPtrOutput) ToLoggingConfigurationFilterBehaviorPtrOutput added in v0.2.0

func (o LoggingConfigurationFilterBehaviorPtrOutput) ToLoggingConfigurationFilterBehaviorPtrOutput() LoggingConfigurationFilterBehaviorPtrOutput

func (LoggingConfigurationFilterBehaviorPtrOutput) ToLoggingConfigurationFilterBehaviorPtrOutputWithContext added in v0.2.0

func (o LoggingConfigurationFilterBehaviorPtrOutput) ToLoggingConfigurationFilterBehaviorPtrOutputWithContext(ctx context.Context) LoggingConfigurationFilterBehaviorPtrOutput

func (LoggingConfigurationFilterBehaviorPtrOutput) ToStringPtrOutput added in v0.2.0

func (LoggingConfigurationFilterBehaviorPtrOutput) ToStringPtrOutputWithContext added in v0.2.0

type LoggingConfigurationFilterInput added in v0.2.0

type LoggingConfigurationFilterInput interface {
	pulumi.Input

	ToLoggingConfigurationFilterOutput() LoggingConfigurationFilterOutput
	ToLoggingConfigurationFilterOutputWithContext(context.Context) LoggingConfigurationFilterOutput
}

LoggingConfigurationFilterInput is an input type that accepts LoggingConfigurationFilterArgs and LoggingConfigurationFilterOutput values. You can construct a concrete instance of `LoggingConfigurationFilterInput` via:

LoggingConfigurationFilterArgs{...}

type LoggingConfigurationFilterOutput added in v0.2.0

type LoggingConfigurationFilterOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationFilterOutput) Behavior added in v0.2.0

How to handle logs that satisfy the filter's conditions and requirement.

func (LoggingConfigurationFilterOutput) Conditions added in v0.2.0

Match conditions for the filter.

func (LoggingConfigurationFilterOutput) ElementType added in v0.2.0

func (LoggingConfigurationFilterOutput) Requirement added in v0.2.0

Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.

func (LoggingConfigurationFilterOutput) ToLoggingConfigurationFilterOutput added in v0.2.0

func (o LoggingConfigurationFilterOutput) ToLoggingConfigurationFilterOutput() LoggingConfigurationFilterOutput

func (LoggingConfigurationFilterOutput) ToLoggingConfigurationFilterOutputWithContext added in v0.2.0

func (o LoggingConfigurationFilterOutput) ToLoggingConfigurationFilterOutputWithContext(ctx context.Context) LoggingConfigurationFilterOutput

type LoggingConfigurationFilterRequirement added in v0.2.0

type LoggingConfigurationFilterRequirement string

Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.

func (LoggingConfigurationFilterRequirement) ElementType added in v0.2.0

func (LoggingConfigurationFilterRequirement) ToLoggingConfigurationFilterRequirementOutput added in v0.2.0

func (e LoggingConfigurationFilterRequirement) ToLoggingConfigurationFilterRequirementOutput() LoggingConfigurationFilterRequirementOutput

func (LoggingConfigurationFilterRequirement) ToLoggingConfigurationFilterRequirementOutputWithContext added in v0.2.0

func (e LoggingConfigurationFilterRequirement) ToLoggingConfigurationFilterRequirementOutputWithContext(ctx context.Context) LoggingConfigurationFilterRequirementOutput

func (LoggingConfigurationFilterRequirement) ToLoggingConfigurationFilterRequirementPtrOutput added in v0.2.0

func (e LoggingConfigurationFilterRequirement) ToLoggingConfigurationFilterRequirementPtrOutput() LoggingConfigurationFilterRequirementPtrOutput

func (LoggingConfigurationFilterRequirement) ToLoggingConfigurationFilterRequirementPtrOutputWithContext added in v0.2.0

func (e LoggingConfigurationFilterRequirement) ToLoggingConfigurationFilterRequirementPtrOutputWithContext(ctx context.Context) LoggingConfigurationFilterRequirementPtrOutput

func (LoggingConfigurationFilterRequirement) ToStringOutput added in v0.2.0

func (LoggingConfigurationFilterRequirement) ToStringOutputWithContext added in v0.2.0

func (e LoggingConfigurationFilterRequirement) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (LoggingConfigurationFilterRequirement) ToStringPtrOutput added in v0.2.0

func (LoggingConfigurationFilterRequirement) ToStringPtrOutputWithContext added in v0.2.0

func (e LoggingConfigurationFilterRequirement) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type LoggingConfigurationFilterRequirementInput added in v0.2.0

type LoggingConfigurationFilterRequirementInput interface {
	pulumi.Input

	ToLoggingConfigurationFilterRequirementOutput() LoggingConfigurationFilterRequirementOutput
	ToLoggingConfigurationFilterRequirementOutputWithContext(context.Context) LoggingConfigurationFilterRequirementOutput
}

LoggingConfigurationFilterRequirementInput is an input type that accepts values of the LoggingConfigurationFilterRequirement enum A concrete instance of `LoggingConfigurationFilterRequirementInput` can be one of the following:

LoggingConfigurationFilterRequirementMeetsAll
LoggingConfigurationFilterRequirementMeetsAny

type LoggingConfigurationFilterRequirementOutput added in v0.2.0

type LoggingConfigurationFilterRequirementOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationFilterRequirementOutput) ElementType added in v0.2.0

func (LoggingConfigurationFilterRequirementOutput) ToLoggingConfigurationFilterRequirementOutput added in v0.2.0

func (o LoggingConfigurationFilterRequirementOutput) ToLoggingConfigurationFilterRequirementOutput() LoggingConfigurationFilterRequirementOutput

func (LoggingConfigurationFilterRequirementOutput) ToLoggingConfigurationFilterRequirementOutputWithContext added in v0.2.0

func (o LoggingConfigurationFilterRequirementOutput) ToLoggingConfigurationFilterRequirementOutputWithContext(ctx context.Context) LoggingConfigurationFilterRequirementOutput

func (LoggingConfigurationFilterRequirementOutput) ToLoggingConfigurationFilterRequirementPtrOutput added in v0.2.0

func (o LoggingConfigurationFilterRequirementOutput) ToLoggingConfigurationFilterRequirementPtrOutput() LoggingConfigurationFilterRequirementPtrOutput

func (LoggingConfigurationFilterRequirementOutput) ToLoggingConfigurationFilterRequirementPtrOutputWithContext added in v0.2.0

func (o LoggingConfigurationFilterRequirementOutput) ToLoggingConfigurationFilterRequirementPtrOutputWithContext(ctx context.Context) LoggingConfigurationFilterRequirementPtrOutput

func (LoggingConfigurationFilterRequirementOutput) ToStringOutput added in v0.2.0

func (LoggingConfigurationFilterRequirementOutput) ToStringOutputWithContext added in v0.2.0

func (LoggingConfigurationFilterRequirementOutput) ToStringPtrOutput added in v0.2.0

func (LoggingConfigurationFilterRequirementOutput) ToStringPtrOutputWithContext added in v0.2.0

type LoggingConfigurationFilterRequirementPtrInput added in v0.2.0

type LoggingConfigurationFilterRequirementPtrInput interface {
	pulumi.Input

	ToLoggingConfigurationFilterRequirementPtrOutput() LoggingConfigurationFilterRequirementPtrOutput
	ToLoggingConfigurationFilterRequirementPtrOutputWithContext(context.Context) LoggingConfigurationFilterRequirementPtrOutput
}

func LoggingConfigurationFilterRequirementPtr added in v0.2.0

func LoggingConfigurationFilterRequirementPtr(v string) LoggingConfigurationFilterRequirementPtrInput

type LoggingConfigurationFilterRequirementPtrOutput added in v0.2.0

type LoggingConfigurationFilterRequirementPtrOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationFilterRequirementPtrOutput) Elem added in v0.2.0

func (LoggingConfigurationFilterRequirementPtrOutput) ElementType added in v0.2.0

func (LoggingConfigurationFilterRequirementPtrOutput) ToLoggingConfigurationFilterRequirementPtrOutput added in v0.2.0

func (o LoggingConfigurationFilterRequirementPtrOutput) ToLoggingConfigurationFilterRequirementPtrOutput() LoggingConfigurationFilterRequirementPtrOutput

func (LoggingConfigurationFilterRequirementPtrOutput) ToLoggingConfigurationFilterRequirementPtrOutputWithContext added in v0.2.0

func (o LoggingConfigurationFilterRequirementPtrOutput) ToLoggingConfigurationFilterRequirementPtrOutputWithContext(ctx context.Context) LoggingConfigurationFilterRequirementPtrOutput

func (LoggingConfigurationFilterRequirementPtrOutput) ToStringPtrOutput added in v0.2.0

func (LoggingConfigurationFilterRequirementPtrOutput) ToStringPtrOutputWithContext added in v0.2.0

type LoggingConfigurationInput

type LoggingConfigurationInput interface {
	pulumi.Input

	ToLoggingConfigurationOutput() LoggingConfigurationOutput
	ToLoggingConfigurationOutputWithContext(ctx context.Context) LoggingConfigurationOutput
}

type LoggingConfigurationLoggingFilterPropertiesDefaultBehavior added in v0.2.0

type LoggingConfigurationLoggingFilterPropertiesDefaultBehavior string

Default handling for logs that don't match any of the specified filtering conditions.

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehavior) ElementType added in v0.2.0

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehavior) ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput added in v0.2.0

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehavior) ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutputWithContext added in v0.2.0

func (e LoggingConfigurationLoggingFilterPropertiesDefaultBehavior) ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutputWithContext(ctx context.Context) LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehavior) ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput added in v0.2.0

func (e LoggingConfigurationLoggingFilterPropertiesDefaultBehavior) ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput() LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehavior) ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutputWithContext added in v0.2.0

func (e LoggingConfigurationLoggingFilterPropertiesDefaultBehavior) ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutputWithContext(ctx context.Context) LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehavior) ToStringOutput added in v0.2.0

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehavior) ToStringOutputWithContext added in v0.2.0

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehavior) ToStringPtrOutput added in v0.2.0

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehavior) ToStringPtrOutputWithContext added in v0.2.0

type LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorInput added in v0.2.0

type LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorInput interface {
	pulumi.Input

	ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput() LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput
	ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutputWithContext(context.Context) LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput
}

LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorInput is an input type that accepts values of the LoggingConfigurationLoggingFilterPropertiesDefaultBehavior enum A concrete instance of `LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorInput` can be one of the following:

LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorKeep
LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorDrop

type LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput added in v0.2.0

type LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput) ElementType added in v0.2.0

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput) ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput added in v0.2.0

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput) ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutputWithContext added in v0.2.0

func (o LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput) ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutputWithContext(ctx context.Context) LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput) ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput added in v0.2.0

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput) ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutputWithContext added in v0.2.0

func (o LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput) ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutputWithContext(ctx context.Context) LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput) ToStringOutput added in v0.2.0

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput) ToStringOutputWithContext added in v0.2.0

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput) ToStringPtrOutput added in v0.2.0

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorOutput) ToStringPtrOutputWithContext added in v0.2.0

type LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrInput added in v0.2.0

type LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrInput interface {
	pulumi.Input

	ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput() LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput
	ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutputWithContext(context.Context) LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput
}

func LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtr added in v0.2.0

func LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtr(v string) LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrInput

type LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput added in v0.2.0

type LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput) Elem added in v0.2.0

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput) ElementType added in v0.2.0

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput) ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput added in v0.2.0

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput) ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutputWithContext added in v0.2.0

func (o LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput) ToLoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutputWithContext(ctx context.Context) LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput) ToStringPtrOutput added in v0.2.0

func (LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorPtrOutput) ToStringPtrOutputWithContext added in v0.2.0

type LoggingConfigurationOutput

type LoggingConfigurationOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationOutput) ElementType

func (LoggingConfigurationOutput) ElementType() reflect.Type

func (LoggingConfigurationOutput) LogDestinationConfigs added in v0.17.0

func (o LoggingConfigurationOutput) LogDestinationConfigs() pulumi.StringArrayOutput

The Amazon Resource Names (ARNs) of the logging destinations that you want to associate with the web ACL.

func (LoggingConfigurationOutput) LoggingFilter added in v0.17.0

Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation.

func (LoggingConfigurationOutput) ManagedByFirewallManager added in v0.17.0

func (o LoggingConfigurationOutput) ManagedByFirewallManager() pulumi.BoolOutput

Indicates whether the logging configuration was created by AWS Firewall Manager, as part of an AWS WAF policy configuration. If true, only Firewall Manager can modify or delete the configuration.

func (LoggingConfigurationOutput) RedactedFields added in v0.17.0

The parts of the request that you want to keep out of the logs. For example, if you redact the HEADER field, the HEADER field in the firehose will be xxx.

func (LoggingConfigurationOutput) ResourceArn added in v0.17.0

The Amazon Resource Name (ARN) of the web ACL that you want to associate with LogDestinationConfigs.

func (LoggingConfigurationOutput) ToLoggingConfigurationOutput

func (o LoggingConfigurationOutput) ToLoggingConfigurationOutput() LoggingConfigurationOutput

func (LoggingConfigurationOutput) ToLoggingConfigurationOutputWithContext

func (o LoggingConfigurationOutput) ToLoggingConfigurationOutputWithContext(ctx context.Context) LoggingConfigurationOutput

type LoggingConfigurationState

type LoggingConfigurationState struct {
}

func (LoggingConfigurationState) ElementType

func (LoggingConfigurationState) ElementType() reflect.Type

type LoggingFilterProperties added in v0.2.0

type LoggingFilterProperties struct {
	// Default handling for logs that don't match any of the specified filtering conditions.
	DefaultBehavior LoggingConfigurationLoggingFilterPropertiesDefaultBehavior `pulumi:"defaultBehavior"`
	// The filters that you want to apply to the logs.
	Filters []LoggingConfigurationFilter `pulumi:"filters"`
}

Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation.

type LoggingFilterPropertiesArgs added in v0.2.0

type LoggingFilterPropertiesArgs struct {
	// Default handling for logs that don't match any of the specified filtering conditions.
	DefaultBehavior LoggingConfigurationLoggingFilterPropertiesDefaultBehaviorInput `pulumi:"defaultBehavior"`
	// The filters that you want to apply to the logs.
	Filters LoggingConfigurationFilterArrayInput `pulumi:"filters"`
}

Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation.

func (LoggingFilterPropertiesArgs) ElementType added in v0.2.0

func (LoggingFilterPropertiesArgs) ToLoggingFilterPropertiesOutput added in v0.2.0

func (i LoggingFilterPropertiesArgs) ToLoggingFilterPropertiesOutput() LoggingFilterPropertiesOutput

func (LoggingFilterPropertiesArgs) ToLoggingFilterPropertiesOutputWithContext added in v0.2.0

func (i LoggingFilterPropertiesArgs) ToLoggingFilterPropertiesOutputWithContext(ctx context.Context) LoggingFilterPropertiesOutput

func (LoggingFilterPropertiesArgs) ToLoggingFilterPropertiesPtrOutput added in v0.2.0

func (i LoggingFilterPropertiesArgs) ToLoggingFilterPropertiesPtrOutput() LoggingFilterPropertiesPtrOutput

func (LoggingFilterPropertiesArgs) ToLoggingFilterPropertiesPtrOutputWithContext added in v0.2.0

func (i LoggingFilterPropertiesArgs) ToLoggingFilterPropertiesPtrOutputWithContext(ctx context.Context) LoggingFilterPropertiesPtrOutput

type LoggingFilterPropertiesInput added in v0.2.0

type LoggingFilterPropertiesInput interface {
	pulumi.Input

	ToLoggingFilterPropertiesOutput() LoggingFilterPropertiesOutput
	ToLoggingFilterPropertiesOutputWithContext(context.Context) LoggingFilterPropertiesOutput
}

LoggingFilterPropertiesInput is an input type that accepts LoggingFilterPropertiesArgs and LoggingFilterPropertiesOutput values. You can construct a concrete instance of `LoggingFilterPropertiesInput` via:

LoggingFilterPropertiesArgs{...}

type LoggingFilterPropertiesOutput added in v0.2.0

type LoggingFilterPropertiesOutput struct{ *pulumi.OutputState }

Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation.

func (LoggingFilterPropertiesOutput) DefaultBehavior added in v0.2.0

Default handling for logs that don't match any of the specified filtering conditions.

func (LoggingFilterPropertiesOutput) ElementType added in v0.2.0

func (LoggingFilterPropertiesOutput) Filters added in v0.2.0

The filters that you want to apply to the logs.

func (LoggingFilterPropertiesOutput) ToLoggingFilterPropertiesOutput added in v0.2.0

func (o LoggingFilterPropertiesOutput) ToLoggingFilterPropertiesOutput() LoggingFilterPropertiesOutput

func (LoggingFilterPropertiesOutput) ToLoggingFilterPropertiesOutputWithContext added in v0.2.0

func (o LoggingFilterPropertiesOutput) ToLoggingFilterPropertiesOutputWithContext(ctx context.Context) LoggingFilterPropertiesOutput

func (LoggingFilterPropertiesOutput) ToLoggingFilterPropertiesPtrOutput added in v0.2.0

func (o LoggingFilterPropertiesOutput) ToLoggingFilterPropertiesPtrOutput() LoggingFilterPropertiesPtrOutput

func (LoggingFilterPropertiesOutput) ToLoggingFilterPropertiesPtrOutputWithContext added in v0.2.0

func (o LoggingFilterPropertiesOutput) ToLoggingFilterPropertiesPtrOutputWithContext(ctx context.Context) LoggingFilterPropertiesPtrOutput

type LoggingFilterPropertiesPtrInput added in v0.2.0

type LoggingFilterPropertiesPtrInput interface {
	pulumi.Input

	ToLoggingFilterPropertiesPtrOutput() LoggingFilterPropertiesPtrOutput
	ToLoggingFilterPropertiesPtrOutputWithContext(context.Context) LoggingFilterPropertiesPtrOutput
}

LoggingFilterPropertiesPtrInput is an input type that accepts LoggingFilterPropertiesArgs, LoggingFilterPropertiesPtr and LoggingFilterPropertiesPtrOutput values. You can construct a concrete instance of `LoggingFilterPropertiesPtrInput` via:

        LoggingFilterPropertiesArgs{...}

or:

        nil

func LoggingFilterPropertiesPtr added in v0.2.0

func LoggingFilterPropertiesPtr(v *LoggingFilterPropertiesArgs) LoggingFilterPropertiesPtrInput

type LoggingFilterPropertiesPtrOutput added in v0.2.0

type LoggingFilterPropertiesPtrOutput struct{ *pulumi.OutputState }

func (LoggingFilterPropertiesPtrOutput) DefaultBehavior added in v0.2.0

Default handling for logs that don't match any of the specified filtering conditions.

func (LoggingFilterPropertiesPtrOutput) Elem added in v0.2.0

func (LoggingFilterPropertiesPtrOutput) ElementType added in v0.2.0

func (LoggingFilterPropertiesPtrOutput) Filters added in v0.2.0

The filters that you want to apply to the logs.

func (LoggingFilterPropertiesPtrOutput) ToLoggingFilterPropertiesPtrOutput added in v0.2.0

func (o LoggingFilterPropertiesPtrOutput) ToLoggingFilterPropertiesPtrOutput() LoggingFilterPropertiesPtrOutput

func (LoggingFilterPropertiesPtrOutput) ToLoggingFilterPropertiesPtrOutputWithContext added in v0.2.0

func (o LoggingFilterPropertiesPtrOutput) ToLoggingFilterPropertiesPtrOutputWithContext(ctx context.Context) LoggingFilterPropertiesPtrOutput

type LookupIpSetArgs added in v0.72.0

type LookupIpSetArgs struct {
	// The ID of the IP set.
	Id string `pulumi:"id"`
	// The name of the IP set. You cannot change the name of an `IPSet` after you create it.
	Name string `pulumi:"name"`
	// Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .
	//
	// > For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .
	Scope IpSetScope `pulumi:"scope"`
}

type LookupIpSetOutputArgs added in v0.72.0

type LookupIpSetOutputArgs struct {
	// The ID of the IP set.
	Id pulumi.StringInput `pulumi:"id"`
	// The name of the IP set. You cannot change the name of an `IPSet` after you create it.
	Name pulumi.StringInput `pulumi:"name"`
	// Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .
	//
	// > For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .
	Scope IpSetScopeInput `pulumi:"scope"`
}

func (LookupIpSetOutputArgs) ElementType added in v0.72.0

func (LookupIpSetOutputArgs) ElementType() reflect.Type

type LookupIpSetResult added in v0.72.0

type LookupIpSetResult struct {
	// List of IPAddresses.
	Addresses []string `pulumi:"addresses"`
	// The Amazon Resource Name (ARN) of the IP set.
	Arn *string `pulumi:"arn"`
	// A description of the IP set that helps with identification.
	Description *string `pulumi:"description"`
	// The ID of the IP set.
	Id *string `pulumi:"id"`
	// The version of the IP addresses, either `IPV4` or `IPV6` .
	IpAddressVersion *IpSetIpAddressVersion `pulumi:"ipAddressVersion"`
	// Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.
	//
	// > To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.
	Tags []aws.Tag `pulumi:"tags"`
}

func LookupIpSet added in v0.72.0

func LookupIpSet(ctx *pulumi.Context, args *LookupIpSetArgs, opts ...pulumi.InvokeOption) (*LookupIpSetResult, error)

Contains a list of IP addresses. This can be either IPV4 or IPV6. The list will be mutually

type LookupIpSetResultOutput added in v0.72.0

type LookupIpSetResultOutput struct{ *pulumi.OutputState }

func LookupIpSetOutput added in v0.72.0

func LookupIpSetOutput(ctx *pulumi.Context, args LookupIpSetOutputArgs, opts ...pulumi.InvokeOption) LookupIpSetResultOutput

func (LookupIpSetResultOutput) Addresses added in v0.72.0

List of IPAddresses.

func (LookupIpSetResultOutput) Arn added in v0.72.0

The Amazon Resource Name (ARN) of the IP set.

func (LookupIpSetResultOutput) Description added in v0.72.0

A description of the IP set that helps with identification.

func (LookupIpSetResultOutput) ElementType added in v0.72.0

func (LookupIpSetResultOutput) ElementType() reflect.Type

func (LookupIpSetResultOutput) Id added in v0.72.0

The ID of the IP set.

func (LookupIpSetResultOutput) IpAddressVersion added in v0.72.0

The version of the IP addresses, either `IPV4` or `IPV6` .

func (LookupIpSetResultOutput) Tags added in v0.72.0

Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.

> To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.

func (LookupIpSetResultOutput) ToLookupIpSetResultOutput added in v0.72.0

func (o LookupIpSetResultOutput) ToLookupIpSetResultOutput() LookupIpSetResultOutput

func (LookupIpSetResultOutput) ToLookupIpSetResultOutputWithContext added in v0.72.0

func (o LookupIpSetResultOutput) ToLookupIpSetResultOutputWithContext(ctx context.Context) LookupIpSetResultOutput

type LookupLoggingConfigurationArgs added in v0.12.0

type LookupLoggingConfigurationArgs struct {
	// The Amazon Resource Name (ARN) of the web ACL that you want to associate with LogDestinationConfigs.
	ResourceArn string `pulumi:"resourceArn"`
}

type LookupLoggingConfigurationOutputArgs added in v0.12.0

type LookupLoggingConfigurationOutputArgs struct {
	// The Amazon Resource Name (ARN) of the web ACL that you want to associate with LogDestinationConfigs.
	ResourceArn pulumi.StringInput `pulumi:"resourceArn"`
}

func (LookupLoggingConfigurationOutputArgs) ElementType added in v0.12.0

type LookupLoggingConfigurationResult added in v0.12.0

type LookupLoggingConfigurationResult struct {
	// The Amazon Resource Names (ARNs) of the logging destinations that you want to associate with the web ACL.
	LogDestinationConfigs []string `pulumi:"logDestinationConfigs"`
	// Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation.
	LoggingFilter *LoggingFilterProperties `pulumi:"loggingFilter"`
	// Indicates whether the logging configuration was created by AWS Firewall Manager, as part of an AWS WAF policy configuration. If true, only Firewall Manager can modify or delete the configuration.
	ManagedByFirewallManager *bool `pulumi:"managedByFirewallManager"`
	// The parts of the request that you want to keep out of the logs. For example, if you redact the HEADER field, the HEADER field in the firehose will be xxx.
	RedactedFields []LoggingConfigurationFieldToMatch `pulumi:"redactedFields"`
}

func LookupLoggingConfiguration added in v0.12.0

func LookupLoggingConfiguration(ctx *pulumi.Context, args *LookupLoggingConfigurationArgs, opts ...pulumi.InvokeOption) (*LookupLoggingConfigurationResult, error)

A WAFv2 Logging Configuration Resource Provider

type LookupLoggingConfigurationResultOutput added in v0.12.0

type LookupLoggingConfigurationResultOutput struct{ *pulumi.OutputState }

func (LookupLoggingConfigurationResultOutput) ElementType added in v0.12.0

func (LookupLoggingConfigurationResultOutput) LogDestinationConfigs added in v0.12.0

The Amazon Resource Names (ARNs) of the logging destinations that you want to associate with the web ACL.

func (LookupLoggingConfigurationResultOutput) LoggingFilter added in v0.12.0

Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation.

func (LookupLoggingConfigurationResultOutput) ManagedByFirewallManager added in v0.12.0

func (o LookupLoggingConfigurationResultOutput) ManagedByFirewallManager() pulumi.BoolPtrOutput

Indicates whether the logging configuration was created by AWS Firewall Manager, as part of an AWS WAF policy configuration. If true, only Firewall Manager can modify or delete the configuration.

func (LookupLoggingConfigurationResultOutput) RedactedFields added in v0.12.0

The parts of the request that you want to keep out of the logs. For example, if you redact the HEADER field, the HEADER field in the firehose will be xxx.

func (LookupLoggingConfigurationResultOutput) ToLookupLoggingConfigurationResultOutput added in v0.12.0

func (o LookupLoggingConfigurationResultOutput) ToLookupLoggingConfigurationResultOutput() LookupLoggingConfigurationResultOutput

func (LookupLoggingConfigurationResultOutput) ToLookupLoggingConfigurationResultOutputWithContext added in v0.12.0

func (o LookupLoggingConfigurationResultOutput) ToLookupLoggingConfigurationResultOutputWithContext(ctx context.Context) LookupLoggingConfigurationResultOutput

type LookupRegexPatternSetArgs added in v0.12.0

type LookupRegexPatternSetArgs struct {
	// Id of the RegexPatternSet
	Id string `pulumi:"id"`
	// Name of the RegexPatternSet.
	Name string `pulumi:"name"`
	// Use CLOUDFRONT for CloudFront RegexPatternSet, use REGIONAL for Application Load Balancer and API Gateway.
	Scope RegexPatternSetScope `pulumi:"scope"`
}

type LookupRegexPatternSetOutputArgs added in v0.12.0

type LookupRegexPatternSetOutputArgs struct {
	// Id of the RegexPatternSet
	Id pulumi.StringInput `pulumi:"id"`
	// Name of the RegexPatternSet.
	Name pulumi.StringInput `pulumi:"name"`
	// Use CLOUDFRONT for CloudFront RegexPatternSet, use REGIONAL for Application Load Balancer and API Gateway.
	Scope RegexPatternSetScopeInput `pulumi:"scope"`
}

func (LookupRegexPatternSetOutputArgs) ElementType added in v0.12.0

type LookupRegexPatternSetResult added in v0.12.0

type LookupRegexPatternSetResult struct {
	// ARN of the WAF entity.
	Arn *string `pulumi:"arn"`
	// Description of the entity.
	Description *string `pulumi:"description"`
	// Id of the RegexPatternSet
	Id *string `pulumi:"id"`
	// The regular expression patterns in the set.
	RegularExpressionList []string `pulumi:"regularExpressionList"`
	// Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.
	//
	// > To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.
	Tags []aws.Tag `pulumi:"tags"`
}

func LookupRegexPatternSet added in v0.12.0

func LookupRegexPatternSet(ctx *pulumi.Context, args *LookupRegexPatternSetArgs, opts ...pulumi.InvokeOption) (*LookupRegexPatternSetResult, error)

Contains a list of Regular expressions based on the provided inputs. RegexPatternSet can be used with other WAF entities with RegexPatternSetReferenceStatement to perform other actions .

type LookupRegexPatternSetResultOutput added in v0.12.0

type LookupRegexPatternSetResultOutput struct{ *pulumi.OutputState }

func LookupRegexPatternSetOutput added in v0.12.0

func (LookupRegexPatternSetResultOutput) Arn added in v0.12.0

ARN of the WAF entity.

func (LookupRegexPatternSetResultOutput) Description added in v0.12.0

Description of the entity.

func (LookupRegexPatternSetResultOutput) ElementType added in v0.12.0

func (LookupRegexPatternSetResultOutput) Id added in v0.12.0

Id of the RegexPatternSet

func (LookupRegexPatternSetResultOutput) RegularExpressionList added in v0.12.0

The regular expression patterns in the set.

func (LookupRegexPatternSetResultOutput) Tags added in v0.12.0

Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.

> To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.

func (LookupRegexPatternSetResultOutput) ToLookupRegexPatternSetResultOutput added in v0.12.0

func (o LookupRegexPatternSetResultOutput) ToLookupRegexPatternSetResultOutput() LookupRegexPatternSetResultOutput

func (LookupRegexPatternSetResultOutput) ToLookupRegexPatternSetResultOutputWithContext added in v0.12.0

func (o LookupRegexPatternSetResultOutput) ToLookupRegexPatternSetResultOutputWithContext(ctx context.Context) LookupRegexPatternSetResultOutput

type LookupRuleGroupArgs added in v0.12.0

type LookupRuleGroupArgs struct {
	// The ID of the rule group.
	Id string `pulumi:"id"`
	// The name of the rule group. You cannot change the name of a rule group after you create it.
	Name string `pulumi:"name"`
	// Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .
	//
	// > For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .
	Scope RuleGroupScope `pulumi:"scope"`
}

type LookupRuleGroupOutputArgs added in v0.12.0

type LookupRuleGroupOutputArgs struct {
	// The ID of the rule group.
	Id pulumi.StringInput `pulumi:"id"`
	// The name of the rule group. You cannot change the name of a rule group after you create it.
	Name pulumi.StringInput `pulumi:"name"`
	// Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .
	//
	// > For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .
	Scope RuleGroupScopeInput `pulumi:"scope"`
}

func (LookupRuleGroupOutputArgs) ElementType added in v0.12.0

func (LookupRuleGroupOutputArgs) ElementType() reflect.Type

type LookupRuleGroupResult added in v0.12.0

type LookupRuleGroupResult struct {
	// The Amazon Resource Name (ARN) of the rule group.
	Arn *string `pulumi:"arn"`
	// Collection of Available Labels.
	AvailableLabels []RuleGroupLabelSummary `pulumi:"availableLabels"`
	// The web ACL capacity units (WCUs) required for this rule group.
	//
	// When you create your own rule group, you define this, and you cannot change it after creation. When you add or modify the rules in a rule group, AWS WAF enforces this limit.
	//
	// AWS WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. AWS WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500.
	Capacity *int `pulumi:"capacity"`
	// Collection of Consumed Labels.
	ConsumedLabels []RuleGroupLabelSummary `pulumi:"consumedLabels"`
	// A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the rule group, and then use them in the rules that you define in the rule group.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	//
	// For information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* .
	CustomResponseBodies map[string]RuleGroupCustomResponseBody `pulumi:"customResponseBodies"`
	// A description of the rule group that helps with identification.
	Description *string `pulumi:"description"`
	// The ID of the rule group.
	Id *string `pulumi:"id"`
	// The label namespace prefix for this rule group. All labels added by rules in this rule group have this prefix.
	//
	// The syntax for the label namespace prefix for a rule group is the following: `awswaf:<account ID>:rule group:<rule group name>:`
	//
	// When a rule with a label matches a web request, AWS WAF adds the fully qualified label to the request. A fully qualified label is made up of the label namespace from the rule group or web ACL where the rule is defined and the label from the rule, separated by a colon.
	LabelNamespace *string `pulumi:"labelNamespace"`
	// Collection of Rules.
	Rules []RuleGroupRule `pulumi:"rules"`
	// Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.
	//
	// > To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.
	Tags []aws.Tag `pulumi:"tags"`
	// Defines and enables Amazon CloudWatch metrics and web request sample collection.
	VisibilityConfig *RuleGroupVisibilityConfig `pulumi:"visibilityConfig"`
}

func LookupRuleGroup added in v0.12.0

func LookupRuleGroup(ctx *pulumi.Context, args *LookupRuleGroupArgs, opts ...pulumi.InvokeOption) (*LookupRuleGroupResult, error)

Contains the Rules that identify the requests that you want to allow, block, or count. In a RuleGroup, you also specify a default action (ALLOW or BLOCK), and the action for each Rule that you add to a RuleGroup, for example, block requests from specified IP addresses or block requests from specified referrers. You also associate the RuleGroup with a CloudFront distribution to identify the requests that you want AWS WAF to filter. If you add more than one Rule to a RuleGroup, a request needs to match only one of the specifications to be allowed, blocked, or counted.

type LookupRuleGroupResultOutput added in v0.12.0

type LookupRuleGroupResultOutput struct{ *pulumi.OutputState }

func LookupRuleGroupOutput added in v0.12.0

func (LookupRuleGroupResultOutput) Arn added in v0.12.0

The Amazon Resource Name (ARN) of the rule group.

func (LookupRuleGroupResultOutput) AvailableLabels added in v0.12.0

Collection of Available Labels.

func (LookupRuleGroupResultOutput) Capacity added in v0.12.0

The web ACL capacity units (WCUs) required for this rule group.

When you create your own rule group, you define this, and you cannot change it after creation. When you add or modify the rules in a rule group, AWS WAF enforces this limit.

AWS WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. AWS WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500.

func (LookupRuleGroupResultOutput) ConsumedLabels added in v0.12.0

Collection of Consumed Labels.

func (LookupRuleGroupResultOutput) CustomResponseBodies added in v0.12.0

A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the rule group, and then use them in the rules that you define in the rule group.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

For information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* .

func (LookupRuleGroupResultOutput) Description added in v0.12.0

A description of the rule group that helps with identification.

func (LookupRuleGroupResultOutput) ElementType added in v0.12.0

func (LookupRuleGroupResultOutput) Id added in v0.12.0

The ID of the rule group.

func (LookupRuleGroupResultOutput) LabelNamespace added in v0.12.0

The label namespace prefix for this rule group. All labels added by rules in this rule group have this prefix.

The syntax for the label namespace prefix for a rule group is the following: `awswaf:<account ID>:rule group:<rule group name>:`

When a rule with a label matches a web request, AWS WAF adds the fully qualified label to the request. A fully qualified label is made up of the label namespace from the rule group or web ACL where the rule is defined and the label from the rule, separated by a colon.

func (LookupRuleGroupResultOutput) Rules added in v0.12.0

Collection of Rules.

func (LookupRuleGroupResultOutput) Tags added in v0.12.0

Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.

> To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.

func (LookupRuleGroupResultOutput) ToLookupRuleGroupResultOutput added in v0.12.0

func (o LookupRuleGroupResultOutput) ToLookupRuleGroupResultOutput() LookupRuleGroupResultOutput

func (LookupRuleGroupResultOutput) ToLookupRuleGroupResultOutputWithContext added in v0.12.0

func (o LookupRuleGroupResultOutput) ToLookupRuleGroupResultOutputWithContext(ctx context.Context) LookupRuleGroupResultOutput

func (LookupRuleGroupResultOutput) VisibilityConfig added in v0.12.0

Defines and enables Amazon CloudWatch metrics and web request sample collection.

type LookupWebAclArgs added in v0.72.0

type LookupWebAclArgs struct {
	// The ID of the web ACL.
	Id string `pulumi:"id"`
	// The name of the web ACL. You cannot change the name of a web ACL after you create it.
	Name string `pulumi:"name"`
	// Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .
	//
	// > For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .
	//
	// For information about how to define the association of the web ACL with your resource, see `WebACLAssociation` .
	Scope WebAclScope `pulumi:"scope"`
}

type LookupWebAclOutputArgs added in v0.72.0

type LookupWebAclOutputArgs struct {
	// The ID of the web ACL.
	Id pulumi.StringInput `pulumi:"id"`
	// The name of the web ACL. You cannot change the name of a web ACL after you create it.
	Name pulumi.StringInput `pulumi:"name"`
	// Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .
	//
	// > For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .
	//
	// For information about how to define the association of the web ACL with your resource, see `WebACLAssociation` .
	Scope WebAclScopeInput `pulumi:"scope"`
}

func (LookupWebAclOutputArgs) ElementType added in v0.72.0

func (LookupWebAclOutputArgs) ElementType() reflect.Type

type LookupWebAclResult added in v0.72.0

type LookupWebAclResult struct {
	// The Amazon Resource Name (ARN) of the web ACL.
	Arn *string `pulumi:"arn"`
	// Specifies custom configurations for the associations between the web ACL and protected resources.
	//
	// Use this to customize the maximum size of the request body that your protected resources forward to AWS WAF for inspection. You can customize this setting for CloudFront, API Gateway, Amazon Cognito, App Runner, or Verified Access resources. The default setting is 16 KB (16,384 bytes).
	//
	// > You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see [AWS WAF Pricing](https://docs.aws.amazon.com/waf/pricing/) .
	//
	// For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	AssociationConfig *WebAclAssociationConfig `pulumi:"associationConfig"`
	// The web ACL capacity units (WCUs) currently being used by this web ACL.
	//
	// AWS WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. AWS WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500.
	Capacity *int `pulumi:"capacity"`
	// Specifies how AWS WAF should handle `CAPTCHA` evaluations for rules that don't have their own `CaptchaConfig` settings. If you don't specify this, AWS WAF uses its default settings for `CaptchaConfig` .
	CaptchaConfig *WebAclCaptchaConfig `pulumi:"captchaConfig"`
	// Specifies how AWS WAF should handle challenge evaluations for rules that don't have their own `ChallengeConfig` settings. If you don't specify this, AWS WAF uses its default settings for `ChallengeConfig` .
	ChallengeConfig *WebAclChallengeConfig `pulumi:"challengeConfig"`
	// A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the web ACL, and then use them in the rules and default actions that you define in the web ACL.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	//
	// For information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* .
	CustomResponseBodies map[string]WebAclCustomResponseBody `pulumi:"customResponseBodies"`
	// The action to perform if none of the `Rules` contained in the `WebACL` match.
	DefaultAction *WebAclDefaultAction `pulumi:"defaultAction"`
	// A description of the web ACL that helps with identification.
	Description *string `pulumi:"description"`
	// The ID of the web ACL.
	Id *string `pulumi:"id"`
	// The label namespace prefix for this web ACL. All labels added by rules in this web ACL have this prefix.
	//
	// The syntax for the label namespace prefix for a web ACL is the following: `awswaf:<account ID>:webacl:<web ACL name>:`
	//
	// When a rule with a label matches a web request, AWS WAF adds the fully qualified label to the request. A fully qualified label is made up of the label namespace from the rule group or web ACL where the rule is defined and the label from the rule, separated by a colon.
	LabelNamespace *string `pulumi:"labelNamespace"`
	// Collection of Rules.
	Rules []WebAclRule `pulumi:"rules"`
	// Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.
	//
	// > To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.
	Tags []aws.Tag `pulumi:"tags"`
	// Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
	TokenDomains []string `pulumi:"tokenDomains"`
	// Defines and enables Amazon CloudWatch metrics and web request sample collection.
	VisibilityConfig *WebAclVisibilityConfig `pulumi:"visibilityConfig"`
}

func LookupWebAcl added in v0.72.0

func LookupWebAcl(ctx *pulumi.Context, args *LookupWebAclArgs, opts ...pulumi.InvokeOption) (*LookupWebAclResult, error)

Contains the Rules that identify the requests that you want to allow, block, or count. In a WebACL, you also specify a default action (ALLOW or BLOCK), and the action for each Rule that you add to a WebACL, for example, block requests from specified IP addresses or block requests from specified referrers. You also associate the WebACL with a CloudFront distribution to identify the requests that you want AWS WAF to filter. If you add more than one Rule to a WebACL, a request needs to match only one of the specifications to be allowed, blocked, or counted.

type LookupWebAclResultOutput added in v0.72.0

type LookupWebAclResultOutput struct{ *pulumi.OutputState }

func LookupWebAclOutput added in v0.72.0

func LookupWebAclOutput(ctx *pulumi.Context, args LookupWebAclOutputArgs, opts ...pulumi.InvokeOption) LookupWebAclResultOutput

func (LookupWebAclResultOutput) Arn added in v0.72.0

The Amazon Resource Name (ARN) of the web ACL.

func (LookupWebAclResultOutput) AssociationConfig added in v0.72.0

Specifies custom configurations for the associations between the web ACL and protected resources.

Use this to customize the maximum size of the request body that your protected resources forward to AWS WAF for inspection. You can customize this setting for CloudFront, API Gateway, Amazon Cognito, App Runner, or Verified Access resources. The default setting is 16 KB (16,384 bytes).

> You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see [AWS WAF Pricing](https://docs.aws.amazon.com/waf/pricing/) .

For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).

func (LookupWebAclResultOutput) Capacity added in v0.72.0

The web ACL capacity units (WCUs) currently being used by this web ACL.

AWS WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. AWS WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500.

func (LookupWebAclResultOutput) CaptchaConfig added in v0.72.0

Specifies how AWS WAF should handle `CAPTCHA` evaluations for rules that don't have their own `CaptchaConfig` settings. If you don't specify this, AWS WAF uses its default settings for `CaptchaConfig` .

func (LookupWebAclResultOutput) ChallengeConfig added in v0.72.0

Specifies how AWS WAF should handle challenge evaluations for rules that don't have their own `ChallengeConfig` settings. If you don't specify this, AWS WAF uses its default settings for `ChallengeConfig` .

func (LookupWebAclResultOutput) CustomResponseBodies added in v0.72.0

A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the web ACL, and then use them in the rules and default actions that you define in the web ACL.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

For information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* .

func (LookupWebAclResultOutput) DefaultAction added in v0.72.0

The action to perform if none of the `Rules` contained in the `WebACL` match.

func (LookupWebAclResultOutput) Description added in v0.72.0

A description of the web ACL that helps with identification.

func (LookupWebAclResultOutput) ElementType added in v0.72.0

func (LookupWebAclResultOutput) ElementType() reflect.Type

func (LookupWebAclResultOutput) Id added in v0.72.0

The ID of the web ACL.

func (LookupWebAclResultOutput) LabelNamespace added in v0.72.0

func (o LookupWebAclResultOutput) LabelNamespace() pulumi.StringPtrOutput

The label namespace prefix for this web ACL. All labels added by rules in this web ACL have this prefix.

The syntax for the label namespace prefix for a web ACL is the following: `awswaf:<account ID>:webacl:<web ACL name>:`

When a rule with a label matches a web request, AWS WAF adds the fully qualified label to the request. A fully qualified label is made up of the label namespace from the rule group or web ACL where the rule is defined and the label from the rule, separated by a colon.

func (LookupWebAclResultOutput) Rules added in v0.72.0

Collection of Rules.

func (LookupWebAclResultOutput) Tags added in v0.72.0

Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.

> To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.

func (LookupWebAclResultOutput) ToLookupWebAclResultOutput added in v0.72.0

func (o LookupWebAclResultOutput) ToLookupWebAclResultOutput() LookupWebAclResultOutput

func (LookupWebAclResultOutput) ToLookupWebAclResultOutputWithContext added in v0.72.0

func (o LookupWebAclResultOutput) ToLookupWebAclResultOutputWithContext(ctx context.Context) LookupWebAclResultOutput

func (LookupWebAclResultOutput) TokenDomains added in v0.72.0

Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.

func (LookupWebAclResultOutput) VisibilityConfig added in v0.72.0

Defines and enables Amazon CloudWatch metrics and web request sample collection.

type RegexPatternSet

type RegexPatternSet struct {
	pulumi.CustomResourceState

	// ARN of the WAF entity.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// Id of the RegexPatternSet
	AwsId pulumi.StringOutput `pulumi:"awsId"`
	// Description of the entity.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Name of the RegexPatternSet.
	Name pulumi.StringPtrOutput `pulumi:"name"`
	// The regular expression patterns in the set.
	RegularExpressionList pulumi.StringArrayOutput `pulumi:"regularExpressionList"`
	// Use CLOUDFRONT for CloudFront RegexPatternSet, use REGIONAL for Application Load Balancer and API Gateway.
	Scope RegexPatternSetScopeOutput `pulumi:"scope"`
	// Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.
	//
	// > To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.
	Tags aws.TagArrayOutput `pulumi:"tags"`
}

Contains a list of Regular expressions based on the provided inputs. RegexPatternSet can be used with other WAF entities with RegexPatternSetReferenceStatement to perform other actions .

func GetRegexPatternSet

func GetRegexPatternSet(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *RegexPatternSetState, opts ...pulumi.ResourceOption) (*RegexPatternSet, error)

GetRegexPatternSet gets an existing RegexPatternSet resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewRegexPatternSet

func NewRegexPatternSet(ctx *pulumi.Context,
	name string, args *RegexPatternSetArgs, opts ...pulumi.ResourceOption) (*RegexPatternSet, error)

NewRegexPatternSet registers a new resource with the given unique name, arguments, and options.

func (*RegexPatternSet) ElementType

func (*RegexPatternSet) ElementType() reflect.Type

func (*RegexPatternSet) ToRegexPatternSetOutput

func (i *RegexPatternSet) ToRegexPatternSetOutput() RegexPatternSetOutput

func (*RegexPatternSet) ToRegexPatternSetOutputWithContext

func (i *RegexPatternSet) ToRegexPatternSetOutputWithContext(ctx context.Context) RegexPatternSetOutput

type RegexPatternSetArgs

type RegexPatternSetArgs struct {
	// Description of the entity.
	Description pulumi.StringPtrInput
	// Name of the RegexPatternSet.
	Name pulumi.StringPtrInput
	// The regular expression patterns in the set.
	RegularExpressionList pulumi.StringArrayInput
	// Use CLOUDFRONT for CloudFront RegexPatternSet, use REGIONAL for Application Load Balancer and API Gateway.
	Scope RegexPatternSetScopeInput
	// Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.
	//
	// > To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.
	Tags aws.TagArrayInput
}

The set of arguments for constructing a RegexPatternSet resource.

func (RegexPatternSetArgs) ElementType

func (RegexPatternSetArgs) ElementType() reflect.Type

type RegexPatternSetInput

type RegexPatternSetInput interface {
	pulumi.Input

	ToRegexPatternSetOutput() RegexPatternSetOutput
	ToRegexPatternSetOutputWithContext(ctx context.Context) RegexPatternSetOutput
}

type RegexPatternSetOutput

type RegexPatternSetOutput struct{ *pulumi.OutputState }

func (RegexPatternSetOutput) Arn added in v0.17.0

ARN of the WAF entity.

func (RegexPatternSetOutput) AwsId added in v0.99.0

Id of the RegexPatternSet

func (RegexPatternSetOutput) Description added in v0.17.0

Description of the entity.

func (RegexPatternSetOutput) ElementType

func (RegexPatternSetOutput) ElementType() reflect.Type

func (RegexPatternSetOutput) Name added in v0.17.0

Name of the RegexPatternSet.

func (RegexPatternSetOutput) RegularExpressionList added in v0.17.0

func (o RegexPatternSetOutput) RegularExpressionList() pulumi.StringArrayOutput

The regular expression patterns in the set.

func (RegexPatternSetOutput) Scope added in v0.17.0

Use CLOUDFRONT for CloudFront RegexPatternSet, use REGIONAL for Application Load Balancer and API Gateway.

func (RegexPatternSetOutput) Tags added in v0.17.0

Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.

> To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.

func (RegexPatternSetOutput) ToRegexPatternSetOutput

func (o RegexPatternSetOutput) ToRegexPatternSetOutput() RegexPatternSetOutput

func (RegexPatternSetOutput) ToRegexPatternSetOutputWithContext

func (o RegexPatternSetOutput) ToRegexPatternSetOutputWithContext(ctx context.Context) RegexPatternSetOutput

type RegexPatternSetScope

type RegexPatternSetScope string

Use CLOUDFRONT for CloudFront RegexPatternSet, use REGIONAL for Application Load Balancer and API Gateway.

func (RegexPatternSetScope) ElementType

func (RegexPatternSetScope) ElementType() reflect.Type

func (RegexPatternSetScope) ToRegexPatternSetScopeOutput

func (e RegexPatternSetScope) ToRegexPatternSetScopeOutput() RegexPatternSetScopeOutput

func (RegexPatternSetScope) ToRegexPatternSetScopeOutputWithContext

func (e RegexPatternSetScope) ToRegexPatternSetScopeOutputWithContext(ctx context.Context) RegexPatternSetScopeOutput

func (RegexPatternSetScope) ToRegexPatternSetScopePtrOutput

func (e RegexPatternSetScope) ToRegexPatternSetScopePtrOutput() RegexPatternSetScopePtrOutput

func (RegexPatternSetScope) ToRegexPatternSetScopePtrOutputWithContext

func (e RegexPatternSetScope) ToRegexPatternSetScopePtrOutputWithContext(ctx context.Context) RegexPatternSetScopePtrOutput

func (RegexPatternSetScope) ToStringOutput

func (e RegexPatternSetScope) ToStringOutput() pulumi.StringOutput

func (RegexPatternSetScope) ToStringOutputWithContext

func (e RegexPatternSetScope) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RegexPatternSetScope) ToStringPtrOutput

func (e RegexPatternSetScope) ToStringPtrOutput() pulumi.StringPtrOutput

func (RegexPatternSetScope) ToStringPtrOutputWithContext

func (e RegexPatternSetScope) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RegexPatternSetScopeInput

type RegexPatternSetScopeInput interface {
	pulumi.Input

	ToRegexPatternSetScopeOutput() RegexPatternSetScopeOutput
	ToRegexPatternSetScopeOutputWithContext(context.Context) RegexPatternSetScopeOutput
}

RegexPatternSetScopeInput is an input type that accepts values of the RegexPatternSetScope enum A concrete instance of `RegexPatternSetScopeInput` can be one of the following:

RegexPatternSetScopeCloudfront
RegexPatternSetScopeRegional

type RegexPatternSetScopeOutput

type RegexPatternSetScopeOutput struct{ *pulumi.OutputState }

func (RegexPatternSetScopeOutput) ElementType

func (RegexPatternSetScopeOutput) ElementType() reflect.Type

func (RegexPatternSetScopeOutput) ToRegexPatternSetScopeOutput

func (o RegexPatternSetScopeOutput) ToRegexPatternSetScopeOutput() RegexPatternSetScopeOutput

func (RegexPatternSetScopeOutput) ToRegexPatternSetScopeOutputWithContext

func (o RegexPatternSetScopeOutput) ToRegexPatternSetScopeOutputWithContext(ctx context.Context) RegexPatternSetScopeOutput

func (RegexPatternSetScopeOutput) ToRegexPatternSetScopePtrOutput

func (o RegexPatternSetScopeOutput) ToRegexPatternSetScopePtrOutput() RegexPatternSetScopePtrOutput

func (RegexPatternSetScopeOutput) ToRegexPatternSetScopePtrOutputWithContext

func (o RegexPatternSetScopeOutput) ToRegexPatternSetScopePtrOutputWithContext(ctx context.Context) RegexPatternSetScopePtrOutput

func (RegexPatternSetScopeOutput) ToStringOutput

func (o RegexPatternSetScopeOutput) ToStringOutput() pulumi.StringOutput

func (RegexPatternSetScopeOutput) ToStringOutputWithContext

func (o RegexPatternSetScopeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RegexPatternSetScopeOutput) ToStringPtrOutput

func (o RegexPatternSetScopeOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (RegexPatternSetScopeOutput) ToStringPtrOutputWithContext

func (o RegexPatternSetScopeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RegexPatternSetScopePtrInput

type RegexPatternSetScopePtrInput interface {
	pulumi.Input

	ToRegexPatternSetScopePtrOutput() RegexPatternSetScopePtrOutput
	ToRegexPatternSetScopePtrOutputWithContext(context.Context) RegexPatternSetScopePtrOutput
}

func RegexPatternSetScopePtr

func RegexPatternSetScopePtr(v string) RegexPatternSetScopePtrInput

type RegexPatternSetScopePtrOutput

type RegexPatternSetScopePtrOutput struct{ *pulumi.OutputState }

func (RegexPatternSetScopePtrOutput) Elem

func (RegexPatternSetScopePtrOutput) ElementType

func (RegexPatternSetScopePtrOutput) ToRegexPatternSetScopePtrOutput

func (o RegexPatternSetScopePtrOutput) ToRegexPatternSetScopePtrOutput() RegexPatternSetScopePtrOutput

func (RegexPatternSetScopePtrOutput) ToRegexPatternSetScopePtrOutputWithContext

func (o RegexPatternSetScopePtrOutput) ToRegexPatternSetScopePtrOutputWithContext(ctx context.Context) RegexPatternSetScopePtrOutput

func (RegexPatternSetScopePtrOutput) ToStringPtrOutput

func (RegexPatternSetScopePtrOutput) ToStringPtrOutputWithContext

func (o RegexPatternSetScopePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RegexPatternSetState

type RegexPatternSetState struct {
}

func (RegexPatternSetState) ElementType

func (RegexPatternSetState) ElementType() reflect.Type

type RegexPatternSetTag

type RegexPatternSetTag struct {
	// Part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as "customer." Tag keys are case-sensitive.
	Key *string `pulumi:"key"`
	// Part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as "companyA" or "companyB." Tag values are case-sensitive.
	Value *string `pulumi:"value"`
}

type RuleGroup

type RuleGroup struct {
	pulumi.CustomResourceState

	// The Amazon Resource Name (ARN) of the rule group.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// Collection of Available Labels.
	AvailableLabels RuleGroupLabelSummaryArrayOutput `pulumi:"availableLabels"`
	// The ID of the rule group.
	AwsId pulumi.StringOutput `pulumi:"awsId"`
	// The web ACL capacity units (WCUs) required for this rule group.
	//
	// When you create your own rule group, you define this, and you cannot change it after creation. When you add or modify the rules in a rule group, AWS WAF enforces this limit.
	//
	// AWS WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. AWS WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500.
	Capacity pulumi.IntOutput `pulumi:"capacity"`
	// Collection of Consumed Labels.
	ConsumedLabels RuleGroupLabelSummaryArrayOutput `pulumi:"consumedLabels"`
	// A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the rule group, and then use them in the rules that you define in the rule group.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	//
	// For information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* .
	CustomResponseBodies RuleGroupCustomResponseBodyMapOutput `pulumi:"customResponseBodies"`
	// A description of the rule group that helps with identification.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// The label namespace prefix for this rule group. All labels added by rules in this rule group have this prefix.
	//
	// The syntax for the label namespace prefix for a rule group is the following: `awswaf:<account ID>:rule group:<rule group name>:`
	//
	// When a rule with a label matches a web request, AWS WAF adds the fully qualified label to the request. A fully qualified label is made up of the label namespace from the rule group or web ACL where the rule is defined and the label from the rule, separated by a colon.
	LabelNamespace pulumi.StringOutput `pulumi:"labelNamespace"`
	// The name of the rule group. You cannot change the name of a rule group after you create it.
	Name pulumi.StringPtrOutput `pulumi:"name"`
	// Collection of Rules.
	Rules RuleGroupRuleArrayOutput `pulumi:"rules"`
	// Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .
	//
	// > For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .
	Scope RuleGroupScopeOutput `pulumi:"scope"`
	// Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.
	//
	// > To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.
	Tags aws.TagArrayOutput `pulumi:"tags"`
	// Defines and enables Amazon CloudWatch metrics and web request sample collection.
	VisibilityConfig RuleGroupVisibilityConfigOutput `pulumi:"visibilityConfig"`
}

Contains the Rules that identify the requests that you want to allow, block, or count. In a RuleGroup, you also specify a default action (ALLOW or BLOCK), and the action for each Rule that you add to a RuleGroup, for example, block requests from specified IP addresses or block requests from specified referrers. You also associate the RuleGroup with a CloudFront distribution to identify the requests that you want AWS WAF to filter. If you add more than one Rule to a RuleGroup, a request needs to match only one of the specifications to be allowed, blocked, or counted.

func GetRuleGroup

func GetRuleGroup(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *RuleGroupState, opts ...pulumi.ResourceOption) (*RuleGroup, error)

GetRuleGroup gets an existing RuleGroup resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewRuleGroup

func NewRuleGroup(ctx *pulumi.Context,
	name string, args *RuleGroupArgs, opts ...pulumi.ResourceOption) (*RuleGroup, error)

NewRuleGroup registers a new resource with the given unique name, arguments, and options.

func (*RuleGroup) ElementType

func (*RuleGroup) ElementType() reflect.Type

func (*RuleGroup) ToRuleGroupOutput

func (i *RuleGroup) ToRuleGroupOutput() RuleGroupOutput

func (*RuleGroup) ToRuleGroupOutputWithContext

func (i *RuleGroup) ToRuleGroupOutputWithContext(ctx context.Context) RuleGroupOutput

type RuleGroupAllowAction added in v0.50.0

type RuleGroupAllowAction struct {
	// Defines custom handling for the web request.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	CustomRequestHandling *RuleGroupCustomRequestHandling `pulumi:"customRequestHandling"`
}

Allow traffic towards application.

type RuleGroupAllowActionArgs added in v0.50.0

type RuleGroupAllowActionArgs struct {
	// Defines custom handling for the web request.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	CustomRequestHandling RuleGroupCustomRequestHandlingPtrInput `pulumi:"customRequestHandling"`
}

Allow traffic towards application.

func (RuleGroupAllowActionArgs) ElementType added in v0.50.0

func (RuleGroupAllowActionArgs) ElementType() reflect.Type

func (RuleGroupAllowActionArgs) ToRuleGroupAllowActionOutput added in v0.50.0

func (i RuleGroupAllowActionArgs) ToRuleGroupAllowActionOutput() RuleGroupAllowActionOutput

func (RuleGroupAllowActionArgs) ToRuleGroupAllowActionOutputWithContext added in v0.50.0

func (i RuleGroupAllowActionArgs) ToRuleGroupAllowActionOutputWithContext(ctx context.Context) RuleGroupAllowActionOutput

func (RuleGroupAllowActionArgs) ToRuleGroupAllowActionPtrOutput added in v0.50.0

func (i RuleGroupAllowActionArgs) ToRuleGroupAllowActionPtrOutput() RuleGroupAllowActionPtrOutput

func (RuleGroupAllowActionArgs) ToRuleGroupAllowActionPtrOutputWithContext added in v0.50.0

func (i RuleGroupAllowActionArgs) ToRuleGroupAllowActionPtrOutputWithContext(ctx context.Context) RuleGroupAllowActionPtrOutput

type RuleGroupAllowActionInput added in v0.50.0

type RuleGroupAllowActionInput interface {
	pulumi.Input

	ToRuleGroupAllowActionOutput() RuleGroupAllowActionOutput
	ToRuleGroupAllowActionOutputWithContext(context.Context) RuleGroupAllowActionOutput
}

RuleGroupAllowActionInput is an input type that accepts RuleGroupAllowActionArgs and RuleGroupAllowActionOutput values. You can construct a concrete instance of `RuleGroupAllowActionInput` via:

RuleGroupAllowActionArgs{...}

type RuleGroupAllowActionOutput added in v0.50.0

type RuleGroupAllowActionOutput struct{ *pulumi.OutputState }

Allow traffic towards application.

func (RuleGroupAllowActionOutput) CustomRequestHandling added in v0.50.0

Defines custom handling for the web request.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

func (RuleGroupAllowActionOutput) ElementType added in v0.50.0

func (RuleGroupAllowActionOutput) ElementType() reflect.Type

func (RuleGroupAllowActionOutput) ToRuleGroupAllowActionOutput added in v0.50.0

func (o RuleGroupAllowActionOutput) ToRuleGroupAllowActionOutput() RuleGroupAllowActionOutput

func (RuleGroupAllowActionOutput) ToRuleGroupAllowActionOutputWithContext added in v0.50.0

func (o RuleGroupAllowActionOutput) ToRuleGroupAllowActionOutputWithContext(ctx context.Context) RuleGroupAllowActionOutput

func (RuleGroupAllowActionOutput) ToRuleGroupAllowActionPtrOutput added in v0.50.0

func (o RuleGroupAllowActionOutput) ToRuleGroupAllowActionPtrOutput() RuleGroupAllowActionPtrOutput

func (RuleGroupAllowActionOutput) ToRuleGroupAllowActionPtrOutputWithContext added in v0.50.0

func (o RuleGroupAllowActionOutput) ToRuleGroupAllowActionPtrOutputWithContext(ctx context.Context) RuleGroupAllowActionPtrOutput

type RuleGroupAllowActionPtrInput added in v0.50.0

type RuleGroupAllowActionPtrInput interface {
	pulumi.Input

	ToRuleGroupAllowActionPtrOutput() RuleGroupAllowActionPtrOutput
	ToRuleGroupAllowActionPtrOutputWithContext(context.Context) RuleGroupAllowActionPtrOutput
}

RuleGroupAllowActionPtrInput is an input type that accepts RuleGroupAllowActionArgs, RuleGroupAllowActionPtr and RuleGroupAllowActionPtrOutput values. You can construct a concrete instance of `RuleGroupAllowActionPtrInput` via:

        RuleGroupAllowActionArgs{...}

or:

        nil

func RuleGroupAllowActionPtr added in v0.50.0

func RuleGroupAllowActionPtr(v *RuleGroupAllowActionArgs) RuleGroupAllowActionPtrInput

type RuleGroupAllowActionPtrOutput added in v0.50.0

type RuleGroupAllowActionPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupAllowActionPtrOutput) CustomRequestHandling added in v0.50.0

Defines custom handling for the web request.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

func (RuleGroupAllowActionPtrOutput) Elem added in v0.50.0

func (RuleGroupAllowActionPtrOutput) ElementType added in v0.50.0

func (RuleGroupAllowActionPtrOutput) ToRuleGroupAllowActionPtrOutput added in v0.50.0

func (o RuleGroupAllowActionPtrOutput) ToRuleGroupAllowActionPtrOutput() RuleGroupAllowActionPtrOutput

func (RuleGroupAllowActionPtrOutput) ToRuleGroupAllowActionPtrOutputWithContext added in v0.50.0

func (o RuleGroupAllowActionPtrOutput) ToRuleGroupAllowActionPtrOutputWithContext(ctx context.Context) RuleGroupAllowActionPtrOutput

type RuleGroupAndStatement

type RuleGroupAndStatement struct {
	// The statements to combine with AND logic. You can use any statements that can be nested.
	Statements []RuleGroupStatement `pulumi:"statements"`
}

type RuleGroupAndStatementArgs

type RuleGroupAndStatementArgs struct {
	// The statements to combine with AND logic. You can use any statements that can be nested.
	Statements RuleGroupStatementArrayInput `pulumi:"statements"`
}

func (RuleGroupAndStatementArgs) ElementType

func (RuleGroupAndStatementArgs) ElementType() reflect.Type

func (RuleGroupAndStatementArgs) ToRuleGroupAndStatementOutput

func (i RuleGroupAndStatementArgs) ToRuleGroupAndStatementOutput() RuleGroupAndStatementOutput

func (RuleGroupAndStatementArgs) ToRuleGroupAndStatementOutputWithContext

func (i RuleGroupAndStatementArgs) ToRuleGroupAndStatementOutputWithContext(ctx context.Context) RuleGroupAndStatementOutput

func (RuleGroupAndStatementArgs) ToRuleGroupAndStatementPtrOutput

func (i RuleGroupAndStatementArgs) ToRuleGroupAndStatementPtrOutput() RuleGroupAndStatementPtrOutput

func (RuleGroupAndStatementArgs) ToRuleGroupAndStatementPtrOutputWithContext

func (i RuleGroupAndStatementArgs) ToRuleGroupAndStatementPtrOutputWithContext(ctx context.Context) RuleGroupAndStatementPtrOutput

type RuleGroupAndStatementInput

type RuleGroupAndStatementInput interface {
	pulumi.Input

	ToRuleGroupAndStatementOutput() RuleGroupAndStatementOutput
	ToRuleGroupAndStatementOutputWithContext(context.Context) RuleGroupAndStatementOutput
}

RuleGroupAndStatementInput is an input type that accepts RuleGroupAndStatementArgs and RuleGroupAndStatementOutput values. You can construct a concrete instance of `RuleGroupAndStatementInput` via:

RuleGroupAndStatementArgs{...}

type RuleGroupAndStatementOutput

type RuleGroupAndStatementOutput struct{ *pulumi.OutputState }

func (RuleGroupAndStatementOutput) ElementType

func (RuleGroupAndStatementOutput) Statements

The statements to combine with AND logic. You can use any statements that can be nested.

func (RuleGroupAndStatementOutput) ToRuleGroupAndStatementOutput

func (o RuleGroupAndStatementOutput) ToRuleGroupAndStatementOutput() RuleGroupAndStatementOutput

func (RuleGroupAndStatementOutput) ToRuleGroupAndStatementOutputWithContext

func (o RuleGroupAndStatementOutput) ToRuleGroupAndStatementOutputWithContext(ctx context.Context) RuleGroupAndStatementOutput

func (RuleGroupAndStatementOutput) ToRuleGroupAndStatementPtrOutput

func (o RuleGroupAndStatementOutput) ToRuleGroupAndStatementPtrOutput() RuleGroupAndStatementPtrOutput

func (RuleGroupAndStatementOutput) ToRuleGroupAndStatementPtrOutputWithContext

func (o RuleGroupAndStatementOutput) ToRuleGroupAndStatementPtrOutputWithContext(ctx context.Context) RuleGroupAndStatementPtrOutput

type RuleGroupAndStatementPtrInput

type RuleGroupAndStatementPtrInput interface {
	pulumi.Input

	ToRuleGroupAndStatementPtrOutput() RuleGroupAndStatementPtrOutput
	ToRuleGroupAndStatementPtrOutputWithContext(context.Context) RuleGroupAndStatementPtrOutput
}

RuleGroupAndStatementPtrInput is an input type that accepts RuleGroupAndStatementArgs, RuleGroupAndStatementPtr and RuleGroupAndStatementPtrOutput values. You can construct a concrete instance of `RuleGroupAndStatementPtrInput` via:

        RuleGroupAndStatementArgs{...}

or:

        nil

type RuleGroupAndStatementPtrOutput

type RuleGroupAndStatementPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupAndStatementPtrOutput) Elem

func (RuleGroupAndStatementPtrOutput) ElementType

func (RuleGroupAndStatementPtrOutput) Statements

The statements to combine with AND logic. You can use any statements that can be nested.

func (RuleGroupAndStatementPtrOutput) ToRuleGroupAndStatementPtrOutput

func (o RuleGroupAndStatementPtrOutput) ToRuleGroupAndStatementPtrOutput() RuleGroupAndStatementPtrOutput

func (RuleGroupAndStatementPtrOutput) ToRuleGroupAndStatementPtrOutputWithContext

func (o RuleGroupAndStatementPtrOutput) ToRuleGroupAndStatementPtrOutputWithContext(ctx context.Context) RuleGroupAndStatementPtrOutput

type RuleGroupArgs

type RuleGroupArgs struct {
	// Collection of Available Labels.
	AvailableLabels RuleGroupLabelSummaryArrayInput
	// The web ACL capacity units (WCUs) required for this rule group.
	//
	// When you create your own rule group, you define this, and you cannot change it after creation. When you add or modify the rules in a rule group, AWS WAF enforces this limit.
	//
	// AWS WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. AWS WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500.
	Capacity pulumi.IntInput
	// Collection of Consumed Labels.
	ConsumedLabels RuleGroupLabelSummaryArrayInput
	// A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the rule group, and then use them in the rules that you define in the rule group.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	//
	// For information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* .
	CustomResponseBodies RuleGroupCustomResponseBodyMapInput
	// A description of the rule group that helps with identification.
	Description pulumi.StringPtrInput
	// The name of the rule group. You cannot change the name of a rule group after you create it.
	Name pulumi.StringPtrInput
	// Collection of Rules.
	Rules RuleGroupRuleArrayInput
	// Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .
	//
	// > For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .
	Scope RuleGroupScopeInput
	// Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.
	//
	// > To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.
	Tags aws.TagArrayInput
	// Defines and enables Amazon CloudWatch metrics and web request sample collection.
	VisibilityConfig RuleGroupVisibilityConfigInput
}

The set of arguments for constructing a RuleGroup resource.

func (RuleGroupArgs) ElementType

func (RuleGroupArgs) ElementType() reflect.Type

type RuleGroupBlockAction added in v0.50.0

type RuleGroupBlockAction struct {
	// Defines a custom response for the web request.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	CustomResponse *RuleGroupCustomResponse `pulumi:"customResponse"`
}

Block traffic towards application.

type RuleGroupBlockActionArgs added in v0.50.0

type RuleGroupBlockActionArgs struct {
	// Defines a custom response for the web request.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	CustomResponse RuleGroupCustomResponsePtrInput `pulumi:"customResponse"`
}

Block traffic towards application.

func (RuleGroupBlockActionArgs) ElementType added in v0.50.0

func (RuleGroupBlockActionArgs) ElementType() reflect.Type

func (RuleGroupBlockActionArgs) ToRuleGroupBlockActionOutput added in v0.50.0

func (i RuleGroupBlockActionArgs) ToRuleGroupBlockActionOutput() RuleGroupBlockActionOutput

func (RuleGroupBlockActionArgs) ToRuleGroupBlockActionOutputWithContext added in v0.50.0

func (i RuleGroupBlockActionArgs) ToRuleGroupBlockActionOutputWithContext(ctx context.Context) RuleGroupBlockActionOutput

func (RuleGroupBlockActionArgs) ToRuleGroupBlockActionPtrOutput added in v0.50.0

func (i RuleGroupBlockActionArgs) ToRuleGroupBlockActionPtrOutput() RuleGroupBlockActionPtrOutput

func (RuleGroupBlockActionArgs) ToRuleGroupBlockActionPtrOutputWithContext added in v0.50.0

func (i RuleGroupBlockActionArgs) ToRuleGroupBlockActionPtrOutputWithContext(ctx context.Context) RuleGroupBlockActionPtrOutput

type RuleGroupBlockActionInput added in v0.50.0

type RuleGroupBlockActionInput interface {
	pulumi.Input

	ToRuleGroupBlockActionOutput() RuleGroupBlockActionOutput
	ToRuleGroupBlockActionOutputWithContext(context.Context) RuleGroupBlockActionOutput
}

RuleGroupBlockActionInput is an input type that accepts RuleGroupBlockActionArgs and RuleGroupBlockActionOutput values. You can construct a concrete instance of `RuleGroupBlockActionInput` via:

RuleGroupBlockActionArgs{...}

type RuleGroupBlockActionOutput added in v0.50.0

type RuleGroupBlockActionOutput struct{ *pulumi.OutputState }

Block traffic towards application.

func (RuleGroupBlockActionOutput) CustomResponse added in v0.50.0

Defines a custom response for the web request.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

func (RuleGroupBlockActionOutput) ElementType added in v0.50.0

func (RuleGroupBlockActionOutput) ElementType() reflect.Type

func (RuleGroupBlockActionOutput) ToRuleGroupBlockActionOutput added in v0.50.0

func (o RuleGroupBlockActionOutput) ToRuleGroupBlockActionOutput() RuleGroupBlockActionOutput

func (RuleGroupBlockActionOutput) ToRuleGroupBlockActionOutputWithContext added in v0.50.0

func (o RuleGroupBlockActionOutput) ToRuleGroupBlockActionOutputWithContext(ctx context.Context) RuleGroupBlockActionOutput

func (RuleGroupBlockActionOutput) ToRuleGroupBlockActionPtrOutput added in v0.50.0

func (o RuleGroupBlockActionOutput) ToRuleGroupBlockActionPtrOutput() RuleGroupBlockActionPtrOutput

func (RuleGroupBlockActionOutput) ToRuleGroupBlockActionPtrOutputWithContext added in v0.50.0

func (o RuleGroupBlockActionOutput) ToRuleGroupBlockActionPtrOutputWithContext(ctx context.Context) RuleGroupBlockActionPtrOutput

type RuleGroupBlockActionPtrInput added in v0.50.0

type RuleGroupBlockActionPtrInput interface {
	pulumi.Input

	ToRuleGroupBlockActionPtrOutput() RuleGroupBlockActionPtrOutput
	ToRuleGroupBlockActionPtrOutputWithContext(context.Context) RuleGroupBlockActionPtrOutput
}

RuleGroupBlockActionPtrInput is an input type that accepts RuleGroupBlockActionArgs, RuleGroupBlockActionPtr and RuleGroupBlockActionPtrOutput values. You can construct a concrete instance of `RuleGroupBlockActionPtrInput` via:

        RuleGroupBlockActionArgs{...}

or:

        nil

func RuleGroupBlockActionPtr added in v0.50.0

func RuleGroupBlockActionPtr(v *RuleGroupBlockActionArgs) RuleGroupBlockActionPtrInput

type RuleGroupBlockActionPtrOutput added in v0.50.0

type RuleGroupBlockActionPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupBlockActionPtrOutput) CustomResponse added in v0.50.0

Defines a custom response for the web request.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

func (RuleGroupBlockActionPtrOutput) Elem added in v0.50.0

func (RuleGroupBlockActionPtrOutput) ElementType added in v0.50.0

func (RuleGroupBlockActionPtrOutput) ToRuleGroupBlockActionPtrOutput added in v0.50.0

func (o RuleGroupBlockActionPtrOutput) ToRuleGroupBlockActionPtrOutput() RuleGroupBlockActionPtrOutput

func (RuleGroupBlockActionPtrOutput) ToRuleGroupBlockActionPtrOutputWithContext added in v0.50.0

func (o RuleGroupBlockActionPtrOutput) ToRuleGroupBlockActionPtrOutputWithContext(ctx context.Context) RuleGroupBlockActionPtrOutput

type RuleGroupBody added in v0.17.0

type RuleGroupBody struct {
	// What AWS WAF should do if the body is larger than AWS WAF can inspect.
	//
	// AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.
	//
	// - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	// - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
	//
	// The options for oversize handling are the following:
	//
	// - `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	//
	// You can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.
	//
	// Default: `CONTINUE`
	OversizeHandling *RuleGroupOversizeHandling `pulumi:"oversizeHandling"`
}

The body of a web request. This immediately follows the request headers.

type RuleGroupBodyArgs added in v0.17.0

type RuleGroupBodyArgs struct {
	// What AWS WAF should do if the body is larger than AWS WAF can inspect.
	//
	// AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.
	//
	// - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	// - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
	//
	// The options for oversize handling are the following:
	//
	// - `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	//
	// You can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.
	//
	// Default: `CONTINUE`
	OversizeHandling RuleGroupOversizeHandlingPtrInput `pulumi:"oversizeHandling"`
}

The body of a web request. This immediately follows the request headers.

func (RuleGroupBodyArgs) ElementType added in v0.17.0

func (RuleGroupBodyArgs) ElementType() reflect.Type

func (RuleGroupBodyArgs) ToRuleGroupBodyOutput added in v0.17.0

func (i RuleGroupBodyArgs) ToRuleGroupBodyOutput() RuleGroupBodyOutput

func (RuleGroupBodyArgs) ToRuleGroupBodyOutputWithContext added in v0.17.0

func (i RuleGroupBodyArgs) ToRuleGroupBodyOutputWithContext(ctx context.Context) RuleGroupBodyOutput

func (RuleGroupBodyArgs) ToRuleGroupBodyPtrOutput added in v0.17.0

func (i RuleGroupBodyArgs) ToRuleGroupBodyPtrOutput() RuleGroupBodyPtrOutput

func (RuleGroupBodyArgs) ToRuleGroupBodyPtrOutputWithContext added in v0.17.0

func (i RuleGroupBodyArgs) ToRuleGroupBodyPtrOutputWithContext(ctx context.Context) RuleGroupBodyPtrOutput

type RuleGroupBodyInput added in v0.17.0

type RuleGroupBodyInput interface {
	pulumi.Input

	ToRuleGroupBodyOutput() RuleGroupBodyOutput
	ToRuleGroupBodyOutputWithContext(context.Context) RuleGroupBodyOutput
}

RuleGroupBodyInput is an input type that accepts RuleGroupBodyArgs and RuleGroupBodyOutput values. You can construct a concrete instance of `RuleGroupBodyInput` via:

RuleGroupBodyArgs{...}

type RuleGroupBodyOutput added in v0.17.0

type RuleGroupBodyOutput struct{ *pulumi.OutputState }

The body of a web request. This immediately follows the request headers.

func (RuleGroupBodyOutput) ElementType added in v0.17.0

func (RuleGroupBodyOutput) ElementType() reflect.Type

func (RuleGroupBodyOutput) OversizeHandling added in v0.17.0

What AWS WAF should do if the body is larger than AWS WAF can inspect.

AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.

- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes). - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.

The options for oversize handling are the following:

- `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

You can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.

Default: `CONTINUE`

func (RuleGroupBodyOutput) ToRuleGroupBodyOutput added in v0.17.0

func (o RuleGroupBodyOutput) ToRuleGroupBodyOutput() RuleGroupBodyOutput

func (RuleGroupBodyOutput) ToRuleGroupBodyOutputWithContext added in v0.17.0

func (o RuleGroupBodyOutput) ToRuleGroupBodyOutputWithContext(ctx context.Context) RuleGroupBodyOutput

func (RuleGroupBodyOutput) ToRuleGroupBodyPtrOutput added in v0.17.0

func (o RuleGroupBodyOutput) ToRuleGroupBodyPtrOutput() RuleGroupBodyPtrOutput

func (RuleGroupBodyOutput) ToRuleGroupBodyPtrOutputWithContext added in v0.17.0

func (o RuleGroupBodyOutput) ToRuleGroupBodyPtrOutputWithContext(ctx context.Context) RuleGroupBodyPtrOutput

type RuleGroupBodyParsingFallbackBehavior

type RuleGroupBodyParsingFallbackBehavior string

The inspection behavior to fall back to if the JSON in the request body is invalid.

func (RuleGroupBodyParsingFallbackBehavior) ElementType

func (RuleGroupBodyParsingFallbackBehavior) ToRuleGroupBodyParsingFallbackBehaviorOutput

func (e RuleGroupBodyParsingFallbackBehavior) ToRuleGroupBodyParsingFallbackBehaviorOutput() RuleGroupBodyParsingFallbackBehaviorOutput

func (RuleGroupBodyParsingFallbackBehavior) ToRuleGroupBodyParsingFallbackBehaviorOutputWithContext

func (e RuleGroupBodyParsingFallbackBehavior) ToRuleGroupBodyParsingFallbackBehaviorOutputWithContext(ctx context.Context) RuleGroupBodyParsingFallbackBehaviorOutput

func (RuleGroupBodyParsingFallbackBehavior) ToRuleGroupBodyParsingFallbackBehaviorPtrOutput

func (e RuleGroupBodyParsingFallbackBehavior) ToRuleGroupBodyParsingFallbackBehaviorPtrOutput() RuleGroupBodyParsingFallbackBehaviorPtrOutput

func (RuleGroupBodyParsingFallbackBehavior) ToRuleGroupBodyParsingFallbackBehaviorPtrOutputWithContext

func (e RuleGroupBodyParsingFallbackBehavior) ToRuleGroupBodyParsingFallbackBehaviorPtrOutputWithContext(ctx context.Context) RuleGroupBodyParsingFallbackBehaviorPtrOutput

func (RuleGroupBodyParsingFallbackBehavior) ToStringOutput

func (RuleGroupBodyParsingFallbackBehavior) ToStringOutputWithContext

func (e RuleGroupBodyParsingFallbackBehavior) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupBodyParsingFallbackBehavior) ToStringPtrOutput

func (RuleGroupBodyParsingFallbackBehavior) ToStringPtrOutputWithContext

func (e RuleGroupBodyParsingFallbackBehavior) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupBodyParsingFallbackBehaviorInput

type RuleGroupBodyParsingFallbackBehaviorInput interface {
	pulumi.Input

	ToRuleGroupBodyParsingFallbackBehaviorOutput() RuleGroupBodyParsingFallbackBehaviorOutput
	ToRuleGroupBodyParsingFallbackBehaviorOutputWithContext(context.Context) RuleGroupBodyParsingFallbackBehaviorOutput
}

RuleGroupBodyParsingFallbackBehaviorInput is an input type that accepts values of the RuleGroupBodyParsingFallbackBehavior enum A concrete instance of `RuleGroupBodyParsingFallbackBehaviorInput` can be one of the following:

RuleGroupBodyParsingFallbackBehaviorMatch
RuleGroupBodyParsingFallbackBehaviorNoMatch
RuleGroupBodyParsingFallbackBehaviorEvaluateAsString

type RuleGroupBodyParsingFallbackBehaviorOutput

type RuleGroupBodyParsingFallbackBehaviorOutput struct{ *pulumi.OutputState }

func (RuleGroupBodyParsingFallbackBehaviorOutput) ElementType

func (RuleGroupBodyParsingFallbackBehaviorOutput) ToRuleGroupBodyParsingFallbackBehaviorOutput

func (o RuleGroupBodyParsingFallbackBehaviorOutput) ToRuleGroupBodyParsingFallbackBehaviorOutput() RuleGroupBodyParsingFallbackBehaviorOutput

func (RuleGroupBodyParsingFallbackBehaviorOutput) ToRuleGroupBodyParsingFallbackBehaviorOutputWithContext

func (o RuleGroupBodyParsingFallbackBehaviorOutput) ToRuleGroupBodyParsingFallbackBehaviorOutputWithContext(ctx context.Context) RuleGroupBodyParsingFallbackBehaviorOutput

func (RuleGroupBodyParsingFallbackBehaviorOutput) ToRuleGroupBodyParsingFallbackBehaviorPtrOutput

func (o RuleGroupBodyParsingFallbackBehaviorOutput) ToRuleGroupBodyParsingFallbackBehaviorPtrOutput() RuleGroupBodyParsingFallbackBehaviorPtrOutput

func (RuleGroupBodyParsingFallbackBehaviorOutput) ToRuleGroupBodyParsingFallbackBehaviorPtrOutputWithContext

func (o RuleGroupBodyParsingFallbackBehaviorOutput) ToRuleGroupBodyParsingFallbackBehaviorPtrOutputWithContext(ctx context.Context) RuleGroupBodyParsingFallbackBehaviorPtrOutput

func (RuleGroupBodyParsingFallbackBehaviorOutput) ToStringOutput

func (RuleGroupBodyParsingFallbackBehaviorOutput) ToStringOutputWithContext

func (RuleGroupBodyParsingFallbackBehaviorOutput) ToStringPtrOutput

func (RuleGroupBodyParsingFallbackBehaviorOutput) ToStringPtrOutputWithContext

type RuleGroupBodyParsingFallbackBehaviorPtrInput

type RuleGroupBodyParsingFallbackBehaviorPtrInput interface {
	pulumi.Input

	ToRuleGroupBodyParsingFallbackBehaviorPtrOutput() RuleGroupBodyParsingFallbackBehaviorPtrOutput
	ToRuleGroupBodyParsingFallbackBehaviorPtrOutputWithContext(context.Context) RuleGroupBodyParsingFallbackBehaviorPtrOutput
}

type RuleGroupBodyParsingFallbackBehaviorPtrOutput

type RuleGroupBodyParsingFallbackBehaviorPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupBodyParsingFallbackBehaviorPtrOutput) Elem

func (RuleGroupBodyParsingFallbackBehaviorPtrOutput) ElementType

func (RuleGroupBodyParsingFallbackBehaviorPtrOutput) ToRuleGroupBodyParsingFallbackBehaviorPtrOutput

func (o RuleGroupBodyParsingFallbackBehaviorPtrOutput) ToRuleGroupBodyParsingFallbackBehaviorPtrOutput() RuleGroupBodyParsingFallbackBehaviorPtrOutput

func (RuleGroupBodyParsingFallbackBehaviorPtrOutput) ToRuleGroupBodyParsingFallbackBehaviorPtrOutputWithContext

func (o RuleGroupBodyParsingFallbackBehaviorPtrOutput) ToRuleGroupBodyParsingFallbackBehaviorPtrOutputWithContext(ctx context.Context) RuleGroupBodyParsingFallbackBehaviorPtrOutput

func (RuleGroupBodyParsingFallbackBehaviorPtrOutput) ToStringPtrOutput

func (RuleGroupBodyParsingFallbackBehaviorPtrOutput) ToStringPtrOutputWithContext

type RuleGroupBodyPtrInput added in v0.17.0

type RuleGroupBodyPtrInput interface {
	pulumi.Input

	ToRuleGroupBodyPtrOutput() RuleGroupBodyPtrOutput
	ToRuleGroupBodyPtrOutputWithContext(context.Context) RuleGroupBodyPtrOutput
}

RuleGroupBodyPtrInput is an input type that accepts RuleGroupBodyArgs, RuleGroupBodyPtr and RuleGroupBodyPtrOutput values. You can construct a concrete instance of `RuleGroupBodyPtrInput` via:

        RuleGroupBodyArgs{...}

or:

        nil

func RuleGroupBodyPtr added in v0.17.0

func RuleGroupBodyPtr(v *RuleGroupBodyArgs) RuleGroupBodyPtrInput

type RuleGroupBodyPtrOutput added in v0.17.0

type RuleGroupBodyPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupBodyPtrOutput) Elem added in v0.17.0

func (RuleGroupBodyPtrOutput) ElementType added in v0.17.0

func (RuleGroupBodyPtrOutput) ElementType() reflect.Type

func (RuleGroupBodyPtrOutput) OversizeHandling added in v0.17.0

What AWS WAF should do if the body is larger than AWS WAF can inspect.

AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.

- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes). - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.

The options for oversize handling are the following:

- `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

You can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.

Default: `CONTINUE`

func (RuleGroupBodyPtrOutput) ToRuleGroupBodyPtrOutput added in v0.17.0

func (o RuleGroupBodyPtrOutput) ToRuleGroupBodyPtrOutput() RuleGroupBodyPtrOutput

func (RuleGroupBodyPtrOutput) ToRuleGroupBodyPtrOutputWithContext added in v0.17.0

func (o RuleGroupBodyPtrOutput) ToRuleGroupBodyPtrOutputWithContext(ctx context.Context) RuleGroupBodyPtrOutput

type RuleGroupByteMatchStatement

type RuleGroupByteMatchStatement struct {
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch RuleGroupFieldToMatch `pulumi:"fieldToMatch"`
	// The area within the portion of the web request that you want AWS WAF to search for `SearchString` . Valid values include the following:
	//
	// *CONTAINS*
	//
	// The specified part of the web request must include the value of `SearchString` , but the location doesn't matter.
	//
	// *CONTAINS_WORD*
	//
	// The specified part of the web request must include the value of `SearchString` , and `SearchString` must contain only alphanumeric characters or underscore (A-Z, a-z, 0-9, or _). In addition, `SearchString` must be a word, which means that both of the following are true:
	//
	// - `SearchString` is at the beginning of the specified part of the web request or is preceded by a character other than an alphanumeric character or underscore (_). Examples include the value of a header and `;BadBot` .
	// - `SearchString` is at the end of the specified part of the web request or is followed by a character other than an alphanumeric character or underscore (_), for example, `BadBot;` and `-BadBot;` .
	//
	// *EXACTLY*
	//
	// The value of the specified part of the web request must exactly match the value of `SearchString` .
	//
	// *STARTS_WITH*
	//
	// The value of `SearchString` must appear at the beginning of the specified part of the web request.
	//
	// *ENDS_WITH*
	//
	// The value of `SearchString` must appear at the end of the specified part of the web request.
	PositionalConstraint RuleGroupPositionalConstraint `pulumi:"positionalConstraint"`
	// A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in `FieldToMatch` . The maximum length of the value is 200 bytes. For alphabetic characters A-Z and a-z, the value is case sensitive.
	//
	// Don't encode this string. Provide the value that you want AWS WAF to search for. AWS CloudFormation automatically base64 encodes the value for you.
	//
	// For example, suppose the value of `Type` is `HEADER` and the value of `Data` is `User-Agent` . If you want to search the `User-Agent` header for the value `BadBot` , you provide the string `BadBot` in the value of `SearchString` .
	//
	// You must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` .
	SearchString *string `pulumi:"searchString"`
	// String to search for in a web request component, base64-encoded. If you don't want to encode the string, specify the unencoded value in `SearchString` instead.
	//
	// You must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` .
	SearchStringBase64 *string `pulumi:"searchStringBase64"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations []RuleGroupTextTransformation `pulumi:"textTransformations"`
}

Byte Match statement.

type RuleGroupByteMatchStatementArgs

type RuleGroupByteMatchStatementArgs struct {
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch RuleGroupFieldToMatchInput `pulumi:"fieldToMatch"`
	// The area within the portion of the web request that you want AWS WAF to search for `SearchString` . Valid values include the following:
	//
	// *CONTAINS*
	//
	// The specified part of the web request must include the value of `SearchString` , but the location doesn't matter.
	//
	// *CONTAINS_WORD*
	//
	// The specified part of the web request must include the value of `SearchString` , and `SearchString` must contain only alphanumeric characters or underscore (A-Z, a-z, 0-9, or _). In addition, `SearchString` must be a word, which means that both of the following are true:
	//
	// - `SearchString` is at the beginning of the specified part of the web request or is preceded by a character other than an alphanumeric character or underscore (_). Examples include the value of a header and `;BadBot` .
	// - `SearchString` is at the end of the specified part of the web request or is followed by a character other than an alphanumeric character or underscore (_), for example, `BadBot;` and `-BadBot;` .
	//
	// *EXACTLY*
	//
	// The value of the specified part of the web request must exactly match the value of `SearchString` .
	//
	// *STARTS_WITH*
	//
	// The value of `SearchString` must appear at the beginning of the specified part of the web request.
	//
	// *ENDS_WITH*
	//
	// The value of `SearchString` must appear at the end of the specified part of the web request.
	PositionalConstraint RuleGroupPositionalConstraintInput `pulumi:"positionalConstraint"`
	// A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in `FieldToMatch` . The maximum length of the value is 200 bytes. For alphabetic characters A-Z and a-z, the value is case sensitive.
	//
	// Don't encode this string. Provide the value that you want AWS WAF to search for. AWS CloudFormation automatically base64 encodes the value for you.
	//
	// For example, suppose the value of `Type` is `HEADER` and the value of `Data` is `User-Agent` . If you want to search the `User-Agent` header for the value `BadBot` , you provide the string `BadBot` in the value of `SearchString` .
	//
	// You must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` .
	SearchString pulumi.StringPtrInput `pulumi:"searchString"`
	// String to search for in a web request component, base64-encoded. If you don't want to encode the string, specify the unencoded value in `SearchString` instead.
	//
	// You must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` .
	SearchStringBase64 pulumi.StringPtrInput `pulumi:"searchStringBase64"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations RuleGroupTextTransformationArrayInput `pulumi:"textTransformations"`
}

Byte Match statement.

func (RuleGroupByteMatchStatementArgs) ElementType

func (RuleGroupByteMatchStatementArgs) ToRuleGroupByteMatchStatementOutput

func (i RuleGroupByteMatchStatementArgs) ToRuleGroupByteMatchStatementOutput() RuleGroupByteMatchStatementOutput

func (RuleGroupByteMatchStatementArgs) ToRuleGroupByteMatchStatementOutputWithContext

func (i RuleGroupByteMatchStatementArgs) ToRuleGroupByteMatchStatementOutputWithContext(ctx context.Context) RuleGroupByteMatchStatementOutput

func (RuleGroupByteMatchStatementArgs) ToRuleGroupByteMatchStatementPtrOutput

func (i RuleGroupByteMatchStatementArgs) ToRuleGroupByteMatchStatementPtrOutput() RuleGroupByteMatchStatementPtrOutput

func (RuleGroupByteMatchStatementArgs) ToRuleGroupByteMatchStatementPtrOutputWithContext

func (i RuleGroupByteMatchStatementArgs) ToRuleGroupByteMatchStatementPtrOutputWithContext(ctx context.Context) RuleGroupByteMatchStatementPtrOutput

type RuleGroupByteMatchStatementInput

type RuleGroupByteMatchStatementInput interface {
	pulumi.Input

	ToRuleGroupByteMatchStatementOutput() RuleGroupByteMatchStatementOutput
	ToRuleGroupByteMatchStatementOutputWithContext(context.Context) RuleGroupByteMatchStatementOutput
}

RuleGroupByteMatchStatementInput is an input type that accepts RuleGroupByteMatchStatementArgs and RuleGroupByteMatchStatementOutput values. You can construct a concrete instance of `RuleGroupByteMatchStatementInput` via:

RuleGroupByteMatchStatementArgs{...}

type RuleGroupByteMatchStatementOutput

type RuleGroupByteMatchStatementOutput struct{ *pulumi.OutputState }

Byte Match statement.

func (RuleGroupByteMatchStatementOutput) ElementType

func (RuleGroupByteMatchStatementOutput) FieldToMatch

The part of the web request that you want AWS WAF to inspect.

func (RuleGroupByteMatchStatementOutput) PositionalConstraint

The area within the portion of the web request that you want AWS WAF to search for `SearchString` . Valid values include the following:

*CONTAINS*

The specified part of the web request must include the value of `SearchString` , but the location doesn't matter.

*CONTAINS_WORD*

The specified part of the web request must include the value of `SearchString` , and `SearchString` must contain only alphanumeric characters or underscore (A-Z, a-z, 0-9, or _). In addition, `SearchString` must be a word, which means that both of the following are true:

- `SearchString` is at the beginning of the specified part of the web request or is preceded by a character other than an alphanumeric character or underscore (_). Examples include the value of a header and `;BadBot` . - `SearchString` is at the end of the specified part of the web request or is followed by a character other than an alphanumeric character or underscore (_), for example, `BadBot;` and `-BadBot;` .

*EXACTLY*

The value of the specified part of the web request must exactly match the value of `SearchString` .

*STARTS_WITH*

The value of `SearchString` must appear at the beginning of the specified part of the web request.

*ENDS_WITH*

The value of `SearchString` must appear at the end of the specified part of the web request.

func (RuleGroupByteMatchStatementOutput) SearchString

A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in `FieldToMatch` . The maximum length of the value is 200 bytes. For alphabetic characters A-Z and a-z, the value is case sensitive.

Don't encode this string. Provide the value that you want AWS WAF to search for. AWS CloudFormation automatically base64 encodes the value for you.

For example, suppose the value of `Type` is `HEADER` and the value of `Data` is `User-Agent` . If you want to search the `User-Agent` header for the value `BadBot` , you provide the string `BadBot` in the value of `SearchString` .

You must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` .

func (RuleGroupByteMatchStatementOutput) SearchStringBase64

String to search for in a web request component, base64-encoded. If you don't want to encode the string, specify the unencoded value in `SearchString` instead.

You must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` .

func (RuleGroupByteMatchStatementOutput) TextTransformations

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (RuleGroupByteMatchStatementOutput) ToRuleGroupByteMatchStatementOutput

func (o RuleGroupByteMatchStatementOutput) ToRuleGroupByteMatchStatementOutput() RuleGroupByteMatchStatementOutput

func (RuleGroupByteMatchStatementOutput) ToRuleGroupByteMatchStatementOutputWithContext

func (o RuleGroupByteMatchStatementOutput) ToRuleGroupByteMatchStatementOutputWithContext(ctx context.Context) RuleGroupByteMatchStatementOutput

func (RuleGroupByteMatchStatementOutput) ToRuleGroupByteMatchStatementPtrOutput

func (o RuleGroupByteMatchStatementOutput) ToRuleGroupByteMatchStatementPtrOutput() RuleGroupByteMatchStatementPtrOutput

func (RuleGroupByteMatchStatementOutput) ToRuleGroupByteMatchStatementPtrOutputWithContext

func (o RuleGroupByteMatchStatementOutput) ToRuleGroupByteMatchStatementPtrOutputWithContext(ctx context.Context) RuleGroupByteMatchStatementPtrOutput

type RuleGroupByteMatchStatementPtrInput

type RuleGroupByteMatchStatementPtrInput interface {
	pulumi.Input

	ToRuleGroupByteMatchStatementPtrOutput() RuleGroupByteMatchStatementPtrOutput
	ToRuleGroupByteMatchStatementPtrOutputWithContext(context.Context) RuleGroupByteMatchStatementPtrOutput
}

RuleGroupByteMatchStatementPtrInput is an input type that accepts RuleGroupByteMatchStatementArgs, RuleGroupByteMatchStatementPtr and RuleGroupByteMatchStatementPtrOutput values. You can construct a concrete instance of `RuleGroupByteMatchStatementPtrInput` via:

        RuleGroupByteMatchStatementArgs{...}

or:

        nil

type RuleGroupByteMatchStatementPtrOutput

type RuleGroupByteMatchStatementPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupByteMatchStatementPtrOutput) Elem

func (RuleGroupByteMatchStatementPtrOutput) ElementType

func (RuleGroupByteMatchStatementPtrOutput) FieldToMatch

The part of the web request that you want AWS WAF to inspect.

func (RuleGroupByteMatchStatementPtrOutput) PositionalConstraint

The area within the portion of the web request that you want AWS WAF to search for `SearchString` . Valid values include the following:

*CONTAINS*

The specified part of the web request must include the value of `SearchString` , but the location doesn't matter.

*CONTAINS_WORD*

The specified part of the web request must include the value of `SearchString` , and `SearchString` must contain only alphanumeric characters or underscore (A-Z, a-z, 0-9, or _). In addition, `SearchString` must be a word, which means that both of the following are true:

- `SearchString` is at the beginning of the specified part of the web request or is preceded by a character other than an alphanumeric character or underscore (_). Examples include the value of a header and `;BadBot` . - `SearchString` is at the end of the specified part of the web request or is followed by a character other than an alphanumeric character or underscore (_), for example, `BadBot;` and `-BadBot;` .

*EXACTLY*

The value of the specified part of the web request must exactly match the value of `SearchString` .

*STARTS_WITH*

The value of `SearchString` must appear at the beginning of the specified part of the web request.

*ENDS_WITH*

The value of `SearchString` must appear at the end of the specified part of the web request.

func (RuleGroupByteMatchStatementPtrOutput) SearchString

A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in `FieldToMatch` . The maximum length of the value is 200 bytes. For alphabetic characters A-Z and a-z, the value is case sensitive.

Don't encode this string. Provide the value that you want AWS WAF to search for. AWS CloudFormation automatically base64 encodes the value for you.

For example, suppose the value of `Type` is `HEADER` and the value of `Data` is `User-Agent` . If you want to search the `User-Agent` header for the value `BadBot` , you provide the string `BadBot` in the value of `SearchString` .

You must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` .

func (RuleGroupByteMatchStatementPtrOutput) SearchStringBase64

String to search for in a web request component, base64-encoded. If you don't want to encode the string, specify the unencoded value in `SearchString` instead.

You must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` .

func (RuleGroupByteMatchStatementPtrOutput) TextTransformations

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (RuleGroupByteMatchStatementPtrOutput) ToRuleGroupByteMatchStatementPtrOutput

func (o RuleGroupByteMatchStatementPtrOutput) ToRuleGroupByteMatchStatementPtrOutput() RuleGroupByteMatchStatementPtrOutput

func (RuleGroupByteMatchStatementPtrOutput) ToRuleGroupByteMatchStatementPtrOutputWithContext

func (o RuleGroupByteMatchStatementPtrOutput) ToRuleGroupByteMatchStatementPtrOutputWithContext(ctx context.Context) RuleGroupByteMatchStatementPtrOutput

type RuleGroupCaptchaAction added in v0.50.0

type RuleGroupCaptchaAction struct {
	// Defines custom handling for the web request, used when the `CAPTCHA` inspection determines that the request's token is valid and unexpired.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	CustomRequestHandling *RuleGroupCustomRequestHandling `pulumi:"customRequestHandling"`
}

Checks valid token exists with request.

type RuleGroupCaptchaActionArgs added in v0.50.0

type RuleGroupCaptchaActionArgs struct {
	// Defines custom handling for the web request, used when the `CAPTCHA` inspection determines that the request's token is valid and unexpired.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	CustomRequestHandling RuleGroupCustomRequestHandlingPtrInput `pulumi:"customRequestHandling"`
}

Checks valid token exists with request.

func (RuleGroupCaptchaActionArgs) ElementType added in v0.50.0

func (RuleGroupCaptchaActionArgs) ElementType() reflect.Type

func (RuleGroupCaptchaActionArgs) ToRuleGroupCaptchaActionOutput added in v0.50.0

func (i RuleGroupCaptchaActionArgs) ToRuleGroupCaptchaActionOutput() RuleGroupCaptchaActionOutput

func (RuleGroupCaptchaActionArgs) ToRuleGroupCaptchaActionOutputWithContext added in v0.50.0

func (i RuleGroupCaptchaActionArgs) ToRuleGroupCaptchaActionOutputWithContext(ctx context.Context) RuleGroupCaptchaActionOutput

func (RuleGroupCaptchaActionArgs) ToRuleGroupCaptchaActionPtrOutput added in v0.50.0

func (i RuleGroupCaptchaActionArgs) ToRuleGroupCaptchaActionPtrOutput() RuleGroupCaptchaActionPtrOutput

func (RuleGroupCaptchaActionArgs) ToRuleGroupCaptchaActionPtrOutputWithContext added in v0.50.0

func (i RuleGroupCaptchaActionArgs) ToRuleGroupCaptchaActionPtrOutputWithContext(ctx context.Context) RuleGroupCaptchaActionPtrOutput

type RuleGroupCaptchaActionInput added in v0.50.0

type RuleGroupCaptchaActionInput interface {
	pulumi.Input

	ToRuleGroupCaptchaActionOutput() RuleGroupCaptchaActionOutput
	ToRuleGroupCaptchaActionOutputWithContext(context.Context) RuleGroupCaptchaActionOutput
}

RuleGroupCaptchaActionInput is an input type that accepts RuleGroupCaptchaActionArgs and RuleGroupCaptchaActionOutput values. You can construct a concrete instance of `RuleGroupCaptchaActionInput` via:

RuleGroupCaptchaActionArgs{...}

type RuleGroupCaptchaActionOutput added in v0.50.0

type RuleGroupCaptchaActionOutput struct{ *pulumi.OutputState }

Checks valid token exists with request.

func (RuleGroupCaptchaActionOutput) CustomRequestHandling added in v0.50.0

Defines custom handling for the web request, used when the `CAPTCHA` inspection determines that the request's token is valid and unexpired.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

func (RuleGroupCaptchaActionOutput) ElementType added in v0.50.0

func (RuleGroupCaptchaActionOutput) ToRuleGroupCaptchaActionOutput added in v0.50.0

func (o RuleGroupCaptchaActionOutput) ToRuleGroupCaptchaActionOutput() RuleGroupCaptchaActionOutput

func (RuleGroupCaptchaActionOutput) ToRuleGroupCaptchaActionOutputWithContext added in v0.50.0

func (o RuleGroupCaptchaActionOutput) ToRuleGroupCaptchaActionOutputWithContext(ctx context.Context) RuleGroupCaptchaActionOutput

func (RuleGroupCaptchaActionOutput) ToRuleGroupCaptchaActionPtrOutput added in v0.50.0

func (o RuleGroupCaptchaActionOutput) ToRuleGroupCaptchaActionPtrOutput() RuleGroupCaptchaActionPtrOutput

func (RuleGroupCaptchaActionOutput) ToRuleGroupCaptchaActionPtrOutputWithContext added in v0.50.0

func (o RuleGroupCaptchaActionOutput) ToRuleGroupCaptchaActionPtrOutputWithContext(ctx context.Context) RuleGroupCaptchaActionPtrOutput

type RuleGroupCaptchaActionPtrInput added in v0.50.0

type RuleGroupCaptchaActionPtrInput interface {
	pulumi.Input

	ToRuleGroupCaptchaActionPtrOutput() RuleGroupCaptchaActionPtrOutput
	ToRuleGroupCaptchaActionPtrOutputWithContext(context.Context) RuleGroupCaptchaActionPtrOutput
}

RuleGroupCaptchaActionPtrInput is an input type that accepts RuleGroupCaptchaActionArgs, RuleGroupCaptchaActionPtr and RuleGroupCaptchaActionPtrOutput values. You can construct a concrete instance of `RuleGroupCaptchaActionPtrInput` via:

        RuleGroupCaptchaActionArgs{...}

or:

        nil

func RuleGroupCaptchaActionPtr added in v0.50.0

func RuleGroupCaptchaActionPtr(v *RuleGroupCaptchaActionArgs) RuleGroupCaptchaActionPtrInput

type RuleGroupCaptchaActionPtrOutput added in v0.50.0

type RuleGroupCaptchaActionPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupCaptchaActionPtrOutput) CustomRequestHandling added in v0.50.0

Defines custom handling for the web request, used when the `CAPTCHA` inspection determines that the request's token is valid and unexpired.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

func (RuleGroupCaptchaActionPtrOutput) Elem added in v0.50.0

func (RuleGroupCaptchaActionPtrOutput) ElementType added in v0.50.0

func (RuleGroupCaptchaActionPtrOutput) ToRuleGroupCaptchaActionPtrOutput added in v0.50.0

func (o RuleGroupCaptchaActionPtrOutput) ToRuleGroupCaptchaActionPtrOutput() RuleGroupCaptchaActionPtrOutput

func (RuleGroupCaptchaActionPtrOutput) ToRuleGroupCaptchaActionPtrOutputWithContext added in v0.50.0

func (o RuleGroupCaptchaActionPtrOutput) ToRuleGroupCaptchaActionPtrOutputWithContext(ctx context.Context) RuleGroupCaptchaActionPtrOutput

type RuleGroupCaptchaConfig added in v0.9.0

type RuleGroupCaptchaConfig struct {
	// Determines how long a `CAPTCHA` timestamp in the token remains valid after the client successfully solves a `CAPTCHA` puzzle.
	ImmunityTimeProperty *RuleGroupImmunityTimeProperty `pulumi:"immunityTimeProperty"`
}

type RuleGroupCaptchaConfigArgs added in v0.9.0

type RuleGroupCaptchaConfigArgs struct {
	// Determines how long a `CAPTCHA` timestamp in the token remains valid after the client successfully solves a `CAPTCHA` puzzle.
	ImmunityTimeProperty RuleGroupImmunityTimePropertyPtrInput `pulumi:"immunityTimeProperty"`
}

func (RuleGroupCaptchaConfigArgs) ElementType added in v0.9.0

func (RuleGroupCaptchaConfigArgs) ElementType() reflect.Type

func (RuleGroupCaptchaConfigArgs) ToRuleGroupCaptchaConfigOutput added in v0.9.0

func (i RuleGroupCaptchaConfigArgs) ToRuleGroupCaptchaConfigOutput() RuleGroupCaptchaConfigOutput

func (RuleGroupCaptchaConfigArgs) ToRuleGroupCaptchaConfigOutputWithContext added in v0.9.0

func (i RuleGroupCaptchaConfigArgs) ToRuleGroupCaptchaConfigOutputWithContext(ctx context.Context) RuleGroupCaptchaConfigOutput

func (RuleGroupCaptchaConfigArgs) ToRuleGroupCaptchaConfigPtrOutput added in v0.9.0

func (i RuleGroupCaptchaConfigArgs) ToRuleGroupCaptchaConfigPtrOutput() RuleGroupCaptchaConfigPtrOutput

func (RuleGroupCaptchaConfigArgs) ToRuleGroupCaptchaConfigPtrOutputWithContext added in v0.9.0

func (i RuleGroupCaptchaConfigArgs) ToRuleGroupCaptchaConfigPtrOutputWithContext(ctx context.Context) RuleGroupCaptchaConfigPtrOutput

type RuleGroupCaptchaConfigInput added in v0.9.0

type RuleGroupCaptchaConfigInput interface {
	pulumi.Input

	ToRuleGroupCaptchaConfigOutput() RuleGroupCaptchaConfigOutput
	ToRuleGroupCaptchaConfigOutputWithContext(context.Context) RuleGroupCaptchaConfigOutput
}

RuleGroupCaptchaConfigInput is an input type that accepts RuleGroupCaptchaConfigArgs and RuleGroupCaptchaConfigOutput values. You can construct a concrete instance of `RuleGroupCaptchaConfigInput` via:

RuleGroupCaptchaConfigArgs{...}

type RuleGroupCaptchaConfigOutput added in v0.9.0

type RuleGroupCaptchaConfigOutput struct{ *pulumi.OutputState }

func (RuleGroupCaptchaConfigOutput) ElementType added in v0.9.0

func (RuleGroupCaptchaConfigOutput) ImmunityTimeProperty added in v0.9.0

Determines how long a `CAPTCHA` timestamp in the token remains valid after the client successfully solves a `CAPTCHA` puzzle.

func (RuleGroupCaptchaConfigOutput) ToRuleGroupCaptchaConfigOutput added in v0.9.0

func (o RuleGroupCaptchaConfigOutput) ToRuleGroupCaptchaConfigOutput() RuleGroupCaptchaConfigOutput

func (RuleGroupCaptchaConfigOutput) ToRuleGroupCaptchaConfigOutputWithContext added in v0.9.0

func (o RuleGroupCaptchaConfigOutput) ToRuleGroupCaptchaConfigOutputWithContext(ctx context.Context) RuleGroupCaptchaConfigOutput

func (RuleGroupCaptchaConfigOutput) ToRuleGroupCaptchaConfigPtrOutput added in v0.9.0

func (o RuleGroupCaptchaConfigOutput) ToRuleGroupCaptchaConfigPtrOutput() RuleGroupCaptchaConfigPtrOutput

func (RuleGroupCaptchaConfigOutput) ToRuleGroupCaptchaConfigPtrOutputWithContext added in v0.9.0

func (o RuleGroupCaptchaConfigOutput) ToRuleGroupCaptchaConfigPtrOutputWithContext(ctx context.Context) RuleGroupCaptchaConfigPtrOutput

type RuleGroupCaptchaConfigPtrInput added in v0.9.0

type RuleGroupCaptchaConfigPtrInput interface {
	pulumi.Input

	ToRuleGroupCaptchaConfigPtrOutput() RuleGroupCaptchaConfigPtrOutput
	ToRuleGroupCaptchaConfigPtrOutputWithContext(context.Context) RuleGroupCaptchaConfigPtrOutput
}

RuleGroupCaptchaConfigPtrInput is an input type that accepts RuleGroupCaptchaConfigArgs, RuleGroupCaptchaConfigPtr and RuleGroupCaptchaConfigPtrOutput values. You can construct a concrete instance of `RuleGroupCaptchaConfigPtrInput` via:

        RuleGroupCaptchaConfigArgs{...}

or:

        nil

func RuleGroupCaptchaConfigPtr added in v0.9.0

func RuleGroupCaptchaConfigPtr(v *RuleGroupCaptchaConfigArgs) RuleGroupCaptchaConfigPtrInput

type RuleGroupCaptchaConfigPtrOutput added in v0.9.0

type RuleGroupCaptchaConfigPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupCaptchaConfigPtrOutput) Elem added in v0.9.0

func (RuleGroupCaptchaConfigPtrOutput) ElementType added in v0.9.0

func (RuleGroupCaptchaConfigPtrOutput) ImmunityTimeProperty added in v0.9.0

Determines how long a `CAPTCHA` timestamp in the token remains valid after the client successfully solves a `CAPTCHA` puzzle.

func (RuleGroupCaptchaConfigPtrOutput) ToRuleGroupCaptchaConfigPtrOutput added in v0.9.0

func (o RuleGroupCaptchaConfigPtrOutput) ToRuleGroupCaptchaConfigPtrOutput() RuleGroupCaptchaConfigPtrOutput

func (RuleGroupCaptchaConfigPtrOutput) ToRuleGroupCaptchaConfigPtrOutputWithContext added in v0.9.0

func (o RuleGroupCaptchaConfigPtrOutput) ToRuleGroupCaptchaConfigPtrOutputWithContext(ctx context.Context) RuleGroupCaptchaConfigPtrOutput

type RuleGroupChallengeAction added in v0.50.0

type RuleGroupChallengeAction struct {
	// Defines custom handling for the web request, used when the challenge inspection determines that the request's token is valid and unexpired.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	CustomRequestHandling *RuleGroupCustomRequestHandling `pulumi:"customRequestHandling"`
}

Checks that the request has a valid token with an unexpired challenge timestamp and, if not, returns a browser challenge to the client.

type RuleGroupChallengeActionArgs added in v0.50.0

type RuleGroupChallengeActionArgs struct {
	// Defines custom handling for the web request, used when the challenge inspection determines that the request's token is valid and unexpired.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	CustomRequestHandling RuleGroupCustomRequestHandlingPtrInput `pulumi:"customRequestHandling"`
}

Checks that the request has a valid token with an unexpired challenge timestamp and, if not, returns a browser challenge to the client.

func (RuleGroupChallengeActionArgs) ElementType added in v0.50.0

func (RuleGroupChallengeActionArgs) ToRuleGroupChallengeActionOutput added in v0.50.0

func (i RuleGroupChallengeActionArgs) ToRuleGroupChallengeActionOutput() RuleGroupChallengeActionOutput

func (RuleGroupChallengeActionArgs) ToRuleGroupChallengeActionOutputWithContext added in v0.50.0

func (i RuleGroupChallengeActionArgs) ToRuleGroupChallengeActionOutputWithContext(ctx context.Context) RuleGroupChallengeActionOutput

func (RuleGroupChallengeActionArgs) ToRuleGroupChallengeActionPtrOutput added in v0.50.0

func (i RuleGroupChallengeActionArgs) ToRuleGroupChallengeActionPtrOutput() RuleGroupChallengeActionPtrOutput

func (RuleGroupChallengeActionArgs) ToRuleGroupChallengeActionPtrOutputWithContext added in v0.50.0

func (i RuleGroupChallengeActionArgs) ToRuleGroupChallengeActionPtrOutputWithContext(ctx context.Context) RuleGroupChallengeActionPtrOutput

type RuleGroupChallengeActionInput added in v0.50.0

type RuleGroupChallengeActionInput interface {
	pulumi.Input

	ToRuleGroupChallengeActionOutput() RuleGroupChallengeActionOutput
	ToRuleGroupChallengeActionOutputWithContext(context.Context) RuleGroupChallengeActionOutput
}

RuleGroupChallengeActionInput is an input type that accepts RuleGroupChallengeActionArgs and RuleGroupChallengeActionOutput values. You can construct a concrete instance of `RuleGroupChallengeActionInput` via:

RuleGroupChallengeActionArgs{...}

type RuleGroupChallengeActionOutput added in v0.50.0

type RuleGroupChallengeActionOutput struct{ *pulumi.OutputState }

Checks that the request has a valid token with an unexpired challenge timestamp and, if not, returns a browser challenge to the client.

func (RuleGroupChallengeActionOutput) CustomRequestHandling added in v0.50.0

Defines custom handling for the web request, used when the challenge inspection determines that the request's token is valid and unexpired.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

func (RuleGroupChallengeActionOutput) ElementType added in v0.50.0

func (RuleGroupChallengeActionOutput) ToRuleGroupChallengeActionOutput added in v0.50.0

func (o RuleGroupChallengeActionOutput) ToRuleGroupChallengeActionOutput() RuleGroupChallengeActionOutput

func (RuleGroupChallengeActionOutput) ToRuleGroupChallengeActionOutputWithContext added in v0.50.0

func (o RuleGroupChallengeActionOutput) ToRuleGroupChallengeActionOutputWithContext(ctx context.Context) RuleGroupChallengeActionOutput

func (RuleGroupChallengeActionOutput) ToRuleGroupChallengeActionPtrOutput added in v0.50.0

func (o RuleGroupChallengeActionOutput) ToRuleGroupChallengeActionPtrOutput() RuleGroupChallengeActionPtrOutput

func (RuleGroupChallengeActionOutput) ToRuleGroupChallengeActionPtrOutputWithContext added in v0.50.0

func (o RuleGroupChallengeActionOutput) ToRuleGroupChallengeActionPtrOutputWithContext(ctx context.Context) RuleGroupChallengeActionPtrOutput

type RuleGroupChallengeActionPtrInput added in v0.50.0

type RuleGroupChallengeActionPtrInput interface {
	pulumi.Input

	ToRuleGroupChallengeActionPtrOutput() RuleGroupChallengeActionPtrOutput
	ToRuleGroupChallengeActionPtrOutputWithContext(context.Context) RuleGroupChallengeActionPtrOutput
}

RuleGroupChallengeActionPtrInput is an input type that accepts RuleGroupChallengeActionArgs, RuleGroupChallengeActionPtr and RuleGroupChallengeActionPtrOutput values. You can construct a concrete instance of `RuleGroupChallengeActionPtrInput` via:

        RuleGroupChallengeActionArgs{...}

or:

        nil

func RuleGroupChallengeActionPtr added in v0.50.0

func RuleGroupChallengeActionPtr(v *RuleGroupChallengeActionArgs) RuleGroupChallengeActionPtrInput

type RuleGroupChallengeActionPtrOutput added in v0.50.0

type RuleGroupChallengeActionPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupChallengeActionPtrOutput) CustomRequestHandling added in v0.50.0

Defines custom handling for the web request, used when the challenge inspection determines that the request's token is valid and unexpired.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

func (RuleGroupChallengeActionPtrOutput) Elem added in v0.50.0

func (RuleGroupChallengeActionPtrOutput) ElementType added in v0.50.0

func (RuleGroupChallengeActionPtrOutput) ToRuleGroupChallengeActionPtrOutput added in v0.50.0

func (o RuleGroupChallengeActionPtrOutput) ToRuleGroupChallengeActionPtrOutput() RuleGroupChallengeActionPtrOutput

func (RuleGroupChallengeActionPtrOutput) ToRuleGroupChallengeActionPtrOutputWithContext added in v0.50.0

func (o RuleGroupChallengeActionPtrOutput) ToRuleGroupChallengeActionPtrOutputWithContext(ctx context.Context) RuleGroupChallengeActionPtrOutput

type RuleGroupChallengeConfig added in v0.45.0

type RuleGroupChallengeConfig struct {
	// Determines how long a challenge timestamp in the token remains valid after the client successfully responds to a challenge.
	ImmunityTimeProperty *RuleGroupImmunityTimeProperty `pulumi:"immunityTimeProperty"`
}

type RuleGroupChallengeConfigArgs added in v0.45.0

type RuleGroupChallengeConfigArgs struct {
	// Determines how long a challenge timestamp in the token remains valid after the client successfully responds to a challenge.
	ImmunityTimeProperty RuleGroupImmunityTimePropertyPtrInput `pulumi:"immunityTimeProperty"`
}

func (RuleGroupChallengeConfigArgs) ElementType added in v0.45.0

func (RuleGroupChallengeConfigArgs) ToRuleGroupChallengeConfigOutput added in v0.45.0

func (i RuleGroupChallengeConfigArgs) ToRuleGroupChallengeConfigOutput() RuleGroupChallengeConfigOutput

func (RuleGroupChallengeConfigArgs) ToRuleGroupChallengeConfigOutputWithContext added in v0.45.0

func (i RuleGroupChallengeConfigArgs) ToRuleGroupChallengeConfigOutputWithContext(ctx context.Context) RuleGroupChallengeConfigOutput

func (RuleGroupChallengeConfigArgs) ToRuleGroupChallengeConfigPtrOutput added in v0.45.0

func (i RuleGroupChallengeConfigArgs) ToRuleGroupChallengeConfigPtrOutput() RuleGroupChallengeConfigPtrOutput

func (RuleGroupChallengeConfigArgs) ToRuleGroupChallengeConfigPtrOutputWithContext added in v0.45.0

func (i RuleGroupChallengeConfigArgs) ToRuleGroupChallengeConfigPtrOutputWithContext(ctx context.Context) RuleGroupChallengeConfigPtrOutput

type RuleGroupChallengeConfigInput added in v0.45.0

type RuleGroupChallengeConfigInput interface {
	pulumi.Input

	ToRuleGroupChallengeConfigOutput() RuleGroupChallengeConfigOutput
	ToRuleGroupChallengeConfigOutputWithContext(context.Context) RuleGroupChallengeConfigOutput
}

RuleGroupChallengeConfigInput is an input type that accepts RuleGroupChallengeConfigArgs and RuleGroupChallengeConfigOutput values. You can construct a concrete instance of `RuleGroupChallengeConfigInput` via:

RuleGroupChallengeConfigArgs{...}

type RuleGroupChallengeConfigOutput added in v0.45.0

type RuleGroupChallengeConfigOutput struct{ *pulumi.OutputState }

func (RuleGroupChallengeConfigOutput) ElementType added in v0.45.0

func (RuleGroupChallengeConfigOutput) ImmunityTimeProperty added in v0.45.0

Determines how long a challenge timestamp in the token remains valid after the client successfully responds to a challenge.

func (RuleGroupChallengeConfigOutput) ToRuleGroupChallengeConfigOutput added in v0.45.0

func (o RuleGroupChallengeConfigOutput) ToRuleGroupChallengeConfigOutput() RuleGroupChallengeConfigOutput

func (RuleGroupChallengeConfigOutput) ToRuleGroupChallengeConfigOutputWithContext added in v0.45.0

func (o RuleGroupChallengeConfigOutput) ToRuleGroupChallengeConfigOutputWithContext(ctx context.Context) RuleGroupChallengeConfigOutput

func (RuleGroupChallengeConfigOutput) ToRuleGroupChallengeConfigPtrOutput added in v0.45.0

func (o RuleGroupChallengeConfigOutput) ToRuleGroupChallengeConfigPtrOutput() RuleGroupChallengeConfigPtrOutput

func (RuleGroupChallengeConfigOutput) ToRuleGroupChallengeConfigPtrOutputWithContext added in v0.45.0

func (o RuleGroupChallengeConfigOutput) ToRuleGroupChallengeConfigPtrOutputWithContext(ctx context.Context) RuleGroupChallengeConfigPtrOutput

type RuleGroupChallengeConfigPtrInput added in v0.45.0

type RuleGroupChallengeConfigPtrInput interface {
	pulumi.Input

	ToRuleGroupChallengeConfigPtrOutput() RuleGroupChallengeConfigPtrOutput
	ToRuleGroupChallengeConfigPtrOutputWithContext(context.Context) RuleGroupChallengeConfigPtrOutput
}

RuleGroupChallengeConfigPtrInput is an input type that accepts RuleGroupChallengeConfigArgs, RuleGroupChallengeConfigPtr and RuleGroupChallengeConfigPtrOutput values. You can construct a concrete instance of `RuleGroupChallengeConfigPtrInput` via:

        RuleGroupChallengeConfigArgs{...}

or:

        nil

func RuleGroupChallengeConfigPtr added in v0.45.0

func RuleGroupChallengeConfigPtr(v *RuleGroupChallengeConfigArgs) RuleGroupChallengeConfigPtrInput

type RuleGroupChallengeConfigPtrOutput added in v0.45.0

type RuleGroupChallengeConfigPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupChallengeConfigPtrOutput) Elem added in v0.45.0

func (RuleGroupChallengeConfigPtrOutput) ElementType added in v0.45.0

func (RuleGroupChallengeConfigPtrOutput) ImmunityTimeProperty added in v0.45.0

Determines how long a challenge timestamp in the token remains valid after the client successfully responds to a challenge.

func (RuleGroupChallengeConfigPtrOutput) ToRuleGroupChallengeConfigPtrOutput added in v0.45.0

func (o RuleGroupChallengeConfigPtrOutput) ToRuleGroupChallengeConfigPtrOutput() RuleGroupChallengeConfigPtrOutput

func (RuleGroupChallengeConfigPtrOutput) ToRuleGroupChallengeConfigPtrOutputWithContext added in v0.45.0

func (o RuleGroupChallengeConfigPtrOutput) ToRuleGroupChallengeConfigPtrOutputWithContext(ctx context.Context) RuleGroupChallengeConfigPtrOutput

type RuleGroupCookieMatchPattern added in v0.17.0

type RuleGroupCookieMatchPattern struct {
	// Inspect all parts of the web request cookies.
	All interface{} `pulumi:"all"`
	// Inspect only the cookies whose keys don't match any of the strings specified here.
	ExcludedCookies []string `pulumi:"excludedCookies"`
	// Inspect only the cookies that have a key that matches one of the strings specified here.
	IncludedCookies []string `pulumi:"includedCookies"`
}

The pattern to look for in the request cookies.

type RuleGroupCookieMatchPatternArgs added in v0.17.0

type RuleGroupCookieMatchPatternArgs struct {
	// Inspect all parts of the web request cookies.
	All pulumi.Input `pulumi:"all"`
	// Inspect only the cookies whose keys don't match any of the strings specified here.
	ExcludedCookies pulumi.StringArrayInput `pulumi:"excludedCookies"`
	// Inspect only the cookies that have a key that matches one of the strings specified here.
	IncludedCookies pulumi.StringArrayInput `pulumi:"includedCookies"`
}

The pattern to look for in the request cookies.

func (RuleGroupCookieMatchPatternArgs) ElementType added in v0.17.0

func (RuleGroupCookieMatchPatternArgs) ToRuleGroupCookieMatchPatternOutput added in v0.17.0

func (i RuleGroupCookieMatchPatternArgs) ToRuleGroupCookieMatchPatternOutput() RuleGroupCookieMatchPatternOutput

func (RuleGroupCookieMatchPatternArgs) ToRuleGroupCookieMatchPatternOutputWithContext added in v0.17.0

func (i RuleGroupCookieMatchPatternArgs) ToRuleGroupCookieMatchPatternOutputWithContext(ctx context.Context) RuleGroupCookieMatchPatternOutput

func (RuleGroupCookieMatchPatternArgs) ToRuleGroupCookieMatchPatternPtrOutput added in v0.17.0

func (i RuleGroupCookieMatchPatternArgs) ToRuleGroupCookieMatchPatternPtrOutput() RuleGroupCookieMatchPatternPtrOutput

func (RuleGroupCookieMatchPatternArgs) ToRuleGroupCookieMatchPatternPtrOutputWithContext added in v0.17.0

func (i RuleGroupCookieMatchPatternArgs) ToRuleGroupCookieMatchPatternPtrOutputWithContext(ctx context.Context) RuleGroupCookieMatchPatternPtrOutput

type RuleGroupCookieMatchPatternInput added in v0.17.0

type RuleGroupCookieMatchPatternInput interface {
	pulumi.Input

	ToRuleGroupCookieMatchPatternOutput() RuleGroupCookieMatchPatternOutput
	ToRuleGroupCookieMatchPatternOutputWithContext(context.Context) RuleGroupCookieMatchPatternOutput
}

RuleGroupCookieMatchPatternInput is an input type that accepts RuleGroupCookieMatchPatternArgs and RuleGroupCookieMatchPatternOutput values. You can construct a concrete instance of `RuleGroupCookieMatchPatternInput` via:

RuleGroupCookieMatchPatternArgs{...}

type RuleGroupCookieMatchPatternOutput added in v0.17.0

type RuleGroupCookieMatchPatternOutput struct{ *pulumi.OutputState }

The pattern to look for in the request cookies.

func (RuleGroupCookieMatchPatternOutput) All added in v0.17.0

Inspect all parts of the web request cookies.

func (RuleGroupCookieMatchPatternOutput) ElementType added in v0.17.0

func (RuleGroupCookieMatchPatternOutput) ExcludedCookies added in v0.17.0

Inspect only the cookies whose keys don't match any of the strings specified here.

func (RuleGroupCookieMatchPatternOutput) IncludedCookies added in v0.17.0

Inspect only the cookies that have a key that matches one of the strings specified here.

func (RuleGroupCookieMatchPatternOutput) ToRuleGroupCookieMatchPatternOutput added in v0.17.0

func (o RuleGroupCookieMatchPatternOutput) ToRuleGroupCookieMatchPatternOutput() RuleGroupCookieMatchPatternOutput

func (RuleGroupCookieMatchPatternOutput) ToRuleGroupCookieMatchPatternOutputWithContext added in v0.17.0

func (o RuleGroupCookieMatchPatternOutput) ToRuleGroupCookieMatchPatternOutputWithContext(ctx context.Context) RuleGroupCookieMatchPatternOutput

func (RuleGroupCookieMatchPatternOutput) ToRuleGroupCookieMatchPatternPtrOutput added in v0.17.0

func (o RuleGroupCookieMatchPatternOutput) ToRuleGroupCookieMatchPatternPtrOutput() RuleGroupCookieMatchPatternPtrOutput

func (RuleGroupCookieMatchPatternOutput) ToRuleGroupCookieMatchPatternPtrOutputWithContext added in v0.17.0

func (o RuleGroupCookieMatchPatternOutput) ToRuleGroupCookieMatchPatternPtrOutputWithContext(ctx context.Context) RuleGroupCookieMatchPatternPtrOutput

type RuleGroupCookieMatchPatternPtrInput added in v0.17.0

type RuleGroupCookieMatchPatternPtrInput interface {
	pulumi.Input

	ToRuleGroupCookieMatchPatternPtrOutput() RuleGroupCookieMatchPatternPtrOutput
	ToRuleGroupCookieMatchPatternPtrOutputWithContext(context.Context) RuleGroupCookieMatchPatternPtrOutput
}

RuleGroupCookieMatchPatternPtrInput is an input type that accepts RuleGroupCookieMatchPatternArgs, RuleGroupCookieMatchPatternPtr and RuleGroupCookieMatchPatternPtrOutput values. You can construct a concrete instance of `RuleGroupCookieMatchPatternPtrInput` via:

        RuleGroupCookieMatchPatternArgs{...}

or:

        nil

func RuleGroupCookieMatchPatternPtr added in v0.17.0

type RuleGroupCookieMatchPatternPtrOutput added in v0.17.0

type RuleGroupCookieMatchPatternPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupCookieMatchPatternPtrOutput) All added in v0.17.0

Inspect all parts of the web request cookies.

func (RuleGroupCookieMatchPatternPtrOutput) Elem added in v0.17.0

func (RuleGroupCookieMatchPatternPtrOutput) ElementType added in v0.17.0

func (RuleGroupCookieMatchPatternPtrOutput) ExcludedCookies added in v0.17.0

Inspect only the cookies whose keys don't match any of the strings specified here.

func (RuleGroupCookieMatchPatternPtrOutput) IncludedCookies added in v0.17.0

Inspect only the cookies that have a key that matches one of the strings specified here.

func (RuleGroupCookieMatchPatternPtrOutput) ToRuleGroupCookieMatchPatternPtrOutput added in v0.17.0

func (o RuleGroupCookieMatchPatternPtrOutput) ToRuleGroupCookieMatchPatternPtrOutput() RuleGroupCookieMatchPatternPtrOutput

func (RuleGroupCookieMatchPatternPtrOutput) ToRuleGroupCookieMatchPatternPtrOutputWithContext added in v0.17.0

func (o RuleGroupCookieMatchPatternPtrOutput) ToRuleGroupCookieMatchPatternPtrOutputWithContext(ctx context.Context) RuleGroupCookieMatchPatternPtrOutput

type RuleGroupCookies added in v0.17.0

type RuleGroupCookies struct {
	// The filter to use to identify the subset of cookies to inspect in a web request.
	//
	// You must specify exactly one setting: either `All` , `IncludedCookies` , or `ExcludedCookies` .
	//
	// Example JSON: `"MatchPattern": { "IncludedCookies": [ "session-id-time", "session-id" ] }`
	MatchPattern RuleGroupCookieMatchPattern `pulumi:"matchPattern"`
	// The parts of the cookies to inspect with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.
	//
	// `All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.
	MatchScope RuleGroupMapMatchScope `pulumi:"matchScope"`
	// What AWS WAF should do if the cookies of the request are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF .
	//
	// The options for oversize handling are the following:
	//
	// - `CONTINUE` - Inspect the available cookies normally, according to the rule inspection criteria.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	OversizeHandling RuleGroupOversizeHandling `pulumi:"oversizeHandling"`
}

Includes cookies of a web request.

type RuleGroupCookiesArgs added in v0.17.0

type RuleGroupCookiesArgs struct {
	// The filter to use to identify the subset of cookies to inspect in a web request.
	//
	// You must specify exactly one setting: either `All` , `IncludedCookies` , or `ExcludedCookies` .
	//
	// Example JSON: `"MatchPattern": { "IncludedCookies": [ "session-id-time", "session-id" ] }`
	MatchPattern RuleGroupCookieMatchPatternInput `pulumi:"matchPattern"`
	// The parts of the cookies to inspect with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.
	//
	// `All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.
	MatchScope RuleGroupMapMatchScopeInput `pulumi:"matchScope"`
	// What AWS WAF should do if the cookies of the request are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF .
	//
	// The options for oversize handling are the following:
	//
	// - `CONTINUE` - Inspect the available cookies normally, according to the rule inspection criteria.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	OversizeHandling RuleGroupOversizeHandlingInput `pulumi:"oversizeHandling"`
}

Includes cookies of a web request.

func (RuleGroupCookiesArgs) ElementType added in v0.17.0

func (RuleGroupCookiesArgs) ElementType() reflect.Type

func (RuleGroupCookiesArgs) ToRuleGroupCookiesOutput added in v0.17.0

func (i RuleGroupCookiesArgs) ToRuleGroupCookiesOutput() RuleGroupCookiesOutput

func (RuleGroupCookiesArgs) ToRuleGroupCookiesOutputWithContext added in v0.17.0

func (i RuleGroupCookiesArgs) ToRuleGroupCookiesOutputWithContext(ctx context.Context) RuleGroupCookiesOutput

func (RuleGroupCookiesArgs) ToRuleGroupCookiesPtrOutput added in v0.17.0

func (i RuleGroupCookiesArgs) ToRuleGroupCookiesPtrOutput() RuleGroupCookiesPtrOutput

func (RuleGroupCookiesArgs) ToRuleGroupCookiesPtrOutputWithContext added in v0.17.0

func (i RuleGroupCookiesArgs) ToRuleGroupCookiesPtrOutputWithContext(ctx context.Context) RuleGroupCookiesPtrOutput

type RuleGroupCookiesInput added in v0.17.0

type RuleGroupCookiesInput interface {
	pulumi.Input

	ToRuleGroupCookiesOutput() RuleGroupCookiesOutput
	ToRuleGroupCookiesOutputWithContext(context.Context) RuleGroupCookiesOutput
}

RuleGroupCookiesInput is an input type that accepts RuleGroupCookiesArgs and RuleGroupCookiesOutput values. You can construct a concrete instance of `RuleGroupCookiesInput` via:

RuleGroupCookiesArgs{...}

type RuleGroupCookiesOutput added in v0.17.0

type RuleGroupCookiesOutput struct{ *pulumi.OutputState }

Includes cookies of a web request.

func (RuleGroupCookiesOutput) ElementType added in v0.17.0

func (RuleGroupCookiesOutput) ElementType() reflect.Type

func (RuleGroupCookiesOutput) MatchPattern added in v0.17.0

The filter to use to identify the subset of cookies to inspect in a web request.

You must specify exactly one setting: either `All` , `IncludedCookies` , or `ExcludedCookies` .

Example JSON: `"MatchPattern": { "IncludedCookies": [ "session-id-time", "session-id" ] }`

func (RuleGroupCookiesOutput) MatchScope added in v0.17.0

The parts of the cookies to inspect with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.

`All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.

func (RuleGroupCookiesOutput) OversizeHandling added in v0.17.0

What AWS WAF should do if the cookies of the request are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF .

The options for oversize handling are the following:

- `CONTINUE` - Inspect the available cookies normally, according to the rule inspection criteria. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (RuleGroupCookiesOutput) ToRuleGroupCookiesOutput added in v0.17.0

func (o RuleGroupCookiesOutput) ToRuleGroupCookiesOutput() RuleGroupCookiesOutput

func (RuleGroupCookiesOutput) ToRuleGroupCookiesOutputWithContext added in v0.17.0

func (o RuleGroupCookiesOutput) ToRuleGroupCookiesOutputWithContext(ctx context.Context) RuleGroupCookiesOutput

func (RuleGroupCookiesOutput) ToRuleGroupCookiesPtrOutput added in v0.17.0

func (o RuleGroupCookiesOutput) ToRuleGroupCookiesPtrOutput() RuleGroupCookiesPtrOutput

func (RuleGroupCookiesOutput) ToRuleGroupCookiesPtrOutputWithContext added in v0.17.0

func (o RuleGroupCookiesOutput) ToRuleGroupCookiesPtrOutputWithContext(ctx context.Context) RuleGroupCookiesPtrOutput

type RuleGroupCookiesPtrInput added in v0.17.0

type RuleGroupCookiesPtrInput interface {
	pulumi.Input

	ToRuleGroupCookiesPtrOutput() RuleGroupCookiesPtrOutput
	ToRuleGroupCookiesPtrOutputWithContext(context.Context) RuleGroupCookiesPtrOutput
}

RuleGroupCookiesPtrInput is an input type that accepts RuleGroupCookiesArgs, RuleGroupCookiesPtr and RuleGroupCookiesPtrOutput values. You can construct a concrete instance of `RuleGroupCookiesPtrInput` via:

        RuleGroupCookiesArgs{...}

or:

        nil

func RuleGroupCookiesPtr added in v0.17.0

func RuleGroupCookiesPtr(v *RuleGroupCookiesArgs) RuleGroupCookiesPtrInput

type RuleGroupCookiesPtrOutput added in v0.17.0

type RuleGroupCookiesPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupCookiesPtrOutput) Elem added in v0.17.0

func (RuleGroupCookiesPtrOutput) ElementType added in v0.17.0

func (RuleGroupCookiesPtrOutput) ElementType() reflect.Type

func (RuleGroupCookiesPtrOutput) MatchPattern added in v0.17.0

The filter to use to identify the subset of cookies to inspect in a web request.

You must specify exactly one setting: either `All` , `IncludedCookies` , or `ExcludedCookies` .

Example JSON: `"MatchPattern": { "IncludedCookies": [ "session-id-time", "session-id" ] }`

func (RuleGroupCookiesPtrOutput) MatchScope added in v0.17.0

The parts of the cookies to inspect with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.

`All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.

func (RuleGroupCookiesPtrOutput) OversizeHandling added in v0.17.0

What AWS WAF should do if the cookies of the request are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF .

The options for oversize handling are the following:

- `CONTINUE` - Inspect the available cookies normally, according to the rule inspection criteria. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (RuleGroupCookiesPtrOutput) ToRuleGroupCookiesPtrOutput added in v0.17.0

func (o RuleGroupCookiesPtrOutput) ToRuleGroupCookiesPtrOutput() RuleGroupCookiesPtrOutput

func (RuleGroupCookiesPtrOutput) ToRuleGroupCookiesPtrOutputWithContext added in v0.17.0

func (o RuleGroupCookiesPtrOutput) ToRuleGroupCookiesPtrOutputWithContext(ctx context.Context) RuleGroupCookiesPtrOutput

type RuleGroupCountAction added in v0.50.0

type RuleGroupCountAction struct {
	// Defines custom handling for the web request.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	CustomRequestHandling *RuleGroupCustomRequestHandling `pulumi:"customRequestHandling"`
}

Count traffic towards application.

type RuleGroupCountActionArgs added in v0.50.0

type RuleGroupCountActionArgs struct {
	// Defines custom handling for the web request.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	CustomRequestHandling RuleGroupCustomRequestHandlingPtrInput `pulumi:"customRequestHandling"`
}

Count traffic towards application.

func (RuleGroupCountActionArgs) ElementType added in v0.50.0

func (RuleGroupCountActionArgs) ElementType() reflect.Type

func (RuleGroupCountActionArgs) ToRuleGroupCountActionOutput added in v0.50.0

func (i RuleGroupCountActionArgs) ToRuleGroupCountActionOutput() RuleGroupCountActionOutput

func (RuleGroupCountActionArgs) ToRuleGroupCountActionOutputWithContext added in v0.50.0

func (i RuleGroupCountActionArgs) ToRuleGroupCountActionOutputWithContext(ctx context.Context) RuleGroupCountActionOutput

func (RuleGroupCountActionArgs) ToRuleGroupCountActionPtrOutput added in v0.50.0

func (i RuleGroupCountActionArgs) ToRuleGroupCountActionPtrOutput() RuleGroupCountActionPtrOutput

func (RuleGroupCountActionArgs) ToRuleGroupCountActionPtrOutputWithContext added in v0.50.0

func (i RuleGroupCountActionArgs) ToRuleGroupCountActionPtrOutputWithContext(ctx context.Context) RuleGroupCountActionPtrOutput

type RuleGroupCountActionInput added in v0.50.0

type RuleGroupCountActionInput interface {
	pulumi.Input

	ToRuleGroupCountActionOutput() RuleGroupCountActionOutput
	ToRuleGroupCountActionOutputWithContext(context.Context) RuleGroupCountActionOutput
}

RuleGroupCountActionInput is an input type that accepts RuleGroupCountActionArgs and RuleGroupCountActionOutput values. You can construct a concrete instance of `RuleGroupCountActionInput` via:

RuleGroupCountActionArgs{...}

type RuleGroupCountActionOutput added in v0.50.0

type RuleGroupCountActionOutput struct{ *pulumi.OutputState }

Count traffic towards application.

func (RuleGroupCountActionOutput) CustomRequestHandling added in v0.50.0

Defines custom handling for the web request.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

func (RuleGroupCountActionOutput) ElementType added in v0.50.0

func (RuleGroupCountActionOutput) ElementType() reflect.Type

func (RuleGroupCountActionOutput) ToRuleGroupCountActionOutput added in v0.50.0

func (o RuleGroupCountActionOutput) ToRuleGroupCountActionOutput() RuleGroupCountActionOutput

func (RuleGroupCountActionOutput) ToRuleGroupCountActionOutputWithContext added in v0.50.0

func (o RuleGroupCountActionOutput) ToRuleGroupCountActionOutputWithContext(ctx context.Context) RuleGroupCountActionOutput

func (RuleGroupCountActionOutput) ToRuleGroupCountActionPtrOutput added in v0.50.0

func (o RuleGroupCountActionOutput) ToRuleGroupCountActionPtrOutput() RuleGroupCountActionPtrOutput

func (RuleGroupCountActionOutput) ToRuleGroupCountActionPtrOutputWithContext added in v0.50.0

func (o RuleGroupCountActionOutput) ToRuleGroupCountActionPtrOutputWithContext(ctx context.Context) RuleGroupCountActionPtrOutput

type RuleGroupCountActionPtrInput added in v0.50.0

type RuleGroupCountActionPtrInput interface {
	pulumi.Input

	ToRuleGroupCountActionPtrOutput() RuleGroupCountActionPtrOutput
	ToRuleGroupCountActionPtrOutputWithContext(context.Context) RuleGroupCountActionPtrOutput
}

RuleGroupCountActionPtrInput is an input type that accepts RuleGroupCountActionArgs, RuleGroupCountActionPtr and RuleGroupCountActionPtrOutput values. You can construct a concrete instance of `RuleGroupCountActionPtrInput` via:

        RuleGroupCountActionArgs{...}

or:

        nil

func RuleGroupCountActionPtr added in v0.50.0

func RuleGroupCountActionPtr(v *RuleGroupCountActionArgs) RuleGroupCountActionPtrInput

type RuleGroupCountActionPtrOutput added in v0.50.0

type RuleGroupCountActionPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupCountActionPtrOutput) CustomRequestHandling added in v0.50.0

Defines custom handling for the web request.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

func (RuleGroupCountActionPtrOutput) Elem added in v0.50.0

func (RuleGroupCountActionPtrOutput) ElementType added in v0.50.0

func (RuleGroupCountActionPtrOutput) ToRuleGroupCountActionPtrOutput added in v0.50.0

func (o RuleGroupCountActionPtrOutput) ToRuleGroupCountActionPtrOutput() RuleGroupCountActionPtrOutput

func (RuleGroupCountActionPtrOutput) ToRuleGroupCountActionPtrOutputWithContext added in v0.50.0

func (o RuleGroupCountActionPtrOutput) ToRuleGroupCountActionPtrOutputWithContext(ctx context.Context) RuleGroupCountActionPtrOutput

type RuleGroupCustomHttpHeader added in v0.72.0

type RuleGroupCustomHttpHeader struct {
	// The name of the custom header.
	//
	// For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name `x-amzn-waf-` , to avoid confusion with the headers that are already in the request. For example, for the header name `sample` , AWS WAF inserts the header `x-amzn-waf-sample` .
	Name string `pulumi:"name"`
	// The value of the custom header.
	Value string `pulumi:"value"`
}

HTTP header.

type RuleGroupCustomHttpHeaderArgs added in v0.72.0

type RuleGroupCustomHttpHeaderArgs struct {
	// The name of the custom header.
	//
	// For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name `x-amzn-waf-` , to avoid confusion with the headers that are already in the request. For example, for the header name `sample` , AWS WAF inserts the header `x-amzn-waf-sample` .
	Name pulumi.StringInput `pulumi:"name"`
	// The value of the custom header.
	Value pulumi.StringInput `pulumi:"value"`
}

HTTP header.

func (RuleGroupCustomHttpHeaderArgs) ElementType added in v0.72.0

func (RuleGroupCustomHttpHeaderArgs) ToRuleGroupCustomHttpHeaderOutput added in v0.72.0

func (i RuleGroupCustomHttpHeaderArgs) ToRuleGroupCustomHttpHeaderOutput() RuleGroupCustomHttpHeaderOutput

func (RuleGroupCustomHttpHeaderArgs) ToRuleGroupCustomHttpHeaderOutputWithContext added in v0.72.0

func (i RuleGroupCustomHttpHeaderArgs) ToRuleGroupCustomHttpHeaderOutputWithContext(ctx context.Context) RuleGroupCustomHttpHeaderOutput

type RuleGroupCustomHttpHeaderArray added in v0.72.0

type RuleGroupCustomHttpHeaderArray []RuleGroupCustomHttpHeaderInput

func (RuleGroupCustomHttpHeaderArray) ElementType added in v0.72.0

func (RuleGroupCustomHttpHeaderArray) ToRuleGroupCustomHttpHeaderArrayOutput added in v0.72.0

func (i RuleGroupCustomHttpHeaderArray) ToRuleGroupCustomHttpHeaderArrayOutput() RuleGroupCustomHttpHeaderArrayOutput

func (RuleGroupCustomHttpHeaderArray) ToRuleGroupCustomHttpHeaderArrayOutputWithContext added in v0.72.0

func (i RuleGroupCustomHttpHeaderArray) ToRuleGroupCustomHttpHeaderArrayOutputWithContext(ctx context.Context) RuleGroupCustomHttpHeaderArrayOutput

type RuleGroupCustomHttpHeaderArrayInput added in v0.72.0

type RuleGroupCustomHttpHeaderArrayInput interface {
	pulumi.Input

	ToRuleGroupCustomHttpHeaderArrayOutput() RuleGroupCustomHttpHeaderArrayOutput
	ToRuleGroupCustomHttpHeaderArrayOutputWithContext(context.Context) RuleGroupCustomHttpHeaderArrayOutput
}

RuleGroupCustomHttpHeaderArrayInput is an input type that accepts RuleGroupCustomHttpHeaderArray and RuleGroupCustomHttpHeaderArrayOutput values. You can construct a concrete instance of `RuleGroupCustomHttpHeaderArrayInput` via:

RuleGroupCustomHttpHeaderArray{ RuleGroupCustomHttpHeaderArgs{...} }

type RuleGroupCustomHttpHeaderArrayOutput added in v0.72.0

type RuleGroupCustomHttpHeaderArrayOutput struct{ *pulumi.OutputState }

func (RuleGroupCustomHttpHeaderArrayOutput) ElementType added in v0.72.0

func (RuleGroupCustomHttpHeaderArrayOutput) Index added in v0.72.0

func (RuleGroupCustomHttpHeaderArrayOutput) ToRuleGroupCustomHttpHeaderArrayOutput added in v0.72.0

func (o RuleGroupCustomHttpHeaderArrayOutput) ToRuleGroupCustomHttpHeaderArrayOutput() RuleGroupCustomHttpHeaderArrayOutput

func (RuleGroupCustomHttpHeaderArrayOutput) ToRuleGroupCustomHttpHeaderArrayOutputWithContext added in v0.72.0

func (o RuleGroupCustomHttpHeaderArrayOutput) ToRuleGroupCustomHttpHeaderArrayOutputWithContext(ctx context.Context) RuleGroupCustomHttpHeaderArrayOutput

type RuleGroupCustomHttpHeaderInput added in v0.72.0

type RuleGroupCustomHttpHeaderInput interface {
	pulumi.Input

	ToRuleGroupCustomHttpHeaderOutput() RuleGroupCustomHttpHeaderOutput
	ToRuleGroupCustomHttpHeaderOutputWithContext(context.Context) RuleGroupCustomHttpHeaderOutput
}

RuleGroupCustomHttpHeaderInput is an input type that accepts RuleGroupCustomHttpHeaderArgs and RuleGroupCustomHttpHeaderOutput values. You can construct a concrete instance of `RuleGroupCustomHttpHeaderInput` via:

RuleGroupCustomHttpHeaderArgs{...}

type RuleGroupCustomHttpHeaderOutput added in v0.72.0

type RuleGroupCustomHttpHeaderOutput struct{ *pulumi.OutputState }

HTTP header.

func (RuleGroupCustomHttpHeaderOutput) ElementType added in v0.72.0

func (RuleGroupCustomHttpHeaderOutput) Name added in v0.72.0

The name of the custom header.

For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name `x-amzn-waf-` , to avoid confusion with the headers that are already in the request. For example, for the header name `sample` , AWS WAF inserts the header `x-amzn-waf-sample` .

func (RuleGroupCustomHttpHeaderOutput) ToRuleGroupCustomHttpHeaderOutput added in v0.72.0

func (o RuleGroupCustomHttpHeaderOutput) ToRuleGroupCustomHttpHeaderOutput() RuleGroupCustomHttpHeaderOutput

func (RuleGroupCustomHttpHeaderOutput) ToRuleGroupCustomHttpHeaderOutputWithContext added in v0.72.0

func (o RuleGroupCustomHttpHeaderOutput) ToRuleGroupCustomHttpHeaderOutputWithContext(ctx context.Context) RuleGroupCustomHttpHeaderOutput

func (RuleGroupCustomHttpHeaderOutput) Value added in v0.72.0

The value of the custom header.

type RuleGroupCustomRequestHandling added in v0.2.0

type RuleGroupCustomRequestHandling struct {
	// Collection of HTTP headers.
	InsertHeaders []RuleGroupCustomHttpHeader `pulumi:"insertHeaders"`
}

Custom request handling.

type RuleGroupCustomRequestHandlingArgs added in v0.2.0

type RuleGroupCustomRequestHandlingArgs struct {
	// Collection of HTTP headers.
	InsertHeaders RuleGroupCustomHttpHeaderArrayInput `pulumi:"insertHeaders"`
}

Custom request handling.

func (RuleGroupCustomRequestHandlingArgs) ElementType added in v0.2.0

func (RuleGroupCustomRequestHandlingArgs) ToRuleGroupCustomRequestHandlingOutput added in v0.2.0

func (i RuleGroupCustomRequestHandlingArgs) ToRuleGroupCustomRequestHandlingOutput() RuleGroupCustomRequestHandlingOutput

func (RuleGroupCustomRequestHandlingArgs) ToRuleGroupCustomRequestHandlingOutputWithContext added in v0.2.0

func (i RuleGroupCustomRequestHandlingArgs) ToRuleGroupCustomRequestHandlingOutputWithContext(ctx context.Context) RuleGroupCustomRequestHandlingOutput

func (RuleGroupCustomRequestHandlingArgs) ToRuleGroupCustomRequestHandlingPtrOutput added in v0.2.0

func (i RuleGroupCustomRequestHandlingArgs) ToRuleGroupCustomRequestHandlingPtrOutput() RuleGroupCustomRequestHandlingPtrOutput

func (RuleGroupCustomRequestHandlingArgs) ToRuleGroupCustomRequestHandlingPtrOutputWithContext added in v0.2.0

func (i RuleGroupCustomRequestHandlingArgs) ToRuleGroupCustomRequestHandlingPtrOutputWithContext(ctx context.Context) RuleGroupCustomRequestHandlingPtrOutput

type RuleGroupCustomRequestHandlingInput added in v0.2.0

type RuleGroupCustomRequestHandlingInput interface {
	pulumi.Input

	ToRuleGroupCustomRequestHandlingOutput() RuleGroupCustomRequestHandlingOutput
	ToRuleGroupCustomRequestHandlingOutputWithContext(context.Context) RuleGroupCustomRequestHandlingOutput
}

RuleGroupCustomRequestHandlingInput is an input type that accepts RuleGroupCustomRequestHandlingArgs and RuleGroupCustomRequestHandlingOutput values. You can construct a concrete instance of `RuleGroupCustomRequestHandlingInput` via:

RuleGroupCustomRequestHandlingArgs{...}

type RuleGroupCustomRequestHandlingOutput added in v0.2.0

type RuleGroupCustomRequestHandlingOutput struct{ *pulumi.OutputState }

Custom request handling.

func (RuleGroupCustomRequestHandlingOutput) ElementType added in v0.2.0

func (RuleGroupCustomRequestHandlingOutput) InsertHeaders added in v0.2.0

Collection of HTTP headers.

func (RuleGroupCustomRequestHandlingOutput) ToRuleGroupCustomRequestHandlingOutput added in v0.2.0

func (o RuleGroupCustomRequestHandlingOutput) ToRuleGroupCustomRequestHandlingOutput() RuleGroupCustomRequestHandlingOutput

func (RuleGroupCustomRequestHandlingOutput) ToRuleGroupCustomRequestHandlingOutputWithContext added in v0.2.0

func (o RuleGroupCustomRequestHandlingOutput) ToRuleGroupCustomRequestHandlingOutputWithContext(ctx context.Context) RuleGroupCustomRequestHandlingOutput

func (RuleGroupCustomRequestHandlingOutput) ToRuleGroupCustomRequestHandlingPtrOutput added in v0.2.0

func (o RuleGroupCustomRequestHandlingOutput) ToRuleGroupCustomRequestHandlingPtrOutput() RuleGroupCustomRequestHandlingPtrOutput

func (RuleGroupCustomRequestHandlingOutput) ToRuleGroupCustomRequestHandlingPtrOutputWithContext added in v0.2.0

func (o RuleGroupCustomRequestHandlingOutput) ToRuleGroupCustomRequestHandlingPtrOutputWithContext(ctx context.Context) RuleGroupCustomRequestHandlingPtrOutput

type RuleGroupCustomRequestHandlingPtrInput added in v0.2.0

type RuleGroupCustomRequestHandlingPtrInput interface {
	pulumi.Input

	ToRuleGroupCustomRequestHandlingPtrOutput() RuleGroupCustomRequestHandlingPtrOutput
	ToRuleGroupCustomRequestHandlingPtrOutputWithContext(context.Context) RuleGroupCustomRequestHandlingPtrOutput
}

RuleGroupCustomRequestHandlingPtrInput is an input type that accepts RuleGroupCustomRequestHandlingArgs, RuleGroupCustomRequestHandlingPtr and RuleGroupCustomRequestHandlingPtrOutput values. You can construct a concrete instance of `RuleGroupCustomRequestHandlingPtrInput` via:

        RuleGroupCustomRequestHandlingArgs{...}

or:

        nil

type RuleGroupCustomRequestHandlingPtrOutput added in v0.2.0

type RuleGroupCustomRequestHandlingPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupCustomRequestHandlingPtrOutput) Elem added in v0.2.0

func (RuleGroupCustomRequestHandlingPtrOutput) ElementType added in v0.2.0

func (RuleGroupCustomRequestHandlingPtrOutput) InsertHeaders added in v0.2.0

Collection of HTTP headers.

func (RuleGroupCustomRequestHandlingPtrOutput) ToRuleGroupCustomRequestHandlingPtrOutput added in v0.2.0

func (o RuleGroupCustomRequestHandlingPtrOutput) ToRuleGroupCustomRequestHandlingPtrOutput() RuleGroupCustomRequestHandlingPtrOutput

func (RuleGroupCustomRequestHandlingPtrOutput) ToRuleGroupCustomRequestHandlingPtrOutputWithContext added in v0.2.0

func (o RuleGroupCustomRequestHandlingPtrOutput) ToRuleGroupCustomRequestHandlingPtrOutputWithContext(ctx context.Context) RuleGroupCustomRequestHandlingPtrOutput

type RuleGroupCustomResponse added in v0.2.0

type RuleGroupCustomResponse struct {
	// Custom response body key.
	CustomResponseBodyKey *string `pulumi:"customResponseBodyKey"`
	// The HTTP status code to return to the client.
	//
	// For a list of status codes that you can use in your custom responses, see [Supported status codes for custom response](https://docs.aws.amazon.com/waf/latest/developerguide/customizing-the-response-status-codes.html) in the *AWS WAF Developer Guide* .
	ResponseCode int `pulumi:"responseCode"`
	// Collection of HTTP headers.
	ResponseHeaders []RuleGroupCustomHttpHeader `pulumi:"responseHeaders"`
}

Custom response.

type RuleGroupCustomResponseArgs added in v0.2.0

type RuleGroupCustomResponseArgs struct {
	// Custom response body key.
	CustomResponseBodyKey pulumi.StringPtrInput `pulumi:"customResponseBodyKey"`
	// The HTTP status code to return to the client.
	//
	// For a list of status codes that you can use in your custom responses, see [Supported status codes for custom response](https://docs.aws.amazon.com/waf/latest/developerguide/customizing-the-response-status-codes.html) in the *AWS WAF Developer Guide* .
	ResponseCode pulumi.IntInput `pulumi:"responseCode"`
	// Collection of HTTP headers.
	ResponseHeaders RuleGroupCustomHttpHeaderArrayInput `pulumi:"responseHeaders"`
}

Custom response.

func (RuleGroupCustomResponseArgs) ElementType added in v0.2.0

func (RuleGroupCustomResponseArgs) ToRuleGroupCustomResponseOutput added in v0.2.0

func (i RuleGroupCustomResponseArgs) ToRuleGroupCustomResponseOutput() RuleGroupCustomResponseOutput

func (RuleGroupCustomResponseArgs) ToRuleGroupCustomResponseOutputWithContext added in v0.2.0

func (i RuleGroupCustomResponseArgs) ToRuleGroupCustomResponseOutputWithContext(ctx context.Context) RuleGroupCustomResponseOutput

func (RuleGroupCustomResponseArgs) ToRuleGroupCustomResponsePtrOutput added in v0.2.0

func (i RuleGroupCustomResponseArgs) ToRuleGroupCustomResponsePtrOutput() RuleGroupCustomResponsePtrOutput

func (RuleGroupCustomResponseArgs) ToRuleGroupCustomResponsePtrOutputWithContext added in v0.2.0

func (i RuleGroupCustomResponseArgs) ToRuleGroupCustomResponsePtrOutputWithContext(ctx context.Context) RuleGroupCustomResponsePtrOutput

type RuleGroupCustomResponseBody added in v0.98.0

type RuleGroupCustomResponseBody struct {
	// The payload of the custom response.
	//
	// You can use JSON escape strings in JSON content. To do this, you must specify JSON content in the `ContentType` setting.
	//
	// For information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* .
	Content string `pulumi:"content"`
	// The type of content in the payload that you are defining in the `Content` string.
	ContentType RuleGroupResponseContentType `pulumi:"contentType"`
}

Custom response body.

type RuleGroupCustomResponseBodyArgs added in v0.98.0

type RuleGroupCustomResponseBodyArgs struct {
	// The payload of the custom response.
	//
	// You can use JSON escape strings in JSON content. To do this, you must specify JSON content in the `ContentType` setting.
	//
	// For information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* .
	Content pulumi.StringInput `pulumi:"content"`
	// The type of content in the payload that you are defining in the `Content` string.
	ContentType RuleGroupResponseContentTypeInput `pulumi:"contentType"`
}

Custom response body.

func (RuleGroupCustomResponseBodyArgs) ElementType added in v0.98.0

func (RuleGroupCustomResponseBodyArgs) ToRuleGroupCustomResponseBodyOutput added in v0.98.0

func (i RuleGroupCustomResponseBodyArgs) ToRuleGroupCustomResponseBodyOutput() RuleGroupCustomResponseBodyOutput

func (RuleGroupCustomResponseBodyArgs) ToRuleGroupCustomResponseBodyOutputWithContext added in v0.98.0

func (i RuleGroupCustomResponseBodyArgs) ToRuleGroupCustomResponseBodyOutputWithContext(ctx context.Context) RuleGroupCustomResponseBodyOutput

type RuleGroupCustomResponseBodyInput added in v0.98.0

type RuleGroupCustomResponseBodyInput interface {
	pulumi.Input

	ToRuleGroupCustomResponseBodyOutput() RuleGroupCustomResponseBodyOutput
	ToRuleGroupCustomResponseBodyOutputWithContext(context.Context) RuleGroupCustomResponseBodyOutput
}

RuleGroupCustomResponseBodyInput is an input type that accepts RuleGroupCustomResponseBodyArgs and RuleGroupCustomResponseBodyOutput values. You can construct a concrete instance of `RuleGroupCustomResponseBodyInput` via:

RuleGroupCustomResponseBodyArgs{...}

type RuleGroupCustomResponseBodyMap added in v0.98.0

type RuleGroupCustomResponseBodyMap map[string]RuleGroupCustomResponseBodyInput

func (RuleGroupCustomResponseBodyMap) ElementType added in v0.98.0

func (RuleGroupCustomResponseBodyMap) ToRuleGroupCustomResponseBodyMapOutput added in v0.98.0

func (i RuleGroupCustomResponseBodyMap) ToRuleGroupCustomResponseBodyMapOutput() RuleGroupCustomResponseBodyMapOutput

func (RuleGroupCustomResponseBodyMap) ToRuleGroupCustomResponseBodyMapOutputWithContext added in v0.98.0

func (i RuleGroupCustomResponseBodyMap) ToRuleGroupCustomResponseBodyMapOutputWithContext(ctx context.Context) RuleGroupCustomResponseBodyMapOutput

type RuleGroupCustomResponseBodyMapInput added in v0.98.0

type RuleGroupCustomResponseBodyMapInput interface {
	pulumi.Input

	ToRuleGroupCustomResponseBodyMapOutput() RuleGroupCustomResponseBodyMapOutput
	ToRuleGroupCustomResponseBodyMapOutputWithContext(context.Context) RuleGroupCustomResponseBodyMapOutput
}

RuleGroupCustomResponseBodyMapInput is an input type that accepts RuleGroupCustomResponseBodyMap and RuleGroupCustomResponseBodyMapOutput values. You can construct a concrete instance of `RuleGroupCustomResponseBodyMapInput` via:

RuleGroupCustomResponseBodyMap{ "key": RuleGroupCustomResponseBodyArgs{...} }

type RuleGroupCustomResponseBodyMapOutput added in v0.98.0

type RuleGroupCustomResponseBodyMapOutput struct{ *pulumi.OutputState }

func (RuleGroupCustomResponseBodyMapOutput) ElementType added in v0.98.0

func (RuleGroupCustomResponseBodyMapOutput) MapIndex added in v0.98.0

func (RuleGroupCustomResponseBodyMapOutput) ToRuleGroupCustomResponseBodyMapOutput added in v0.98.0

func (o RuleGroupCustomResponseBodyMapOutput) ToRuleGroupCustomResponseBodyMapOutput() RuleGroupCustomResponseBodyMapOutput

func (RuleGroupCustomResponseBodyMapOutput) ToRuleGroupCustomResponseBodyMapOutputWithContext added in v0.98.0

func (o RuleGroupCustomResponseBodyMapOutput) ToRuleGroupCustomResponseBodyMapOutputWithContext(ctx context.Context) RuleGroupCustomResponseBodyMapOutput

type RuleGroupCustomResponseBodyOutput added in v0.98.0

type RuleGroupCustomResponseBodyOutput struct{ *pulumi.OutputState }

Custom response body.

func (RuleGroupCustomResponseBodyOutput) Content added in v0.98.0

The payload of the custom response.

You can use JSON escape strings in JSON content. To do this, you must specify JSON content in the `ContentType` setting.

For information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* .

func (RuleGroupCustomResponseBodyOutput) ContentType added in v0.98.0

The type of content in the payload that you are defining in the `Content` string.

func (RuleGroupCustomResponseBodyOutput) ElementType added in v0.98.0

func (RuleGroupCustomResponseBodyOutput) ToRuleGroupCustomResponseBodyOutput added in v0.98.0

func (o RuleGroupCustomResponseBodyOutput) ToRuleGroupCustomResponseBodyOutput() RuleGroupCustomResponseBodyOutput

func (RuleGroupCustomResponseBodyOutput) ToRuleGroupCustomResponseBodyOutputWithContext added in v0.98.0

func (o RuleGroupCustomResponseBodyOutput) ToRuleGroupCustomResponseBodyOutputWithContext(ctx context.Context) RuleGroupCustomResponseBodyOutput

type RuleGroupCustomResponseInput added in v0.2.0

type RuleGroupCustomResponseInput interface {
	pulumi.Input

	ToRuleGroupCustomResponseOutput() RuleGroupCustomResponseOutput
	ToRuleGroupCustomResponseOutputWithContext(context.Context) RuleGroupCustomResponseOutput
}

RuleGroupCustomResponseInput is an input type that accepts RuleGroupCustomResponseArgs and RuleGroupCustomResponseOutput values. You can construct a concrete instance of `RuleGroupCustomResponseInput` via:

RuleGroupCustomResponseArgs{...}

type RuleGroupCustomResponseOutput added in v0.2.0

type RuleGroupCustomResponseOutput struct{ *pulumi.OutputState }

Custom response.

func (RuleGroupCustomResponseOutput) CustomResponseBodyKey added in v0.2.0

func (o RuleGroupCustomResponseOutput) CustomResponseBodyKey() pulumi.StringPtrOutput

Custom response body key.

func (RuleGroupCustomResponseOutput) ElementType added in v0.2.0

func (RuleGroupCustomResponseOutput) ResponseCode added in v0.2.0

The HTTP status code to return to the client.

For a list of status codes that you can use in your custom responses, see [Supported status codes for custom response](https://docs.aws.amazon.com/waf/latest/developerguide/customizing-the-response-status-codes.html) in the *AWS WAF Developer Guide* .

func (RuleGroupCustomResponseOutput) ResponseHeaders added in v0.2.0

Collection of HTTP headers.

func (RuleGroupCustomResponseOutput) ToRuleGroupCustomResponseOutput added in v0.2.0

func (o RuleGroupCustomResponseOutput) ToRuleGroupCustomResponseOutput() RuleGroupCustomResponseOutput

func (RuleGroupCustomResponseOutput) ToRuleGroupCustomResponseOutputWithContext added in v0.2.0

func (o RuleGroupCustomResponseOutput) ToRuleGroupCustomResponseOutputWithContext(ctx context.Context) RuleGroupCustomResponseOutput

func (RuleGroupCustomResponseOutput) ToRuleGroupCustomResponsePtrOutput added in v0.2.0

func (o RuleGroupCustomResponseOutput) ToRuleGroupCustomResponsePtrOutput() RuleGroupCustomResponsePtrOutput

func (RuleGroupCustomResponseOutput) ToRuleGroupCustomResponsePtrOutputWithContext added in v0.2.0

func (o RuleGroupCustomResponseOutput) ToRuleGroupCustomResponsePtrOutputWithContext(ctx context.Context) RuleGroupCustomResponsePtrOutput

type RuleGroupCustomResponsePtrInput added in v0.2.0

type RuleGroupCustomResponsePtrInput interface {
	pulumi.Input

	ToRuleGroupCustomResponsePtrOutput() RuleGroupCustomResponsePtrOutput
	ToRuleGroupCustomResponsePtrOutputWithContext(context.Context) RuleGroupCustomResponsePtrOutput
}

RuleGroupCustomResponsePtrInput is an input type that accepts RuleGroupCustomResponseArgs, RuleGroupCustomResponsePtr and RuleGroupCustomResponsePtrOutput values. You can construct a concrete instance of `RuleGroupCustomResponsePtrInput` via:

        RuleGroupCustomResponseArgs{...}

or:

        nil

func RuleGroupCustomResponsePtr added in v0.2.0

func RuleGroupCustomResponsePtr(v *RuleGroupCustomResponseArgs) RuleGroupCustomResponsePtrInput

type RuleGroupCustomResponsePtrOutput added in v0.2.0

type RuleGroupCustomResponsePtrOutput struct{ *pulumi.OutputState }

func (RuleGroupCustomResponsePtrOutput) CustomResponseBodyKey added in v0.2.0

func (o RuleGroupCustomResponsePtrOutput) CustomResponseBodyKey() pulumi.StringPtrOutput

Custom response body key.

func (RuleGroupCustomResponsePtrOutput) Elem added in v0.2.0

func (RuleGroupCustomResponsePtrOutput) ElementType added in v0.2.0

func (RuleGroupCustomResponsePtrOutput) ResponseCode added in v0.2.0

The HTTP status code to return to the client.

For a list of status codes that you can use in your custom responses, see [Supported status codes for custom response](https://docs.aws.amazon.com/waf/latest/developerguide/customizing-the-response-status-codes.html) in the *AWS WAF Developer Guide* .

func (RuleGroupCustomResponsePtrOutput) ResponseHeaders added in v0.2.0

Collection of HTTP headers.

func (RuleGroupCustomResponsePtrOutput) ToRuleGroupCustomResponsePtrOutput added in v0.2.0

func (o RuleGroupCustomResponsePtrOutput) ToRuleGroupCustomResponsePtrOutput() RuleGroupCustomResponsePtrOutput

func (RuleGroupCustomResponsePtrOutput) ToRuleGroupCustomResponsePtrOutputWithContext added in v0.2.0

func (o RuleGroupCustomResponsePtrOutput) ToRuleGroupCustomResponsePtrOutputWithContext(ctx context.Context) RuleGroupCustomResponsePtrOutput

type RuleGroupFieldToMatch

type RuleGroupFieldToMatch struct {
	// All query arguments of a web request.
	AllQueryArguments interface{} `pulumi:"allQueryArguments"`
	// Inspect the request body as plain text. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.
	//
	// AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.
	//
	// - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	// - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
	//
	// For information about how to handle oversized request bodies, see the `Body` object configuration.
	Body *RuleGroupBody `pulumi:"body"`
	// Inspect the request cookies. You must configure scope and pattern matching filters in the `Cookies` object, to define the set of cookies and the parts of the cookies that AWS WAF inspects.
	//
	// Only the first 8 KB (8192 bytes) of a request's cookies and only the first 200 cookies are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize cookie content in the `Cookies` object. AWS WAF applies the pattern matching filters to the cookies that it receives from the underlying host service.
	Cookies *RuleGroupCookies `pulumi:"cookies"`
	// Inspect the request headers. You must configure scope and pattern matching filters in the `Headers` object, to define the set of headers to and the parts of the headers that AWS WAF inspects.
	//
	// Only the first 8 KB (8192 bytes) of a request's headers and only the first 200 headers are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize header content in the `Headers` object. AWS WAF applies the pattern matching filters to the headers that it receives from the underlying host service.
	Headers *RuleGroupHeaders `pulumi:"headers"`
	// Match against the request's JA3 fingerprint. The JA3 fingerprint is a 32-character hash derived from the TLS Client Hello of an incoming request. This fingerprint serves as a unique identifier for the client's TLS configuration. AWS WAF calculates and logs this fingerprint for each request that has enough TLS Client Hello information for the calculation. Almost all web requests include this information.
	//
	// > You can use this choice only with a string match `ByteMatchStatement` with the `PositionalConstraint` set to `EXACTLY` .
	//
	// You can obtain the JA3 fingerprint for client requests from the web ACL logs. If AWS WAF is able to calculate the fingerprint, it includes it in the logs. For information about the logging fields, see [Log fields](https://docs.aws.amazon.com/waf/latest/developerguide/logging-fields.html) in the *AWS WAF Developer Guide* .
	//
	// Provide the JA3 fingerprint string from the logs in your string match statement specification, to match with any future requests that have the same TLS configuration.
	Ja3Fingerprint *RuleGroupJa3Fingerprint `pulumi:"ja3Fingerprint"`
	// Inspect the request body as JSON. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.
	//
	// AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.
	//
	// - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	// - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
	//
	// For information about how to handle oversized request bodies, see the `JsonBody` object configuration.
	JsonBody *RuleGroupJsonBody `pulumi:"jsonBody"`
	// The HTTP method of a web request. The method indicates the type of operation that the request is asking the origin to perform.
	Method interface{} `pulumi:"method"`
	// The query string of a web request. This is the part of a URL that appears after a ? character, if any.
	QueryString interface{} `pulumi:"queryString"`
	// Inspect a single header. Provide the name of the header to inspect, for example, `User-Agent` or `Referer` . This setting isn't case sensitive.
	//
	// Example JSON: `"SingleHeader": { "Name": "haystack" }`
	//
	// Alternately, you can filter and inspect all headers with the `Headers` `FieldToMatch` setting.
	SingleHeader *RuleGroupFieldToMatchSingleHeaderProperties `pulumi:"singleHeader"`
	// One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.
	SingleQueryArgument *RuleGroupFieldToMatchSingleQueryArgumentProperties `pulumi:"singleQueryArgument"`
	// The path component of the URI of a web request. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
	UriPath interface{} `pulumi:"uriPath"`
}

Field of the request to match.

type RuleGroupFieldToMatchArgs

type RuleGroupFieldToMatchArgs struct {
	// All query arguments of a web request.
	AllQueryArguments pulumi.Input `pulumi:"allQueryArguments"`
	// Inspect the request body as plain text. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.
	//
	// AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.
	//
	// - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	// - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
	//
	// For information about how to handle oversized request bodies, see the `Body` object configuration.
	Body RuleGroupBodyPtrInput `pulumi:"body"`
	// Inspect the request cookies. You must configure scope and pattern matching filters in the `Cookies` object, to define the set of cookies and the parts of the cookies that AWS WAF inspects.
	//
	// Only the first 8 KB (8192 bytes) of a request's cookies and only the first 200 cookies are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize cookie content in the `Cookies` object. AWS WAF applies the pattern matching filters to the cookies that it receives from the underlying host service.
	Cookies RuleGroupCookiesPtrInput `pulumi:"cookies"`
	// Inspect the request headers. You must configure scope and pattern matching filters in the `Headers` object, to define the set of headers to and the parts of the headers that AWS WAF inspects.
	//
	// Only the first 8 KB (8192 bytes) of a request's headers and only the first 200 headers are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize header content in the `Headers` object. AWS WAF applies the pattern matching filters to the headers that it receives from the underlying host service.
	Headers RuleGroupHeadersPtrInput `pulumi:"headers"`
	// Match against the request's JA3 fingerprint. The JA3 fingerprint is a 32-character hash derived from the TLS Client Hello of an incoming request. This fingerprint serves as a unique identifier for the client's TLS configuration. AWS WAF calculates and logs this fingerprint for each request that has enough TLS Client Hello information for the calculation. Almost all web requests include this information.
	//
	// > You can use this choice only with a string match `ByteMatchStatement` with the `PositionalConstraint` set to `EXACTLY` .
	//
	// You can obtain the JA3 fingerprint for client requests from the web ACL logs. If AWS WAF is able to calculate the fingerprint, it includes it in the logs. For information about the logging fields, see [Log fields](https://docs.aws.amazon.com/waf/latest/developerguide/logging-fields.html) in the *AWS WAF Developer Guide* .
	//
	// Provide the JA3 fingerprint string from the logs in your string match statement specification, to match with any future requests that have the same TLS configuration.
	Ja3Fingerprint RuleGroupJa3FingerprintPtrInput `pulumi:"ja3Fingerprint"`
	// Inspect the request body as JSON. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.
	//
	// AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.
	//
	// - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	// - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
	//
	// For information about how to handle oversized request bodies, see the `JsonBody` object configuration.
	JsonBody RuleGroupJsonBodyPtrInput `pulumi:"jsonBody"`
	// The HTTP method of a web request. The method indicates the type of operation that the request is asking the origin to perform.
	Method pulumi.Input `pulumi:"method"`
	// The query string of a web request. This is the part of a URL that appears after a ? character, if any.
	QueryString pulumi.Input `pulumi:"queryString"`
	// Inspect a single header. Provide the name of the header to inspect, for example, `User-Agent` or `Referer` . This setting isn't case sensitive.
	//
	// Example JSON: `"SingleHeader": { "Name": "haystack" }`
	//
	// Alternately, you can filter and inspect all headers with the `Headers` `FieldToMatch` setting.
	SingleHeader RuleGroupFieldToMatchSingleHeaderPropertiesPtrInput `pulumi:"singleHeader"`
	// One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.
	SingleQueryArgument RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrInput `pulumi:"singleQueryArgument"`
	// The path component of the URI of a web request. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
	UriPath pulumi.Input `pulumi:"uriPath"`
}

Field of the request to match.

func (RuleGroupFieldToMatchArgs) ElementType

func (RuleGroupFieldToMatchArgs) ElementType() reflect.Type

func (RuleGroupFieldToMatchArgs) ToRuleGroupFieldToMatchOutput

func (i RuleGroupFieldToMatchArgs) ToRuleGroupFieldToMatchOutput() RuleGroupFieldToMatchOutput

func (RuleGroupFieldToMatchArgs) ToRuleGroupFieldToMatchOutputWithContext

func (i RuleGroupFieldToMatchArgs) ToRuleGroupFieldToMatchOutputWithContext(ctx context.Context) RuleGroupFieldToMatchOutput

func (RuleGroupFieldToMatchArgs) ToRuleGroupFieldToMatchPtrOutput

func (i RuleGroupFieldToMatchArgs) ToRuleGroupFieldToMatchPtrOutput() RuleGroupFieldToMatchPtrOutput

func (RuleGroupFieldToMatchArgs) ToRuleGroupFieldToMatchPtrOutputWithContext

func (i RuleGroupFieldToMatchArgs) ToRuleGroupFieldToMatchPtrOutputWithContext(ctx context.Context) RuleGroupFieldToMatchPtrOutput

type RuleGroupFieldToMatchInput

type RuleGroupFieldToMatchInput interface {
	pulumi.Input

	ToRuleGroupFieldToMatchOutput() RuleGroupFieldToMatchOutput
	ToRuleGroupFieldToMatchOutputWithContext(context.Context) RuleGroupFieldToMatchOutput
}

RuleGroupFieldToMatchInput is an input type that accepts RuleGroupFieldToMatchArgs and RuleGroupFieldToMatchOutput values. You can construct a concrete instance of `RuleGroupFieldToMatchInput` via:

RuleGroupFieldToMatchArgs{...}

type RuleGroupFieldToMatchOutput

type RuleGroupFieldToMatchOutput struct{ *pulumi.OutputState }

Field of the request to match.

func (RuleGroupFieldToMatchOutput) AllQueryArguments

func (o RuleGroupFieldToMatchOutput) AllQueryArguments() pulumi.AnyOutput

All query arguments of a web request.

func (RuleGroupFieldToMatchOutput) Body

Inspect the request body as plain text. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.

AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.

- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes). - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.

For information about how to handle oversized request bodies, see the `Body` object configuration.

func (RuleGroupFieldToMatchOutput) Cookies added in v0.17.0

Inspect the request cookies. You must configure scope and pattern matching filters in the `Cookies` object, to define the set of cookies and the parts of the cookies that AWS WAF inspects.

Only the first 8 KB (8192 bytes) of a request's cookies and only the first 200 cookies are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize cookie content in the `Cookies` object. AWS WAF applies the pattern matching filters to the cookies that it receives from the underlying host service.

func (RuleGroupFieldToMatchOutput) ElementType

func (RuleGroupFieldToMatchOutput) Headers added in v0.17.0

Inspect the request headers. You must configure scope and pattern matching filters in the `Headers` object, to define the set of headers to and the parts of the headers that AWS WAF inspects.

Only the first 8 KB (8192 bytes) of a request's headers and only the first 200 headers are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize header content in the `Headers` object. AWS WAF applies the pattern matching filters to the headers that it receives from the underlying host service.

func (RuleGroupFieldToMatchOutput) Ja3Fingerprint added in v0.99.0

Match against the request's JA3 fingerprint. The JA3 fingerprint is a 32-character hash derived from the TLS Client Hello of an incoming request. This fingerprint serves as a unique identifier for the client's TLS configuration. AWS WAF calculates and logs this fingerprint for each request that has enough TLS Client Hello information for the calculation. Almost all web requests include this information.

> You can use this choice only with a string match `ByteMatchStatement` with the `PositionalConstraint` set to `EXACTLY` .

You can obtain the JA3 fingerprint for client requests from the web ACL logs. If AWS WAF is able to calculate the fingerprint, it includes it in the logs. For information about the logging fields, see [Log fields](https://docs.aws.amazon.com/waf/latest/developerguide/logging-fields.html) in the *AWS WAF Developer Guide* .

Provide the JA3 fingerprint string from the logs in your string match statement specification, to match with any future requests that have the same TLS configuration.

func (RuleGroupFieldToMatchOutput) JsonBody

Inspect the request body as JSON. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.

AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.

- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes). - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.

For information about how to handle oversized request bodies, see the `JsonBody` object configuration.

func (RuleGroupFieldToMatchOutput) Method

The HTTP method of a web request. The method indicates the type of operation that the request is asking the origin to perform.

func (RuleGroupFieldToMatchOutput) QueryString

The query string of a web request. This is the part of a URL that appears after a ? character, if any.

func (RuleGroupFieldToMatchOutput) SingleHeader

Inspect a single header. Provide the name of the header to inspect, for example, `User-Agent` or `Referer` . This setting isn't case sensitive.

Example JSON: `"SingleHeader": { "Name": "haystack" }`

Alternately, you can filter and inspect all headers with the `Headers` `FieldToMatch` setting.

func (RuleGroupFieldToMatchOutput) SingleQueryArgument

One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.

func (RuleGroupFieldToMatchOutput) ToRuleGroupFieldToMatchOutput

func (o RuleGroupFieldToMatchOutput) ToRuleGroupFieldToMatchOutput() RuleGroupFieldToMatchOutput

func (RuleGroupFieldToMatchOutput) ToRuleGroupFieldToMatchOutputWithContext

func (o RuleGroupFieldToMatchOutput) ToRuleGroupFieldToMatchOutputWithContext(ctx context.Context) RuleGroupFieldToMatchOutput

func (RuleGroupFieldToMatchOutput) ToRuleGroupFieldToMatchPtrOutput

func (o RuleGroupFieldToMatchOutput) ToRuleGroupFieldToMatchPtrOutput() RuleGroupFieldToMatchPtrOutput

func (RuleGroupFieldToMatchOutput) ToRuleGroupFieldToMatchPtrOutputWithContext

func (o RuleGroupFieldToMatchOutput) ToRuleGroupFieldToMatchPtrOutputWithContext(ctx context.Context) RuleGroupFieldToMatchPtrOutput

func (RuleGroupFieldToMatchOutput) UriPath

The path component of the URI of a web request. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

type RuleGroupFieldToMatchPtrInput

type RuleGroupFieldToMatchPtrInput interface {
	pulumi.Input

	ToRuleGroupFieldToMatchPtrOutput() RuleGroupFieldToMatchPtrOutput
	ToRuleGroupFieldToMatchPtrOutputWithContext(context.Context) RuleGroupFieldToMatchPtrOutput
}

RuleGroupFieldToMatchPtrInput is an input type that accepts RuleGroupFieldToMatchArgs, RuleGroupFieldToMatchPtr and RuleGroupFieldToMatchPtrOutput values. You can construct a concrete instance of `RuleGroupFieldToMatchPtrInput` via:

        RuleGroupFieldToMatchArgs{...}

or:

        nil

type RuleGroupFieldToMatchPtrOutput

type RuleGroupFieldToMatchPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupFieldToMatchPtrOutput) AllQueryArguments

func (o RuleGroupFieldToMatchPtrOutput) AllQueryArguments() pulumi.AnyOutput

All query arguments of a web request.

func (RuleGroupFieldToMatchPtrOutput) Body

Inspect the request body as plain text. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.

AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.

- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes). - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.

For information about how to handle oversized request bodies, see the `Body` object configuration.

func (RuleGroupFieldToMatchPtrOutput) Cookies added in v0.17.0

Inspect the request cookies. You must configure scope and pattern matching filters in the `Cookies` object, to define the set of cookies and the parts of the cookies that AWS WAF inspects.

Only the first 8 KB (8192 bytes) of a request's cookies and only the first 200 cookies are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize cookie content in the `Cookies` object. AWS WAF applies the pattern matching filters to the cookies that it receives from the underlying host service.

func (RuleGroupFieldToMatchPtrOutput) Elem

func (RuleGroupFieldToMatchPtrOutput) ElementType

func (RuleGroupFieldToMatchPtrOutput) Headers added in v0.17.0

Inspect the request headers. You must configure scope and pattern matching filters in the `Headers` object, to define the set of headers to and the parts of the headers that AWS WAF inspects.

Only the first 8 KB (8192 bytes) of a request's headers and only the first 200 headers are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize header content in the `Headers` object. AWS WAF applies the pattern matching filters to the headers that it receives from the underlying host service.

func (RuleGroupFieldToMatchPtrOutput) Ja3Fingerprint added in v0.99.0

Match against the request's JA3 fingerprint. The JA3 fingerprint is a 32-character hash derived from the TLS Client Hello of an incoming request. This fingerprint serves as a unique identifier for the client's TLS configuration. AWS WAF calculates and logs this fingerprint for each request that has enough TLS Client Hello information for the calculation. Almost all web requests include this information.

> You can use this choice only with a string match `ByteMatchStatement` with the `PositionalConstraint` set to `EXACTLY` .

You can obtain the JA3 fingerprint for client requests from the web ACL logs. If AWS WAF is able to calculate the fingerprint, it includes it in the logs. For information about the logging fields, see [Log fields](https://docs.aws.amazon.com/waf/latest/developerguide/logging-fields.html) in the *AWS WAF Developer Guide* .

Provide the JA3 fingerprint string from the logs in your string match statement specification, to match with any future requests that have the same TLS configuration.

func (RuleGroupFieldToMatchPtrOutput) JsonBody

Inspect the request body as JSON. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.

AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.

- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes). - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.

For information about how to handle oversized request bodies, see the `JsonBody` object configuration.

func (RuleGroupFieldToMatchPtrOutput) Method

The HTTP method of a web request. The method indicates the type of operation that the request is asking the origin to perform.

func (RuleGroupFieldToMatchPtrOutput) QueryString

The query string of a web request. This is the part of a URL that appears after a ? character, if any.

func (RuleGroupFieldToMatchPtrOutput) SingleHeader

Inspect a single header. Provide the name of the header to inspect, for example, `User-Agent` or `Referer` . This setting isn't case sensitive.

Example JSON: `"SingleHeader": { "Name": "haystack" }`

Alternately, you can filter and inspect all headers with the `Headers` `FieldToMatch` setting.

func (RuleGroupFieldToMatchPtrOutput) SingleQueryArgument

One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.

func (RuleGroupFieldToMatchPtrOutput) ToRuleGroupFieldToMatchPtrOutput

func (o RuleGroupFieldToMatchPtrOutput) ToRuleGroupFieldToMatchPtrOutput() RuleGroupFieldToMatchPtrOutput

func (RuleGroupFieldToMatchPtrOutput) ToRuleGroupFieldToMatchPtrOutputWithContext

func (o RuleGroupFieldToMatchPtrOutput) ToRuleGroupFieldToMatchPtrOutputWithContext(ctx context.Context) RuleGroupFieldToMatchPtrOutput

func (RuleGroupFieldToMatchPtrOutput) UriPath

The path component of the URI of a web request. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

type RuleGroupFieldToMatchSingleHeaderProperties added in v0.2.0

type RuleGroupFieldToMatchSingleHeaderProperties struct {
	Name string `pulumi:"name"`
}

Inspect a single header. Provide the name of the header to inspect, for example, `User-Agent` or `Referer` . This setting isn't case sensitive.

Example JSON: `"SingleHeader": { "Name": "haystack" }`

Alternately, you can filter and inspect all headers with the `Headers` `FieldToMatch` setting.

type RuleGroupFieldToMatchSingleHeaderPropertiesArgs added in v0.2.0

type RuleGroupFieldToMatchSingleHeaderPropertiesArgs struct {
	Name pulumi.StringInput `pulumi:"name"`
}

Inspect a single header. Provide the name of the header to inspect, for example, `User-Agent` or `Referer` . This setting isn't case sensitive.

Example JSON: `"SingleHeader": { "Name": "haystack" }`

Alternately, you can filter and inspect all headers with the `Headers` `FieldToMatch` setting.

func (RuleGroupFieldToMatchSingleHeaderPropertiesArgs) ElementType added in v0.2.0

func (RuleGroupFieldToMatchSingleHeaderPropertiesArgs) ToRuleGroupFieldToMatchSingleHeaderPropertiesOutput added in v0.2.0

func (i RuleGroupFieldToMatchSingleHeaderPropertiesArgs) ToRuleGroupFieldToMatchSingleHeaderPropertiesOutput() RuleGroupFieldToMatchSingleHeaderPropertiesOutput

func (RuleGroupFieldToMatchSingleHeaderPropertiesArgs) ToRuleGroupFieldToMatchSingleHeaderPropertiesOutputWithContext added in v0.2.0

func (i RuleGroupFieldToMatchSingleHeaderPropertiesArgs) ToRuleGroupFieldToMatchSingleHeaderPropertiesOutputWithContext(ctx context.Context) RuleGroupFieldToMatchSingleHeaderPropertiesOutput

func (RuleGroupFieldToMatchSingleHeaderPropertiesArgs) ToRuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput added in v0.2.0

func (i RuleGroupFieldToMatchSingleHeaderPropertiesArgs) ToRuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput() RuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput

func (RuleGroupFieldToMatchSingleHeaderPropertiesArgs) ToRuleGroupFieldToMatchSingleHeaderPropertiesPtrOutputWithContext added in v0.2.0

func (i RuleGroupFieldToMatchSingleHeaderPropertiesArgs) ToRuleGroupFieldToMatchSingleHeaderPropertiesPtrOutputWithContext(ctx context.Context) RuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput

type RuleGroupFieldToMatchSingleHeaderPropertiesInput added in v0.2.0

type RuleGroupFieldToMatchSingleHeaderPropertiesInput interface {
	pulumi.Input

	ToRuleGroupFieldToMatchSingleHeaderPropertiesOutput() RuleGroupFieldToMatchSingleHeaderPropertiesOutput
	ToRuleGroupFieldToMatchSingleHeaderPropertiesOutputWithContext(context.Context) RuleGroupFieldToMatchSingleHeaderPropertiesOutput
}

RuleGroupFieldToMatchSingleHeaderPropertiesInput is an input type that accepts RuleGroupFieldToMatchSingleHeaderPropertiesArgs and RuleGroupFieldToMatchSingleHeaderPropertiesOutput values. You can construct a concrete instance of `RuleGroupFieldToMatchSingleHeaderPropertiesInput` via:

RuleGroupFieldToMatchSingleHeaderPropertiesArgs{...}

type RuleGroupFieldToMatchSingleHeaderPropertiesOutput added in v0.2.0

type RuleGroupFieldToMatchSingleHeaderPropertiesOutput struct{ *pulumi.OutputState }

Inspect a single header. Provide the name of the header to inspect, for example, `User-Agent` or `Referer` . This setting isn't case sensitive.

Example JSON: `"SingleHeader": { "Name": "haystack" }`

Alternately, you can filter and inspect all headers with the `Headers` `FieldToMatch` setting.

func (RuleGroupFieldToMatchSingleHeaderPropertiesOutput) ElementType added in v0.2.0

func (RuleGroupFieldToMatchSingleHeaderPropertiesOutput) Name added in v0.2.0

func (RuleGroupFieldToMatchSingleHeaderPropertiesOutput) ToRuleGroupFieldToMatchSingleHeaderPropertiesOutput added in v0.2.0

func (o RuleGroupFieldToMatchSingleHeaderPropertiesOutput) ToRuleGroupFieldToMatchSingleHeaderPropertiesOutput() RuleGroupFieldToMatchSingleHeaderPropertiesOutput

func (RuleGroupFieldToMatchSingleHeaderPropertiesOutput) ToRuleGroupFieldToMatchSingleHeaderPropertiesOutputWithContext added in v0.2.0

func (o RuleGroupFieldToMatchSingleHeaderPropertiesOutput) ToRuleGroupFieldToMatchSingleHeaderPropertiesOutputWithContext(ctx context.Context) RuleGroupFieldToMatchSingleHeaderPropertiesOutput

func (RuleGroupFieldToMatchSingleHeaderPropertiesOutput) ToRuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput added in v0.2.0

func (o RuleGroupFieldToMatchSingleHeaderPropertiesOutput) ToRuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput() RuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput

func (RuleGroupFieldToMatchSingleHeaderPropertiesOutput) ToRuleGroupFieldToMatchSingleHeaderPropertiesPtrOutputWithContext added in v0.2.0

func (o RuleGroupFieldToMatchSingleHeaderPropertiesOutput) ToRuleGroupFieldToMatchSingleHeaderPropertiesPtrOutputWithContext(ctx context.Context) RuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput

type RuleGroupFieldToMatchSingleHeaderPropertiesPtrInput added in v0.2.0

type RuleGroupFieldToMatchSingleHeaderPropertiesPtrInput interface {
	pulumi.Input

	ToRuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput() RuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput
	ToRuleGroupFieldToMatchSingleHeaderPropertiesPtrOutputWithContext(context.Context) RuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput
}

RuleGroupFieldToMatchSingleHeaderPropertiesPtrInput is an input type that accepts RuleGroupFieldToMatchSingleHeaderPropertiesArgs, RuleGroupFieldToMatchSingleHeaderPropertiesPtr and RuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput values. You can construct a concrete instance of `RuleGroupFieldToMatchSingleHeaderPropertiesPtrInput` via:

        RuleGroupFieldToMatchSingleHeaderPropertiesArgs{...}

or:

        nil

type RuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput added in v0.2.0

type RuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput) Elem added in v0.2.0

func (RuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput) ElementType added in v0.2.0

func (RuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput) Name added in v0.2.0

func (RuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput) ToRuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput added in v0.2.0

func (RuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput) ToRuleGroupFieldToMatchSingleHeaderPropertiesPtrOutputWithContext added in v0.2.0

func (o RuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput) ToRuleGroupFieldToMatchSingleHeaderPropertiesPtrOutputWithContext(ctx context.Context) RuleGroupFieldToMatchSingleHeaderPropertiesPtrOutput

type RuleGroupFieldToMatchSingleQueryArgumentProperties added in v0.2.0

type RuleGroupFieldToMatchSingleQueryArgumentProperties struct {
	Name string `pulumi:"name"`
}

One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.

type RuleGroupFieldToMatchSingleQueryArgumentPropertiesArgs added in v0.2.0

type RuleGroupFieldToMatchSingleQueryArgumentPropertiesArgs struct {
	Name pulumi.StringInput `pulumi:"name"`
}

One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.

func (RuleGroupFieldToMatchSingleQueryArgumentPropertiesArgs) ElementType added in v0.2.0

func (RuleGroupFieldToMatchSingleQueryArgumentPropertiesArgs) ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesOutput added in v0.2.0

func (RuleGroupFieldToMatchSingleQueryArgumentPropertiesArgs) ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesOutputWithContext added in v0.2.0

func (i RuleGroupFieldToMatchSingleQueryArgumentPropertiesArgs) ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesOutputWithContext(ctx context.Context) RuleGroupFieldToMatchSingleQueryArgumentPropertiesOutput

func (RuleGroupFieldToMatchSingleQueryArgumentPropertiesArgs) ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput added in v0.2.0

func (i RuleGroupFieldToMatchSingleQueryArgumentPropertiesArgs) ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput() RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput

func (RuleGroupFieldToMatchSingleQueryArgumentPropertiesArgs) ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutputWithContext added in v0.2.0

func (i RuleGroupFieldToMatchSingleQueryArgumentPropertiesArgs) ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutputWithContext(ctx context.Context) RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput

type RuleGroupFieldToMatchSingleQueryArgumentPropertiesInput added in v0.2.0

type RuleGroupFieldToMatchSingleQueryArgumentPropertiesInput interface {
	pulumi.Input

	ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesOutput() RuleGroupFieldToMatchSingleQueryArgumentPropertiesOutput
	ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesOutputWithContext(context.Context) RuleGroupFieldToMatchSingleQueryArgumentPropertiesOutput
}

RuleGroupFieldToMatchSingleQueryArgumentPropertiesInput is an input type that accepts RuleGroupFieldToMatchSingleQueryArgumentPropertiesArgs and RuleGroupFieldToMatchSingleQueryArgumentPropertiesOutput values. You can construct a concrete instance of `RuleGroupFieldToMatchSingleQueryArgumentPropertiesInput` via:

RuleGroupFieldToMatchSingleQueryArgumentPropertiesArgs{...}

type RuleGroupFieldToMatchSingleQueryArgumentPropertiesOutput added in v0.2.0

type RuleGroupFieldToMatchSingleQueryArgumentPropertiesOutput struct{ *pulumi.OutputState }

One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.

func (RuleGroupFieldToMatchSingleQueryArgumentPropertiesOutput) ElementType added in v0.2.0

func (RuleGroupFieldToMatchSingleQueryArgumentPropertiesOutput) Name added in v0.2.0

func (RuleGroupFieldToMatchSingleQueryArgumentPropertiesOutput) ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesOutput added in v0.2.0

func (RuleGroupFieldToMatchSingleQueryArgumentPropertiesOutput) ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesOutputWithContext added in v0.2.0

func (o RuleGroupFieldToMatchSingleQueryArgumentPropertiesOutput) ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesOutputWithContext(ctx context.Context) RuleGroupFieldToMatchSingleQueryArgumentPropertiesOutput

func (RuleGroupFieldToMatchSingleQueryArgumentPropertiesOutput) ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput added in v0.2.0

func (RuleGroupFieldToMatchSingleQueryArgumentPropertiesOutput) ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutputWithContext added in v0.2.0

func (o RuleGroupFieldToMatchSingleQueryArgumentPropertiesOutput) ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutputWithContext(ctx context.Context) RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput

type RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrInput added in v0.2.0

type RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrInput interface {
	pulumi.Input

	ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput() RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput
	ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutputWithContext(context.Context) RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput
}

RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrInput is an input type that accepts RuleGroupFieldToMatchSingleQueryArgumentPropertiesArgs, RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtr and RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput values. You can construct a concrete instance of `RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrInput` via:

        RuleGroupFieldToMatchSingleQueryArgumentPropertiesArgs{...}

or:

        nil

type RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput added in v0.2.0

type RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput) Elem added in v0.2.0

func (RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput) ElementType added in v0.2.0

func (RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput) Name added in v0.2.0

func (RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput) ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput added in v0.2.0

func (RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput) ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutputWithContext added in v0.2.0

func (o RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput) ToRuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutputWithContext(ctx context.Context) RuleGroupFieldToMatchSingleQueryArgumentPropertiesPtrOutput

type RuleGroupForwardedIpConfiguration added in v0.72.0

type RuleGroupForwardedIpConfiguration struct {
	// The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	//
	// You can specify the following fallback behaviors:
	//
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	FallbackBehavior RuleGroupForwardedIpConfigurationFallbackBehavior `pulumi:"fallbackBehavior"`
	// The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	HeaderName string `pulumi:"headerName"`
}

type RuleGroupForwardedIpConfigurationArgs added in v0.72.0

type RuleGroupForwardedIpConfigurationArgs struct {
	// The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	//
	// You can specify the following fallback behaviors:
	//
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	FallbackBehavior RuleGroupForwardedIpConfigurationFallbackBehaviorInput `pulumi:"fallbackBehavior"`
	// The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	HeaderName pulumi.StringInput `pulumi:"headerName"`
}

func (RuleGroupForwardedIpConfigurationArgs) ElementType added in v0.72.0

func (RuleGroupForwardedIpConfigurationArgs) ToRuleGroupForwardedIpConfigurationOutput added in v0.72.0

func (i RuleGroupForwardedIpConfigurationArgs) ToRuleGroupForwardedIpConfigurationOutput() RuleGroupForwardedIpConfigurationOutput

func (RuleGroupForwardedIpConfigurationArgs) ToRuleGroupForwardedIpConfigurationOutputWithContext added in v0.72.0

func (i RuleGroupForwardedIpConfigurationArgs) ToRuleGroupForwardedIpConfigurationOutputWithContext(ctx context.Context) RuleGroupForwardedIpConfigurationOutput

func (RuleGroupForwardedIpConfigurationArgs) ToRuleGroupForwardedIpConfigurationPtrOutput added in v0.72.0

func (i RuleGroupForwardedIpConfigurationArgs) ToRuleGroupForwardedIpConfigurationPtrOutput() RuleGroupForwardedIpConfigurationPtrOutput

func (RuleGroupForwardedIpConfigurationArgs) ToRuleGroupForwardedIpConfigurationPtrOutputWithContext added in v0.72.0

func (i RuleGroupForwardedIpConfigurationArgs) ToRuleGroupForwardedIpConfigurationPtrOutputWithContext(ctx context.Context) RuleGroupForwardedIpConfigurationPtrOutput

type RuleGroupForwardedIpConfigurationFallbackBehavior added in v0.72.0

type RuleGroupForwardedIpConfigurationFallbackBehavior string

The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

You can specify the following fallback behaviors:

- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (RuleGroupForwardedIpConfigurationFallbackBehavior) ElementType added in v0.72.0

func (RuleGroupForwardedIpConfigurationFallbackBehavior) ToRuleGroupForwardedIpConfigurationFallbackBehaviorOutput added in v0.72.0

func (e RuleGroupForwardedIpConfigurationFallbackBehavior) ToRuleGroupForwardedIpConfigurationFallbackBehaviorOutput() RuleGroupForwardedIpConfigurationFallbackBehaviorOutput

func (RuleGroupForwardedIpConfigurationFallbackBehavior) ToRuleGroupForwardedIpConfigurationFallbackBehaviorOutputWithContext added in v0.72.0

func (e RuleGroupForwardedIpConfigurationFallbackBehavior) ToRuleGroupForwardedIpConfigurationFallbackBehaviorOutputWithContext(ctx context.Context) RuleGroupForwardedIpConfigurationFallbackBehaviorOutput

func (RuleGroupForwardedIpConfigurationFallbackBehavior) ToRuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput added in v0.72.0

func (e RuleGroupForwardedIpConfigurationFallbackBehavior) ToRuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput() RuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput

func (RuleGroupForwardedIpConfigurationFallbackBehavior) ToRuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext added in v0.72.0

func (e RuleGroupForwardedIpConfigurationFallbackBehavior) ToRuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext(ctx context.Context) RuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput

func (RuleGroupForwardedIpConfigurationFallbackBehavior) ToStringOutput added in v0.72.0

func (RuleGroupForwardedIpConfigurationFallbackBehavior) ToStringOutputWithContext added in v0.72.0

func (RuleGroupForwardedIpConfigurationFallbackBehavior) ToStringPtrOutput added in v0.72.0

func (RuleGroupForwardedIpConfigurationFallbackBehavior) ToStringPtrOutputWithContext added in v0.72.0

type RuleGroupForwardedIpConfigurationFallbackBehaviorInput added in v0.72.0

type RuleGroupForwardedIpConfigurationFallbackBehaviorInput interface {
	pulumi.Input

	ToRuleGroupForwardedIpConfigurationFallbackBehaviorOutput() RuleGroupForwardedIpConfigurationFallbackBehaviorOutput
	ToRuleGroupForwardedIpConfigurationFallbackBehaviorOutputWithContext(context.Context) RuleGroupForwardedIpConfigurationFallbackBehaviorOutput
}

RuleGroupForwardedIpConfigurationFallbackBehaviorInput is an input type that accepts values of the RuleGroupForwardedIpConfigurationFallbackBehavior enum A concrete instance of `RuleGroupForwardedIpConfigurationFallbackBehaviorInput` can be one of the following:

RuleGroupForwardedIpConfigurationFallbackBehaviorMatch
RuleGroupForwardedIpConfigurationFallbackBehaviorNoMatch

type RuleGroupForwardedIpConfigurationFallbackBehaviorOutput added in v0.72.0

type RuleGroupForwardedIpConfigurationFallbackBehaviorOutput struct{ *pulumi.OutputState }

func (RuleGroupForwardedIpConfigurationFallbackBehaviorOutput) ElementType added in v0.72.0

func (RuleGroupForwardedIpConfigurationFallbackBehaviorOutput) ToRuleGroupForwardedIpConfigurationFallbackBehaviorOutput added in v0.72.0

func (RuleGroupForwardedIpConfigurationFallbackBehaviorOutput) ToRuleGroupForwardedIpConfigurationFallbackBehaviorOutputWithContext added in v0.72.0

func (o RuleGroupForwardedIpConfigurationFallbackBehaviorOutput) ToRuleGroupForwardedIpConfigurationFallbackBehaviorOutputWithContext(ctx context.Context) RuleGroupForwardedIpConfigurationFallbackBehaviorOutput

func (RuleGroupForwardedIpConfigurationFallbackBehaviorOutput) ToRuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput added in v0.72.0

func (RuleGroupForwardedIpConfigurationFallbackBehaviorOutput) ToRuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext added in v0.72.0

func (o RuleGroupForwardedIpConfigurationFallbackBehaviorOutput) ToRuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext(ctx context.Context) RuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput

func (RuleGroupForwardedIpConfigurationFallbackBehaviorOutput) ToStringOutput added in v0.72.0

func (RuleGroupForwardedIpConfigurationFallbackBehaviorOutput) ToStringOutputWithContext added in v0.72.0

func (RuleGroupForwardedIpConfigurationFallbackBehaviorOutput) ToStringPtrOutput added in v0.72.0

func (RuleGroupForwardedIpConfigurationFallbackBehaviorOutput) ToStringPtrOutputWithContext added in v0.72.0

type RuleGroupForwardedIpConfigurationFallbackBehaviorPtrInput added in v0.72.0

type RuleGroupForwardedIpConfigurationFallbackBehaviorPtrInput interface {
	pulumi.Input

	ToRuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput() RuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput
	ToRuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext(context.Context) RuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput
}

func RuleGroupForwardedIpConfigurationFallbackBehaviorPtr added in v0.72.0

func RuleGroupForwardedIpConfigurationFallbackBehaviorPtr(v string) RuleGroupForwardedIpConfigurationFallbackBehaviorPtrInput

type RuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput added in v0.72.0

type RuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput) Elem added in v0.72.0

func (RuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput) ElementType added in v0.72.0

func (RuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput) ToRuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput added in v0.72.0

func (RuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput) ToRuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext added in v0.72.0

func (o RuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput) ToRuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext(ctx context.Context) RuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput

func (RuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput) ToStringPtrOutput added in v0.72.0

func (RuleGroupForwardedIpConfigurationFallbackBehaviorPtrOutput) ToStringPtrOutputWithContext added in v0.72.0

type RuleGroupForwardedIpConfigurationInput added in v0.72.0

type RuleGroupForwardedIpConfigurationInput interface {
	pulumi.Input

	ToRuleGroupForwardedIpConfigurationOutput() RuleGroupForwardedIpConfigurationOutput
	ToRuleGroupForwardedIpConfigurationOutputWithContext(context.Context) RuleGroupForwardedIpConfigurationOutput
}

RuleGroupForwardedIpConfigurationInput is an input type that accepts RuleGroupForwardedIpConfigurationArgs and RuleGroupForwardedIpConfigurationOutput values. You can construct a concrete instance of `RuleGroupForwardedIpConfigurationInput` via:

RuleGroupForwardedIpConfigurationArgs{...}

type RuleGroupForwardedIpConfigurationOutput added in v0.72.0

type RuleGroupForwardedIpConfigurationOutput struct{ *pulumi.OutputState }

func (RuleGroupForwardedIpConfigurationOutput) ElementType added in v0.72.0

func (RuleGroupForwardedIpConfigurationOutput) FallbackBehavior added in v0.72.0

The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

You can specify the following fallback behaviors:

- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (RuleGroupForwardedIpConfigurationOutput) HeaderName added in v0.72.0

The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

func (RuleGroupForwardedIpConfigurationOutput) ToRuleGroupForwardedIpConfigurationOutput added in v0.72.0

func (o RuleGroupForwardedIpConfigurationOutput) ToRuleGroupForwardedIpConfigurationOutput() RuleGroupForwardedIpConfigurationOutput

func (RuleGroupForwardedIpConfigurationOutput) ToRuleGroupForwardedIpConfigurationOutputWithContext added in v0.72.0

func (o RuleGroupForwardedIpConfigurationOutput) ToRuleGroupForwardedIpConfigurationOutputWithContext(ctx context.Context) RuleGroupForwardedIpConfigurationOutput

func (RuleGroupForwardedIpConfigurationOutput) ToRuleGroupForwardedIpConfigurationPtrOutput added in v0.72.0

func (o RuleGroupForwardedIpConfigurationOutput) ToRuleGroupForwardedIpConfigurationPtrOutput() RuleGroupForwardedIpConfigurationPtrOutput

func (RuleGroupForwardedIpConfigurationOutput) ToRuleGroupForwardedIpConfigurationPtrOutputWithContext added in v0.72.0

func (o RuleGroupForwardedIpConfigurationOutput) ToRuleGroupForwardedIpConfigurationPtrOutputWithContext(ctx context.Context) RuleGroupForwardedIpConfigurationPtrOutput

type RuleGroupForwardedIpConfigurationPtrInput added in v0.72.0

type RuleGroupForwardedIpConfigurationPtrInput interface {
	pulumi.Input

	ToRuleGroupForwardedIpConfigurationPtrOutput() RuleGroupForwardedIpConfigurationPtrOutput
	ToRuleGroupForwardedIpConfigurationPtrOutputWithContext(context.Context) RuleGroupForwardedIpConfigurationPtrOutput
}

RuleGroupForwardedIpConfigurationPtrInput is an input type that accepts RuleGroupForwardedIpConfigurationArgs, RuleGroupForwardedIpConfigurationPtr and RuleGroupForwardedIpConfigurationPtrOutput values. You can construct a concrete instance of `RuleGroupForwardedIpConfigurationPtrInput` via:

        RuleGroupForwardedIpConfigurationArgs{...}

or:

        nil

type RuleGroupForwardedIpConfigurationPtrOutput added in v0.72.0

type RuleGroupForwardedIpConfigurationPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupForwardedIpConfigurationPtrOutput) Elem added in v0.72.0

func (RuleGroupForwardedIpConfigurationPtrOutput) ElementType added in v0.72.0

func (RuleGroupForwardedIpConfigurationPtrOutput) FallbackBehavior added in v0.72.0

The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

You can specify the following fallback behaviors:

- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (RuleGroupForwardedIpConfigurationPtrOutput) HeaderName added in v0.72.0

The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

func (RuleGroupForwardedIpConfigurationPtrOutput) ToRuleGroupForwardedIpConfigurationPtrOutput added in v0.72.0

func (o RuleGroupForwardedIpConfigurationPtrOutput) ToRuleGroupForwardedIpConfigurationPtrOutput() RuleGroupForwardedIpConfigurationPtrOutput

func (RuleGroupForwardedIpConfigurationPtrOutput) ToRuleGroupForwardedIpConfigurationPtrOutputWithContext added in v0.72.0

func (o RuleGroupForwardedIpConfigurationPtrOutput) ToRuleGroupForwardedIpConfigurationPtrOutputWithContext(ctx context.Context) RuleGroupForwardedIpConfigurationPtrOutput

type RuleGroupGeoMatchStatement

type RuleGroupGeoMatchStatement struct {
	// An array of two-character country codes that you want to match against, for example, `[ "US", "CN" ]` , from the alpha-2 country ISO codes of the ISO 3166 international standard.
	//
	// When you use a geo match statement just for the region and country labels that it adds to requests, you still have to supply a country code for the rule to evaluate. In this case, you configure the rule to only count matching requests, but it will still generate logging and count metrics for any matches. You can reduce the logging and metrics that the rule produces by specifying a country that's unlikely to be a source of traffic to your site.
	CountryCodes []string `pulumi:"countryCodes"`
	// The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	ForwardedIpConfig *RuleGroupForwardedIpConfiguration `pulumi:"forwardedIpConfig"`
}

type RuleGroupGeoMatchStatementArgs

type RuleGroupGeoMatchStatementArgs struct {
	// An array of two-character country codes that you want to match against, for example, `[ "US", "CN" ]` , from the alpha-2 country ISO codes of the ISO 3166 international standard.
	//
	// When you use a geo match statement just for the region and country labels that it adds to requests, you still have to supply a country code for the rule to evaluate. In this case, you configure the rule to only count matching requests, but it will still generate logging and count metrics for any matches. You can reduce the logging and metrics that the rule produces by specifying a country that's unlikely to be a source of traffic to your site.
	CountryCodes pulumi.StringArrayInput `pulumi:"countryCodes"`
	// The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	ForwardedIpConfig RuleGroupForwardedIpConfigurationPtrInput `pulumi:"forwardedIpConfig"`
}

func (RuleGroupGeoMatchStatementArgs) ElementType

func (RuleGroupGeoMatchStatementArgs) ToRuleGroupGeoMatchStatementOutput

func (i RuleGroupGeoMatchStatementArgs) ToRuleGroupGeoMatchStatementOutput() RuleGroupGeoMatchStatementOutput

func (RuleGroupGeoMatchStatementArgs) ToRuleGroupGeoMatchStatementOutputWithContext

func (i RuleGroupGeoMatchStatementArgs) ToRuleGroupGeoMatchStatementOutputWithContext(ctx context.Context) RuleGroupGeoMatchStatementOutput

func (RuleGroupGeoMatchStatementArgs) ToRuleGroupGeoMatchStatementPtrOutput

func (i RuleGroupGeoMatchStatementArgs) ToRuleGroupGeoMatchStatementPtrOutput() RuleGroupGeoMatchStatementPtrOutput

func (RuleGroupGeoMatchStatementArgs) ToRuleGroupGeoMatchStatementPtrOutputWithContext

func (i RuleGroupGeoMatchStatementArgs) ToRuleGroupGeoMatchStatementPtrOutputWithContext(ctx context.Context) RuleGroupGeoMatchStatementPtrOutput

type RuleGroupGeoMatchStatementInput

type RuleGroupGeoMatchStatementInput interface {
	pulumi.Input

	ToRuleGroupGeoMatchStatementOutput() RuleGroupGeoMatchStatementOutput
	ToRuleGroupGeoMatchStatementOutputWithContext(context.Context) RuleGroupGeoMatchStatementOutput
}

RuleGroupGeoMatchStatementInput is an input type that accepts RuleGroupGeoMatchStatementArgs and RuleGroupGeoMatchStatementOutput values. You can construct a concrete instance of `RuleGroupGeoMatchStatementInput` via:

RuleGroupGeoMatchStatementArgs{...}

type RuleGroupGeoMatchStatementOutput

type RuleGroupGeoMatchStatementOutput struct{ *pulumi.OutputState }

func (RuleGroupGeoMatchStatementOutput) CountryCodes

An array of two-character country codes that you want to match against, for example, `[ "US", "CN" ]` , from the alpha-2 country ISO codes of the ISO 3166 international standard.

When you use a geo match statement just for the region and country labels that it adds to requests, you still have to supply a country code for the rule to evaluate. In this case, you configure the rule to only count matching requests, but it will still generate logging and count metrics for any matches. You can reduce the logging and metrics that the rule produces by specifying a country that's unlikely to be a source of traffic to your site.

func (RuleGroupGeoMatchStatementOutput) ElementType

func (RuleGroupGeoMatchStatementOutput) ForwardedIpConfig added in v0.72.0

The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

func (RuleGroupGeoMatchStatementOutput) ToRuleGroupGeoMatchStatementOutput

func (o RuleGroupGeoMatchStatementOutput) ToRuleGroupGeoMatchStatementOutput() RuleGroupGeoMatchStatementOutput

func (RuleGroupGeoMatchStatementOutput) ToRuleGroupGeoMatchStatementOutputWithContext

func (o RuleGroupGeoMatchStatementOutput) ToRuleGroupGeoMatchStatementOutputWithContext(ctx context.Context) RuleGroupGeoMatchStatementOutput

func (RuleGroupGeoMatchStatementOutput) ToRuleGroupGeoMatchStatementPtrOutput

func (o RuleGroupGeoMatchStatementOutput) ToRuleGroupGeoMatchStatementPtrOutput() RuleGroupGeoMatchStatementPtrOutput

func (RuleGroupGeoMatchStatementOutput) ToRuleGroupGeoMatchStatementPtrOutputWithContext

func (o RuleGroupGeoMatchStatementOutput) ToRuleGroupGeoMatchStatementPtrOutputWithContext(ctx context.Context) RuleGroupGeoMatchStatementPtrOutput

type RuleGroupGeoMatchStatementPtrInput

type RuleGroupGeoMatchStatementPtrInput interface {
	pulumi.Input

	ToRuleGroupGeoMatchStatementPtrOutput() RuleGroupGeoMatchStatementPtrOutput
	ToRuleGroupGeoMatchStatementPtrOutputWithContext(context.Context) RuleGroupGeoMatchStatementPtrOutput
}

RuleGroupGeoMatchStatementPtrInput is an input type that accepts RuleGroupGeoMatchStatementArgs, RuleGroupGeoMatchStatementPtr and RuleGroupGeoMatchStatementPtrOutput values. You can construct a concrete instance of `RuleGroupGeoMatchStatementPtrInput` via:

        RuleGroupGeoMatchStatementArgs{...}

or:

        nil

type RuleGroupGeoMatchStatementPtrOutput

type RuleGroupGeoMatchStatementPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupGeoMatchStatementPtrOutput) CountryCodes

An array of two-character country codes that you want to match against, for example, `[ "US", "CN" ]` , from the alpha-2 country ISO codes of the ISO 3166 international standard.

When you use a geo match statement just for the region and country labels that it adds to requests, you still have to supply a country code for the rule to evaluate. In this case, you configure the rule to only count matching requests, but it will still generate logging and count metrics for any matches. You can reduce the logging and metrics that the rule produces by specifying a country that's unlikely to be a source of traffic to your site.

func (RuleGroupGeoMatchStatementPtrOutput) Elem

func (RuleGroupGeoMatchStatementPtrOutput) ElementType

func (RuleGroupGeoMatchStatementPtrOutput) ForwardedIpConfig added in v0.72.0

The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

func (RuleGroupGeoMatchStatementPtrOutput) ToRuleGroupGeoMatchStatementPtrOutput

func (o RuleGroupGeoMatchStatementPtrOutput) ToRuleGroupGeoMatchStatementPtrOutput() RuleGroupGeoMatchStatementPtrOutput

func (RuleGroupGeoMatchStatementPtrOutput) ToRuleGroupGeoMatchStatementPtrOutputWithContext

func (o RuleGroupGeoMatchStatementPtrOutput) ToRuleGroupGeoMatchStatementPtrOutputWithContext(ctx context.Context) RuleGroupGeoMatchStatementPtrOutput

type RuleGroupHeaderMatchPattern added in v0.17.0

type RuleGroupHeaderMatchPattern struct {
	// Inspect all parts of the web request headers.
	All interface{} `pulumi:"all"`
	// Inspect only the headers whose keys don't match any of the strings specified here.
	ExcludedHeaders []string `pulumi:"excludedHeaders"`
	// Inspect only the headers that have a key that matches one of the strings specified here.
	IncludedHeaders []string `pulumi:"includedHeaders"`
}

The pattern to look for in the request headers.

type RuleGroupHeaderMatchPatternArgs added in v0.17.0

type RuleGroupHeaderMatchPatternArgs struct {
	// Inspect all parts of the web request headers.
	All pulumi.Input `pulumi:"all"`
	// Inspect only the headers whose keys don't match any of the strings specified here.
	ExcludedHeaders pulumi.StringArrayInput `pulumi:"excludedHeaders"`
	// Inspect only the headers that have a key that matches one of the strings specified here.
	IncludedHeaders pulumi.StringArrayInput `pulumi:"includedHeaders"`
}

The pattern to look for in the request headers.

func (RuleGroupHeaderMatchPatternArgs) ElementType added in v0.17.0

func (RuleGroupHeaderMatchPatternArgs) ToRuleGroupHeaderMatchPatternOutput added in v0.17.0

func (i RuleGroupHeaderMatchPatternArgs) ToRuleGroupHeaderMatchPatternOutput() RuleGroupHeaderMatchPatternOutput

func (RuleGroupHeaderMatchPatternArgs) ToRuleGroupHeaderMatchPatternOutputWithContext added in v0.17.0

func (i RuleGroupHeaderMatchPatternArgs) ToRuleGroupHeaderMatchPatternOutputWithContext(ctx context.Context) RuleGroupHeaderMatchPatternOutput

func (RuleGroupHeaderMatchPatternArgs) ToRuleGroupHeaderMatchPatternPtrOutput added in v0.17.0

func (i RuleGroupHeaderMatchPatternArgs) ToRuleGroupHeaderMatchPatternPtrOutput() RuleGroupHeaderMatchPatternPtrOutput

func (RuleGroupHeaderMatchPatternArgs) ToRuleGroupHeaderMatchPatternPtrOutputWithContext added in v0.17.0

func (i RuleGroupHeaderMatchPatternArgs) ToRuleGroupHeaderMatchPatternPtrOutputWithContext(ctx context.Context) RuleGroupHeaderMatchPatternPtrOutput

type RuleGroupHeaderMatchPatternInput added in v0.17.0

type RuleGroupHeaderMatchPatternInput interface {
	pulumi.Input

	ToRuleGroupHeaderMatchPatternOutput() RuleGroupHeaderMatchPatternOutput
	ToRuleGroupHeaderMatchPatternOutputWithContext(context.Context) RuleGroupHeaderMatchPatternOutput
}

RuleGroupHeaderMatchPatternInput is an input type that accepts RuleGroupHeaderMatchPatternArgs and RuleGroupHeaderMatchPatternOutput values. You can construct a concrete instance of `RuleGroupHeaderMatchPatternInput` via:

RuleGroupHeaderMatchPatternArgs{...}

type RuleGroupHeaderMatchPatternOutput added in v0.17.0

type RuleGroupHeaderMatchPatternOutput struct{ *pulumi.OutputState }

The pattern to look for in the request headers.

func (RuleGroupHeaderMatchPatternOutput) All added in v0.17.0

Inspect all parts of the web request headers.

func (RuleGroupHeaderMatchPatternOutput) ElementType added in v0.17.0

func (RuleGroupHeaderMatchPatternOutput) ExcludedHeaders added in v0.17.0

Inspect only the headers whose keys don't match any of the strings specified here.

func (RuleGroupHeaderMatchPatternOutput) IncludedHeaders added in v0.17.0

Inspect only the headers that have a key that matches one of the strings specified here.

func (RuleGroupHeaderMatchPatternOutput) ToRuleGroupHeaderMatchPatternOutput added in v0.17.0

func (o RuleGroupHeaderMatchPatternOutput) ToRuleGroupHeaderMatchPatternOutput() RuleGroupHeaderMatchPatternOutput

func (RuleGroupHeaderMatchPatternOutput) ToRuleGroupHeaderMatchPatternOutputWithContext added in v0.17.0

func (o RuleGroupHeaderMatchPatternOutput) ToRuleGroupHeaderMatchPatternOutputWithContext(ctx context.Context) RuleGroupHeaderMatchPatternOutput

func (RuleGroupHeaderMatchPatternOutput) ToRuleGroupHeaderMatchPatternPtrOutput added in v0.17.0

func (o RuleGroupHeaderMatchPatternOutput) ToRuleGroupHeaderMatchPatternPtrOutput() RuleGroupHeaderMatchPatternPtrOutput

func (RuleGroupHeaderMatchPatternOutput) ToRuleGroupHeaderMatchPatternPtrOutputWithContext added in v0.17.0

func (o RuleGroupHeaderMatchPatternOutput) ToRuleGroupHeaderMatchPatternPtrOutputWithContext(ctx context.Context) RuleGroupHeaderMatchPatternPtrOutput

type RuleGroupHeaderMatchPatternPtrInput added in v0.17.0

type RuleGroupHeaderMatchPatternPtrInput interface {
	pulumi.Input

	ToRuleGroupHeaderMatchPatternPtrOutput() RuleGroupHeaderMatchPatternPtrOutput
	ToRuleGroupHeaderMatchPatternPtrOutputWithContext(context.Context) RuleGroupHeaderMatchPatternPtrOutput
}

RuleGroupHeaderMatchPatternPtrInput is an input type that accepts RuleGroupHeaderMatchPatternArgs, RuleGroupHeaderMatchPatternPtr and RuleGroupHeaderMatchPatternPtrOutput values. You can construct a concrete instance of `RuleGroupHeaderMatchPatternPtrInput` via:

        RuleGroupHeaderMatchPatternArgs{...}

or:

        nil

func RuleGroupHeaderMatchPatternPtr added in v0.17.0

type RuleGroupHeaderMatchPatternPtrOutput added in v0.17.0

type RuleGroupHeaderMatchPatternPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupHeaderMatchPatternPtrOutput) All added in v0.17.0

Inspect all parts of the web request headers.

func (RuleGroupHeaderMatchPatternPtrOutput) Elem added in v0.17.0

func (RuleGroupHeaderMatchPatternPtrOutput) ElementType added in v0.17.0

func (RuleGroupHeaderMatchPatternPtrOutput) ExcludedHeaders added in v0.17.0

Inspect only the headers whose keys don't match any of the strings specified here.

func (RuleGroupHeaderMatchPatternPtrOutput) IncludedHeaders added in v0.17.0

Inspect only the headers that have a key that matches one of the strings specified here.

func (RuleGroupHeaderMatchPatternPtrOutput) ToRuleGroupHeaderMatchPatternPtrOutput added in v0.17.0

func (o RuleGroupHeaderMatchPatternPtrOutput) ToRuleGroupHeaderMatchPatternPtrOutput() RuleGroupHeaderMatchPatternPtrOutput

func (RuleGroupHeaderMatchPatternPtrOutput) ToRuleGroupHeaderMatchPatternPtrOutputWithContext added in v0.17.0

func (o RuleGroupHeaderMatchPatternPtrOutput) ToRuleGroupHeaderMatchPatternPtrOutputWithContext(ctx context.Context) RuleGroupHeaderMatchPatternPtrOutput

type RuleGroupHeaders added in v0.17.0

type RuleGroupHeaders struct {
	// The filter to use to identify the subset of headers to inspect in a web request.
	//
	// You must specify exactly one setting: either `All` , `IncludedHeaders` , or `ExcludedHeaders` .
	//
	// Example JSON: `"MatchPattern": { "ExcludedHeaders": [ "KeyToExclude1", "KeyToExclude2" ] }`
	MatchPattern RuleGroupHeaderMatchPattern `pulumi:"matchPattern"`
	// The parts of the headers to match with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.
	//
	// `All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.
	MatchScope RuleGroupMapMatchScope `pulumi:"matchScope"`
	// What AWS WAF should do if the headers of the request are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request headers when they exceed 8 KB (8192 bytes) or 200 total headers. The underlying host service forwards a maximum of 200 headers and at most 8 KB of header contents to AWS WAF .
	//
	// The options for oversize handling are the following:
	//
	// - `CONTINUE` - Inspect the available headers normally, according to the rule inspection criteria.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	OversizeHandling RuleGroupOversizeHandling `pulumi:"oversizeHandling"`
}

Includes headers of a web request.

type RuleGroupHeadersArgs added in v0.17.0

type RuleGroupHeadersArgs struct {
	// The filter to use to identify the subset of headers to inspect in a web request.
	//
	// You must specify exactly one setting: either `All` , `IncludedHeaders` , or `ExcludedHeaders` .
	//
	// Example JSON: `"MatchPattern": { "ExcludedHeaders": [ "KeyToExclude1", "KeyToExclude2" ] }`
	MatchPattern RuleGroupHeaderMatchPatternInput `pulumi:"matchPattern"`
	// The parts of the headers to match with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.
	//
	// `All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.
	MatchScope RuleGroupMapMatchScopeInput `pulumi:"matchScope"`
	// What AWS WAF should do if the headers of the request are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request headers when they exceed 8 KB (8192 bytes) or 200 total headers. The underlying host service forwards a maximum of 200 headers and at most 8 KB of header contents to AWS WAF .
	//
	// The options for oversize handling are the following:
	//
	// - `CONTINUE` - Inspect the available headers normally, according to the rule inspection criteria.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	OversizeHandling RuleGroupOversizeHandlingInput `pulumi:"oversizeHandling"`
}

Includes headers of a web request.

func (RuleGroupHeadersArgs) ElementType added in v0.17.0

func (RuleGroupHeadersArgs) ElementType() reflect.Type

func (RuleGroupHeadersArgs) ToRuleGroupHeadersOutput added in v0.17.0

func (i RuleGroupHeadersArgs) ToRuleGroupHeadersOutput() RuleGroupHeadersOutput

func (RuleGroupHeadersArgs) ToRuleGroupHeadersOutputWithContext added in v0.17.0

func (i RuleGroupHeadersArgs) ToRuleGroupHeadersOutputWithContext(ctx context.Context) RuleGroupHeadersOutput

func (RuleGroupHeadersArgs) ToRuleGroupHeadersPtrOutput added in v0.17.0

func (i RuleGroupHeadersArgs) ToRuleGroupHeadersPtrOutput() RuleGroupHeadersPtrOutput

func (RuleGroupHeadersArgs) ToRuleGroupHeadersPtrOutputWithContext added in v0.17.0

func (i RuleGroupHeadersArgs) ToRuleGroupHeadersPtrOutputWithContext(ctx context.Context) RuleGroupHeadersPtrOutput

type RuleGroupHeadersInput added in v0.17.0

type RuleGroupHeadersInput interface {
	pulumi.Input

	ToRuleGroupHeadersOutput() RuleGroupHeadersOutput
	ToRuleGroupHeadersOutputWithContext(context.Context) RuleGroupHeadersOutput
}

RuleGroupHeadersInput is an input type that accepts RuleGroupHeadersArgs and RuleGroupHeadersOutput values. You can construct a concrete instance of `RuleGroupHeadersInput` via:

RuleGroupHeadersArgs{...}

type RuleGroupHeadersOutput added in v0.17.0

type RuleGroupHeadersOutput struct{ *pulumi.OutputState }

Includes headers of a web request.

func (RuleGroupHeadersOutput) ElementType added in v0.17.0

func (RuleGroupHeadersOutput) ElementType() reflect.Type

func (RuleGroupHeadersOutput) MatchPattern added in v0.17.0

The filter to use to identify the subset of headers to inspect in a web request.

You must specify exactly one setting: either `All` , `IncludedHeaders` , or `ExcludedHeaders` .

Example JSON: `"MatchPattern": { "ExcludedHeaders": [ "KeyToExclude1", "KeyToExclude2" ] }`

func (RuleGroupHeadersOutput) MatchScope added in v0.17.0

The parts of the headers to match with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.

`All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.

func (RuleGroupHeadersOutput) OversizeHandling added in v0.17.0

What AWS WAF should do if the headers of the request are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request headers when they exceed 8 KB (8192 bytes) or 200 total headers. The underlying host service forwards a maximum of 200 headers and at most 8 KB of header contents to AWS WAF .

The options for oversize handling are the following:

- `CONTINUE` - Inspect the available headers normally, according to the rule inspection criteria. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (RuleGroupHeadersOutput) ToRuleGroupHeadersOutput added in v0.17.0

func (o RuleGroupHeadersOutput) ToRuleGroupHeadersOutput() RuleGroupHeadersOutput

func (RuleGroupHeadersOutput) ToRuleGroupHeadersOutputWithContext added in v0.17.0

func (o RuleGroupHeadersOutput) ToRuleGroupHeadersOutputWithContext(ctx context.Context) RuleGroupHeadersOutput

func (RuleGroupHeadersOutput) ToRuleGroupHeadersPtrOutput added in v0.17.0

func (o RuleGroupHeadersOutput) ToRuleGroupHeadersPtrOutput() RuleGroupHeadersPtrOutput

func (RuleGroupHeadersOutput) ToRuleGroupHeadersPtrOutputWithContext added in v0.17.0

func (o RuleGroupHeadersOutput) ToRuleGroupHeadersPtrOutputWithContext(ctx context.Context) RuleGroupHeadersPtrOutput

type RuleGroupHeadersPtrInput added in v0.17.0

type RuleGroupHeadersPtrInput interface {
	pulumi.Input

	ToRuleGroupHeadersPtrOutput() RuleGroupHeadersPtrOutput
	ToRuleGroupHeadersPtrOutputWithContext(context.Context) RuleGroupHeadersPtrOutput
}

RuleGroupHeadersPtrInput is an input type that accepts RuleGroupHeadersArgs, RuleGroupHeadersPtr and RuleGroupHeadersPtrOutput values. You can construct a concrete instance of `RuleGroupHeadersPtrInput` via:

        RuleGroupHeadersArgs{...}

or:

        nil

func RuleGroupHeadersPtr added in v0.17.0

func RuleGroupHeadersPtr(v *RuleGroupHeadersArgs) RuleGroupHeadersPtrInput

type RuleGroupHeadersPtrOutput added in v0.17.0

type RuleGroupHeadersPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupHeadersPtrOutput) Elem added in v0.17.0

func (RuleGroupHeadersPtrOutput) ElementType added in v0.17.0

func (RuleGroupHeadersPtrOutput) ElementType() reflect.Type

func (RuleGroupHeadersPtrOutput) MatchPattern added in v0.17.0

The filter to use to identify the subset of headers to inspect in a web request.

You must specify exactly one setting: either `All` , `IncludedHeaders` , or `ExcludedHeaders` .

Example JSON: `"MatchPattern": { "ExcludedHeaders": [ "KeyToExclude1", "KeyToExclude2" ] }`

func (RuleGroupHeadersPtrOutput) MatchScope added in v0.17.0

The parts of the headers to match with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.

`All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.

func (RuleGroupHeadersPtrOutput) OversizeHandling added in v0.17.0

What AWS WAF should do if the headers of the request are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request headers when they exceed 8 KB (8192 bytes) or 200 total headers. The underlying host service forwards a maximum of 200 headers and at most 8 KB of header contents to AWS WAF .

The options for oversize handling are the following:

- `CONTINUE` - Inspect the available headers normally, according to the rule inspection criteria. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (RuleGroupHeadersPtrOutput) ToRuleGroupHeadersPtrOutput added in v0.17.0

func (o RuleGroupHeadersPtrOutput) ToRuleGroupHeadersPtrOutput() RuleGroupHeadersPtrOutput

func (RuleGroupHeadersPtrOutput) ToRuleGroupHeadersPtrOutputWithContext added in v0.17.0

func (o RuleGroupHeadersPtrOutput) ToRuleGroupHeadersPtrOutputWithContext(ctx context.Context) RuleGroupHeadersPtrOutput

type RuleGroupImmunityTimeProperty added in v0.9.0

type RuleGroupImmunityTimeProperty struct {
	// The amount of time, in seconds, that a `CAPTCHA` or challenge timestamp is considered valid by AWS WAF . The default setting is 300.
	//
	// For the Challenge action, the minimum setting is 300.
	ImmunityTime int `pulumi:"immunityTime"`
}

type RuleGroupImmunityTimePropertyArgs added in v0.9.0

type RuleGroupImmunityTimePropertyArgs struct {
	// The amount of time, in seconds, that a `CAPTCHA` or challenge timestamp is considered valid by AWS WAF . The default setting is 300.
	//
	// For the Challenge action, the minimum setting is 300.
	ImmunityTime pulumi.IntInput `pulumi:"immunityTime"`
}

func (RuleGroupImmunityTimePropertyArgs) ElementType added in v0.9.0

func (RuleGroupImmunityTimePropertyArgs) ToRuleGroupImmunityTimePropertyOutput added in v0.9.0

func (i RuleGroupImmunityTimePropertyArgs) ToRuleGroupImmunityTimePropertyOutput() RuleGroupImmunityTimePropertyOutput

func (RuleGroupImmunityTimePropertyArgs) ToRuleGroupImmunityTimePropertyOutputWithContext added in v0.9.0

func (i RuleGroupImmunityTimePropertyArgs) ToRuleGroupImmunityTimePropertyOutputWithContext(ctx context.Context) RuleGroupImmunityTimePropertyOutput

func (RuleGroupImmunityTimePropertyArgs) ToRuleGroupImmunityTimePropertyPtrOutput added in v0.9.0

func (i RuleGroupImmunityTimePropertyArgs) ToRuleGroupImmunityTimePropertyPtrOutput() RuleGroupImmunityTimePropertyPtrOutput

func (RuleGroupImmunityTimePropertyArgs) ToRuleGroupImmunityTimePropertyPtrOutputWithContext added in v0.9.0

func (i RuleGroupImmunityTimePropertyArgs) ToRuleGroupImmunityTimePropertyPtrOutputWithContext(ctx context.Context) RuleGroupImmunityTimePropertyPtrOutput

type RuleGroupImmunityTimePropertyInput added in v0.9.0

type RuleGroupImmunityTimePropertyInput interface {
	pulumi.Input

	ToRuleGroupImmunityTimePropertyOutput() RuleGroupImmunityTimePropertyOutput
	ToRuleGroupImmunityTimePropertyOutputWithContext(context.Context) RuleGroupImmunityTimePropertyOutput
}

RuleGroupImmunityTimePropertyInput is an input type that accepts RuleGroupImmunityTimePropertyArgs and RuleGroupImmunityTimePropertyOutput values. You can construct a concrete instance of `RuleGroupImmunityTimePropertyInput` via:

RuleGroupImmunityTimePropertyArgs{...}

type RuleGroupImmunityTimePropertyOutput added in v0.9.0

type RuleGroupImmunityTimePropertyOutput struct{ *pulumi.OutputState }

func (RuleGroupImmunityTimePropertyOutput) ElementType added in v0.9.0

func (RuleGroupImmunityTimePropertyOutput) ImmunityTime added in v0.9.0

The amount of time, in seconds, that a `CAPTCHA` or challenge timestamp is considered valid by AWS WAF . The default setting is 300.

For the Challenge action, the minimum setting is 300.

func (RuleGroupImmunityTimePropertyOutput) ToRuleGroupImmunityTimePropertyOutput added in v0.9.0

func (o RuleGroupImmunityTimePropertyOutput) ToRuleGroupImmunityTimePropertyOutput() RuleGroupImmunityTimePropertyOutput

func (RuleGroupImmunityTimePropertyOutput) ToRuleGroupImmunityTimePropertyOutputWithContext added in v0.9.0

func (o RuleGroupImmunityTimePropertyOutput) ToRuleGroupImmunityTimePropertyOutputWithContext(ctx context.Context) RuleGroupImmunityTimePropertyOutput

func (RuleGroupImmunityTimePropertyOutput) ToRuleGroupImmunityTimePropertyPtrOutput added in v0.9.0

func (o RuleGroupImmunityTimePropertyOutput) ToRuleGroupImmunityTimePropertyPtrOutput() RuleGroupImmunityTimePropertyPtrOutput

func (RuleGroupImmunityTimePropertyOutput) ToRuleGroupImmunityTimePropertyPtrOutputWithContext added in v0.9.0

func (o RuleGroupImmunityTimePropertyOutput) ToRuleGroupImmunityTimePropertyPtrOutputWithContext(ctx context.Context) RuleGroupImmunityTimePropertyPtrOutput

type RuleGroupImmunityTimePropertyPtrInput added in v0.9.0

type RuleGroupImmunityTimePropertyPtrInput interface {
	pulumi.Input

	ToRuleGroupImmunityTimePropertyPtrOutput() RuleGroupImmunityTimePropertyPtrOutput
	ToRuleGroupImmunityTimePropertyPtrOutputWithContext(context.Context) RuleGroupImmunityTimePropertyPtrOutput
}

RuleGroupImmunityTimePropertyPtrInput is an input type that accepts RuleGroupImmunityTimePropertyArgs, RuleGroupImmunityTimePropertyPtr and RuleGroupImmunityTimePropertyPtrOutput values. You can construct a concrete instance of `RuleGroupImmunityTimePropertyPtrInput` via:

        RuleGroupImmunityTimePropertyArgs{...}

or:

        nil

type RuleGroupImmunityTimePropertyPtrOutput added in v0.9.0

type RuleGroupImmunityTimePropertyPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupImmunityTimePropertyPtrOutput) Elem added in v0.9.0

func (RuleGroupImmunityTimePropertyPtrOutput) ElementType added in v0.9.0

func (RuleGroupImmunityTimePropertyPtrOutput) ImmunityTime added in v0.9.0

The amount of time, in seconds, that a `CAPTCHA` or challenge timestamp is considered valid by AWS WAF . The default setting is 300.

For the Challenge action, the minimum setting is 300.

func (RuleGroupImmunityTimePropertyPtrOutput) ToRuleGroupImmunityTimePropertyPtrOutput added in v0.9.0

func (o RuleGroupImmunityTimePropertyPtrOutput) ToRuleGroupImmunityTimePropertyPtrOutput() RuleGroupImmunityTimePropertyPtrOutput

func (RuleGroupImmunityTimePropertyPtrOutput) ToRuleGroupImmunityTimePropertyPtrOutputWithContext added in v0.9.0

func (o RuleGroupImmunityTimePropertyPtrOutput) ToRuleGroupImmunityTimePropertyPtrOutputWithContext(ctx context.Context) RuleGroupImmunityTimePropertyPtrOutput

type RuleGroupInput

type RuleGroupInput interface {
	pulumi.Input

	ToRuleGroupOutput() RuleGroupOutput
	ToRuleGroupOutputWithContext(ctx context.Context) RuleGroupOutput
}

type RuleGroupIpSetForwardedIpConfiguration added in v0.72.0

type RuleGroupIpSetForwardedIpConfiguration struct {
	// The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	//
	// You can specify the following fallback behaviors:
	//
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	FallbackBehavior RuleGroupIpSetForwardedIpConfigurationFallbackBehavior `pulumi:"fallbackBehavior"`
	// The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	HeaderName string `pulumi:"headerName"`
	// The position in the header to search for the IP address. The header can contain IP addresses of the original client and also of proxies. For example, the header value could be `10.1.1.1, 127.0.0.0, 10.10.10.10` where the first IP address identifies the original client and the rest identify proxies that the request went through.
	//
	// The options for this setting are the following:
	//
	// - FIRST - Inspect the first IP address in the list of IP addresses in the header. This is usually the client's original IP.
	// - LAST - Inspect the last IP address in the list of IP addresses in the header.
	// - ANY - Inspect all IP addresses in the header for a match. If the header contains more than 10 IP addresses, AWS WAF inspects the last 10.
	Position RuleGroupIpSetForwardedIpConfigurationPosition `pulumi:"position"`
}

type RuleGroupIpSetForwardedIpConfigurationArgs added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationArgs struct {
	// The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	//
	// You can specify the following fallback behaviors:
	//
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	FallbackBehavior RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorInput `pulumi:"fallbackBehavior"`
	// The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	HeaderName pulumi.StringInput `pulumi:"headerName"`
	// The position in the header to search for the IP address. The header can contain IP addresses of the original client and also of proxies. For example, the header value could be `10.1.1.1, 127.0.0.0, 10.10.10.10` where the first IP address identifies the original client and the rest identify proxies that the request went through.
	//
	// The options for this setting are the following:
	//
	// - FIRST - Inspect the first IP address in the list of IP addresses in the header. This is usually the client's original IP.
	// - LAST - Inspect the last IP address in the list of IP addresses in the header.
	// - ANY - Inspect all IP addresses in the header for a match. If the header contains more than 10 IP addresses, AWS WAF inspects the last 10.
	Position RuleGroupIpSetForwardedIpConfigurationPositionInput `pulumi:"position"`
}

func (RuleGroupIpSetForwardedIpConfigurationArgs) ElementType added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationArgs) ToRuleGroupIpSetForwardedIpConfigurationOutput added in v0.72.0

func (i RuleGroupIpSetForwardedIpConfigurationArgs) ToRuleGroupIpSetForwardedIpConfigurationOutput() RuleGroupIpSetForwardedIpConfigurationOutput

func (RuleGroupIpSetForwardedIpConfigurationArgs) ToRuleGroupIpSetForwardedIpConfigurationOutputWithContext added in v0.72.0

func (i RuleGroupIpSetForwardedIpConfigurationArgs) ToRuleGroupIpSetForwardedIpConfigurationOutputWithContext(ctx context.Context) RuleGroupIpSetForwardedIpConfigurationOutput

func (RuleGroupIpSetForwardedIpConfigurationArgs) ToRuleGroupIpSetForwardedIpConfigurationPtrOutput added in v0.72.0

func (i RuleGroupIpSetForwardedIpConfigurationArgs) ToRuleGroupIpSetForwardedIpConfigurationPtrOutput() RuleGroupIpSetForwardedIpConfigurationPtrOutput

func (RuleGroupIpSetForwardedIpConfigurationArgs) ToRuleGroupIpSetForwardedIpConfigurationPtrOutputWithContext added in v0.72.0

func (i RuleGroupIpSetForwardedIpConfigurationArgs) ToRuleGroupIpSetForwardedIpConfigurationPtrOutputWithContext(ctx context.Context) RuleGroupIpSetForwardedIpConfigurationPtrOutput

type RuleGroupIpSetForwardedIpConfigurationFallbackBehavior added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationFallbackBehavior string

The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

You can specify the following fallback behaviors:

- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehavior) ElementType added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehavior) ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput added in v0.72.0

func (e RuleGroupIpSetForwardedIpConfigurationFallbackBehavior) ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput() RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehavior) ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutputWithContext added in v0.72.0

func (e RuleGroupIpSetForwardedIpConfigurationFallbackBehavior) ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutputWithContext(ctx context.Context) RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehavior) ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput added in v0.72.0

func (e RuleGroupIpSetForwardedIpConfigurationFallbackBehavior) ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput() RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehavior) ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext added in v0.72.0

func (e RuleGroupIpSetForwardedIpConfigurationFallbackBehavior) ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext(ctx context.Context) RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehavior) ToStringOutput added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehavior) ToStringOutputWithContext added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehavior) ToStringPtrOutput added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehavior) ToStringPtrOutputWithContext added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorInput added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorInput interface {
	pulumi.Input

	ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput() RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput
	ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutputWithContext(context.Context) RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput
}

RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorInput is an input type that accepts values of the RuleGroupIpSetForwardedIpConfigurationFallbackBehavior enum A concrete instance of `RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorInput` can be one of the following:

RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorMatch
RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorNoMatch

type RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput struct{ *pulumi.OutputState }

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput) ElementType added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutputWithContext added in v0.72.0

func (o RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutputWithContext(ctx context.Context) RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext added in v0.72.0

func (o RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext(ctx context.Context) RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToStringOutput added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToStringOutputWithContext added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToStringPtrOutput added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToStringPtrOutputWithContext added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrInput added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrInput interface {
	pulumi.Input

	ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput() RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput
	ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext(context.Context) RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput
}

func RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtr added in v0.72.0

func RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtr(v string) RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrInput

type RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput) Elem added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput) ElementType added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput) ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput) ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext added in v0.72.0

func (o RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput) ToRuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext(ctx context.Context) RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput) ToStringPtrOutput added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput) ToStringPtrOutputWithContext added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationInput added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationInput interface {
	pulumi.Input

	ToRuleGroupIpSetForwardedIpConfigurationOutput() RuleGroupIpSetForwardedIpConfigurationOutput
	ToRuleGroupIpSetForwardedIpConfigurationOutputWithContext(context.Context) RuleGroupIpSetForwardedIpConfigurationOutput
}

RuleGroupIpSetForwardedIpConfigurationInput is an input type that accepts RuleGroupIpSetForwardedIpConfigurationArgs and RuleGroupIpSetForwardedIpConfigurationOutput values. You can construct a concrete instance of `RuleGroupIpSetForwardedIpConfigurationInput` via:

RuleGroupIpSetForwardedIpConfigurationArgs{...}

type RuleGroupIpSetForwardedIpConfigurationOutput added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationOutput struct{ *pulumi.OutputState }

func (RuleGroupIpSetForwardedIpConfigurationOutput) ElementType added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationOutput) FallbackBehavior added in v0.72.0

The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

You can specify the following fallback behaviors:

- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (RuleGroupIpSetForwardedIpConfigurationOutput) HeaderName added in v0.72.0

The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

func (RuleGroupIpSetForwardedIpConfigurationOutput) Position added in v0.72.0

The position in the header to search for the IP address. The header can contain IP addresses of the original client and also of proxies. For example, the header value could be `10.1.1.1, 127.0.0.0, 10.10.10.10` where the first IP address identifies the original client and the rest identify proxies that the request went through.

The options for this setting are the following:

- FIRST - Inspect the first IP address in the list of IP addresses in the header. This is usually the client's original IP. - LAST - Inspect the last IP address in the list of IP addresses in the header. - ANY - Inspect all IP addresses in the header for a match. If the header contains more than 10 IP addresses, AWS WAF inspects the last 10.

func (RuleGroupIpSetForwardedIpConfigurationOutput) ToRuleGroupIpSetForwardedIpConfigurationOutput added in v0.72.0

func (o RuleGroupIpSetForwardedIpConfigurationOutput) ToRuleGroupIpSetForwardedIpConfigurationOutput() RuleGroupIpSetForwardedIpConfigurationOutput

func (RuleGroupIpSetForwardedIpConfigurationOutput) ToRuleGroupIpSetForwardedIpConfigurationOutputWithContext added in v0.72.0

func (o RuleGroupIpSetForwardedIpConfigurationOutput) ToRuleGroupIpSetForwardedIpConfigurationOutputWithContext(ctx context.Context) RuleGroupIpSetForwardedIpConfigurationOutput

func (RuleGroupIpSetForwardedIpConfigurationOutput) ToRuleGroupIpSetForwardedIpConfigurationPtrOutput added in v0.72.0

func (o RuleGroupIpSetForwardedIpConfigurationOutput) ToRuleGroupIpSetForwardedIpConfigurationPtrOutput() RuleGroupIpSetForwardedIpConfigurationPtrOutput

func (RuleGroupIpSetForwardedIpConfigurationOutput) ToRuleGroupIpSetForwardedIpConfigurationPtrOutputWithContext added in v0.72.0

func (o RuleGroupIpSetForwardedIpConfigurationOutput) ToRuleGroupIpSetForwardedIpConfigurationPtrOutputWithContext(ctx context.Context) RuleGroupIpSetForwardedIpConfigurationPtrOutput

type RuleGroupIpSetForwardedIpConfigurationPosition added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationPosition string

The position in the header to search for the IP address. The header can contain IP addresses of the original client and also of proxies. For example, the header value could be `10.1.1.1, 127.0.0.0, 10.10.10.10` where the first IP address identifies the original client and the rest identify proxies that the request went through.

The options for this setting are the following:

- FIRST - Inspect the first IP address in the list of IP addresses in the header. This is usually the client's original IP. - LAST - Inspect the last IP address in the list of IP addresses in the header. - ANY - Inspect all IP addresses in the header for a match. If the header contains more than 10 IP addresses, AWS WAF inspects the last 10.

func (RuleGroupIpSetForwardedIpConfigurationPosition) ElementType added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationPosition) ToRuleGroupIpSetForwardedIpConfigurationPositionOutput added in v0.72.0

func (e RuleGroupIpSetForwardedIpConfigurationPosition) ToRuleGroupIpSetForwardedIpConfigurationPositionOutput() RuleGroupIpSetForwardedIpConfigurationPositionOutput

func (RuleGroupIpSetForwardedIpConfigurationPosition) ToRuleGroupIpSetForwardedIpConfigurationPositionOutputWithContext added in v0.72.0

func (e RuleGroupIpSetForwardedIpConfigurationPosition) ToRuleGroupIpSetForwardedIpConfigurationPositionOutputWithContext(ctx context.Context) RuleGroupIpSetForwardedIpConfigurationPositionOutput

func (RuleGroupIpSetForwardedIpConfigurationPosition) ToRuleGroupIpSetForwardedIpConfigurationPositionPtrOutput added in v0.72.0

func (e RuleGroupIpSetForwardedIpConfigurationPosition) ToRuleGroupIpSetForwardedIpConfigurationPositionPtrOutput() RuleGroupIpSetForwardedIpConfigurationPositionPtrOutput

func (RuleGroupIpSetForwardedIpConfigurationPosition) ToRuleGroupIpSetForwardedIpConfigurationPositionPtrOutputWithContext added in v0.72.0

func (e RuleGroupIpSetForwardedIpConfigurationPosition) ToRuleGroupIpSetForwardedIpConfigurationPositionPtrOutputWithContext(ctx context.Context) RuleGroupIpSetForwardedIpConfigurationPositionPtrOutput

func (RuleGroupIpSetForwardedIpConfigurationPosition) ToStringOutput added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationPosition) ToStringOutputWithContext added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationPosition) ToStringPtrOutput added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationPosition) ToStringPtrOutputWithContext added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationPositionInput added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationPositionInput interface {
	pulumi.Input

	ToRuleGroupIpSetForwardedIpConfigurationPositionOutput() RuleGroupIpSetForwardedIpConfigurationPositionOutput
	ToRuleGroupIpSetForwardedIpConfigurationPositionOutputWithContext(context.Context) RuleGroupIpSetForwardedIpConfigurationPositionOutput
}

RuleGroupIpSetForwardedIpConfigurationPositionInput is an input type that accepts values of the RuleGroupIpSetForwardedIpConfigurationPosition enum A concrete instance of `RuleGroupIpSetForwardedIpConfigurationPositionInput` can be one of the following:

RuleGroupIpSetForwardedIpConfigurationPositionFirst
RuleGroupIpSetForwardedIpConfigurationPositionLast
RuleGroupIpSetForwardedIpConfigurationPositionAny

type RuleGroupIpSetForwardedIpConfigurationPositionOutput added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationPositionOutput struct{ *pulumi.OutputState }

func (RuleGroupIpSetForwardedIpConfigurationPositionOutput) ElementType added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationPositionOutput) ToRuleGroupIpSetForwardedIpConfigurationPositionOutput added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationPositionOutput) ToRuleGroupIpSetForwardedIpConfigurationPositionOutputWithContext added in v0.72.0

func (o RuleGroupIpSetForwardedIpConfigurationPositionOutput) ToRuleGroupIpSetForwardedIpConfigurationPositionOutputWithContext(ctx context.Context) RuleGroupIpSetForwardedIpConfigurationPositionOutput

func (RuleGroupIpSetForwardedIpConfigurationPositionOutput) ToRuleGroupIpSetForwardedIpConfigurationPositionPtrOutput added in v0.72.0

func (o RuleGroupIpSetForwardedIpConfigurationPositionOutput) ToRuleGroupIpSetForwardedIpConfigurationPositionPtrOutput() RuleGroupIpSetForwardedIpConfigurationPositionPtrOutput

func (RuleGroupIpSetForwardedIpConfigurationPositionOutput) ToRuleGroupIpSetForwardedIpConfigurationPositionPtrOutputWithContext added in v0.72.0

func (o RuleGroupIpSetForwardedIpConfigurationPositionOutput) ToRuleGroupIpSetForwardedIpConfigurationPositionPtrOutputWithContext(ctx context.Context) RuleGroupIpSetForwardedIpConfigurationPositionPtrOutput

func (RuleGroupIpSetForwardedIpConfigurationPositionOutput) ToStringOutput added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationPositionOutput) ToStringOutputWithContext added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationPositionOutput) ToStringPtrOutput added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationPositionOutput) ToStringPtrOutputWithContext added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationPositionPtrInput added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationPositionPtrInput interface {
	pulumi.Input

	ToRuleGroupIpSetForwardedIpConfigurationPositionPtrOutput() RuleGroupIpSetForwardedIpConfigurationPositionPtrOutput
	ToRuleGroupIpSetForwardedIpConfigurationPositionPtrOutputWithContext(context.Context) RuleGroupIpSetForwardedIpConfigurationPositionPtrOutput
}

func RuleGroupIpSetForwardedIpConfigurationPositionPtr added in v0.72.0

func RuleGroupIpSetForwardedIpConfigurationPositionPtr(v string) RuleGroupIpSetForwardedIpConfigurationPositionPtrInput

type RuleGroupIpSetForwardedIpConfigurationPositionPtrOutput added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationPositionPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupIpSetForwardedIpConfigurationPositionPtrOutput) Elem added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationPositionPtrOutput) ElementType added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationPositionPtrOutput) ToRuleGroupIpSetForwardedIpConfigurationPositionPtrOutput added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationPositionPtrOutput) ToRuleGroupIpSetForwardedIpConfigurationPositionPtrOutputWithContext added in v0.72.0

func (o RuleGroupIpSetForwardedIpConfigurationPositionPtrOutput) ToRuleGroupIpSetForwardedIpConfigurationPositionPtrOutputWithContext(ctx context.Context) RuleGroupIpSetForwardedIpConfigurationPositionPtrOutput

func (RuleGroupIpSetForwardedIpConfigurationPositionPtrOutput) ToStringPtrOutput added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationPositionPtrOutput) ToStringPtrOutputWithContext added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationPtrInput added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationPtrInput interface {
	pulumi.Input

	ToRuleGroupIpSetForwardedIpConfigurationPtrOutput() RuleGroupIpSetForwardedIpConfigurationPtrOutput
	ToRuleGroupIpSetForwardedIpConfigurationPtrOutputWithContext(context.Context) RuleGroupIpSetForwardedIpConfigurationPtrOutput
}

RuleGroupIpSetForwardedIpConfigurationPtrInput is an input type that accepts RuleGroupIpSetForwardedIpConfigurationArgs, RuleGroupIpSetForwardedIpConfigurationPtr and RuleGroupIpSetForwardedIpConfigurationPtrOutput values. You can construct a concrete instance of `RuleGroupIpSetForwardedIpConfigurationPtrInput` via:

        RuleGroupIpSetForwardedIpConfigurationArgs{...}

or:

        nil

type RuleGroupIpSetForwardedIpConfigurationPtrOutput added in v0.72.0

type RuleGroupIpSetForwardedIpConfigurationPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupIpSetForwardedIpConfigurationPtrOutput) Elem added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationPtrOutput) ElementType added in v0.72.0

func (RuleGroupIpSetForwardedIpConfigurationPtrOutput) FallbackBehavior added in v0.72.0

The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

You can specify the following fallback behaviors:

- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (RuleGroupIpSetForwardedIpConfigurationPtrOutput) HeaderName added in v0.72.0

The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

func (RuleGroupIpSetForwardedIpConfigurationPtrOutput) Position added in v0.72.0

The position in the header to search for the IP address. The header can contain IP addresses of the original client and also of proxies. For example, the header value could be `10.1.1.1, 127.0.0.0, 10.10.10.10` where the first IP address identifies the original client and the rest identify proxies that the request went through.

The options for this setting are the following:

- FIRST - Inspect the first IP address in the list of IP addresses in the header. This is usually the client's original IP. - LAST - Inspect the last IP address in the list of IP addresses in the header. - ANY - Inspect all IP addresses in the header for a match. If the header contains more than 10 IP addresses, AWS WAF inspects the last 10.

func (RuleGroupIpSetForwardedIpConfigurationPtrOutput) ToRuleGroupIpSetForwardedIpConfigurationPtrOutput added in v0.72.0

func (o RuleGroupIpSetForwardedIpConfigurationPtrOutput) ToRuleGroupIpSetForwardedIpConfigurationPtrOutput() RuleGroupIpSetForwardedIpConfigurationPtrOutput

func (RuleGroupIpSetForwardedIpConfigurationPtrOutput) ToRuleGroupIpSetForwardedIpConfigurationPtrOutputWithContext added in v0.72.0

func (o RuleGroupIpSetForwardedIpConfigurationPtrOutput) ToRuleGroupIpSetForwardedIpConfigurationPtrOutputWithContext(ctx context.Context) RuleGroupIpSetForwardedIpConfigurationPtrOutput

type RuleGroupIpSetReferenceStatement added in v0.72.0

type RuleGroupIpSetReferenceStatement struct {
	// The Amazon Resource Name (ARN) of the `IPSet` that this statement references.
	Arn string `pulumi:"arn"`
	// The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	IpSetForwardedIpConfig *RuleGroupIpSetForwardedIpConfiguration `pulumi:"ipSetForwardedIpConfig"`
}

type RuleGroupIpSetReferenceStatementArgs added in v0.72.0

type RuleGroupIpSetReferenceStatementArgs struct {
	// The Amazon Resource Name (ARN) of the `IPSet` that this statement references.
	Arn pulumi.StringInput `pulumi:"arn"`
	// The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	IpSetForwardedIpConfig RuleGroupIpSetForwardedIpConfigurationPtrInput `pulumi:"ipSetForwardedIpConfig"`
}

func (RuleGroupIpSetReferenceStatementArgs) ElementType added in v0.72.0

func (RuleGroupIpSetReferenceStatementArgs) ToRuleGroupIpSetReferenceStatementOutput added in v0.72.0

func (i RuleGroupIpSetReferenceStatementArgs) ToRuleGroupIpSetReferenceStatementOutput() RuleGroupIpSetReferenceStatementOutput

func (RuleGroupIpSetReferenceStatementArgs) ToRuleGroupIpSetReferenceStatementOutputWithContext added in v0.72.0

func (i RuleGroupIpSetReferenceStatementArgs) ToRuleGroupIpSetReferenceStatementOutputWithContext(ctx context.Context) RuleGroupIpSetReferenceStatementOutput

func (RuleGroupIpSetReferenceStatementArgs) ToRuleGroupIpSetReferenceStatementPtrOutput added in v0.72.0

func (i RuleGroupIpSetReferenceStatementArgs) ToRuleGroupIpSetReferenceStatementPtrOutput() RuleGroupIpSetReferenceStatementPtrOutput

func (RuleGroupIpSetReferenceStatementArgs) ToRuleGroupIpSetReferenceStatementPtrOutputWithContext added in v0.72.0

func (i RuleGroupIpSetReferenceStatementArgs) ToRuleGroupIpSetReferenceStatementPtrOutputWithContext(ctx context.Context) RuleGroupIpSetReferenceStatementPtrOutput

type RuleGroupIpSetReferenceStatementInput added in v0.72.0

type RuleGroupIpSetReferenceStatementInput interface {
	pulumi.Input

	ToRuleGroupIpSetReferenceStatementOutput() RuleGroupIpSetReferenceStatementOutput
	ToRuleGroupIpSetReferenceStatementOutputWithContext(context.Context) RuleGroupIpSetReferenceStatementOutput
}

RuleGroupIpSetReferenceStatementInput is an input type that accepts RuleGroupIpSetReferenceStatementArgs and RuleGroupIpSetReferenceStatementOutput values. You can construct a concrete instance of `RuleGroupIpSetReferenceStatementInput` via:

RuleGroupIpSetReferenceStatementArgs{...}

type RuleGroupIpSetReferenceStatementOutput added in v0.72.0

type RuleGroupIpSetReferenceStatementOutput struct{ *pulumi.OutputState }

func (RuleGroupIpSetReferenceStatementOutput) Arn added in v0.72.0

The Amazon Resource Name (ARN) of the `IPSet` that this statement references.

func (RuleGroupIpSetReferenceStatementOutput) ElementType added in v0.72.0

func (RuleGroupIpSetReferenceStatementOutput) IpSetForwardedIpConfig added in v0.72.0

The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

func (RuleGroupIpSetReferenceStatementOutput) ToRuleGroupIpSetReferenceStatementOutput added in v0.72.0

func (o RuleGroupIpSetReferenceStatementOutput) ToRuleGroupIpSetReferenceStatementOutput() RuleGroupIpSetReferenceStatementOutput

func (RuleGroupIpSetReferenceStatementOutput) ToRuleGroupIpSetReferenceStatementOutputWithContext added in v0.72.0

func (o RuleGroupIpSetReferenceStatementOutput) ToRuleGroupIpSetReferenceStatementOutputWithContext(ctx context.Context) RuleGroupIpSetReferenceStatementOutput

func (RuleGroupIpSetReferenceStatementOutput) ToRuleGroupIpSetReferenceStatementPtrOutput added in v0.72.0

func (o RuleGroupIpSetReferenceStatementOutput) ToRuleGroupIpSetReferenceStatementPtrOutput() RuleGroupIpSetReferenceStatementPtrOutput

func (RuleGroupIpSetReferenceStatementOutput) ToRuleGroupIpSetReferenceStatementPtrOutputWithContext added in v0.72.0

func (o RuleGroupIpSetReferenceStatementOutput) ToRuleGroupIpSetReferenceStatementPtrOutputWithContext(ctx context.Context) RuleGroupIpSetReferenceStatementPtrOutput

type RuleGroupIpSetReferenceStatementPtrInput added in v0.72.0

type RuleGroupIpSetReferenceStatementPtrInput interface {
	pulumi.Input

	ToRuleGroupIpSetReferenceStatementPtrOutput() RuleGroupIpSetReferenceStatementPtrOutput
	ToRuleGroupIpSetReferenceStatementPtrOutputWithContext(context.Context) RuleGroupIpSetReferenceStatementPtrOutput
}

RuleGroupIpSetReferenceStatementPtrInput is an input type that accepts RuleGroupIpSetReferenceStatementArgs, RuleGroupIpSetReferenceStatementPtr and RuleGroupIpSetReferenceStatementPtrOutput values. You can construct a concrete instance of `RuleGroupIpSetReferenceStatementPtrInput` via:

        RuleGroupIpSetReferenceStatementArgs{...}

or:

        nil

type RuleGroupIpSetReferenceStatementPtrOutput added in v0.72.0

type RuleGroupIpSetReferenceStatementPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupIpSetReferenceStatementPtrOutput) Arn added in v0.72.0

The Amazon Resource Name (ARN) of the `IPSet` that this statement references.

func (RuleGroupIpSetReferenceStatementPtrOutput) Elem added in v0.72.0

func (RuleGroupIpSetReferenceStatementPtrOutput) ElementType added in v0.72.0

func (RuleGroupIpSetReferenceStatementPtrOutput) IpSetForwardedIpConfig added in v0.72.0

The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

func (RuleGroupIpSetReferenceStatementPtrOutput) ToRuleGroupIpSetReferenceStatementPtrOutput added in v0.72.0

func (o RuleGroupIpSetReferenceStatementPtrOutput) ToRuleGroupIpSetReferenceStatementPtrOutput() RuleGroupIpSetReferenceStatementPtrOutput

func (RuleGroupIpSetReferenceStatementPtrOutput) ToRuleGroupIpSetReferenceStatementPtrOutputWithContext added in v0.72.0

func (o RuleGroupIpSetReferenceStatementPtrOutput) ToRuleGroupIpSetReferenceStatementPtrOutputWithContext(ctx context.Context) RuleGroupIpSetReferenceStatementPtrOutput

type RuleGroupJa3Fingerprint added in v0.99.0

type RuleGroupJa3Fingerprint struct {
	// The match status to assign to the web request if the request doesn't have a JA3 fingerprint.
	//
	// You can specify the following fallback behaviors:
	//
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	FallbackBehavior RuleGroupJa3FingerprintFallbackBehavior `pulumi:"fallbackBehavior"`
}

Includes the JA3 fingerprint of a web request.

type RuleGroupJa3FingerprintArgs added in v0.99.0

type RuleGroupJa3FingerprintArgs struct {
	// The match status to assign to the web request if the request doesn't have a JA3 fingerprint.
	//
	// You can specify the following fallback behaviors:
	//
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	FallbackBehavior RuleGroupJa3FingerprintFallbackBehaviorInput `pulumi:"fallbackBehavior"`
}

Includes the JA3 fingerprint of a web request.

func (RuleGroupJa3FingerprintArgs) ElementType added in v0.99.0

func (RuleGroupJa3FingerprintArgs) ToRuleGroupJa3FingerprintOutput added in v0.99.0

func (i RuleGroupJa3FingerprintArgs) ToRuleGroupJa3FingerprintOutput() RuleGroupJa3FingerprintOutput

func (RuleGroupJa3FingerprintArgs) ToRuleGroupJa3FingerprintOutputWithContext added in v0.99.0

func (i RuleGroupJa3FingerprintArgs) ToRuleGroupJa3FingerprintOutputWithContext(ctx context.Context) RuleGroupJa3FingerprintOutput

func (RuleGroupJa3FingerprintArgs) ToRuleGroupJa3FingerprintPtrOutput added in v0.99.0

func (i RuleGroupJa3FingerprintArgs) ToRuleGroupJa3FingerprintPtrOutput() RuleGroupJa3FingerprintPtrOutput

func (RuleGroupJa3FingerprintArgs) ToRuleGroupJa3FingerprintPtrOutputWithContext added in v0.99.0

func (i RuleGroupJa3FingerprintArgs) ToRuleGroupJa3FingerprintPtrOutputWithContext(ctx context.Context) RuleGroupJa3FingerprintPtrOutput

type RuleGroupJa3FingerprintFallbackBehavior added in v0.99.0

type RuleGroupJa3FingerprintFallbackBehavior string

The match status to assign to the web request if the request doesn't have a JA3 fingerprint.

You can specify the following fallback behaviors:

- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (RuleGroupJa3FingerprintFallbackBehavior) ElementType added in v0.99.0

func (RuleGroupJa3FingerprintFallbackBehavior) ToRuleGroupJa3FingerprintFallbackBehaviorOutput added in v0.99.0

func (e RuleGroupJa3FingerprintFallbackBehavior) ToRuleGroupJa3FingerprintFallbackBehaviorOutput() RuleGroupJa3FingerprintFallbackBehaviorOutput

func (RuleGroupJa3FingerprintFallbackBehavior) ToRuleGroupJa3FingerprintFallbackBehaviorOutputWithContext added in v0.99.0

func (e RuleGroupJa3FingerprintFallbackBehavior) ToRuleGroupJa3FingerprintFallbackBehaviorOutputWithContext(ctx context.Context) RuleGroupJa3FingerprintFallbackBehaviorOutput

func (RuleGroupJa3FingerprintFallbackBehavior) ToRuleGroupJa3FingerprintFallbackBehaviorPtrOutput added in v0.99.0

func (e RuleGroupJa3FingerprintFallbackBehavior) ToRuleGroupJa3FingerprintFallbackBehaviorPtrOutput() RuleGroupJa3FingerprintFallbackBehaviorPtrOutput

func (RuleGroupJa3FingerprintFallbackBehavior) ToRuleGroupJa3FingerprintFallbackBehaviorPtrOutputWithContext added in v0.99.0

func (e RuleGroupJa3FingerprintFallbackBehavior) ToRuleGroupJa3FingerprintFallbackBehaviorPtrOutputWithContext(ctx context.Context) RuleGroupJa3FingerprintFallbackBehaviorPtrOutput

func (RuleGroupJa3FingerprintFallbackBehavior) ToStringOutput added in v0.99.0

func (RuleGroupJa3FingerprintFallbackBehavior) ToStringOutputWithContext added in v0.99.0

func (RuleGroupJa3FingerprintFallbackBehavior) ToStringPtrOutput added in v0.99.0

func (RuleGroupJa3FingerprintFallbackBehavior) ToStringPtrOutputWithContext added in v0.99.0

type RuleGroupJa3FingerprintFallbackBehaviorInput added in v0.99.0

type RuleGroupJa3FingerprintFallbackBehaviorInput interface {
	pulumi.Input

	ToRuleGroupJa3FingerprintFallbackBehaviorOutput() RuleGroupJa3FingerprintFallbackBehaviorOutput
	ToRuleGroupJa3FingerprintFallbackBehaviorOutputWithContext(context.Context) RuleGroupJa3FingerprintFallbackBehaviorOutput
}

RuleGroupJa3FingerprintFallbackBehaviorInput is an input type that accepts values of the RuleGroupJa3FingerprintFallbackBehavior enum A concrete instance of `RuleGroupJa3FingerprintFallbackBehaviorInput` can be one of the following:

RuleGroupJa3FingerprintFallbackBehaviorMatch
RuleGroupJa3FingerprintFallbackBehaviorNoMatch

type RuleGroupJa3FingerprintFallbackBehaviorOutput added in v0.99.0

type RuleGroupJa3FingerprintFallbackBehaviorOutput struct{ *pulumi.OutputState }

func (RuleGroupJa3FingerprintFallbackBehaviorOutput) ElementType added in v0.99.0

func (RuleGroupJa3FingerprintFallbackBehaviorOutput) ToRuleGroupJa3FingerprintFallbackBehaviorOutput added in v0.99.0

func (o RuleGroupJa3FingerprintFallbackBehaviorOutput) ToRuleGroupJa3FingerprintFallbackBehaviorOutput() RuleGroupJa3FingerprintFallbackBehaviorOutput

func (RuleGroupJa3FingerprintFallbackBehaviorOutput) ToRuleGroupJa3FingerprintFallbackBehaviorOutputWithContext added in v0.99.0

func (o RuleGroupJa3FingerprintFallbackBehaviorOutput) ToRuleGroupJa3FingerprintFallbackBehaviorOutputWithContext(ctx context.Context) RuleGroupJa3FingerprintFallbackBehaviorOutput

func (RuleGroupJa3FingerprintFallbackBehaviorOutput) ToRuleGroupJa3FingerprintFallbackBehaviorPtrOutput added in v0.99.0

func (o RuleGroupJa3FingerprintFallbackBehaviorOutput) ToRuleGroupJa3FingerprintFallbackBehaviorPtrOutput() RuleGroupJa3FingerprintFallbackBehaviorPtrOutput

func (RuleGroupJa3FingerprintFallbackBehaviorOutput) ToRuleGroupJa3FingerprintFallbackBehaviorPtrOutputWithContext added in v0.99.0

func (o RuleGroupJa3FingerprintFallbackBehaviorOutput) ToRuleGroupJa3FingerprintFallbackBehaviorPtrOutputWithContext(ctx context.Context) RuleGroupJa3FingerprintFallbackBehaviorPtrOutput

func (RuleGroupJa3FingerprintFallbackBehaviorOutput) ToStringOutput added in v0.99.0

func (RuleGroupJa3FingerprintFallbackBehaviorOutput) ToStringOutputWithContext added in v0.99.0

func (RuleGroupJa3FingerprintFallbackBehaviorOutput) ToStringPtrOutput added in v0.99.0

func (RuleGroupJa3FingerprintFallbackBehaviorOutput) ToStringPtrOutputWithContext added in v0.99.0

type RuleGroupJa3FingerprintFallbackBehaviorPtrInput added in v0.99.0

type RuleGroupJa3FingerprintFallbackBehaviorPtrInput interface {
	pulumi.Input

	ToRuleGroupJa3FingerprintFallbackBehaviorPtrOutput() RuleGroupJa3FingerprintFallbackBehaviorPtrOutput
	ToRuleGroupJa3FingerprintFallbackBehaviorPtrOutputWithContext(context.Context) RuleGroupJa3FingerprintFallbackBehaviorPtrOutput
}

func RuleGroupJa3FingerprintFallbackBehaviorPtr added in v0.99.0

func RuleGroupJa3FingerprintFallbackBehaviorPtr(v string) RuleGroupJa3FingerprintFallbackBehaviorPtrInput

type RuleGroupJa3FingerprintFallbackBehaviorPtrOutput added in v0.99.0

type RuleGroupJa3FingerprintFallbackBehaviorPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupJa3FingerprintFallbackBehaviorPtrOutput) Elem added in v0.99.0

func (RuleGroupJa3FingerprintFallbackBehaviorPtrOutput) ElementType added in v0.99.0

func (RuleGroupJa3FingerprintFallbackBehaviorPtrOutput) ToRuleGroupJa3FingerprintFallbackBehaviorPtrOutput added in v0.99.0

func (o RuleGroupJa3FingerprintFallbackBehaviorPtrOutput) ToRuleGroupJa3FingerprintFallbackBehaviorPtrOutput() RuleGroupJa3FingerprintFallbackBehaviorPtrOutput

func (RuleGroupJa3FingerprintFallbackBehaviorPtrOutput) ToRuleGroupJa3FingerprintFallbackBehaviorPtrOutputWithContext added in v0.99.0

func (o RuleGroupJa3FingerprintFallbackBehaviorPtrOutput) ToRuleGroupJa3FingerprintFallbackBehaviorPtrOutputWithContext(ctx context.Context) RuleGroupJa3FingerprintFallbackBehaviorPtrOutput

func (RuleGroupJa3FingerprintFallbackBehaviorPtrOutput) ToStringPtrOutput added in v0.99.0

func (RuleGroupJa3FingerprintFallbackBehaviorPtrOutput) ToStringPtrOutputWithContext added in v0.99.0

type RuleGroupJa3FingerprintInput added in v0.99.0

type RuleGroupJa3FingerprintInput interface {
	pulumi.Input

	ToRuleGroupJa3FingerprintOutput() RuleGroupJa3FingerprintOutput
	ToRuleGroupJa3FingerprintOutputWithContext(context.Context) RuleGroupJa3FingerprintOutput
}

RuleGroupJa3FingerprintInput is an input type that accepts RuleGroupJa3FingerprintArgs and RuleGroupJa3FingerprintOutput values. You can construct a concrete instance of `RuleGroupJa3FingerprintInput` via:

RuleGroupJa3FingerprintArgs{...}

type RuleGroupJa3FingerprintOutput added in v0.99.0

type RuleGroupJa3FingerprintOutput struct{ *pulumi.OutputState }

Includes the JA3 fingerprint of a web request.

func (RuleGroupJa3FingerprintOutput) ElementType added in v0.99.0

func (RuleGroupJa3FingerprintOutput) FallbackBehavior added in v0.99.0

The match status to assign to the web request if the request doesn't have a JA3 fingerprint.

You can specify the following fallback behaviors:

- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (RuleGroupJa3FingerprintOutput) ToRuleGroupJa3FingerprintOutput added in v0.99.0

func (o RuleGroupJa3FingerprintOutput) ToRuleGroupJa3FingerprintOutput() RuleGroupJa3FingerprintOutput

func (RuleGroupJa3FingerprintOutput) ToRuleGroupJa3FingerprintOutputWithContext added in v0.99.0

func (o RuleGroupJa3FingerprintOutput) ToRuleGroupJa3FingerprintOutputWithContext(ctx context.Context) RuleGroupJa3FingerprintOutput

func (RuleGroupJa3FingerprintOutput) ToRuleGroupJa3FingerprintPtrOutput added in v0.99.0

func (o RuleGroupJa3FingerprintOutput) ToRuleGroupJa3FingerprintPtrOutput() RuleGroupJa3FingerprintPtrOutput

func (RuleGroupJa3FingerprintOutput) ToRuleGroupJa3FingerprintPtrOutputWithContext added in v0.99.0

func (o RuleGroupJa3FingerprintOutput) ToRuleGroupJa3FingerprintPtrOutputWithContext(ctx context.Context) RuleGroupJa3FingerprintPtrOutput

type RuleGroupJa3FingerprintPtrInput added in v0.99.0

type RuleGroupJa3FingerprintPtrInput interface {
	pulumi.Input

	ToRuleGroupJa3FingerprintPtrOutput() RuleGroupJa3FingerprintPtrOutput
	ToRuleGroupJa3FingerprintPtrOutputWithContext(context.Context) RuleGroupJa3FingerprintPtrOutput
}

RuleGroupJa3FingerprintPtrInput is an input type that accepts RuleGroupJa3FingerprintArgs, RuleGroupJa3FingerprintPtr and RuleGroupJa3FingerprintPtrOutput values. You can construct a concrete instance of `RuleGroupJa3FingerprintPtrInput` via:

        RuleGroupJa3FingerprintArgs{...}

or:

        nil

func RuleGroupJa3FingerprintPtr added in v0.99.0

func RuleGroupJa3FingerprintPtr(v *RuleGroupJa3FingerprintArgs) RuleGroupJa3FingerprintPtrInput

type RuleGroupJa3FingerprintPtrOutput added in v0.99.0

type RuleGroupJa3FingerprintPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupJa3FingerprintPtrOutput) Elem added in v0.99.0

func (RuleGroupJa3FingerprintPtrOutput) ElementType added in v0.99.0

func (RuleGroupJa3FingerprintPtrOutput) FallbackBehavior added in v0.99.0

The match status to assign to the web request if the request doesn't have a JA3 fingerprint.

You can specify the following fallback behaviors:

- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (RuleGroupJa3FingerprintPtrOutput) ToRuleGroupJa3FingerprintPtrOutput added in v0.99.0

func (o RuleGroupJa3FingerprintPtrOutput) ToRuleGroupJa3FingerprintPtrOutput() RuleGroupJa3FingerprintPtrOutput

func (RuleGroupJa3FingerprintPtrOutput) ToRuleGroupJa3FingerprintPtrOutputWithContext added in v0.99.0

func (o RuleGroupJa3FingerprintPtrOutput) ToRuleGroupJa3FingerprintPtrOutputWithContext(ctx context.Context) RuleGroupJa3FingerprintPtrOutput

type RuleGroupJsonBody

type RuleGroupJsonBody struct {
	// What AWS WAF should do if it fails to completely parse the JSON body. The options are the following:
	//
	// - `EVALUATE_AS_STRING` - Inspect the body as plain text. AWS WAF applies the text transformations and inspection criteria that you defined for the JSON inspection to the body text string.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	//
	// If you don't provide this setting, AWS WAF parses and evaluates the content only up to the first parsing failure that it encounters.
	//
	// AWS WAF does its best to parse the entire JSON body, but might be forced to stop for reasons such as invalid characters, duplicate keys, truncation, and any content whose root node isn't an object or an array.
	//
	// AWS WAF parses the JSON in the following examples as two valid key, value pairs:
	//
	// - Missing comma: `{"key1":"value1""key2":"value2"}`
	// - Missing colon: `{"key1":"value1","key2""value2"}`
	// - Extra colons: `{"key1"::"value1","key2""value2"}`
	InvalidFallbackBehavior *RuleGroupBodyParsingFallbackBehavior `pulumi:"invalidFallbackBehavior"`
	// The patterns to look for in the JSON body. AWS WAF inspects the results of these pattern matches against the rule inspection criteria.
	MatchPattern RuleGroupJsonMatchPattern `pulumi:"matchPattern"`
	// The parts of the JSON to match against using the `MatchPattern` . If you specify `ALL` , AWS WAF matches against keys and values.
	//
	// `All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.
	MatchScope RuleGroupJsonMatchScope `pulumi:"matchScope"`
	// What AWS WAF should do if the body is larger than AWS WAF can inspect.
	//
	// AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.
	//
	// - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	// - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
	//
	// The options for oversize handling are the following:
	//
	// - `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	//
	// You can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.
	//
	// Default: `CONTINUE`
	OversizeHandling *RuleGroupOversizeHandling `pulumi:"oversizeHandling"`
}

Inspect the request body as JSON. The request body immediately follows the request headers.

type RuleGroupJsonBodyArgs

type RuleGroupJsonBodyArgs struct {
	// What AWS WAF should do if it fails to completely parse the JSON body. The options are the following:
	//
	// - `EVALUATE_AS_STRING` - Inspect the body as plain text. AWS WAF applies the text transformations and inspection criteria that you defined for the JSON inspection to the body text string.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	//
	// If you don't provide this setting, AWS WAF parses and evaluates the content only up to the first parsing failure that it encounters.
	//
	// AWS WAF does its best to parse the entire JSON body, but might be forced to stop for reasons such as invalid characters, duplicate keys, truncation, and any content whose root node isn't an object or an array.
	//
	// AWS WAF parses the JSON in the following examples as two valid key, value pairs:
	//
	// - Missing comma: `{"key1":"value1""key2":"value2"}`
	// - Missing colon: `{"key1":"value1","key2""value2"}`
	// - Extra colons: `{"key1"::"value1","key2""value2"}`
	InvalidFallbackBehavior RuleGroupBodyParsingFallbackBehaviorPtrInput `pulumi:"invalidFallbackBehavior"`
	// The patterns to look for in the JSON body. AWS WAF inspects the results of these pattern matches against the rule inspection criteria.
	MatchPattern RuleGroupJsonMatchPatternInput `pulumi:"matchPattern"`
	// The parts of the JSON to match against using the `MatchPattern` . If you specify `ALL` , AWS WAF matches against keys and values.
	//
	// `All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.
	MatchScope RuleGroupJsonMatchScopeInput `pulumi:"matchScope"`
	// What AWS WAF should do if the body is larger than AWS WAF can inspect.
	//
	// AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.
	//
	// - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	// - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
	//
	// The options for oversize handling are the following:
	//
	// - `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	//
	// You can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.
	//
	// Default: `CONTINUE`
	OversizeHandling RuleGroupOversizeHandlingPtrInput `pulumi:"oversizeHandling"`
}

Inspect the request body as JSON. The request body immediately follows the request headers.

func (RuleGroupJsonBodyArgs) ElementType

func (RuleGroupJsonBodyArgs) ElementType() reflect.Type

func (RuleGroupJsonBodyArgs) ToRuleGroupJsonBodyOutput

func (i RuleGroupJsonBodyArgs) ToRuleGroupJsonBodyOutput() RuleGroupJsonBodyOutput

func (RuleGroupJsonBodyArgs) ToRuleGroupJsonBodyOutputWithContext

func (i RuleGroupJsonBodyArgs) ToRuleGroupJsonBodyOutputWithContext(ctx context.Context) RuleGroupJsonBodyOutput

func (RuleGroupJsonBodyArgs) ToRuleGroupJsonBodyPtrOutput

func (i RuleGroupJsonBodyArgs) ToRuleGroupJsonBodyPtrOutput() RuleGroupJsonBodyPtrOutput

func (RuleGroupJsonBodyArgs) ToRuleGroupJsonBodyPtrOutputWithContext

func (i RuleGroupJsonBodyArgs) ToRuleGroupJsonBodyPtrOutputWithContext(ctx context.Context) RuleGroupJsonBodyPtrOutput

type RuleGroupJsonBodyInput

type RuleGroupJsonBodyInput interface {
	pulumi.Input

	ToRuleGroupJsonBodyOutput() RuleGroupJsonBodyOutput
	ToRuleGroupJsonBodyOutputWithContext(context.Context) RuleGroupJsonBodyOutput
}

RuleGroupJsonBodyInput is an input type that accepts RuleGroupJsonBodyArgs and RuleGroupJsonBodyOutput values. You can construct a concrete instance of `RuleGroupJsonBodyInput` via:

RuleGroupJsonBodyArgs{...}

type RuleGroupJsonBodyOutput

type RuleGroupJsonBodyOutput struct{ *pulumi.OutputState }

Inspect the request body as JSON. The request body immediately follows the request headers.

func (RuleGroupJsonBodyOutput) ElementType

func (RuleGroupJsonBodyOutput) ElementType() reflect.Type

func (RuleGroupJsonBodyOutput) InvalidFallbackBehavior

What AWS WAF should do if it fails to completely parse the JSON body. The options are the following:

- `EVALUATE_AS_STRING` - Inspect the body as plain text. AWS WAF applies the text transformations and inspection criteria that you defined for the JSON inspection to the body text string. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

If you don't provide this setting, AWS WAF parses and evaluates the content only up to the first parsing failure that it encounters.

AWS WAF does its best to parse the entire JSON body, but might be forced to stop for reasons such as invalid characters, duplicate keys, truncation, and any content whose root node isn't an object or an array.

AWS WAF parses the JSON in the following examples as two valid key, value pairs:

- Missing comma: `{"key1":"value1""key2":"value2"}` - Missing colon: `{"key1":"value1","key2""value2"}` - Extra colons: `{"key1"::"value1","key2""value2"}`

func (RuleGroupJsonBodyOutput) MatchPattern

The patterns to look for in the JSON body. AWS WAF inspects the results of these pattern matches against the rule inspection criteria.

func (RuleGroupJsonBodyOutput) MatchScope

The parts of the JSON to match against using the `MatchPattern` . If you specify `ALL` , AWS WAF matches against keys and values.

`All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.

func (RuleGroupJsonBodyOutput) OversizeHandling added in v0.17.0

What AWS WAF should do if the body is larger than AWS WAF can inspect.

AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.

- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes). - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.

The options for oversize handling are the following:

- `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

You can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.

Default: `CONTINUE`

func (RuleGroupJsonBodyOutput) ToRuleGroupJsonBodyOutput

func (o RuleGroupJsonBodyOutput) ToRuleGroupJsonBodyOutput() RuleGroupJsonBodyOutput

func (RuleGroupJsonBodyOutput) ToRuleGroupJsonBodyOutputWithContext

func (o RuleGroupJsonBodyOutput) ToRuleGroupJsonBodyOutputWithContext(ctx context.Context) RuleGroupJsonBodyOutput

func (RuleGroupJsonBodyOutput) ToRuleGroupJsonBodyPtrOutput

func (o RuleGroupJsonBodyOutput) ToRuleGroupJsonBodyPtrOutput() RuleGroupJsonBodyPtrOutput

func (RuleGroupJsonBodyOutput) ToRuleGroupJsonBodyPtrOutputWithContext

func (o RuleGroupJsonBodyOutput) ToRuleGroupJsonBodyPtrOutputWithContext(ctx context.Context) RuleGroupJsonBodyPtrOutput

type RuleGroupJsonBodyPtrInput

type RuleGroupJsonBodyPtrInput interface {
	pulumi.Input

	ToRuleGroupJsonBodyPtrOutput() RuleGroupJsonBodyPtrOutput
	ToRuleGroupJsonBodyPtrOutputWithContext(context.Context) RuleGroupJsonBodyPtrOutput
}

RuleGroupJsonBodyPtrInput is an input type that accepts RuleGroupJsonBodyArgs, RuleGroupJsonBodyPtr and RuleGroupJsonBodyPtrOutput values. You can construct a concrete instance of `RuleGroupJsonBodyPtrInput` via:

        RuleGroupJsonBodyArgs{...}

or:

        nil

type RuleGroupJsonBodyPtrOutput

type RuleGroupJsonBodyPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupJsonBodyPtrOutput) Elem

func (RuleGroupJsonBodyPtrOutput) ElementType

func (RuleGroupJsonBodyPtrOutput) ElementType() reflect.Type

func (RuleGroupJsonBodyPtrOutput) InvalidFallbackBehavior

What AWS WAF should do if it fails to completely parse the JSON body. The options are the following:

- `EVALUATE_AS_STRING` - Inspect the body as plain text. AWS WAF applies the text transformations and inspection criteria that you defined for the JSON inspection to the body text string. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

If you don't provide this setting, AWS WAF parses and evaluates the content only up to the first parsing failure that it encounters.

AWS WAF does its best to parse the entire JSON body, but might be forced to stop for reasons such as invalid characters, duplicate keys, truncation, and any content whose root node isn't an object or an array.

AWS WAF parses the JSON in the following examples as two valid key, value pairs:

- Missing comma: `{"key1":"value1""key2":"value2"}` - Missing colon: `{"key1":"value1","key2""value2"}` - Extra colons: `{"key1"::"value1","key2""value2"}`

func (RuleGroupJsonBodyPtrOutput) MatchPattern

The patterns to look for in the JSON body. AWS WAF inspects the results of these pattern matches against the rule inspection criteria.

func (RuleGroupJsonBodyPtrOutput) MatchScope

The parts of the JSON to match against using the `MatchPattern` . If you specify `ALL` , AWS WAF matches against keys and values.

`All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.

func (RuleGroupJsonBodyPtrOutput) OversizeHandling added in v0.17.0

What AWS WAF should do if the body is larger than AWS WAF can inspect.

AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.

- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes). - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.

The options for oversize handling are the following:

- `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

You can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.

Default: `CONTINUE`

func (RuleGroupJsonBodyPtrOutput) ToRuleGroupJsonBodyPtrOutput

func (o RuleGroupJsonBodyPtrOutput) ToRuleGroupJsonBodyPtrOutput() RuleGroupJsonBodyPtrOutput

func (RuleGroupJsonBodyPtrOutput) ToRuleGroupJsonBodyPtrOutputWithContext

func (o RuleGroupJsonBodyPtrOutput) ToRuleGroupJsonBodyPtrOutputWithContext(ctx context.Context) RuleGroupJsonBodyPtrOutput

type RuleGroupJsonMatchPattern

type RuleGroupJsonMatchPattern struct {
	// Inspect all parts of the web request's JSON body.
	All interface{} `pulumi:"all"`
	// Match only the specified include paths. See also `MatchScope` in the `JsonBody` `FieldToMatch` specification.
	//
	// Provide the include paths using JSON Pointer syntax. For example, `"IncludedPaths": ["/dogs/0/name", "/dogs/1/name"]` . For information about this syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// You must specify either this setting or the `All` setting, but not both.
	//
	// > Don't use this option to include all paths. Instead, use the `All` setting.
	IncludedPaths []string `pulumi:"includedPaths"`
}

The pattern to look for in the JSON body.

type RuleGroupJsonMatchPatternArgs

type RuleGroupJsonMatchPatternArgs struct {
	// Inspect all parts of the web request's JSON body.
	All pulumi.Input `pulumi:"all"`
	// Match only the specified include paths. See also `MatchScope` in the `JsonBody` `FieldToMatch` specification.
	//
	// Provide the include paths using JSON Pointer syntax. For example, `"IncludedPaths": ["/dogs/0/name", "/dogs/1/name"]` . For information about this syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// You must specify either this setting or the `All` setting, but not both.
	//
	// > Don't use this option to include all paths. Instead, use the `All` setting.
	IncludedPaths pulumi.StringArrayInput `pulumi:"includedPaths"`
}

The pattern to look for in the JSON body.

func (RuleGroupJsonMatchPatternArgs) ElementType

func (RuleGroupJsonMatchPatternArgs) ToRuleGroupJsonMatchPatternOutput

func (i RuleGroupJsonMatchPatternArgs) ToRuleGroupJsonMatchPatternOutput() RuleGroupJsonMatchPatternOutput

func (RuleGroupJsonMatchPatternArgs) ToRuleGroupJsonMatchPatternOutputWithContext

func (i RuleGroupJsonMatchPatternArgs) ToRuleGroupJsonMatchPatternOutputWithContext(ctx context.Context) RuleGroupJsonMatchPatternOutput

func (RuleGroupJsonMatchPatternArgs) ToRuleGroupJsonMatchPatternPtrOutput

func (i RuleGroupJsonMatchPatternArgs) ToRuleGroupJsonMatchPatternPtrOutput() RuleGroupJsonMatchPatternPtrOutput

func (RuleGroupJsonMatchPatternArgs) ToRuleGroupJsonMatchPatternPtrOutputWithContext

func (i RuleGroupJsonMatchPatternArgs) ToRuleGroupJsonMatchPatternPtrOutputWithContext(ctx context.Context) RuleGroupJsonMatchPatternPtrOutput

type RuleGroupJsonMatchPatternInput

type RuleGroupJsonMatchPatternInput interface {
	pulumi.Input

	ToRuleGroupJsonMatchPatternOutput() RuleGroupJsonMatchPatternOutput
	ToRuleGroupJsonMatchPatternOutputWithContext(context.Context) RuleGroupJsonMatchPatternOutput
}

RuleGroupJsonMatchPatternInput is an input type that accepts RuleGroupJsonMatchPatternArgs and RuleGroupJsonMatchPatternOutput values. You can construct a concrete instance of `RuleGroupJsonMatchPatternInput` via:

RuleGroupJsonMatchPatternArgs{...}

type RuleGroupJsonMatchPatternOutput

type RuleGroupJsonMatchPatternOutput struct{ *pulumi.OutputState }

The pattern to look for in the JSON body.

func (RuleGroupJsonMatchPatternOutput) All

Inspect all parts of the web request's JSON body.

func (RuleGroupJsonMatchPatternOutput) ElementType

func (RuleGroupJsonMatchPatternOutput) IncludedPaths

Match only the specified include paths. See also `MatchScope` in the `JsonBody` `FieldToMatch` specification.

Provide the include paths using JSON Pointer syntax. For example, `"IncludedPaths": ["/dogs/0/name", "/dogs/1/name"]` . For information about this syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

You must specify either this setting or the `All` setting, but not both.

> Don't use this option to include all paths. Instead, use the `All` setting.

func (RuleGroupJsonMatchPatternOutput) ToRuleGroupJsonMatchPatternOutput

func (o RuleGroupJsonMatchPatternOutput) ToRuleGroupJsonMatchPatternOutput() RuleGroupJsonMatchPatternOutput

func (RuleGroupJsonMatchPatternOutput) ToRuleGroupJsonMatchPatternOutputWithContext

func (o RuleGroupJsonMatchPatternOutput) ToRuleGroupJsonMatchPatternOutputWithContext(ctx context.Context) RuleGroupJsonMatchPatternOutput

func (RuleGroupJsonMatchPatternOutput) ToRuleGroupJsonMatchPatternPtrOutput

func (o RuleGroupJsonMatchPatternOutput) ToRuleGroupJsonMatchPatternPtrOutput() RuleGroupJsonMatchPatternPtrOutput

func (RuleGroupJsonMatchPatternOutput) ToRuleGroupJsonMatchPatternPtrOutputWithContext

func (o RuleGroupJsonMatchPatternOutput) ToRuleGroupJsonMatchPatternPtrOutputWithContext(ctx context.Context) RuleGroupJsonMatchPatternPtrOutput

type RuleGroupJsonMatchPatternPtrInput

type RuleGroupJsonMatchPatternPtrInput interface {
	pulumi.Input

	ToRuleGroupJsonMatchPatternPtrOutput() RuleGroupJsonMatchPatternPtrOutput
	ToRuleGroupJsonMatchPatternPtrOutputWithContext(context.Context) RuleGroupJsonMatchPatternPtrOutput
}

RuleGroupJsonMatchPatternPtrInput is an input type that accepts RuleGroupJsonMatchPatternArgs, RuleGroupJsonMatchPatternPtr and RuleGroupJsonMatchPatternPtrOutput values. You can construct a concrete instance of `RuleGroupJsonMatchPatternPtrInput` via:

        RuleGroupJsonMatchPatternArgs{...}

or:

        nil

type RuleGroupJsonMatchPatternPtrOutput

type RuleGroupJsonMatchPatternPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupJsonMatchPatternPtrOutput) All

Inspect all parts of the web request's JSON body.

func (RuleGroupJsonMatchPatternPtrOutput) Elem

func (RuleGroupJsonMatchPatternPtrOutput) ElementType

func (RuleGroupJsonMatchPatternPtrOutput) IncludedPaths

Match only the specified include paths. See also `MatchScope` in the `JsonBody` `FieldToMatch` specification.

Provide the include paths using JSON Pointer syntax. For example, `"IncludedPaths": ["/dogs/0/name", "/dogs/1/name"]` . For information about this syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

You must specify either this setting or the `All` setting, but not both.

> Don't use this option to include all paths. Instead, use the `All` setting.

func (RuleGroupJsonMatchPatternPtrOutput) ToRuleGroupJsonMatchPatternPtrOutput

func (o RuleGroupJsonMatchPatternPtrOutput) ToRuleGroupJsonMatchPatternPtrOutput() RuleGroupJsonMatchPatternPtrOutput

func (RuleGroupJsonMatchPatternPtrOutput) ToRuleGroupJsonMatchPatternPtrOutputWithContext

func (o RuleGroupJsonMatchPatternPtrOutput) ToRuleGroupJsonMatchPatternPtrOutputWithContext(ctx context.Context) RuleGroupJsonMatchPatternPtrOutput

type RuleGroupJsonMatchScope

type RuleGroupJsonMatchScope string

The parts of the JSON to match against using the MatchPattern.

func (RuleGroupJsonMatchScope) ElementType

func (RuleGroupJsonMatchScope) ElementType() reflect.Type

func (RuleGroupJsonMatchScope) ToRuleGroupJsonMatchScopeOutput

func (e RuleGroupJsonMatchScope) ToRuleGroupJsonMatchScopeOutput() RuleGroupJsonMatchScopeOutput

func (RuleGroupJsonMatchScope) ToRuleGroupJsonMatchScopeOutputWithContext

func (e RuleGroupJsonMatchScope) ToRuleGroupJsonMatchScopeOutputWithContext(ctx context.Context) RuleGroupJsonMatchScopeOutput

func (RuleGroupJsonMatchScope) ToRuleGroupJsonMatchScopePtrOutput

func (e RuleGroupJsonMatchScope) ToRuleGroupJsonMatchScopePtrOutput() RuleGroupJsonMatchScopePtrOutput

func (RuleGroupJsonMatchScope) ToRuleGroupJsonMatchScopePtrOutputWithContext

func (e RuleGroupJsonMatchScope) ToRuleGroupJsonMatchScopePtrOutputWithContext(ctx context.Context) RuleGroupJsonMatchScopePtrOutput

func (RuleGroupJsonMatchScope) ToStringOutput

func (e RuleGroupJsonMatchScope) ToStringOutput() pulumi.StringOutput

func (RuleGroupJsonMatchScope) ToStringOutputWithContext

func (e RuleGroupJsonMatchScope) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupJsonMatchScope) ToStringPtrOutput

func (e RuleGroupJsonMatchScope) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupJsonMatchScope) ToStringPtrOutputWithContext

func (e RuleGroupJsonMatchScope) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupJsonMatchScopeInput

type RuleGroupJsonMatchScopeInput interface {
	pulumi.Input

	ToRuleGroupJsonMatchScopeOutput() RuleGroupJsonMatchScopeOutput
	ToRuleGroupJsonMatchScopeOutputWithContext(context.Context) RuleGroupJsonMatchScopeOutput
}

RuleGroupJsonMatchScopeInput is an input type that accepts values of the RuleGroupJsonMatchScope enum A concrete instance of `RuleGroupJsonMatchScopeInput` can be one of the following:

RuleGroupJsonMatchScopeAll
RuleGroupJsonMatchScopeKey
RuleGroupJsonMatchScopeValue

type RuleGroupJsonMatchScopeOutput

type RuleGroupJsonMatchScopeOutput struct{ *pulumi.OutputState }

func (RuleGroupJsonMatchScopeOutput) ElementType

func (RuleGroupJsonMatchScopeOutput) ToRuleGroupJsonMatchScopeOutput

func (o RuleGroupJsonMatchScopeOutput) ToRuleGroupJsonMatchScopeOutput() RuleGroupJsonMatchScopeOutput

func (RuleGroupJsonMatchScopeOutput) ToRuleGroupJsonMatchScopeOutputWithContext

func (o RuleGroupJsonMatchScopeOutput) ToRuleGroupJsonMatchScopeOutputWithContext(ctx context.Context) RuleGroupJsonMatchScopeOutput

func (RuleGroupJsonMatchScopeOutput) ToRuleGroupJsonMatchScopePtrOutput

func (o RuleGroupJsonMatchScopeOutput) ToRuleGroupJsonMatchScopePtrOutput() RuleGroupJsonMatchScopePtrOutput

func (RuleGroupJsonMatchScopeOutput) ToRuleGroupJsonMatchScopePtrOutputWithContext

func (o RuleGroupJsonMatchScopeOutput) ToRuleGroupJsonMatchScopePtrOutputWithContext(ctx context.Context) RuleGroupJsonMatchScopePtrOutput

func (RuleGroupJsonMatchScopeOutput) ToStringOutput

func (RuleGroupJsonMatchScopeOutput) ToStringOutputWithContext

func (o RuleGroupJsonMatchScopeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupJsonMatchScopeOutput) ToStringPtrOutput

func (RuleGroupJsonMatchScopeOutput) ToStringPtrOutputWithContext

func (o RuleGroupJsonMatchScopeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupJsonMatchScopePtrInput

type RuleGroupJsonMatchScopePtrInput interface {
	pulumi.Input

	ToRuleGroupJsonMatchScopePtrOutput() RuleGroupJsonMatchScopePtrOutput
	ToRuleGroupJsonMatchScopePtrOutputWithContext(context.Context) RuleGroupJsonMatchScopePtrOutput
}

func RuleGroupJsonMatchScopePtr

func RuleGroupJsonMatchScopePtr(v string) RuleGroupJsonMatchScopePtrInput

type RuleGroupJsonMatchScopePtrOutput

type RuleGroupJsonMatchScopePtrOutput struct{ *pulumi.OutputState }

func (RuleGroupJsonMatchScopePtrOutput) Elem

func (RuleGroupJsonMatchScopePtrOutput) ElementType

func (RuleGroupJsonMatchScopePtrOutput) ToRuleGroupJsonMatchScopePtrOutput

func (o RuleGroupJsonMatchScopePtrOutput) ToRuleGroupJsonMatchScopePtrOutput() RuleGroupJsonMatchScopePtrOutput

func (RuleGroupJsonMatchScopePtrOutput) ToRuleGroupJsonMatchScopePtrOutputWithContext

func (o RuleGroupJsonMatchScopePtrOutput) ToRuleGroupJsonMatchScopePtrOutputWithContext(ctx context.Context) RuleGroupJsonMatchScopePtrOutput

func (RuleGroupJsonMatchScopePtrOutput) ToStringPtrOutput

func (RuleGroupJsonMatchScopePtrOutput) ToStringPtrOutputWithContext

func (o RuleGroupJsonMatchScopePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupLabel

type RuleGroupLabel struct {
	// The label string.
	Name string `pulumi:"name"`
}

type RuleGroupLabelArgs

type RuleGroupLabelArgs struct {
	// The label string.
	Name pulumi.StringInput `pulumi:"name"`
}

func (RuleGroupLabelArgs) ElementType

func (RuleGroupLabelArgs) ElementType() reflect.Type

func (RuleGroupLabelArgs) ToRuleGroupLabelOutput

func (i RuleGroupLabelArgs) ToRuleGroupLabelOutput() RuleGroupLabelOutput

func (RuleGroupLabelArgs) ToRuleGroupLabelOutputWithContext

func (i RuleGroupLabelArgs) ToRuleGroupLabelOutputWithContext(ctx context.Context) RuleGroupLabelOutput

type RuleGroupLabelArray

type RuleGroupLabelArray []RuleGroupLabelInput

func (RuleGroupLabelArray) ElementType

func (RuleGroupLabelArray) ElementType() reflect.Type

func (RuleGroupLabelArray) ToRuleGroupLabelArrayOutput

func (i RuleGroupLabelArray) ToRuleGroupLabelArrayOutput() RuleGroupLabelArrayOutput

func (RuleGroupLabelArray) ToRuleGroupLabelArrayOutputWithContext

func (i RuleGroupLabelArray) ToRuleGroupLabelArrayOutputWithContext(ctx context.Context) RuleGroupLabelArrayOutput

type RuleGroupLabelArrayInput

type RuleGroupLabelArrayInput interface {
	pulumi.Input

	ToRuleGroupLabelArrayOutput() RuleGroupLabelArrayOutput
	ToRuleGroupLabelArrayOutputWithContext(context.Context) RuleGroupLabelArrayOutput
}

RuleGroupLabelArrayInput is an input type that accepts RuleGroupLabelArray and RuleGroupLabelArrayOutput values. You can construct a concrete instance of `RuleGroupLabelArrayInput` via:

RuleGroupLabelArray{ RuleGroupLabelArgs{...} }

type RuleGroupLabelArrayOutput

type RuleGroupLabelArrayOutput struct{ *pulumi.OutputState }

func (RuleGroupLabelArrayOutput) ElementType

func (RuleGroupLabelArrayOutput) ElementType() reflect.Type

func (RuleGroupLabelArrayOutput) Index

func (RuleGroupLabelArrayOutput) ToRuleGroupLabelArrayOutput

func (o RuleGroupLabelArrayOutput) ToRuleGroupLabelArrayOutput() RuleGroupLabelArrayOutput

func (RuleGroupLabelArrayOutput) ToRuleGroupLabelArrayOutputWithContext

func (o RuleGroupLabelArrayOutput) ToRuleGroupLabelArrayOutputWithContext(ctx context.Context) RuleGroupLabelArrayOutput

type RuleGroupLabelInput

type RuleGroupLabelInput interface {
	pulumi.Input

	ToRuleGroupLabelOutput() RuleGroupLabelOutput
	ToRuleGroupLabelOutputWithContext(context.Context) RuleGroupLabelOutput
}

RuleGroupLabelInput is an input type that accepts RuleGroupLabelArgs and RuleGroupLabelOutput values. You can construct a concrete instance of `RuleGroupLabelInput` via:

RuleGroupLabelArgs{...}

type RuleGroupLabelMatchScope

type RuleGroupLabelMatchScope string

func (RuleGroupLabelMatchScope) ElementType

func (RuleGroupLabelMatchScope) ElementType() reflect.Type

func (RuleGroupLabelMatchScope) ToRuleGroupLabelMatchScopeOutput

func (e RuleGroupLabelMatchScope) ToRuleGroupLabelMatchScopeOutput() RuleGroupLabelMatchScopeOutput

func (RuleGroupLabelMatchScope) ToRuleGroupLabelMatchScopeOutputWithContext

func (e RuleGroupLabelMatchScope) ToRuleGroupLabelMatchScopeOutputWithContext(ctx context.Context) RuleGroupLabelMatchScopeOutput

func (RuleGroupLabelMatchScope) ToRuleGroupLabelMatchScopePtrOutput

func (e RuleGroupLabelMatchScope) ToRuleGroupLabelMatchScopePtrOutput() RuleGroupLabelMatchScopePtrOutput

func (RuleGroupLabelMatchScope) ToRuleGroupLabelMatchScopePtrOutputWithContext

func (e RuleGroupLabelMatchScope) ToRuleGroupLabelMatchScopePtrOutputWithContext(ctx context.Context) RuleGroupLabelMatchScopePtrOutput

func (RuleGroupLabelMatchScope) ToStringOutput

func (e RuleGroupLabelMatchScope) ToStringOutput() pulumi.StringOutput

func (RuleGroupLabelMatchScope) ToStringOutputWithContext

func (e RuleGroupLabelMatchScope) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupLabelMatchScope) ToStringPtrOutput

func (e RuleGroupLabelMatchScope) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupLabelMatchScope) ToStringPtrOutputWithContext

func (e RuleGroupLabelMatchScope) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupLabelMatchScopeInput

type RuleGroupLabelMatchScopeInput interface {
	pulumi.Input

	ToRuleGroupLabelMatchScopeOutput() RuleGroupLabelMatchScopeOutput
	ToRuleGroupLabelMatchScopeOutputWithContext(context.Context) RuleGroupLabelMatchScopeOutput
}

RuleGroupLabelMatchScopeInput is an input type that accepts values of the RuleGroupLabelMatchScope enum A concrete instance of `RuleGroupLabelMatchScopeInput` can be one of the following:

RuleGroupLabelMatchScopeLabel
RuleGroupLabelMatchScopeNamespace

type RuleGroupLabelMatchScopeOutput

type RuleGroupLabelMatchScopeOutput struct{ *pulumi.OutputState }

func (RuleGroupLabelMatchScopeOutput) ElementType

func (RuleGroupLabelMatchScopeOutput) ToRuleGroupLabelMatchScopeOutput

func (o RuleGroupLabelMatchScopeOutput) ToRuleGroupLabelMatchScopeOutput() RuleGroupLabelMatchScopeOutput

func (RuleGroupLabelMatchScopeOutput) ToRuleGroupLabelMatchScopeOutputWithContext

func (o RuleGroupLabelMatchScopeOutput) ToRuleGroupLabelMatchScopeOutputWithContext(ctx context.Context) RuleGroupLabelMatchScopeOutput

func (RuleGroupLabelMatchScopeOutput) ToRuleGroupLabelMatchScopePtrOutput

func (o RuleGroupLabelMatchScopeOutput) ToRuleGroupLabelMatchScopePtrOutput() RuleGroupLabelMatchScopePtrOutput

func (RuleGroupLabelMatchScopeOutput) ToRuleGroupLabelMatchScopePtrOutputWithContext

func (o RuleGroupLabelMatchScopeOutput) ToRuleGroupLabelMatchScopePtrOutputWithContext(ctx context.Context) RuleGroupLabelMatchScopePtrOutput

func (RuleGroupLabelMatchScopeOutput) ToStringOutput

func (RuleGroupLabelMatchScopeOutput) ToStringOutputWithContext

func (o RuleGroupLabelMatchScopeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupLabelMatchScopeOutput) ToStringPtrOutput

func (RuleGroupLabelMatchScopeOutput) ToStringPtrOutputWithContext

func (o RuleGroupLabelMatchScopeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupLabelMatchScopePtrInput

type RuleGroupLabelMatchScopePtrInput interface {
	pulumi.Input

	ToRuleGroupLabelMatchScopePtrOutput() RuleGroupLabelMatchScopePtrOutput
	ToRuleGroupLabelMatchScopePtrOutputWithContext(context.Context) RuleGroupLabelMatchScopePtrOutput
}

func RuleGroupLabelMatchScopePtr

func RuleGroupLabelMatchScopePtr(v string) RuleGroupLabelMatchScopePtrInput

type RuleGroupLabelMatchScopePtrOutput

type RuleGroupLabelMatchScopePtrOutput struct{ *pulumi.OutputState }

func (RuleGroupLabelMatchScopePtrOutput) Elem

func (RuleGroupLabelMatchScopePtrOutput) ElementType

func (RuleGroupLabelMatchScopePtrOutput) ToRuleGroupLabelMatchScopePtrOutput

func (o RuleGroupLabelMatchScopePtrOutput) ToRuleGroupLabelMatchScopePtrOutput() RuleGroupLabelMatchScopePtrOutput

func (RuleGroupLabelMatchScopePtrOutput) ToRuleGroupLabelMatchScopePtrOutputWithContext

func (o RuleGroupLabelMatchScopePtrOutput) ToRuleGroupLabelMatchScopePtrOutputWithContext(ctx context.Context) RuleGroupLabelMatchScopePtrOutput

func (RuleGroupLabelMatchScopePtrOutput) ToStringPtrOutput

func (RuleGroupLabelMatchScopePtrOutput) ToStringPtrOutputWithContext

func (o RuleGroupLabelMatchScopePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupLabelMatchStatement

type RuleGroupLabelMatchStatement struct {
	// The string to match against. The setting you provide for this depends on the match statement's `Scope` setting:
	//
	// - If the `Scope` indicates `LABEL` , then this specification must include the name and can include any number of preceding namespace specifications and prefix up to providing the fully qualified label name.
	// - If the `Scope` indicates `NAMESPACE` , then this specification can include any number of contiguous namespace strings, and can include the entire label namespace prefix from the rule group or web ACL where the label originates.
	//
	// Labels are case sensitive and components of a label must be separated by colon, for example `NS1:NS2:name` .
	Key string `pulumi:"key"`
	// Specify whether you want to match using the label name or just the namespace.
	Scope RuleGroupLabelMatchScope `pulumi:"scope"`
}

type RuleGroupLabelMatchStatementArgs

type RuleGroupLabelMatchStatementArgs struct {
	// The string to match against. The setting you provide for this depends on the match statement's `Scope` setting:
	//
	// - If the `Scope` indicates `LABEL` , then this specification must include the name and can include any number of preceding namespace specifications and prefix up to providing the fully qualified label name.
	// - If the `Scope` indicates `NAMESPACE` , then this specification can include any number of contiguous namespace strings, and can include the entire label namespace prefix from the rule group or web ACL where the label originates.
	//
	// Labels are case sensitive and components of a label must be separated by colon, for example `NS1:NS2:name` .
	Key pulumi.StringInput `pulumi:"key"`
	// Specify whether you want to match using the label name or just the namespace.
	Scope RuleGroupLabelMatchScopeInput `pulumi:"scope"`
}

func (RuleGroupLabelMatchStatementArgs) ElementType

func (RuleGroupLabelMatchStatementArgs) ToRuleGroupLabelMatchStatementOutput

func (i RuleGroupLabelMatchStatementArgs) ToRuleGroupLabelMatchStatementOutput() RuleGroupLabelMatchStatementOutput

func (RuleGroupLabelMatchStatementArgs) ToRuleGroupLabelMatchStatementOutputWithContext

func (i RuleGroupLabelMatchStatementArgs) ToRuleGroupLabelMatchStatementOutputWithContext(ctx context.Context) RuleGroupLabelMatchStatementOutput

func (RuleGroupLabelMatchStatementArgs) ToRuleGroupLabelMatchStatementPtrOutput

func (i RuleGroupLabelMatchStatementArgs) ToRuleGroupLabelMatchStatementPtrOutput() RuleGroupLabelMatchStatementPtrOutput

func (RuleGroupLabelMatchStatementArgs) ToRuleGroupLabelMatchStatementPtrOutputWithContext

func (i RuleGroupLabelMatchStatementArgs) ToRuleGroupLabelMatchStatementPtrOutputWithContext(ctx context.Context) RuleGroupLabelMatchStatementPtrOutput

type RuleGroupLabelMatchStatementInput

type RuleGroupLabelMatchStatementInput interface {
	pulumi.Input

	ToRuleGroupLabelMatchStatementOutput() RuleGroupLabelMatchStatementOutput
	ToRuleGroupLabelMatchStatementOutputWithContext(context.Context) RuleGroupLabelMatchStatementOutput
}

RuleGroupLabelMatchStatementInput is an input type that accepts RuleGroupLabelMatchStatementArgs and RuleGroupLabelMatchStatementOutput values. You can construct a concrete instance of `RuleGroupLabelMatchStatementInput` via:

RuleGroupLabelMatchStatementArgs{...}

type RuleGroupLabelMatchStatementOutput

type RuleGroupLabelMatchStatementOutput struct{ *pulumi.OutputState }

func (RuleGroupLabelMatchStatementOutput) ElementType

func (RuleGroupLabelMatchStatementOutput) Key

The string to match against. The setting you provide for this depends on the match statement's `Scope` setting:

- If the `Scope` indicates `LABEL` , then this specification must include the name and can include any number of preceding namespace specifications and prefix up to providing the fully qualified label name. - If the `Scope` indicates `NAMESPACE` , then this specification can include any number of contiguous namespace strings, and can include the entire label namespace prefix from the rule group or web ACL where the label originates.

Labels are case sensitive and components of a label must be separated by colon, for example `NS1:NS2:name` .

func (RuleGroupLabelMatchStatementOutput) Scope

Specify whether you want to match using the label name or just the namespace.

func (RuleGroupLabelMatchStatementOutput) ToRuleGroupLabelMatchStatementOutput

func (o RuleGroupLabelMatchStatementOutput) ToRuleGroupLabelMatchStatementOutput() RuleGroupLabelMatchStatementOutput

func (RuleGroupLabelMatchStatementOutput) ToRuleGroupLabelMatchStatementOutputWithContext

func (o RuleGroupLabelMatchStatementOutput) ToRuleGroupLabelMatchStatementOutputWithContext(ctx context.Context) RuleGroupLabelMatchStatementOutput

func (RuleGroupLabelMatchStatementOutput) ToRuleGroupLabelMatchStatementPtrOutput

func (o RuleGroupLabelMatchStatementOutput) ToRuleGroupLabelMatchStatementPtrOutput() RuleGroupLabelMatchStatementPtrOutput

func (RuleGroupLabelMatchStatementOutput) ToRuleGroupLabelMatchStatementPtrOutputWithContext

func (o RuleGroupLabelMatchStatementOutput) ToRuleGroupLabelMatchStatementPtrOutputWithContext(ctx context.Context) RuleGroupLabelMatchStatementPtrOutput

type RuleGroupLabelMatchStatementPtrInput

type RuleGroupLabelMatchStatementPtrInput interface {
	pulumi.Input

	ToRuleGroupLabelMatchStatementPtrOutput() RuleGroupLabelMatchStatementPtrOutput
	ToRuleGroupLabelMatchStatementPtrOutputWithContext(context.Context) RuleGroupLabelMatchStatementPtrOutput
}

RuleGroupLabelMatchStatementPtrInput is an input type that accepts RuleGroupLabelMatchStatementArgs, RuleGroupLabelMatchStatementPtr and RuleGroupLabelMatchStatementPtrOutput values. You can construct a concrete instance of `RuleGroupLabelMatchStatementPtrInput` via:

        RuleGroupLabelMatchStatementArgs{...}

or:

        nil

type RuleGroupLabelMatchStatementPtrOutput

type RuleGroupLabelMatchStatementPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupLabelMatchStatementPtrOutput) Elem

func (RuleGroupLabelMatchStatementPtrOutput) ElementType

func (RuleGroupLabelMatchStatementPtrOutput) Key

The string to match against. The setting you provide for this depends on the match statement's `Scope` setting:

- If the `Scope` indicates `LABEL` , then this specification must include the name and can include any number of preceding namespace specifications and prefix up to providing the fully qualified label name. - If the `Scope` indicates `NAMESPACE` , then this specification can include any number of contiguous namespace strings, and can include the entire label namespace prefix from the rule group or web ACL where the label originates.

Labels are case sensitive and components of a label must be separated by colon, for example `NS1:NS2:name` .

func (RuleGroupLabelMatchStatementPtrOutput) Scope

Specify whether you want to match using the label name or just the namespace.

func (RuleGroupLabelMatchStatementPtrOutput) ToRuleGroupLabelMatchStatementPtrOutput

func (o RuleGroupLabelMatchStatementPtrOutput) ToRuleGroupLabelMatchStatementPtrOutput() RuleGroupLabelMatchStatementPtrOutput

func (RuleGroupLabelMatchStatementPtrOutput) ToRuleGroupLabelMatchStatementPtrOutputWithContext

func (o RuleGroupLabelMatchStatementPtrOutput) ToRuleGroupLabelMatchStatementPtrOutputWithContext(ctx context.Context) RuleGroupLabelMatchStatementPtrOutput

type RuleGroupLabelOutput

type RuleGroupLabelOutput struct{ *pulumi.OutputState }

func (RuleGroupLabelOutput) ElementType

func (RuleGroupLabelOutput) ElementType() reflect.Type

func (RuleGroupLabelOutput) Name

The label string.

func (RuleGroupLabelOutput) ToRuleGroupLabelOutput

func (o RuleGroupLabelOutput) ToRuleGroupLabelOutput() RuleGroupLabelOutput

func (RuleGroupLabelOutput) ToRuleGroupLabelOutputWithContext

func (o RuleGroupLabelOutput) ToRuleGroupLabelOutputWithContext(ctx context.Context) RuleGroupLabelOutput

type RuleGroupLabelSummary

type RuleGroupLabelSummary struct {
	// An individual label specification.
	Name *string `pulumi:"name"`
}

type RuleGroupLabelSummaryArgs

type RuleGroupLabelSummaryArgs struct {
	// An individual label specification.
	Name pulumi.StringPtrInput `pulumi:"name"`
}

func (RuleGroupLabelSummaryArgs) ElementType

func (RuleGroupLabelSummaryArgs) ElementType() reflect.Type

func (RuleGroupLabelSummaryArgs) ToRuleGroupLabelSummaryOutput

func (i RuleGroupLabelSummaryArgs) ToRuleGroupLabelSummaryOutput() RuleGroupLabelSummaryOutput

func (RuleGroupLabelSummaryArgs) ToRuleGroupLabelSummaryOutputWithContext

func (i RuleGroupLabelSummaryArgs) ToRuleGroupLabelSummaryOutputWithContext(ctx context.Context) RuleGroupLabelSummaryOutput

type RuleGroupLabelSummaryArray

type RuleGroupLabelSummaryArray []RuleGroupLabelSummaryInput

func (RuleGroupLabelSummaryArray) ElementType

func (RuleGroupLabelSummaryArray) ElementType() reflect.Type

func (RuleGroupLabelSummaryArray) ToRuleGroupLabelSummaryArrayOutput

func (i RuleGroupLabelSummaryArray) ToRuleGroupLabelSummaryArrayOutput() RuleGroupLabelSummaryArrayOutput

func (RuleGroupLabelSummaryArray) ToRuleGroupLabelSummaryArrayOutputWithContext

func (i RuleGroupLabelSummaryArray) ToRuleGroupLabelSummaryArrayOutputWithContext(ctx context.Context) RuleGroupLabelSummaryArrayOutput

type RuleGroupLabelSummaryArrayInput

type RuleGroupLabelSummaryArrayInput interface {
	pulumi.Input

	ToRuleGroupLabelSummaryArrayOutput() RuleGroupLabelSummaryArrayOutput
	ToRuleGroupLabelSummaryArrayOutputWithContext(context.Context) RuleGroupLabelSummaryArrayOutput
}

RuleGroupLabelSummaryArrayInput is an input type that accepts RuleGroupLabelSummaryArray and RuleGroupLabelSummaryArrayOutput values. You can construct a concrete instance of `RuleGroupLabelSummaryArrayInput` via:

RuleGroupLabelSummaryArray{ RuleGroupLabelSummaryArgs{...} }

type RuleGroupLabelSummaryArrayOutput

type RuleGroupLabelSummaryArrayOutput struct{ *pulumi.OutputState }

func (RuleGroupLabelSummaryArrayOutput) ElementType

func (RuleGroupLabelSummaryArrayOutput) Index

func (RuleGroupLabelSummaryArrayOutput) ToRuleGroupLabelSummaryArrayOutput

func (o RuleGroupLabelSummaryArrayOutput) ToRuleGroupLabelSummaryArrayOutput() RuleGroupLabelSummaryArrayOutput

func (RuleGroupLabelSummaryArrayOutput) ToRuleGroupLabelSummaryArrayOutputWithContext

func (o RuleGroupLabelSummaryArrayOutput) ToRuleGroupLabelSummaryArrayOutputWithContext(ctx context.Context) RuleGroupLabelSummaryArrayOutput

type RuleGroupLabelSummaryInput

type RuleGroupLabelSummaryInput interface {
	pulumi.Input

	ToRuleGroupLabelSummaryOutput() RuleGroupLabelSummaryOutput
	ToRuleGroupLabelSummaryOutputWithContext(context.Context) RuleGroupLabelSummaryOutput
}

RuleGroupLabelSummaryInput is an input type that accepts RuleGroupLabelSummaryArgs and RuleGroupLabelSummaryOutput values. You can construct a concrete instance of `RuleGroupLabelSummaryInput` via:

RuleGroupLabelSummaryArgs{...}

type RuleGroupLabelSummaryOutput

type RuleGroupLabelSummaryOutput struct{ *pulumi.OutputState }

func (RuleGroupLabelSummaryOutput) ElementType

func (RuleGroupLabelSummaryOutput) Name

An individual label specification.

func (RuleGroupLabelSummaryOutput) ToRuleGroupLabelSummaryOutput

func (o RuleGroupLabelSummaryOutput) ToRuleGroupLabelSummaryOutput() RuleGroupLabelSummaryOutput

func (RuleGroupLabelSummaryOutput) ToRuleGroupLabelSummaryOutputWithContext

func (o RuleGroupLabelSummaryOutput) ToRuleGroupLabelSummaryOutputWithContext(ctx context.Context) RuleGroupLabelSummaryOutput

type RuleGroupMapMatchScope added in v0.17.0

type RuleGroupMapMatchScope string

The parts of the request to match against using the MatchPattern.

func (RuleGroupMapMatchScope) ElementType added in v0.17.0

func (RuleGroupMapMatchScope) ElementType() reflect.Type

func (RuleGroupMapMatchScope) ToRuleGroupMapMatchScopeOutput added in v0.17.0

func (e RuleGroupMapMatchScope) ToRuleGroupMapMatchScopeOutput() RuleGroupMapMatchScopeOutput

func (RuleGroupMapMatchScope) ToRuleGroupMapMatchScopeOutputWithContext added in v0.17.0

func (e RuleGroupMapMatchScope) ToRuleGroupMapMatchScopeOutputWithContext(ctx context.Context) RuleGroupMapMatchScopeOutput

func (RuleGroupMapMatchScope) ToRuleGroupMapMatchScopePtrOutput added in v0.17.0

func (e RuleGroupMapMatchScope) ToRuleGroupMapMatchScopePtrOutput() RuleGroupMapMatchScopePtrOutput

func (RuleGroupMapMatchScope) ToRuleGroupMapMatchScopePtrOutputWithContext added in v0.17.0

func (e RuleGroupMapMatchScope) ToRuleGroupMapMatchScopePtrOutputWithContext(ctx context.Context) RuleGroupMapMatchScopePtrOutput

func (RuleGroupMapMatchScope) ToStringOutput added in v0.17.0

func (e RuleGroupMapMatchScope) ToStringOutput() pulumi.StringOutput

func (RuleGroupMapMatchScope) ToStringOutputWithContext added in v0.17.0

func (e RuleGroupMapMatchScope) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupMapMatchScope) ToStringPtrOutput added in v0.17.0

func (e RuleGroupMapMatchScope) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupMapMatchScope) ToStringPtrOutputWithContext added in v0.17.0

func (e RuleGroupMapMatchScope) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupMapMatchScopeInput added in v0.17.0

type RuleGroupMapMatchScopeInput interface {
	pulumi.Input

	ToRuleGroupMapMatchScopeOutput() RuleGroupMapMatchScopeOutput
	ToRuleGroupMapMatchScopeOutputWithContext(context.Context) RuleGroupMapMatchScopeOutput
}

RuleGroupMapMatchScopeInput is an input type that accepts values of the RuleGroupMapMatchScope enum A concrete instance of `RuleGroupMapMatchScopeInput` can be one of the following:

RuleGroupMapMatchScopeAll
RuleGroupMapMatchScopeKey
RuleGroupMapMatchScopeValue

type RuleGroupMapMatchScopeOutput added in v0.17.0

type RuleGroupMapMatchScopeOutput struct{ *pulumi.OutputState }

func (RuleGroupMapMatchScopeOutput) ElementType added in v0.17.0

func (RuleGroupMapMatchScopeOutput) ToRuleGroupMapMatchScopeOutput added in v0.17.0

func (o RuleGroupMapMatchScopeOutput) ToRuleGroupMapMatchScopeOutput() RuleGroupMapMatchScopeOutput

func (RuleGroupMapMatchScopeOutput) ToRuleGroupMapMatchScopeOutputWithContext added in v0.17.0

func (o RuleGroupMapMatchScopeOutput) ToRuleGroupMapMatchScopeOutputWithContext(ctx context.Context) RuleGroupMapMatchScopeOutput

func (RuleGroupMapMatchScopeOutput) ToRuleGroupMapMatchScopePtrOutput added in v0.17.0

func (o RuleGroupMapMatchScopeOutput) ToRuleGroupMapMatchScopePtrOutput() RuleGroupMapMatchScopePtrOutput

func (RuleGroupMapMatchScopeOutput) ToRuleGroupMapMatchScopePtrOutputWithContext added in v0.17.0

func (o RuleGroupMapMatchScopeOutput) ToRuleGroupMapMatchScopePtrOutputWithContext(ctx context.Context) RuleGroupMapMatchScopePtrOutput

func (RuleGroupMapMatchScopeOutput) ToStringOutput added in v0.17.0

func (RuleGroupMapMatchScopeOutput) ToStringOutputWithContext added in v0.17.0

func (o RuleGroupMapMatchScopeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupMapMatchScopeOutput) ToStringPtrOutput added in v0.17.0

func (o RuleGroupMapMatchScopeOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupMapMatchScopeOutput) ToStringPtrOutputWithContext added in v0.17.0

func (o RuleGroupMapMatchScopeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupMapMatchScopePtrInput added in v0.17.0

type RuleGroupMapMatchScopePtrInput interface {
	pulumi.Input

	ToRuleGroupMapMatchScopePtrOutput() RuleGroupMapMatchScopePtrOutput
	ToRuleGroupMapMatchScopePtrOutputWithContext(context.Context) RuleGroupMapMatchScopePtrOutput
}

func RuleGroupMapMatchScopePtr added in v0.17.0

func RuleGroupMapMatchScopePtr(v string) RuleGroupMapMatchScopePtrInput

type RuleGroupMapMatchScopePtrOutput added in v0.17.0

type RuleGroupMapMatchScopePtrOutput struct{ *pulumi.OutputState }

func (RuleGroupMapMatchScopePtrOutput) Elem added in v0.17.0

func (RuleGroupMapMatchScopePtrOutput) ElementType added in v0.17.0

func (RuleGroupMapMatchScopePtrOutput) ToRuleGroupMapMatchScopePtrOutput added in v0.17.0

func (o RuleGroupMapMatchScopePtrOutput) ToRuleGroupMapMatchScopePtrOutput() RuleGroupMapMatchScopePtrOutput

func (RuleGroupMapMatchScopePtrOutput) ToRuleGroupMapMatchScopePtrOutputWithContext added in v0.17.0

func (o RuleGroupMapMatchScopePtrOutput) ToRuleGroupMapMatchScopePtrOutputWithContext(ctx context.Context) RuleGroupMapMatchScopePtrOutput

func (RuleGroupMapMatchScopePtrOutput) ToStringPtrOutput added in v0.17.0

func (RuleGroupMapMatchScopePtrOutput) ToStringPtrOutputWithContext added in v0.17.0

func (o RuleGroupMapMatchScopePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupNotStatement

type RuleGroupNotStatement struct {
	// The statement to negate. You can use any statement that can be nested.
	Statement RuleGroupStatement `pulumi:"statement"`
}

type RuleGroupNotStatementArgs

type RuleGroupNotStatementArgs struct {
	// The statement to negate. You can use any statement that can be nested.
	Statement RuleGroupStatementInput `pulumi:"statement"`
}

func (RuleGroupNotStatementArgs) ElementType

func (RuleGroupNotStatementArgs) ElementType() reflect.Type

func (RuleGroupNotStatementArgs) ToRuleGroupNotStatementOutput

func (i RuleGroupNotStatementArgs) ToRuleGroupNotStatementOutput() RuleGroupNotStatementOutput

func (RuleGroupNotStatementArgs) ToRuleGroupNotStatementOutputWithContext

func (i RuleGroupNotStatementArgs) ToRuleGroupNotStatementOutputWithContext(ctx context.Context) RuleGroupNotStatementOutput

func (RuleGroupNotStatementArgs) ToRuleGroupNotStatementPtrOutput

func (i RuleGroupNotStatementArgs) ToRuleGroupNotStatementPtrOutput() RuleGroupNotStatementPtrOutput

func (RuleGroupNotStatementArgs) ToRuleGroupNotStatementPtrOutputWithContext

func (i RuleGroupNotStatementArgs) ToRuleGroupNotStatementPtrOutputWithContext(ctx context.Context) RuleGroupNotStatementPtrOutput

type RuleGroupNotStatementInput

type RuleGroupNotStatementInput interface {
	pulumi.Input

	ToRuleGroupNotStatementOutput() RuleGroupNotStatementOutput
	ToRuleGroupNotStatementOutputWithContext(context.Context) RuleGroupNotStatementOutput
}

RuleGroupNotStatementInput is an input type that accepts RuleGroupNotStatementArgs and RuleGroupNotStatementOutput values. You can construct a concrete instance of `RuleGroupNotStatementInput` via:

RuleGroupNotStatementArgs{...}

type RuleGroupNotStatementOutput

type RuleGroupNotStatementOutput struct{ *pulumi.OutputState }

func (RuleGroupNotStatementOutput) ElementType

func (RuleGroupNotStatementOutput) Statement

The statement to negate. You can use any statement that can be nested.

func (RuleGroupNotStatementOutput) ToRuleGroupNotStatementOutput

func (o RuleGroupNotStatementOutput) ToRuleGroupNotStatementOutput() RuleGroupNotStatementOutput

func (RuleGroupNotStatementOutput) ToRuleGroupNotStatementOutputWithContext

func (o RuleGroupNotStatementOutput) ToRuleGroupNotStatementOutputWithContext(ctx context.Context) RuleGroupNotStatementOutput

func (RuleGroupNotStatementOutput) ToRuleGroupNotStatementPtrOutput

func (o RuleGroupNotStatementOutput) ToRuleGroupNotStatementPtrOutput() RuleGroupNotStatementPtrOutput

func (RuleGroupNotStatementOutput) ToRuleGroupNotStatementPtrOutputWithContext

func (o RuleGroupNotStatementOutput) ToRuleGroupNotStatementPtrOutputWithContext(ctx context.Context) RuleGroupNotStatementPtrOutput

type RuleGroupNotStatementPtrInput

type RuleGroupNotStatementPtrInput interface {
	pulumi.Input

	ToRuleGroupNotStatementPtrOutput() RuleGroupNotStatementPtrOutput
	ToRuleGroupNotStatementPtrOutputWithContext(context.Context) RuleGroupNotStatementPtrOutput
}

RuleGroupNotStatementPtrInput is an input type that accepts RuleGroupNotStatementArgs, RuleGroupNotStatementPtr and RuleGroupNotStatementPtrOutput values. You can construct a concrete instance of `RuleGroupNotStatementPtrInput` via:

        RuleGroupNotStatementArgs{...}

or:

        nil

type RuleGroupNotStatementPtrOutput

type RuleGroupNotStatementPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupNotStatementPtrOutput) Elem

func (RuleGroupNotStatementPtrOutput) ElementType

func (RuleGroupNotStatementPtrOutput) Statement

The statement to negate. You can use any statement that can be nested.

func (RuleGroupNotStatementPtrOutput) ToRuleGroupNotStatementPtrOutput

func (o RuleGroupNotStatementPtrOutput) ToRuleGroupNotStatementPtrOutput() RuleGroupNotStatementPtrOutput

func (RuleGroupNotStatementPtrOutput) ToRuleGroupNotStatementPtrOutputWithContext

func (o RuleGroupNotStatementPtrOutput) ToRuleGroupNotStatementPtrOutputWithContext(ctx context.Context) RuleGroupNotStatementPtrOutput

type RuleGroupOrStatement

type RuleGroupOrStatement struct {
	// The statements to combine with OR logic. You can use any statements that can be nested.
	Statements []RuleGroupStatement `pulumi:"statements"`
}

type RuleGroupOrStatementArgs

type RuleGroupOrStatementArgs struct {
	// The statements to combine with OR logic. You can use any statements that can be nested.
	Statements RuleGroupStatementArrayInput `pulumi:"statements"`
}

func (RuleGroupOrStatementArgs) ElementType

func (RuleGroupOrStatementArgs) ElementType() reflect.Type

func (RuleGroupOrStatementArgs) ToRuleGroupOrStatementOutput

func (i RuleGroupOrStatementArgs) ToRuleGroupOrStatementOutput() RuleGroupOrStatementOutput

func (RuleGroupOrStatementArgs) ToRuleGroupOrStatementOutputWithContext

func (i RuleGroupOrStatementArgs) ToRuleGroupOrStatementOutputWithContext(ctx context.Context) RuleGroupOrStatementOutput

func (RuleGroupOrStatementArgs) ToRuleGroupOrStatementPtrOutput

func (i RuleGroupOrStatementArgs) ToRuleGroupOrStatementPtrOutput() RuleGroupOrStatementPtrOutput

func (RuleGroupOrStatementArgs) ToRuleGroupOrStatementPtrOutputWithContext

func (i RuleGroupOrStatementArgs) ToRuleGroupOrStatementPtrOutputWithContext(ctx context.Context) RuleGroupOrStatementPtrOutput

type RuleGroupOrStatementInput

type RuleGroupOrStatementInput interface {
	pulumi.Input

	ToRuleGroupOrStatementOutput() RuleGroupOrStatementOutput
	ToRuleGroupOrStatementOutputWithContext(context.Context) RuleGroupOrStatementOutput
}

RuleGroupOrStatementInput is an input type that accepts RuleGroupOrStatementArgs and RuleGroupOrStatementOutput values. You can construct a concrete instance of `RuleGroupOrStatementInput` via:

RuleGroupOrStatementArgs{...}

type RuleGroupOrStatementOutput

type RuleGroupOrStatementOutput struct{ *pulumi.OutputState }

func (RuleGroupOrStatementOutput) ElementType

func (RuleGroupOrStatementOutput) ElementType() reflect.Type

func (RuleGroupOrStatementOutput) Statements

The statements to combine with OR logic. You can use any statements that can be nested.

func (RuleGroupOrStatementOutput) ToRuleGroupOrStatementOutput

func (o RuleGroupOrStatementOutput) ToRuleGroupOrStatementOutput() RuleGroupOrStatementOutput

func (RuleGroupOrStatementOutput) ToRuleGroupOrStatementOutputWithContext

func (o RuleGroupOrStatementOutput) ToRuleGroupOrStatementOutputWithContext(ctx context.Context) RuleGroupOrStatementOutput

func (RuleGroupOrStatementOutput) ToRuleGroupOrStatementPtrOutput

func (o RuleGroupOrStatementOutput) ToRuleGroupOrStatementPtrOutput() RuleGroupOrStatementPtrOutput

func (RuleGroupOrStatementOutput) ToRuleGroupOrStatementPtrOutputWithContext

func (o RuleGroupOrStatementOutput) ToRuleGroupOrStatementPtrOutputWithContext(ctx context.Context) RuleGroupOrStatementPtrOutput

type RuleGroupOrStatementPtrInput

type RuleGroupOrStatementPtrInput interface {
	pulumi.Input

	ToRuleGroupOrStatementPtrOutput() RuleGroupOrStatementPtrOutput
	ToRuleGroupOrStatementPtrOutputWithContext(context.Context) RuleGroupOrStatementPtrOutput
}

RuleGroupOrStatementPtrInput is an input type that accepts RuleGroupOrStatementArgs, RuleGroupOrStatementPtr and RuleGroupOrStatementPtrOutput values. You can construct a concrete instance of `RuleGroupOrStatementPtrInput` via:

        RuleGroupOrStatementArgs{...}

or:

        nil

type RuleGroupOrStatementPtrOutput

type RuleGroupOrStatementPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupOrStatementPtrOutput) Elem

func (RuleGroupOrStatementPtrOutput) ElementType

func (RuleGroupOrStatementPtrOutput) Statements

The statements to combine with OR logic. You can use any statements that can be nested.

func (RuleGroupOrStatementPtrOutput) ToRuleGroupOrStatementPtrOutput

func (o RuleGroupOrStatementPtrOutput) ToRuleGroupOrStatementPtrOutput() RuleGroupOrStatementPtrOutput

func (RuleGroupOrStatementPtrOutput) ToRuleGroupOrStatementPtrOutputWithContext

func (o RuleGroupOrStatementPtrOutput) ToRuleGroupOrStatementPtrOutputWithContext(ctx context.Context) RuleGroupOrStatementPtrOutput

type RuleGroupOutput

type RuleGroupOutput struct{ *pulumi.OutputState }

func (RuleGroupOutput) Arn added in v0.17.0

The Amazon Resource Name (ARN) of the rule group.

func (RuleGroupOutput) AvailableLabels added in v0.17.0

Collection of Available Labels.

func (RuleGroupOutput) AwsId added in v0.99.0

The ID of the rule group.

func (RuleGroupOutput) Capacity added in v0.17.0

func (o RuleGroupOutput) Capacity() pulumi.IntOutput

The web ACL capacity units (WCUs) required for this rule group.

When you create your own rule group, you define this, and you cannot change it after creation. When you add or modify the rules in a rule group, AWS WAF enforces this limit.

AWS WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. AWS WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500.

func (RuleGroupOutput) ConsumedLabels added in v0.17.0

Collection of Consumed Labels.

func (RuleGroupOutput) CustomResponseBodies added in v0.17.0

func (o RuleGroupOutput) CustomResponseBodies() RuleGroupCustomResponseBodyMapOutput

A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the rule group, and then use them in the rules that you define in the rule group.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

For information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* .

func (RuleGroupOutput) Description added in v0.17.0

func (o RuleGroupOutput) Description() pulumi.StringPtrOutput

A description of the rule group that helps with identification.

func (RuleGroupOutput) ElementType

func (RuleGroupOutput) ElementType() reflect.Type

func (RuleGroupOutput) LabelNamespace added in v0.17.0

func (o RuleGroupOutput) LabelNamespace() pulumi.StringOutput

The label namespace prefix for this rule group. All labels added by rules in this rule group have this prefix.

The syntax for the label namespace prefix for a rule group is the following: `awswaf:<account ID>:rule group:<rule group name>:`

When a rule with a label matches a web request, AWS WAF adds the fully qualified label to the request. A fully qualified label is made up of the label namespace from the rule group or web ACL where the rule is defined and the label from the rule, separated by a colon.

func (RuleGroupOutput) Name added in v0.17.0

The name of the rule group. You cannot change the name of a rule group after you create it.

func (RuleGroupOutput) Rules added in v0.17.0

Collection of Rules.

func (RuleGroupOutput) Scope added in v0.17.0

Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .

> For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .

func (RuleGroupOutput) Tags added in v0.17.0

Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.

> To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.

func (RuleGroupOutput) ToRuleGroupOutput

func (o RuleGroupOutput) ToRuleGroupOutput() RuleGroupOutput

func (RuleGroupOutput) ToRuleGroupOutputWithContext

func (o RuleGroupOutput) ToRuleGroupOutputWithContext(ctx context.Context) RuleGroupOutput

func (RuleGroupOutput) VisibilityConfig added in v0.17.0

func (o RuleGroupOutput) VisibilityConfig() RuleGroupVisibilityConfigOutput

Defines and enables Amazon CloudWatch metrics and web request sample collection.

type RuleGroupOversizeHandling added in v0.17.0

type RuleGroupOversizeHandling string

Handling of requests containing oversize fields

func (RuleGroupOversizeHandling) ElementType added in v0.17.0

func (RuleGroupOversizeHandling) ElementType() reflect.Type

func (RuleGroupOversizeHandling) ToRuleGroupOversizeHandlingOutput added in v0.17.0

func (e RuleGroupOversizeHandling) ToRuleGroupOversizeHandlingOutput() RuleGroupOversizeHandlingOutput

func (RuleGroupOversizeHandling) ToRuleGroupOversizeHandlingOutputWithContext added in v0.17.0

func (e RuleGroupOversizeHandling) ToRuleGroupOversizeHandlingOutputWithContext(ctx context.Context) RuleGroupOversizeHandlingOutput

func (RuleGroupOversizeHandling) ToRuleGroupOversizeHandlingPtrOutput added in v0.17.0

func (e RuleGroupOversizeHandling) ToRuleGroupOversizeHandlingPtrOutput() RuleGroupOversizeHandlingPtrOutput

func (RuleGroupOversizeHandling) ToRuleGroupOversizeHandlingPtrOutputWithContext added in v0.17.0

func (e RuleGroupOversizeHandling) ToRuleGroupOversizeHandlingPtrOutputWithContext(ctx context.Context) RuleGroupOversizeHandlingPtrOutput

func (RuleGroupOversizeHandling) ToStringOutput added in v0.17.0

func (e RuleGroupOversizeHandling) ToStringOutput() pulumi.StringOutput

func (RuleGroupOversizeHandling) ToStringOutputWithContext added in v0.17.0

func (e RuleGroupOversizeHandling) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupOversizeHandling) ToStringPtrOutput added in v0.17.0

func (e RuleGroupOversizeHandling) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupOversizeHandling) ToStringPtrOutputWithContext added in v0.17.0

func (e RuleGroupOversizeHandling) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupOversizeHandlingInput added in v0.17.0

type RuleGroupOversizeHandlingInput interface {
	pulumi.Input

	ToRuleGroupOversizeHandlingOutput() RuleGroupOversizeHandlingOutput
	ToRuleGroupOversizeHandlingOutputWithContext(context.Context) RuleGroupOversizeHandlingOutput
}

RuleGroupOversizeHandlingInput is an input type that accepts values of the RuleGroupOversizeHandling enum A concrete instance of `RuleGroupOversizeHandlingInput` can be one of the following:

RuleGroupOversizeHandlingContinue
RuleGroupOversizeHandlingMatch
RuleGroupOversizeHandlingNoMatch

type RuleGroupOversizeHandlingOutput added in v0.17.0

type RuleGroupOversizeHandlingOutput struct{ *pulumi.OutputState }

func (RuleGroupOversizeHandlingOutput) ElementType added in v0.17.0

func (RuleGroupOversizeHandlingOutput) ToRuleGroupOversizeHandlingOutput added in v0.17.0

func (o RuleGroupOversizeHandlingOutput) ToRuleGroupOversizeHandlingOutput() RuleGroupOversizeHandlingOutput

func (RuleGroupOversizeHandlingOutput) ToRuleGroupOversizeHandlingOutputWithContext added in v0.17.0

func (o RuleGroupOversizeHandlingOutput) ToRuleGroupOversizeHandlingOutputWithContext(ctx context.Context) RuleGroupOversizeHandlingOutput

func (RuleGroupOversizeHandlingOutput) ToRuleGroupOversizeHandlingPtrOutput added in v0.17.0

func (o RuleGroupOversizeHandlingOutput) ToRuleGroupOversizeHandlingPtrOutput() RuleGroupOversizeHandlingPtrOutput

func (RuleGroupOversizeHandlingOutput) ToRuleGroupOversizeHandlingPtrOutputWithContext added in v0.17.0

func (o RuleGroupOversizeHandlingOutput) ToRuleGroupOversizeHandlingPtrOutputWithContext(ctx context.Context) RuleGroupOversizeHandlingPtrOutput

func (RuleGroupOversizeHandlingOutput) ToStringOutput added in v0.17.0

func (RuleGroupOversizeHandlingOutput) ToStringOutputWithContext added in v0.17.0

func (o RuleGroupOversizeHandlingOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupOversizeHandlingOutput) ToStringPtrOutput added in v0.17.0

func (RuleGroupOversizeHandlingOutput) ToStringPtrOutputWithContext added in v0.17.0

func (o RuleGroupOversizeHandlingOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupOversizeHandlingPtrInput added in v0.17.0

type RuleGroupOversizeHandlingPtrInput interface {
	pulumi.Input

	ToRuleGroupOversizeHandlingPtrOutput() RuleGroupOversizeHandlingPtrOutput
	ToRuleGroupOversizeHandlingPtrOutputWithContext(context.Context) RuleGroupOversizeHandlingPtrOutput
}

func RuleGroupOversizeHandlingPtr added in v0.17.0

func RuleGroupOversizeHandlingPtr(v string) RuleGroupOversizeHandlingPtrInput

type RuleGroupOversizeHandlingPtrOutput added in v0.17.0

type RuleGroupOversizeHandlingPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupOversizeHandlingPtrOutput) Elem added in v0.17.0

func (RuleGroupOversizeHandlingPtrOutput) ElementType added in v0.17.0

func (RuleGroupOversizeHandlingPtrOutput) ToRuleGroupOversizeHandlingPtrOutput added in v0.17.0

func (o RuleGroupOversizeHandlingPtrOutput) ToRuleGroupOversizeHandlingPtrOutput() RuleGroupOversizeHandlingPtrOutput

func (RuleGroupOversizeHandlingPtrOutput) ToRuleGroupOversizeHandlingPtrOutputWithContext added in v0.17.0

func (o RuleGroupOversizeHandlingPtrOutput) ToRuleGroupOversizeHandlingPtrOutputWithContext(ctx context.Context) RuleGroupOversizeHandlingPtrOutput

func (RuleGroupOversizeHandlingPtrOutput) ToStringPtrOutput added in v0.17.0

func (RuleGroupOversizeHandlingPtrOutput) ToStringPtrOutputWithContext added in v0.17.0

func (o RuleGroupOversizeHandlingPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupPositionalConstraint

type RuleGroupPositionalConstraint string

Position of the evaluation in the FieldToMatch of request.

func (RuleGroupPositionalConstraint) ElementType

func (RuleGroupPositionalConstraint) ToRuleGroupPositionalConstraintOutput

func (e RuleGroupPositionalConstraint) ToRuleGroupPositionalConstraintOutput() RuleGroupPositionalConstraintOutput

func (RuleGroupPositionalConstraint) ToRuleGroupPositionalConstraintOutputWithContext

func (e RuleGroupPositionalConstraint) ToRuleGroupPositionalConstraintOutputWithContext(ctx context.Context) RuleGroupPositionalConstraintOutput

func (RuleGroupPositionalConstraint) ToRuleGroupPositionalConstraintPtrOutput

func (e RuleGroupPositionalConstraint) ToRuleGroupPositionalConstraintPtrOutput() RuleGroupPositionalConstraintPtrOutput

func (RuleGroupPositionalConstraint) ToRuleGroupPositionalConstraintPtrOutputWithContext

func (e RuleGroupPositionalConstraint) ToRuleGroupPositionalConstraintPtrOutputWithContext(ctx context.Context) RuleGroupPositionalConstraintPtrOutput

func (RuleGroupPositionalConstraint) ToStringOutput

func (RuleGroupPositionalConstraint) ToStringOutputWithContext

func (e RuleGroupPositionalConstraint) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupPositionalConstraint) ToStringPtrOutput

func (RuleGroupPositionalConstraint) ToStringPtrOutputWithContext

func (e RuleGroupPositionalConstraint) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupPositionalConstraintInput

type RuleGroupPositionalConstraintInput interface {
	pulumi.Input

	ToRuleGroupPositionalConstraintOutput() RuleGroupPositionalConstraintOutput
	ToRuleGroupPositionalConstraintOutputWithContext(context.Context) RuleGroupPositionalConstraintOutput
}

RuleGroupPositionalConstraintInput is an input type that accepts values of the RuleGroupPositionalConstraint enum A concrete instance of `RuleGroupPositionalConstraintInput` can be one of the following:

RuleGroupPositionalConstraintExactly
RuleGroupPositionalConstraintStartsWith
RuleGroupPositionalConstraintEndsWith
RuleGroupPositionalConstraintContains
RuleGroupPositionalConstraintContainsWord

type RuleGroupPositionalConstraintOutput

type RuleGroupPositionalConstraintOutput struct{ *pulumi.OutputState }

func (RuleGroupPositionalConstraintOutput) ElementType

func (RuleGroupPositionalConstraintOutput) ToRuleGroupPositionalConstraintOutput

func (o RuleGroupPositionalConstraintOutput) ToRuleGroupPositionalConstraintOutput() RuleGroupPositionalConstraintOutput

func (RuleGroupPositionalConstraintOutput) ToRuleGroupPositionalConstraintOutputWithContext

func (o RuleGroupPositionalConstraintOutput) ToRuleGroupPositionalConstraintOutputWithContext(ctx context.Context) RuleGroupPositionalConstraintOutput

func (RuleGroupPositionalConstraintOutput) ToRuleGroupPositionalConstraintPtrOutput

func (o RuleGroupPositionalConstraintOutput) ToRuleGroupPositionalConstraintPtrOutput() RuleGroupPositionalConstraintPtrOutput

func (RuleGroupPositionalConstraintOutput) ToRuleGroupPositionalConstraintPtrOutputWithContext

func (o RuleGroupPositionalConstraintOutput) ToRuleGroupPositionalConstraintPtrOutputWithContext(ctx context.Context) RuleGroupPositionalConstraintPtrOutput

func (RuleGroupPositionalConstraintOutput) ToStringOutput

func (RuleGroupPositionalConstraintOutput) ToStringOutputWithContext

func (o RuleGroupPositionalConstraintOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupPositionalConstraintOutput) ToStringPtrOutput

func (RuleGroupPositionalConstraintOutput) ToStringPtrOutputWithContext

func (o RuleGroupPositionalConstraintOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupPositionalConstraintPtrInput

type RuleGroupPositionalConstraintPtrInput interface {
	pulumi.Input

	ToRuleGroupPositionalConstraintPtrOutput() RuleGroupPositionalConstraintPtrOutput
	ToRuleGroupPositionalConstraintPtrOutputWithContext(context.Context) RuleGroupPositionalConstraintPtrOutput
}

type RuleGroupPositionalConstraintPtrOutput

type RuleGroupPositionalConstraintPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupPositionalConstraintPtrOutput) Elem

func (RuleGroupPositionalConstraintPtrOutput) ElementType

func (RuleGroupPositionalConstraintPtrOutput) ToRuleGroupPositionalConstraintPtrOutput

func (o RuleGroupPositionalConstraintPtrOutput) ToRuleGroupPositionalConstraintPtrOutput() RuleGroupPositionalConstraintPtrOutput

func (RuleGroupPositionalConstraintPtrOutput) ToRuleGroupPositionalConstraintPtrOutputWithContext

func (o RuleGroupPositionalConstraintPtrOutput) ToRuleGroupPositionalConstraintPtrOutputWithContext(ctx context.Context) RuleGroupPositionalConstraintPtrOutput

func (RuleGroupPositionalConstraintPtrOutput) ToStringPtrOutput

func (RuleGroupPositionalConstraintPtrOutput) ToStringPtrOutputWithContext

func (o RuleGroupPositionalConstraintPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupRateBasedStatement

type RuleGroupRateBasedStatement struct {
	// Setting that indicates how to aggregate the request counts.
	//
	// > Web requests that are missing any of the components specified in the aggregation keys are omitted from the rate-based rule evaluation and handling.
	//
	// - `CONSTANT` - Count and limit the requests that match the rate-based rule's scope-down statement. With this option, the counted requests aren't further aggregated. The scope-down statement is the only specification used. When the count of all requests that satisfy the scope-down statement goes over the limit, AWS WAF applies the rule action to all requests that satisfy the scope-down statement.
	//
	// With this option, you must configure the `ScopeDownStatement` property.
	// - `CUSTOM_KEYS` - Aggregate the request counts using one or more web request components as the aggregate keys.
	//
	// With this option, you must specify the aggregate keys in the `CustomKeys` property.
	//
	// To aggregate on only the IP address or only the forwarded IP address, don't use custom keys. Instead, set the aggregate key type to `IP` or `FORWARDED_IP` .
	// - `FORWARDED_IP` - Aggregate the request counts on the first IP address in an HTTP header.
	//
	// With this option, you must specify the header to use in the `ForwardedIPConfig` property.
	//
	// To aggregate on a combination of the forwarded IP address with other aggregate keys, use `CUSTOM_KEYS` .
	// - `IP` - Aggregate the request counts on the IP address from the web request origin.
	//
	// To aggregate on a combination of the IP address with other aggregate keys, use `CUSTOM_KEYS` .
	AggregateKeyType RuleGroupRateBasedStatementAggregateKeyType `pulumi:"aggregateKeyType"`
	// Specifies the aggregate keys to use in a rate-base rule.
	CustomKeys []RuleGroupRateBasedStatementCustomKey `pulumi:"customKeys"`
	// The amount of time, in seconds, that AWS WAF should include in its request counts, looking back from the current time. For example, for a setting of 120, when AWS WAF checks the rate, it counts the requests for the 2 minutes immediately preceding the current time. Valid settings are 60, 120, 300, and 600.
	//
	// This setting doesn't determine how often AWS WAF checks the rate, but how far back it looks each time it checks. AWS WAF checks the rate about every 10 seconds.
	//
	// Default: `300` (5 minutes)
	EvaluationWindowSec *int `pulumi:"evaluationWindowSec"`
	// The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	//
	// This is required if you specify a forwarded IP in the rule's aggregate key settings.
	ForwardedIpConfig *RuleGroupForwardedIpConfiguration `pulumi:"forwardedIpConfig"`
	// The limit on requests per 5-minute period for a single aggregation instance for the rate-based rule. If the rate-based statement includes a `ScopeDownStatement` , this limit is applied only to the requests that match the statement.
	//
	// Examples:
	//
	// - If you aggregate on just the IP address, this is the limit on requests from any single IP address.
	// - If you aggregate on the HTTP method and the query argument name "city", then this is the limit on requests for any single method, city pair.
	Limit int `pulumi:"limit"`
	// An optional nested statement that narrows the scope of the web requests that are evaluated and managed by the rate-based statement. When you use a scope-down statement, the rate-based rule only tracks and rate limits requests that match the scope-down statement. You can use any nestable `Statement` in the scope-down statement, and you can nest statements at any level, the same as you can for a rule statement.
	ScopeDownStatement *RuleGroupStatement `pulumi:"scopeDownStatement"`
}

type RuleGroupRateBasedStatementAggregateKeyType

type RuleGroupRateBasedStatementAggregateKeyType string

Setting that indicates how to aggregate the request counts.

> Web requests that are missing any of the components specified in the aggregation keys are omitted from the rate-based rule evaluation and handling.

- `CONSTANT` - Count and limit the requests that match the rate-based rule's scope-down statement. With this option, the counted requests aren't further aggregated. The scope-down statement is the only specification used. When the count of all requests that satisfy the scope-down statement goes over the limit, AWS WAF applies the rule action to all requests that satisfy the scope-down statement.

With this option, you must configure the `ScopeDownStatement` property. - `CUSTOM_KEYS` - Aggregate the request counts using one or more web request components as the aggregate keys.

With this option, you must specify the aggregate keys in the `CustomKeys` property.

To aggregate on only the IP address or only the forwarded IP address, don't use custom keys. Instead, set the aggregate key type to `IP` or `FORWARDED_IP` . - `FORWARDED_IP` - Aggregate the request counts on the first IP address in an HTTP header.

With this option, you must specify the header to use in the `ForwardedIPConfig` property.

To aggregate on a combination of the forwarded IP address with other aggregate keys, use `CUSTOM_KEYS` . - `IP` - Aggregate the request counts on the IP address from the web request origin.

To aggregate on a combination of the IP address with other aggregate keys, use `CUSTOM_KEYS` .

func (RuleGroupRateBasedStatementAggregateKeyType) ElementType

func (RuleGroupRateBasedStatementAggregateKeyType) ToRuleGroupRateBasedStatementAggregateKeyTypeOutput

func (e RuleGroupRateBasedStatementAggregateKeyType) ToRuleGroupRateBasedStatementAggregateKeyTypeOutput() RuleGroupRateBasedStatementAggregateKeyTypeOutput

func (RuleGroupRateBasedStatementAggregateKeyType) ToRuleGroupRateBasedStatementAggregateKeyTypeOutputWithContext

func (e RuleGroupRateBasedStatementAggregateKeyType) ToRuleGroupRateBasedStatementAggregateKeyTypeOutputWithContext(ctx context.Context) RuleGroupRateBasedStatementAggregateKeyTypeOutput

func (RuleGroupRateBasedStatementAggregateKeyType) ToRuleGroupRateBasedStatementAggregateKeyTypePtrOutput

func (e RuleGroupRateBasedStatementAggregateKeyType) ToRuleGroupRateBasedStatementAggregateKeyTypePtrOutput() RuleGroupRateBasedStatementAggregateKeyTypePtrOutput

func (RuleGroupRateBasedStatementAggregateKeyType) ToRuleGroupRateBasedStatementAggregateKeyTypePtrOutputWithContext

func (e RuleGroupRateBasedStatementAggregateKeyType) ToRuleGroupRateBasedStatementAggregateKeyTypePtrOutputWithContext(ctx context.Context) RuleGroupRateBasedStatementAggregateKeyTypePtrOutput

func (RuleGroupRateBasedStatementAggregateKeyType) ToStringOutput

func (RuleGroupRateBasedStatementAggregateKeyType) ToStringOutputWithContext

func (RuleGroupRateBasedStatementAggregateKeyType) ToStringPtrOutput

func (RuleGroupRateBasedStatementAggregateKeyType) ToStringPtrOutputWithContext

type RuleGroupRateBasedStatementAggregateKeyTypeInput

type RuleGroupRateBasedStatementAggregateKeyTypeInput interface {
	pulumi.Input

	ToRuleGroupRateBasedStatementAggregateKeyTypeOutput() RuleGroupRateBasedStatementAggregateKeyTypeOutput
	ToRuleGroupRateBasedStatementAggregateKeyTypeOutputWithContext(context.Context) RuleGroupRateBasedStatementAggregateKeyTypeOutput
}

RuleGroupRateBasedStatementAggregateKeyTypeInput is an input type that accepts values of the RuleGroupRateBasedStatementAggregateKeyType enum A concrete instance of `RuleGroupRateBasedStatementAggregateKeyTypeInput` can be one of the following:

RuleGroupRateBasedStatementAggregateKeyTypeIp
RuleGroupRateBasedStatementAggregateKeyTypeForwardedIp
RuleGroupRateBasedStatementAggregateKeyTypeConstant
RuleGroupRateBasedStatementAggregateKeyTypeCustomKeys

type RuleGroupRateBasedStatementAggregateKeyTypeOutput

type RuleGroupRateBasedStatementAggregateKeyTypeOutput struct{ *pulumi.OutputState }

func (RuleGroupRateBasedStatementAggregateKeyTypeOutput) ElementType

func (RuleGroupRateBasedStatementAggregateKeyTypeOutput) ToRuleGroupRateBasedStatementAggregateKeyTypeOutput

func (o RuleGroupRateBasedStatementAggregateKeyTypeOutput) ToRuleGroupRateBasedStatementAggregateKeyTypeOutput() RuleGroupRateBasedStatementAggregateKeyTypeOutput

func (RuleGroupRateBasedStatementAggregateKeyTypeOutput) ToRuleGroupRateBasedStatementAggregateKeyTypeOutputWithContext

func (o RuleGroupRateBasedStatementAggregateKeyTypeOutput) ToRuleGroupRateBasedStatementAggregateKeyTypeOutputWithContext(ctx context.Context) RuleGroupRateBasedStatementAggregateKeyTypeOutput

func (RuleGroupRateBasedStatementAggregateKeyTypeOutput) ToRuleGroupRateBasedStatementAggregateKeyTypePtrOutput

func (o RuleGroupRateBasedStatementAggregateKeyTypeOutput) ToRuleGroupRateBasedStatementAggregateKeyTypePtrOutput() RuleGroupRateBasedStatementAggregateKeyTypePtrOutput

func (RuleGroupRateBasedStatementAggregateKeyTypeOutput) ToRuleGroupRateBasedStatementAggregateKeyTypePtrOutputWithContext

func (o RuleGroupRateBasedStatementAggregateKeyTypeOutput) ToRuleGroupRateBasedStatementAggregateKeyTypePtrOutputWithContext(ctx context.Context) RuleGroupRateBasedStatementAggregateKeyTypePtrOutput

func (RuleGroupRateBasedStatementAggregateKeyTypeOutput) ToStringOutput

func (RuleGroupRateBasedStatementAggregateKeyTypeOutput) ToStringOutputWithContext

func (RuleGroupRateBasedStatementAggregateKeyTypeOutput) ToStringPtrOutput

func (RuleGroupRateBasedStatementAggregateKeyTypeOutput) ToStringPtrOutputWithContext

type RuleGroupRateBasedStatementAggregateKeyTypePtrInput

type RuleGroupRateBasedStatementAggregateKeyTypePtrInput interface {
	pulumi.Input

	ToRuleGroupRateBasedStatementAggregateKeyTypePtrOutput() RuleGroupRateBasedStatementAggregateKeyTypePtrOutput
	ToRuleGroupRateBasedStatementAggregateKeyTypePtrOutputWithContext(context.Context) RuleGroupRateBasedStatementAggregateKeyTypePtrOutput
}

type RuleGroupRateBasedStatementAggregateKeyTypePtrOutput

type RuleGroupRateBasedStatementAggregateKeyTypePtrOutput struct{ *pulumi.OutputState }

func (RuleGroupRateBasedStatementAggregateKeyTypePtrOutput) Elem

func (RuleGroupRateBasedStatementAggregateKeyTypePtrOutput) ElementType

func (RuleGroupRateBasedStatementAggregateKeyTypePtrOutput) ToRuleGroupRateBasedStatementAggregateKeyTypePtrOutput

func (RuleGroupRateBasedStatementAggregateKeyTypePtrOutput) ToRuleGroupRateBasedStatementAggregateKeyTypePtrOutputWithContext

func (o RuleGroupRateBasedStatementAggregateKeyTypePtrOutput) ToRuleGroupRateBasedStatementAggregateKeyTypePtrOutputWithContext(ctx context.Context) RuleGroupRateBasedStatementAggregateKeyTypePtrOutput

func (RuleGroupRateBasedStatementAggregateKeyTypePtrOutput) ToStringPtrOutput

func (RuleGroupRateBasedStatementAggregateKeyTypePtrOutput) ToStringPtrOutputWithContext

type RuleGroupRateBasedStatementArgs

type RuleGroupRateBasedStatementArgs struct {
	// Setting that indicates how to aggregate the request counts.
	//
	// > Web requests that are missing any of the components specified in the aggregation keys are omitted from the rate-based rule evaluation and handling.
	//
	// - `CONSTANT` - Count and limit the requests that match the rate-based rule's scope-down statement. With this option, the counted requests aren't further aggregated. The scope-down statement is the only specification used. When the count of all requests that satisfy the scope-down statement goes over the limit, AWS WAF applies the rule action to all requests that satisfy the scope-down statement.
	//
	// With this option, you must configure the `ScopeDownStatement` property.
	// - `CUSTOM_KEYS` - Aggregate the request counts using one or more web request components as the aggregate keys.
	//
	// With this option, you must specify the aggregate keys in the `CustomKeys` property.
	//
	// To aggregate on only the IP address or only the forwarded IP address, don't use custom keys. Instead, set the aggregate key type to `IP` or `FORWARDED_IP` .
	// - `FORWARDED_IP` - Aggregate the request counts on the first IP address in an HTTP header.
	//
	// With this option, you must specify the header to use in the `ForwardedIPConfig` property.
	//
	// To aggregate on a combination of the forwarded IP address with other aggregate keys, use `CUSTOM_KEYS` .
	// - `IP` - Aggregate the request counts on the IP address from the web request origin.
	//
	// To aggregate on a combination of the IP address with other aggregate keys, use `CUSTOM_KEYS` .
	AggregateKeyType RuleGroupRateBasedStatementAggregateKeyTypeInput `pulumi:"aggregateKeyType"`
	// Specifies the aggregate keys to use in a rate-base rule.
	CustomKeys RuleGroupRateBasedStatementCustomKeyArrayInput `pulumi:"customKeys"`
	// The amount of time, in seconds, that AWS WAF should include in its request counts, looking back from the current time. For example, for a setting of 120, when AWS WAF checks the rate, it counts the requests for the 2 minutes immediately preceding the current time. Valid settings are 60, 120, 300, and 600.
	//
	// This setting doesn't determine how often AWS WAF checks the rate, but how far back it looks each time it checks. AWS WAF checks the rate about every 10 seconds.
	//
	// Default: `300` (5 minutes)
	EvaluationWindowSec pulumi.IntPtrInput `pulumi:"evaluationWindowSec"`
	// The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	//
	// This is required if you specify a forwarded IP in the rule's aggregate key settings.
	ForwardedIpConfig RuleGroupForwardedIpConfigurationPtrInput `pulumi:"forwardedIpConfig"`
	// The limit on requests per 5-minute period for a single aggregation instance for the rate-based rule. If the rate-based statement includes a `ScopeDownStatement` , this limit is applied only to the requests that match the statement.
	//
	// Examples:
	//
	// - If you aggregate on just the IP address, this is the limit on requests from any single IP address.
	// - If you aggregate on the HTTP method and the query argument name "city", then this is the limit on requests for any single method, city pair.
	Limit pulumi.IntInput `pulumi:"limit"`
	// An optional nested statement that narrows the scope of the web requests that are evaluated and managed by the rate-based statement. When you use a scope-down statement, the rate-based rule only tracks and rate limits requests that match the scope-down statement. You can use any nestable `Statement` in the scope-down statement, and you can nest statements at any level, the same as you can for a rule statement.
	ScopeDownStatement RuleGroupStatementPtrInput `pulumi:"scopeDownStatement"`
}

func (RuleGroupRateBasedStatementArgs) ElementType

func (RuleGroupRateBasedStatementArgs) ToRuleGroupRateBasedStatementOutput

func (i RuleGroupRateBasedStatementArgs) ToRuleGroupRateBasedStatementOutput() RuleGroupRateBasedStatementOutput

func (RuleGroupRateBasedStatementArgs) ToRuleGroupRateBasedStatementOutputWithContext

func (i RuleGroupRateBasedStatementArgs) ToRuleGroupRateBasedStatementOutputWithContext(ctx context.Context) RuleGroupRateBasedStatementOutput

func (RuleGroupRateBasedStatementArgs) ToRuleGroupRateBasedStatementPtrOutput

func (i RuleGroupRateBasedStatementArgs) ToRuleGroupRateBasedStatementPtrOutput() RuleGroupRateBasedStatementPtrOutput

func (RuleGroupRateBasedStatementArgs) ToRuleGroupRateBasedStatementPtrOutputWithContext

func (i RuleGroupRateBasedStatementArgs) ToRuleGroupRateBasedStatementPtrOutputWithContext(ctx context.Context) RuleGroupRateBasedStatementPtrOutput

type RuleGroupRateBasedStatementCustomKey added in v0.70.0

type RuleGroupRateBasedStatementCustomKey struct {
	// Use the value of a cookie in the request as an aggregate key. Each distinct value in the cookie contributes to the aggregation instance. If you use a single cookie as your custom key, then each value fully defines an aggregation instance.
	Cookie *RuleGroupRateLimitCookie `pulumi:"cookie"`
	// Use the first IP address in an HTTP header as an aggregate key. Each distinct forwarded IP address contributes to the aggregation instance.
	//
	// When you specify an IP or forwarded IP in the custom key settings, you must also specify at least one other key to use. You can aggregate on only the forwarded IP address by specifying `FORWARDED_IP` in your rate-based statement's `AggregateKeyType` .
	//
	// With this option, you must specify the header to use in the rate-based rule's `ForwardedIPConfig` property.
	ForwardedIp *RuleGroupRateLimitForwardedIp `pulumi:"forwardedIp"`
	// Use the value of a header in the request as an aggregate key. Each distinct value in the header contributes to the aggregation instance. If you use a single header as your custom key, then each value fully defines an aggregation instance.
	Header *RuleGroupRateLimitHeader `pulumi:"header"`
	// Use the request's HTTP method as an aggregate key. Each distinct HTTP method contributes to the aggregation instance. If you use just the HTTP method as your custom key, then each method fully defines an aggregation instance.
	HttpMethod *RuleGroupRateLimitHttpMethod `pulumi:"httpMethod"`
	// Use the request's originating IP address as an aggregate key. Each distinct IP address contributes to the aggregation instance.
	//
	// When you specify an IP or forwarded IP in the custom key settings, you must also specify at least one other key to use. You can aggregate on only the IP address by specifying `IP` in your rate-based statement's `AggregateKeyType` .
	Ip *RuleGroupRateLimitIp `pulumi:"ip"`
	// Use the specified label namespace as an aggregate key. Each distinct fully qualified label name that has the specified label namespace contributes to the aggregation instance. If you use just one label namespace as your custom key, then each label name fully defines an aggregation instance.
	//
	// This uses only labels that have been added to the request by rules that are evaluated before this rate-based rule in the web ACL.
	//
	// For information about label namespaces and names, see [Label syntax and naming requirements](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-label-requirements.html) in the *AWS WAF Developer Guide* .
	LabelNamespace *RuleGroupRateLimitLabelNamespace `pulumi:"labelNamespace"`
	// Use the specified query argument as an aggregate key. Each distinct value for the named query argument contributes to the aggregation instance. If you use a single query argument as your custom key, then each value fully defines an aggregation instance.
	QueryArgument *RuleGroupRateLimitQueryArgument `pulumi:"queryArgument"`
	// Use the request's query string as an aggregate key. Each distinct string contributes to the aggregation instance. If you use just the query string as your custom key, then each string fully defines an aggregation instance.
	QueryString *RuleGroupRateLimitQueryString `pulumi:"queryString"`
	// Use the request's URI path as an aggregate key. Each distinct URI path contributes to the aggregation instance. If you use just the URI path as your custom key, then each URI path fully defines an aggregation instance.
	UriPath *RuleGroupRateLimitUriPath `pulumi:"uriPath"`
}

Specifies a single custom aggregate key for a rate-base rule.

type RuleGroupRateBasedStatementCustomKeyArgs added in v0.70.0

type RuleGroupRateBasedStatementCustomKeyArgs struct {
	// Use the value of a cookie in the request as an aggregate key. Each distinct value in the cookie contributes to the aggregation instance. If you use a single cookie as your custom key, then each value fully defines an aggregation instance.
	Cookie RuleGroupRateLimitCookiePtrInput `pulumi:"cookie"`
	// Use the first IP address in an HTTP header as an aggregate key. Each distinct forwarded IP address contributes to the aggregation instance.
	//
	// When you specify an IP or forwarded IP in the custom key settings, you must also specify at least one other key to use. You can aggregate on only the forwarded IP address by specifying `FORWARDED_IP` in your rate-based statement's `AggregateKeyType` .
	//
	// With this option, you must specify the header to use in the rate-based rule's `ForwardedIPConfig` property.
	ForwardedIp RuleGroupRateLimitForwardedIpPtrInput `pulumi:"forwardedIp"`
	// Use the value of a header in the request as an aggregate key. Each distinct value in the header contributes to the aggregation instance. If you use a single header as your custom key, then each value fully defines an aggregation instance.
	Header RuleGroupRateLimitHeaderPtrInput `pulumi:"header"`
	// Use the request's HTTP method as an aggregate key. Each distinct HTTP method contributes to the aggregation instance. If you use just the HTTP method as your custom key, then each method fully defines an aggregation instance.
	HttpMethod RuleGroupRateLimitHttpMethodPtrInput `pulumi:"httpMethod"`
	// Use the request's originating IP address as an aggregate key. Each distinct IP address contributes to the aggregation instance.
	//
	// When you specify an IP or forwarded IP in the custom key settings, you must also specify at least one other key to use. You can aggregate on only the IP address by specifying `IP` in your rate-based statement's `AggregateKeyType` .
	Ip RuleGroupRateLimitIpPtrInput `pulumi:"ip"`
	// Use the specified label namespace as an aggregate key. Each distinct fully qualified label name that has the specified label namespace contributes to the aggregation instance. If you use just one label namespace as your custom key, then each label name fully defines an aggregation instance.
	//
	// This uses only labels that have been added to the request by rules that are evaluated before this rate-based rule in the web ACL.
	//
	// For information about label namespaces and names, see [Label syntax and naming requirements](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-label-requirements.html) in the *AWS WAF Developer Guide* .
	LabelNamespace RuleGroupRateLimitLabelNamespacePtrInput `pulumi:"labelNamespace"`
	// Use the specified query argument as an aggregate key. Each distinct value for the named query argument contributes to the aggregation instance. If you use a single query argument as your custom key, then each value fully defines an aggregation instance.
	QueryArgument RuleGroupRateLimitQueryArgumentPtrInput `pulumi:"queryArgument"`
	// Use the request's query string as an aggregate key. Each distinct string contributes to the aggregation instance. If you use just the query string as your custom key, then each string fully defines an aggregation instance.
	QueryString RuleGroupRateLimitQueryStringPtrInput `pulumi:"queryString"`
	// Use the request's URI path as an aggregate key. Each distinct URI path contributes to the aggregation instance. If you use just the URI path as your custom key, then each URI path fully defines an aggregation instance.
	UriPath RuleGroupRateLimitUriPathPtrInput `pulumi:"uriPath"`
}

Specifies a single custom aggregate key for a rate-base rule.

func (RuleGroupRateBasedStatementCustomKeyArgs) ElementType added in v0.70.0

func (RuleGroupRateBasedStatementCustomKeyArgs) ToRuleGroupRateBasedStatementCustomKeyOutput added in v0.70.0

func (i RuleGroupRateBasedStatementCustomKeyArgs) ToRuleGroupRateBasedStatementCustomKeyOutput() RuleGroupRateBasedStatementCustomKeyOutput

func (RuleGroupRateBasedStatementCustomKeyArgs) ToRuleGroupRateBasedStatementCustomKeyOutputWithContext added in v0.70.0

func (i RuleGroupRateBasedStatementCustomKeyArgs) ToRuleGroupRateBasedStatementCustomKeyOutputWithContext(ctx context.Context) RuleGroupRateBasedStatementCustomKeyOutput

type RuleGroupRateBasedStatementCustomKeyArray added in v0.70.0

type RuleGroupRateBasedStatementCustomKeyArray []RuleGroupRateBasedStatementCustomKeyInput

func (RuleGroupRateBasedStatementCustomKeyArray) ElementType added in v0.70.0

func (RuleGroupRateBasedStatementCustomKeyArray) ToRuleGroupRateBasedStatementCustomKeyArrayOutput added in v0.70.0

func (i RuleGroupRateBasedStatementCustomKeyArray) ToRuleGroupRateBasedStatementCustomKeyArrayOutput() RuleGroupRateBasedStatementCustomKeyArrayOutput

func (RuleGroupRateBasedStatementCustomKeyArray) ToRuleGroupRateBasedStatementCustomKeyArrayOutputWithContext added in v0.70.0

func (i RuleGroupRateBasedStatementCustomKeyArray) ToRuleGroupRateBasedStatementCustomKeyArrayOutputWithContext(ctx context.Context) RuleGroupRateBasedStatementCustomKeyArrayOutput

type RuleGroupRateBasedStatementCustomKeyArrayInput added in v0.70.0

type RuleGroupRateBasedStatementCustomKeyArrayInput interface {
	pulumi.Input

	ToRuleGroupRateBasedStatementCustomKeyArrayOutput() RuleGroupRateBasedStatementCustomKeyArrayOutput
	ToRuleGroupRateBasedStatementCustomKeyArrayOutputWithContext(context.Context) RuleGroupRateBasedStatementCustomKeyArrayOutput
}

RuleGroupRateBasedStatementCustomKeyArrayInput is an input type that accepts RuleGroupRateBasedStatementCustomKeyArray and RuleGroupRateBasedStatementCustomKeyArrayOutput values. You can construct a concrete instance of `RuleGroupRateBasedStatementCustomKeyArrayInput` via:

RuleGroupRateBasedStatementCustomKeyArray{ RuleGroupRateBasedStatementCustomKeyArgs{...} }

type RuleGroupRateBasedStatementCustomKeyArrayOutput added in v0.70.0

type RuleGroupRateBasedStatementCustomKeyArrayOutput struct{ *pulumi.OutputState }

func (RuleGroupRateBasedStatementCustomKeyArrayOutput) ElementType added in v0.70.0

func (RuleGroupRateBasedStatementCustomKeyArrayOutput) Index added in v0.70.0

func (RuleGroupRateBasedStatementCustomKeyArrayOutput) ToRuleGroupRateBasedStatementCustomKeyArrayOutput added in v0.70.0

func (o RuleGroupRateBasedStatementCustomKeyArrayOutput) ToRuleGroupRateBasedStatementCustomKeyArrayOutput() RuleGroupRateBasedStatementCustomKeyArrayOutput

func (RuleGroupRateBasedStatementCustomKeyArrayOutput) ToRuleGroupRateBasedStatementCustomKeyArrayOutputWithContext added in v0.70.0

func (o RuleGroupRateBasedStatementCustomKeyArrayOutput) ToRuleGroupRateBasedStatementCustomKeyArrayOutputWithContext(ctx context.Context) RuleGroupRateBasedStatementCustomKeyArrayOutput

type RuleGroupRateBasedStatementCustomKeyInput added in v0.70.0

type RuleGroupRateBasedStatementCustomKeyInput interface {
	pulumi.Input

	ToRuleGroupRateBasedStatementCustomKeyOutput() RuleGroupRateBasedStatementCustomKeyOutput
	ToRuleGroupRateBasedStatementCustomKeyOutputWithContext(context.Context) RuleGroupRateBasedStatementCustomKeyOutput
}

RuleGroupRateBasedStatementCustomKeyInput is an input type that accepts RuleGroupRateBasedStatementCustomKeyArgs and RuleGroupRateBasedStatementCustomKeyOutput values. You can construct a concrete instance of `RuleGroupRateBasedStatementCustomKeyInput` via:

RuleGroupRateBasedStatementCustomKeyArgs{...}

type RuleGroupRateBasedStatementCustomKeyOutput added in v0.70.0

type RuleGroupRateBasedStatementCustomKeyOutput struct{ *pulumi.OutputState }

Specifies a single custom aggregate key for a rate-base rule.

func (RuleGroupRateBasedStatementCustomKeyOutput) Cookie added in v0.70.0

Use the value of a cookie in the request as an aggregate key. Each distinct value in the cookie contributes to the aggregation instance. If you use a single cookie as your custom key, then each value fully defines an aggregation instance.

func (RuleGroupRateBasedStatementCustomKeyOutput) ElementType added in v0.70.0

func (RuleGroupRateBasedStatementCustomKeyOutput) ForwardedIp added in v0.72.0

Use the first IP address in an HTTP header as an aggregate key. Each distinct forwarded IP address contributes to the aggregation instance.

When you specify an IP or forwarded IP in the custom key settings, you must also specify at least one other key to use. You can aggregate on only the forwarded IP address by specifying `FORWARDED_IP` in your rate-based statement's `AggregateKeyType` .

With this option, you must specify the header to use in the rate-based rule's `ForwardedIPConfig` property.

func (RuleGroupRateBasedStatementCustomKeyOutput) Header added in v0.70.0

Use the value of a header in the request as an aggregate key. Each distinct value in the header contributes to the aggregation instance. If you use a single header as your custom key, then each value fully defines an aggregation instance.

func (RuleGroupRateBasedStatementCustomKeyOutput) HttpMethod added in v0.72.0

Use the request's HTTP method as an aggregate key. Each distinct HTTP method contributes to the aggregation instance. If you use just the HTTP method as your custom key, then each method fully defines an aggregation instance.

func (RuleGroupRateBasedStatementCustomKeyOutput) Ip added in v0.72.0

Use the request's originating IP address as an aggregate key. Each distinct IP address contributes to the aggregation instance.

When you specify an IP or forwarded IP in the custom key settings, you must also specify at least one other key to use. You can aggregate on only the IP address by specifying `IP` in your rate-based statement's `AggregateKeyType` .

func (RuleGroupRateBasedStatementCustomKeyOutput) LabelNamespace added in v0.70.0

Use the specified label namespace as an aggregate key. Each distinct fully qualified label name that has the specified label namespace contributes to the aggregation instance. If you use just one label namespace as your custom key, then each label name fully defines an aggregation instance.

This uses only labels that have been added to the request by rules that are evaluated before this rate-based rule in the web ACL.

For information about label namespaces and names, see [Label syntax and naming requirements](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-label-requirements.html) in the *AWS WAF Developer Guide* .

func (RuleGroupRateBasedStatementCustomKeyOutput) QueryArgument added in v0.70.0

Use the specified query argument as an aggregate key. Each distinct value for the named query argument contributes to the aggregation instance. If you use a single query argument as your custom key, then each value fully defines an aggregation instance.

func (RuleGroupRateBasedStatementCustomKeyOutput) QueryString added in v0.70.0

Use the request's query string as an aggregate key. Each distinct string contributes to the aggregation instance. If you use just the query string as your custom key, then each string fully defines an aggregation instance.

func (RuleGroupRateBasedStatementCustomKeyOutput) ToRuleGroupRateBasedStatementCustomKeyOutput added in v0.70.0

func (o RuleGroupRateBasedStatementCustomKeyOutput) ToRuleGroupRateBasedStatementCustomKeyOutput() RuleGroupRateBasedStatementCustomKeyOutput

func (RuleGroupRateBasedStatementCustomKeyOutput) ToRuleGroupRateBasedStatementCustomKeyOutputWithContext added in v0.70.0

func (o RuleGroupRateBasedStatementCustomKeyOutput) ToRuleGroupRateBasedStatementCustomKeyOutputWithContext(ctx context.Context) RuleGroupRateBasedStatementCustomKeyOutput

func (RuleGroupRateBasedStatementCustomKeyOutput) UriPath added in v0.70.0

Use the request's URI path as an aggregate key. Each distinct URI path contributes to the aggregation instance. If you use just the URI path as your custom key, then each URI path fully defines an aggregation instance.

type RuleGroupRateBasedStatementInput

type RuleGroupRateBasedStatementInput interface {
	pulumi.Input

	ToRuleGroupRateBasedStatementOutput() RuleGroupRateBasedStatementOutput
	ToRuleGroupRateBasedStatementOutputWithContext(context.Context) RuleGroupRateBasedStatementOutput
}

RuleGroupRateBasedStatementInput is an input type that accepts RuleGroupRateBasedStatementArgs and RuleGroupRateBasedStatementOutput values. You can construct a concrete instance of `RuleGroupRateBasedStatementInput` via:

RuleGroupRateBasedStatementArgs{...}

type RuleGroupRateBasedStatementOutput

type RuleGroupRateBasedStatementOutput struct{ *pulumi.OutputState }

func (RuleGroupRateBasedStatementOutput) AggregateKeyType

Setting that indicates how to aggregate the request counts.

> Web requests that are missing any of the components specified in the aggregation keys are omitted from the rate-based rule evaluation and handling.

- `CONSTANT` - Count and limit the requests that match the rate-based rule's scope-down statement. With this option, the counted requests aren't further aggregated. The scope-down statement is the only specification used. When the count of all requests that satisfy the scope-down statement goes over the limit, AWS WAF applies the rule action to all requests that satisfy the scope-down statement.

With this option, you must configure the `ScopeDownStatement` property. - `CUSTOM_KEYS` - Aggregate the request counts using one or more web request components as the aggregate keys.

With this option, you must specify the aggregate keys in the `CustomKeys` property.

To aggregate on only the IP address or only the forwarded IP address, don't use custom keys. Instead, set the aggregate key type to `IP` or `FORWARDED_IP` . - `FORWARDED_IP` - Aggregate the request counts on the first IP address in an HTTP header.

With this option, you must specify the header to use in the `ForwardedIPConfig` property.

To aggregate on a combination of the forwarded IP address with other aggregate keys, use `CUSTOM_KEYS` . - `IP` - Aggregate the request counts on the IP address from the web request origin.

To aggregate on a combination of the IP address with other aggregate keys, use `CUSTOM_KEYS` .

func (RuleGroupRateBasedStatementOutput) CustomKeys added in v0.70.0

Specifies the aggregate keys to use in a rate-base rule.

func (RuleGroupRateBasedStatementOutput) ElementType

func (RuleGroupRateBasedStatementOutput) EvaluationWindowSec added in v0.99.0

func (o RuleGroupRateBasedStatementOutput) EvaluationWindowSec() pulumi.IntPtrOutput

The amount of time, in seconds, that AWS WAF should include in its request counts, looking back from the current time. For example, for a setting of 120, when AWS WAF checks the rate, it counts the requests for the 2 minutes immediately preceding the current time. Valid settings are 60, 120, 300, and 600.

This setting doesn't determine how often AWS WAF checks the rate, but how far back it looks each time it checks. AWS WAF checks the rate about every 10 seconds.

Default: `300` (5 minutes)

func (RuleGroupRateBasedStatementOutput) ForwardedIpConfig added in v0.72.0

The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

This is required if you specify a forwarded IP in the rule's aggregate key settings.

func (RuleGroupRateBasedStatementOutput) Limit

The limit on requests per 5-minute period for a single aggregation instance for the rate-based rule. If the rate-based statement includes a `ScopeDownStatement` , this limit is applied only to the requests that match the statement.

Examples:

- If you aggregate on just the IP address, this is the limit on requests from any single IP address. - If you aggregate on the HTTP method and the query argument name "city", then this is the limit on requests for any single method, city pair.

func (RuleGroupRateBasedStatementOutput) ScopeDownStatement

An optional nested statement that narrows the scope of the web requests that are evaluated and managed by the rate-based statement. When you use a scope-down statement, the rate-based rule only tracks and rate limits requests that match the scope-down statement. You can use any nestable `Statement` in the scope-down statement, and you can nest statements at any level, the same as you can for a rule statement.

func (RuleGroupRateBasedStatementOutput) ToRuleGroupRateBasedStatementOutput

func (o RuleGroupRateBasedStatementOutput) ToRuleGroupRateBasedStatementOutput() RuleGroupRateBasedStatementOutput

func (RuleGroupRateBasedStatementOutput) ToRuleGroupRateBasedStatementOutputWithContext

func (o RuleGroupRateBasedStatementOutput) ToRuleGroupRateBasedStatementOutputWithContext(ctx context.Context) RuleGroupRateBasedStatementOutput

func (RuleGroupRateBasedStatementOutput) ToRuleGroupRateBasedStatementPtrOutput

func (o RuleGroupRateBasedStatementOutput) ToRuleGroupRateBasedStatementPtrOutput() RuleGroupRateBasedStatementPtrOutput

func (RuleGroupRateBasedStatementOutput) ToRuleGroupRateBasedStatementPtrOutputWithContext

func (o RuleGroupRateBasedStatementOutput) ToRuleGroupRateBasedStatementPtrOutputWithContext(ctx context.Context) RuleGroupRateBasedStatementPtrOutput

type RuleGroupRateBasedStatementPtrInput

type RuleGroupRateBasedStatementPtrInput interface {
	pulumi.Input

	ToRuleGroupRateBasedStatementPtrOutput() RuleGroupRateBasedStatementPtrOutput
	ToRuleGroupRateBasedStatementPtrOutputWithContext(context.Context) RuleGroupRateBasedStatementPtrOutput
}

RuleGroupRateBasedStatementPtrInput is an input type that accepts RuleGroupRateBasedStatementArgs, RuleGroupRateBasedStatementPtr and RuleGroupRateBasedStatementPtrOutput values. You can construct a concrete instance of `RuleGroupRateBasedStatementPtrInput` via:

        RuleGroupRateBasedStatementArgs{...}

or:

        nil

type RuleGroupRateBasedStatementPtrOutput

type RuleGroupRateBasedStatementPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupRateBasedStatementPtrOutput) AggregateKeyType

Setting that indicates how to aggregate the request counts.

> Web requests that are missing any of the components specified in the aggregation keys are omitted from the rate-based rule evaluation and handling.

- `CONSTANT` - Count and limit the requests that match the rate-based rule's scope-down statement. With this option, the counted requests aren't further aggregated. The scope-down statement is the only specification used. When the count of all requests that satisfy the scope-down statement goes over the limit, AWS WAF applies the rule action to all requests that satisfy the scope-down statement.

With this option, you must configure the `ScopeDownStatement` property. - `CUSTOM_KEYS` - Aggregate the request counts using one or more web request components as the aggregate keys.

With this option, you must specify the aggregate keys in the `CustomKeys` property.

To aggregate on only the IP address or only the forwarded IP address, don't use custom keys. Instead, set the aggregate key type to `IP` or `FORWARDED_IP` . - `FORWARDED_IP` - Aggregate the request counts on the first IP address in an HTTP header.

With this option, you must specify the header to use in the `ForwardedIPConfig` property.

To aggregate on a combination of the forwarded IP address with other aggregate keys, use `CUSTOM_KEYS` . - `IP` - Aggregate the request counts on the IP address from the web request origin.

To aggregate on a combination of the IP address with other aggregate keys, use `CUSTOM_KEYS` .

func (RuleGroupRateBasedStatementPtrOutput) CustomKeys added in v0.70.0

Specifies the aggregate keys to use in a rate-base rule.

func (RuleGroupRateBasedStatementPtrOutput) Elem

func (RuleGroupRateBasedStatementPtrOutput) ElementType

func (RuleGroupRateBasedStatementPtrOutput) EvaluationWindowSec added in v0.99.0

The amount of time, in seconds, that AWS WAF should include in its request counts, looking back from the current time. For example, for a setting of 120, when AWS WAF checks the rate, it counts the requests for the 2 minutes immediately preceding the current time. Valid settings are 60, 120, 300, and 600.

This setting doesn't determine how often AWS WAF checks the rate, but how far back it looks each time it checks. AWS WAF checks the rate about every 10 seconds.

Default: `300` (5 minutes)

func (RuleGroupRateBasedStatementPtrOutput) ForwardedIpConfig added in v0.72.0

The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

This is required if you specify a forwarded IP in the rule's aggregate key settings.

func (RuleGroupRateBasedStatementPtrOutput) Limit

The limit on requests per 5-minute period for a single aggregation instance for the rate-based rule. If the rate-based statement includes a `ScopeDownStatement` , this limit is applied only to the requests that match the statement.

Examples:

- If you aggregate on just the IP address, this is the limit on requests from any single IP address. - If you aggregate on the HTTP method and the query argument name "city", then this is the limit on requests for any single method, city pair.

func (RuleGroupRateBasedStatementPtrOutput) ScopeDownStatement

An optional nested statement that narrows the scope of the web requests that are evaluated and managed by the rate-based statement. When you use a scope-down statement, the rate-based rule only tracks and rate limits requests that match the scope-down statement. You can use any nestable `Statement` in the scope-down statement, and you can nest statements at any level, the same as you can for a rule statement.

func (RuleGroupRateBasedStatementPtrOutput) ToRuleGroupRateBasedStatementPtrOutput

func (o RuleGroupRateBasedStatementPtrOutput) ToRuleGroupRateBasedStatementPtrOutput() RuleGroupRateBasedStatementPtrOutput

func (RuleGroupRateBasedStatementPtrOutput) ToRuleGroupRateBasedStatementPtrOutputWithContext

func (o RuleGroupRateBasedStatementPtrOutput) ToRuleGroupRateBasedStatementPtrOutputWithContext(ctx context.Context) RuleGroupRateBasedStatementPtrOutput

type RuleGroupRateLimitCookie added in v0.70.0

type RuleGroupRateLimitCookie struct {
	// The name of the cookie to use.
	Name string `pulumi:"name"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations []RuleGroupTextTransformation `pulumi:"textTransformations"`
}

Specifies a cookie as an aggregate key for a rate-based rule.

type RuleGroupRateLimitCookieArgs added in v0.70.0

type RuleGroupRateLimitCookieArgs struct {
	// The name of the cookie to use.
	Name pulumi.StringInput `pulumi:"name"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations RuleGroupTextTransformationArrayInput `pulumi:"textTransformations"`
}

Specifies a cookie as an aggregate key for a rate-based rule.

func (RuleGroupRateLimitCookieArgs) ElementType added in v0.70.0

func (RuleGroupRateLimitCookieArgs) ToRuleGroupRateLimitCookieOutput added in v0.70.0

func (i RuleGroupRateLimitCookieArgs) ToRuleGroupRateLimitCookieOutput() RuleGroupRateLimitCookieOutput

func (RuleGroupRateLimitCookieArgs) ToRuleGroupRateLimitCookieOutputWithContext added in v0.70.0

func (i RuleGroupRateLimitCookieArgs) ToRuleGroupRateLimitCookieOutputWithContext(ctx context.Context) RuleGroupRateLimitCookieOutput

func (RuleGroupRateLimitCookieArgs) ToRuleGroupRateLimitCookiePtrOutput added in v0.70.0

func (i RuleGroupRateLimitCookieArgs) ToRuleGroupRateLimitCookiePtrOutput() RuleGroupRateLimitCookiePtrOutput

func (RuleGroupRateLimitCookieArgs) ToRuleGroupRateLimitCookiePtrOutputWithContext added in v0.70.0

func (i RuleGroupRateLimitCookieArgs) ToRuleGroupRateLimitCookiePtrOutputWithContext(ctx context.Context) RuleGroupRateLimitCookiePtrOutput

type RuleGroupRateLimitCookieInput added in v0.70.0

type RuleGroupRateLimitCookieInput interface {
	pulumi.Input

	ToRuleGroupRateLimitCookieOutput() RuleGroupRateLimitCookieOutput
	ToRuleGroupRateLimitCookieOutputWithContext(context.Context) RuleGroupRateLimitCookieOutput
}

RuleGroupRateLimitCookieInput is an input type that accepts RuleGroupRateLimitCookieArgs and RuleGroupRateLimitCookieOutput values. You can construct a concrete instance of `RuleGroupRateLimitCookieInput` via:

RuleGroupRateLimitCookieArgs{...}

type RuleGroupRateLimitCookieOutput added in v0.70.0

type RuleGroupRateLimitCookieOutput struct{ *pulumi.OutputState }

Specifies a cookie as an aggregate key for a rate-based rule.

func (RuleGroupRateLimitCookieOutput) ElementType added in v0.70.0

func (RuleGroupRateLimitCookieOutput) Name added in v0.70.0

The name of the cookie to use.

func (RuleGroupRateLimitCookieOutput) TextTransformations added in v0.70.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (RuleGroupRateLimitCookieOutput) ToRuleGroupRateLimitCookieOutput added in v0.70.0

func (o RuleGroupRateLimitCookieOutput) ToRuleGroupRateLimitCookieOutput() RuleGroupRateLimitCookieOutput

func (RuleGroupRateLimitCookieOutput) ToRuleGroupRateLimitCookieOutputWithContext added in v0.70.0

func (o RuleGroupRateLimitCookieOutput) ToRuleGroupRateLimitCookieOutputWithContext(ctx context.Context) RuleGroupRateLimitCookieOutput

func (RuleGroupRateLimitCookieOutput) ToRuleGroupRateLimitCookiePtrOutput added in v0.70.0

func (o RuleGroupRateLimitCookieOutput) ToRuleGroupRateLimitCookiePtrOutput() RuleGroupRateLimitCookiePtrOutput

func (RuleGroupRateLimitCookieOutput) ToRuleGroupRateLimitCookiePtrOutputWithContext added in v0.70.0

func (o RuleGroupRateLimitCookieOutput) ToRuleGroupRateLimitCookiePtrOutputWithContext(ctx context.Context) RuleGroupRateLimitCookiePtrOutput

type RuleGroupRateLimitCookiePtrInput added in v0.70.0

type RuleGroupRateLimitCookiePtrInput interface {
	pulumi.Input

	ToRuleGroupRateLimitCookiePtrOutput() RuleGroupRateLimitCookiePtrOutput
	ToRuleGroupRateLimitCookiePtrOutputWithContext(context.Context) RuleGroupRateLimitCookiePtrOutput
}

RuleGroupRateLimitCookiePtrInput is an input type that accepts RuleGroupRateLimitCookieArgs, RuleGroupRateLimitCookiePtr and RuleGroupRateLimitCookiePtrOutput values. You can construct a concrete instance of `RuleGroupRateLimitCookiePtrInput` via:

        RuleGroupRateLimitCookieArgs{...}

or:

        nil

func RuleGroupRateLimitCookiePtr added in v0.70.0

func RuleGroupRateLimitCookiePtr(v *RuleGroupRateLimitCookieArgs) RuleGroupRateLimitCookiePtrInput

type RuleGroupRateLimitCookiePtrOutput added in v0.70.0

type RuleGroupRateLimitCookiePtrOutput struct{ *pulumi.OutputState }

func (RuleGroupRateLimitCookiePtrOutput) Elem added in v0.70.0

func (RuleGroupRateLimitCookiePtrOutput) ElementType added in v0.70.0

func (RuleGroupRateLimitCookiePtrOutput) Name added in v0.70.0

The name of the cookie to use.

func (RuleGroupRateLimitCookiePtrOutput) TextTransformations added in v0.70.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (RuleGroupRateLimitCookiePtrOutput) ToRuleGroupRateLimitCookiePtrOutput added in v0.70.0

func (o RuleGroupRateLimitCookiePtrOutput) ToRuleGroupRateLimitCookiePtrOutput() RuleGroupRateLimitCookiePtrOutput

func (RuleGroupRateLimitCookiePtrOutput) ToRuleGroupRateLimitCookiePtrOutputWithContext added in v0.70.0

func (o RuleGroupRateLimitCookiePtrOutput) ToRuleGroupRateLimitCookiePtrOutputWithContext(ctx context.Context) RuleGroupRateLimitCookiePtrOutput

type RuleGroupRateLimitForwardedIp added in v0.72.0

type RuleGroupRateLimitForwardedIp struct {
}

Specifies the first IP address in an HTTP header as an aggregate key for a rate-based rule.

type RuleGroupRateLimitForwardedIpArgs added in v0.72.0

type RuleGroupRateLimitForwardedIpArgs struct {
}

Specifies the first IP address in an HTTP header as an aggregate key for a rate-based rule.

func (RuleGroupRateLimitForwardedIpArgs) ElementType added in v0.72.0

func (RuleGroupRateLimitForwardedIpArgs) ToRuleGroupRateLimitForwardedIpOutput added in v0.72.0

func (i RuleGroupRateLimitForwardedIpArgs) ToRuleGroupRateLimitForwardedIpOutput() RuleGroupRateLimitForwardedIpOutput

func (RuleGroupRateLimitForwardedIpArgs) ToRuleGroupRateLimitForwardedIpOutputWithContext added in v0.72.0

func (i RuleGroupRateLimitForwardedIpArgs) ToRuleGroupRateLimitForwardedIpOutputWithContext(ctx context.Context) RuleGroupRateLimitForwardedIpOutput

func (RuleGroupRateLimitForwardedIpArgs) ToRuleGroupRateLimitForwardedIpPtrOutput added in v0.72.0

func (i RuleGroupRateLimitForwardedIpArgs) ToRuleGroupRateLimitForwardedIpPtrOutput() RuleGroupRateLimitForwardedIpPtrOutput

func (RuleGroupRateLimitForwardedIpArgs) ToRuleGroupRateLimitForwardedIpPtrOutputWithContext added in v0.72.0

func (i RuleGroupRateLimitForwardedIpArgs) ToRuleGroupRateLimitForwardedIpPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitForwardedIpPtrOutput

type RuleGroupRateLimitForwardedIpInput added in v0.72.0

type RuleGroupRateLimitForwardedIpInput interface {
	pulumi.Input

	ToRuleGroupRateLimitForwardedIpOutput() RuleGroupRateLimitForwardedIpOutput
	ToRuleGroupRateLimitForwardedIpOutputWithContext(context.Context) RuleGroupRateLimitForwardedIpOutput
}

RuleGroupRateLimitForwardedIpInput is an input type that accepts RuleGroupRateLimitForwardedIpArgs and RuleGroupRateLimitForwardedIpOutput values. You can construct a concrete instance of `RuleGroupRateLimitForwardedIpInput` via:

RuleGroupRateLimitForwardedIpArgs{...}

type RuleGroupRateLimitForwardedIpOutput added in v0.72.0

type RuleGroupRateLimitForwardedIpOutput struct{ *pulumi.OutputState }

Specifies the first IP address in an HTTP header as an aggregate key for a rate-based rule.

func (RuleGroupRateLimitForwardedIpOutput) ElementType added in v0.72.0

func (RuleGroupRateLimitForwardedIpOutput) ToRuleGroupRateLimitForwardedIpOutput added in v0.72.0

func (o RuleGroupRateLimitForwardedIpOutput) ToRuleGroupRateLimitForwardedIpOutput() RuleGroupRateLimitForwardedIpOutput

func (RuleGroupRateLimitForwardedIpOutput) ToRuleGroupRateLimitForwardedIpOutputWithContext added in v0.72.0

func (o RuleGroupRateLimitForwardedIpOutput) ToRuleGroupRateLimitForwardedIpOutputWithContext(ctx context.Context) RuleGroupRateLimitForwardedIpOutput

func (RuleGroupRateLimitForwardedIpOutput) ToRuleGroupRateLimitForwardedIpPtrOutput added in v0.72.0

func (o RuleGroupRateLimitForwardedIpOutput) ToRuleGroupRateLimitForwardedIpPtrOutput() RuleGroupRateLimitForwardedIpPtrOutput

func (RuleGroupRateLimitForwardedIpOutput) ToRuleGroupRateLimitForwardedIpPtrOutputWithContext added in v0.72.0

func (o RuleGroupRateLimitForwardedIpOutput) ToRuleGroupRateLimitForwardedIpPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitForwardedIpPtrOutput

type RuleGroupRateLimitForwardedIpPtrInput added in v0.72.0

type RuleGroupRateLimitForwardedIpPtrInput interface {
	pulumi.Input

	ToRuleGroupRateLimitForwardedIpPtrOutput() RuleGroupRateLimitForwardedIpPtrOutput
	ToRuleGroupRateLimitForwardedIpPtrOutputWithContext(context.Context) RuleGroupRateLimitForwardedIpPtrOutput
}

RuleGroupRateLimitForwardedIpPtrInput is an input type that accepts RuleGroupRateLimitForwardedIpArgs, RuleGroupRateLimitForwardedIpPtr and RuleGroupRateLimitForwardedIpPtrOutput values. You can construct a concrete instance of `RuleGroupRateLimitForwardedIpPtrInput` via:

        RuleGroupRateLimitForwardedIpArgs{...}

or:

        nil

type RuleGroupRateLimitForwardedIpPtrOutput added in v0.72.0

type RuleGroupRateLimitForwardedIpPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupRateLimitForwardedIpPtrOutput) Elem added in v0.72.0

func (RuleGroupRateLimitForwardedIpPtrOutput) ElementType added in v0.72.0

func (RuleGroupRateLimitForwardedIpPtrOutput) ToRuleGroupRateLimitForwardedIpPtrOutput added in v0.72.0

func (o RuleGroupRateLimitForwardedIpPtrOutput) ToRuleGroupRateLimitForwardedIpPtrOutput() RuleGroupRateLimitForwardedIpPtrOutput

func (RuleGroupRateLimitForwardedIpPtrOutput) ToRuleGroupRateLimitForwardedIpPtrOutputWithContext added in v0.72.0

func (o RuleGroupRateLimitForwardedIpPtrOutput) ToRuleGroupRateLimitForwardedIpPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitForwardedIpPtrOutput

type RuleGroupRateLimitHeader added in v0.70.0

type RuleGroupRateLimitHeader struct {
	// The name of the header to use.
	Name string `pulumi:"name"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations []RuleGroupTextTransformation `pulumi:"textTransformations"`
}

Specifies a header as an aggregate key for a rate-based rule.

type RuleGroupRateLimitHeaderArgs added in v0.70.0

type RuleGroupRateLimitHeaderArgs struct {
	// The name of the header to use.
	Name pulumi.StringInput `pulumi:"name"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations RuleGroupTextTransformationArrayInput `pulumi:"textTransformations"`
}

Specifies a header as an aggregate key for a rate-based rule.

func (RuleGroupRateLimitHeaderArgs) ElementType added in v0.70.0

func (RuleGroupRateLimitHeaderArgs) ToRuleGroupRateLimitHeaderOutput added in v0.70.0

func (i RuleGroupRateLimitHeaderArgs) ToRuleGroupRateLimitHeaderOutput() RuleGroupRateLimitHeaderOutput

func (RuleGroupRateLimitHeaderArgs) ToRuleGroupRateLimitHeaderOutputWithContext added in v0.70.0

func (i RuleGroupRateLimitHeaderArgs) ToRuleGroupRateLimitHeaderOutputWithContext(ctx context.Context) RuleGroupRateLimitHeaderOutput

func (RuleGroupRateLimitHeaderArgs) ToRuleGroupRateLimitHeaderPtrOutput added in v0.70.0

func (i RuleGroupRateLimitHeaderArgs) ToRuleGroupRateLimitHeaderPtrOutput() RuleGroupRateLimitHeaderPtrOutput

func (RuleGroupRateLimitHeaderArgs) ToRuleGroupRateLimitHeaderPtrOutputWithContext added in v0.70.0

func (i RuleGroupRateLimitHeaderArgs) ToRuleGroupRateLimitHeaderPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitHeaderPtrOutput

type RuleGroupRateLimitHeaderInput added in v0.70.0

type RuleGroupRateLimitHeaderInput interface {
	pulumi.Input

	ToRuleGroupRateLimitHeaderOutput() RuleGroupRateLimitHeaderOutput
	ToRuleGroupRateLimitHeaderOutputWithContext(context.Context) RuleGroupRateLimitHeaderOutput
}

RuleGroupRateLimitHeaderInput is an input type that accepts RuleGroupRateLimitHeaderArgs and RuleGroupRateLimitHeaderOutput values. You can construct a concrete instance of `RuleGroupRateLimitHeaderInput` via:

RuleGroupRateLimitHeaderArgs{...}

type RuleGroupRateLimitHeaderOutput added in v0.70.0

type RuleGroupRateLimitHeaderOutput struct{ *pulumi.OutputState }

Specifies a header as an aggregate key for a rate-based rule.

func (RuleGroupRateLimitHeaderOutput) ElementType added in v0.70.0

func (RuleGroupRateLimitHeaderOutput) Name added in v0.70.0

The name of the header to use.

func (RuleGroupRateLimitHeaderOutput) TextTransformations added in v0.70.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (RuleGroupRateLimitHeaderOutput) ToRuleGroupRateLimitHeaderOutput added in v0.70.0

func (o RuleGroupRateLimitHeaderOutput) ToRuleGroupRateLimitHeaderOutput() RuleGroupRateLimitHeaderOutput

func (RuleGroupRateLimitHeaderOutput) ToRuleGroupRateLimitHeaderOutputWithContext added in v0.70.0

func (o RuleGroupRateLimitHeaderOutput) ToRuleGroupRateLimitHeaderOutputWithContext(ctx context.Context) RuleGroupRateLimitHeaderOutput

func (RuleGroupRateLimitHeaderOutput) ToRuleGroupRateLimitHeaderPtrOutput added in v0.70.0

func (o RuleGroupRateLimitHeaderOutput) ToRuleGroupRateLimitHeaderPtrOutput() RuleGroupRateLimitHeaderPtrOutput

func (RuleGroupRateLimitHeaderOutput) ToRuleGroupRateLimitHeaderPtrOutputWithContext added in v0.70.0

func (o RuleGroupRateLimitHeaderOutput) ToRuleGroupRateLimitHeaderPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitHeaderPtrOutput

type RuleGroupRateLimitHeaderPtrInput added in v0.70.0

type RuleGroupRateLimitHeaderPtrInput interface {
	pulumi.Input

	ToRuleGroupRateLimitHeaderPtrOutput() RuleGroupRateLimitHeaderPtrOutput
	ToRuleGroupRateLimitHeaderPtrOutputWithContext(context.Context) RuleGroupRateLimitHeaderPtrOutput
}

RuleGroupRateLimitHeaderPtrInput is an input type that accepts RuleGroupRateLimitHeaderArgs, RuleGroupRateLimitHeaderPtr and RuleGroupRateLimitHeaderPtrOutput values. You can construct a concrete instance of `RuleGroupRateLimitHeaderPtrInput` via:

        RuleGroupRateLimitHeaderArgs{...}

or:

        nil

func RuleGroupRateLimitHeaderPtr added in v0.70.0

func RuleGroupRateLimitHeaderPtr(v *RuleGroupRateLimitHeaderArgs) RuleGroupRateLimitHeaderPtrInput

type RuleGroupRateLimitHeaderPtrOutput added in v0.70.0

type RuleGroupRateLimitHeaderPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupRateLimitHeaderPtrOutput) Elem added in v0.70.0

func (RuleGroupRateLimitHeaderPtrOutput) ElementType added in v0.70.0

func (RuleGroupRateLimitHeaderPtrOutput) Name added in v0.70.0

The name of the header to use.

func (RuleGroupRateLimitHeaderPtrOutput) TextTransformations added in v0.70.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (RuleGroupRateLimitHeaderPtrOutput) ToRuleGroupRateLimitHeaderPtrOutput added in v0.70.0

func (o RuleGroupRateLimitHeaderPtrOutput) ToRuleGroupRateLimitHeaderPtrOutput() RuleGroupRateLimitHeaderPtrOutput

func (RuleGroupRateLimitHeaderPtrOutput) ToRuleGroupRateLimitHeaderPtrOutputWithContext added in v0.70.0

func (o RuleGroupRateLimitHeaderPtrOutput) ToRuleGroupRateLimitHeaderPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitHeaderPtrOutput

type RuleGroupRateLimitHttpMethod added in v0.72.0

type RuleGroupRateLimitHttpMethod struct {
}

Specifies the request's HTTP method as an aggregate key for a rate-based rule.

type RuleGroupRateLimitHttpMethodArgs added in v0.72.0

type RuleGroupRateLimitHttpMethodArgs struct {
}

Specifies the request's HTTP method as an aggregate key for a rate-based rule.

func (RuleGroupRateLimitHttpMethodArgs) ElementType added in v0.72.0

func (RuleGroupRateLimitHttpMethodArgs) ToRuleGroupRateLimitHttpMethodOutput added in v0.72.0

func (i RuleGroupRateLimitHttpMethodArgs) ToRuleGroupRateLimitHttpMethodOutput() RuleGroupRateLimitHttpMethodOutput

func (RuleGroupRateLimitHttpMethodArgs) ToRuleGroupRateLimitHttpMethodOutputWithContext added in v0.72.0

func (i RuleGroupRateLimitHttpMethodArgs) ToRuleGroupRateLimitHttpMethodOutputWithContext(ctx context.Context) RuleGroupRateLimitHttpMethodOutput

func (RuleGroupRateLimitHttpMethodArgs) ToRuleGroupRateLimitHttpMethodPtrOutput added in v0.72.0

func (i RuleGroupRateLimitHttpMethodArgs) ToRuleGroupRateLimitHttpMethodPtrOutput() RuleGroupRateLimitHttpMethodPtrOutput

func (RuleGroupRateLimitHttpMethodArgs) ToRuleGroupRateLimitHttpMethodPtrOutputWithContext added in v0.72.0

func (i RuleGroupRateLimitHttpMethodArgs) ToRuleGroupRateLimitHttpMethodPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitHttpMethodPtrOutput

type RuleGroupRateLimitHttpMethodInput added in v0.72.0

type RuleGroupRateLimitHttpMethodInput interface {
	pulumi.Input

	ToRuleGroupRateLimitHttpMethodOutput() RuleGroupRateLimitHttpMethodOutput
	ToRuleGroupRateLimitHttpMethodOutputWithContext(context.Context) RuleGroupRateLimitHttpMethodOutput
}

RuleGroupRateLimitHttpMethodInput is an input type that accepts RuleGroupRateLimitHttpMethodArgs and RuleGroupRateLimitHttpMethodOutput values. You can construct a concrete instance of `RuleGroupRateLimitHttpMethodInput` via:

RuleGroupRateLimitHttpMethodArgs{...}

type RuleGroupRateLimitHttpMethodOutput added in v0.72.0

type RuleGroupRateLimitHttpMethodOutput struct{ *pulumi.OutputState }

Specifies the request's HTTP method as an aggregate key for a rate-based rule.

func (RuleGroupRateLimitHttpMethodOutput) ElementType added in v0.72.0

func (RuleGroupRateLimitHttpMethodOutput) ToRuleGroupRateLimitHttpMethodOutput added in v0.72.0

func (o RuleGroupRateLimitHttpMethodOutput) ToRuleGroupRateLimitHttpMethodOutput() RuleGroupRateLimitHttpMethodOutput

func (RuleGroupRateLimitHttpMethodOutput) ToRuleGroupRateLimitHttpMethodOutputWithContext added in v0.72.0

func (o RuleGroupRateLimitHttpMethodOutput) ToRuleGroupRateLimitHttpMethodOutputWithContext(ctx context.Context) RuleGroupRateLimitHttpMethodOutput

func (RuleGroupRateLimitHttpMethodOutput) ToRuleGroupRateLimitHttpMethodPtrOutput added in v0.72.0

func (o RuleGroupRateLimitHttpMethodOutput) ToRuleGroupRateLimitHttpMethodPtrOutput() RuleGroupRateLimitHttpMethodPtrOutput

func (RuleGroupRateLimitHttpMethodOutput) ToRuleGroupRateLimitHttpMethodPtrOutputWithContext added in v0.72.0

func (o RuleGroupRateLimitHttpMethodOutput) ToRuleGroupRateLimitHttpMethodPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitHttpMethodPtrOutput

type RuleGroupRateLimitHttpMethodPtrInput added in v0.72.0

type RuleGroupRateLimitHttpMethodPtrInput interface {
	pulumi.Input

	ToRuleGroupRateLimitHttpMethodPtrOutput() RuleGroupRateLimitHttpMethodPtrOutput
	ToRuleGroupRateLimitHttpMethodPtrOutputWithContext(context.Context) RuleGroupRateLimitHttpMethodPtrOutput
}

RuleGroupRateLimitHttpMethodPtrInput is an input type that accepts RuleGroupRateLimitHttpMethodArgs, RuleGroupRateLimitHttpMethodPtr and RuleGroupRateLimitHttpMethodPtrOutput values. You can construct a concrete instance of `RuleGroupRateLimitHttpMethodPtrInput` via:

        RuleGroupRateLimitHttpMethodArgs{...}

or:

        nil

func RuleGroupRateLimitHttpMethodPtr added in v0.72.0

type RuleGroupRateLimitHttpMethodPtrOutput added in v0.72.0

type RuleGroupRateLimitHttpMethodPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupRateLimitHttpMethodPtrOutput) Elem added in v0.72.0

func (RuleGroupRateLimitHttpMethodPtrOutput) ElementType added in v0.72.0

func (RuleGroupRateLimitHttpMethodPtrOutput) ToRuleGroupRateLimitHttpMethodPtrOutput added in v0.72.0

func (o RuleGroupRateLimitHttpMethodPtrOutput) ToRuleGroupRateLimitHttpMethodPtrOutput() RuleGroupRateLimitHttpMethodPtrOutput

func (RuleGroupRateLimitHttpMethodPtrOutput) ToRuleGroupRateLimitHttpMethodPtrOutputWithContext added in v0.72.0

func (o RuleGroupRateLimitHttpMethodPtrOutput) ToRuleGroupRateLimitHttpMethodPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitHttpMethodPtrOutput

type RuleGroupRateLimitIp added in v0.72.0

type RuleGroupRateLimitIp struct {
}

Specifies the IP address in the web request as an aggregate key for a rate-based rule.

type RuleGroupRateLimitIpArgs added in v0.72.0

type RuleGroupRateLimitIpArgs struct {
}

Specifies the IP address in the web request as an aggregate key for a rate-based rule.

func (RuleGroupRateLimitIpArgs) ElementType added in v0.72.0

func (RuleGroupRateLimitIpArgs) ElementType() reflect.Type

func (RuleGroupRateLimitIpArgs) ToRuleGroupRateLimitIpOutput added in v0.72.0

func (i RuleGroupRateLimitIpArgs) ToRuleGroupRateLimitIpOutput() RuleGroupRateLimitIpOutput

func (RuleGroupRateLimitIpArgs) ToRuleGroupRateLimitIpOutputWithContext added in v0.72.0

func (i RuleGroupRateLimitIpArgs) ToRuleGroupRateLimitIpOutputWithContext(ctx context.Context) RuleGroupRateLimitIpOutput

func (RuleGroupRateLimitIpArgs) ToRuleGroupRateLimitIpPtrOutput added in v0.72.0

func (i RuleGroupRateLimitIpArgs) ToRuleGroupRateLimitIpPtrOutput() RuleGroupRateLimitIpPtrOutput

func (RuleGroupRateLimitIpArgs) ToRuleGroupRateLimitIpPtrOutputWithContext added in v0.72.0

func (i RuleGroupRateLimitIpArgs) ToRuleGroupRateLimitIpPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitIpPtrOutput

type RuleGroupRateLimitIpInput added in v0.72.0

type RuleGroupRateLimitIpInput interface {
	pulumi.Input

	ToRuleGroupRateLimitIpOutput() RuleGroupRateLimitIpOutput
	ToRuleGroupRateLimitIpOutputWithContext(context.Context) RuleGroupRateLimitIpOutput
}

RuleGroupRateLimitIpInput is an input type that accepts RuleGroupRateLimitIpArgs and RuleGroupRateLimitIpOutput values. You can construct a concrete instance of `RuleGroupRateLimitIpInput` via:

RuleGroupRateLimitIpArgs{...}

type RuleGroupRateLimitIpOutput added in v0.72.0

type RuleGroupRateLimitIpOutput struct{ *pulumi.OutputState }

Specifies the IP address in the web request as an aggregate key for a rate-based rule.

func (RuleGroupRateLimitIpOutput) ElementType added in v0.72.0

func (RuleGroupRateLimitIpOutput) ElementType() reflect.Type

func (RuleGroupRateLimitIpOutput) ToRuleGroupRateLimitIpOutput added in v0.72.0

func (o RuleGroupRateLimitIpOutput) ToRuleGroupRateLimitIpOutput() RuleGroupRateLimitIpOutput

func (RuleGroupRateLimitIpOutput) ToRuleGroupRateLimitIpOutputWithContext added in v0.72.0

func (o RuleGroupRateLimitIpOutput) ToRuleGroupRateLimitIpOutputWithContext(ctx context.Context) RuleGroupRateLimitIpOutput

func (RuleGroupRateLimitIpOutput) ToRuleGroupRateLimitIpPtrOutput added in v0.72.0

func (o RuleGroupRateLimitIpOutput) ToRuleGroupRateLimitIpPtrOutput() RuleGroupRateLimitIpPtrOutput

func (RuleGroupRateLimitIpOutput) ToRuleGroupRateLimitIpPtrOutputWithContext added in v0.72.0

func (o RuleGroupRateLimitIpOutput) ToRuleGroupRateLimitIpPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitIpPtrOutput

type RuleGroupRateLimitIpPtrInput added in v0.72.0

type RuleGroupRateLimitIpPtrInput interface {
	pulumi.Input

	ToRuleGroupRateLimitIpPtrOutput() RuleGroupRateLimitIpPtrOutput
	ToRuleGroupRateLimitIpPtrOutputWithContext(context.Context) RuleGroupRateLimitIpPtrOutput
}

RuleGroupRateLimitIpPtrInput is an input type that accepts RuleGroupRateLimitIpArgs, RuleGroupRateLimitIpPtr and RuleGroupRateLimitIpPtrOutput values. You can construct a concrete instance of `RuleGroupRateLimitIpPtrInput` via:

        RuleGroupRateLimitIpArgs{...}

or:

        nil

func RuleGroupRateLimitIpPtr added in v0.72.0

func RuleGroupRateLimitIpPtr(v *RuleGroupRateLimitIpArgs) RuleGroupRateLimitIpPtrInput

type RuleGroupRateLimitIpPtrOutput added in v0.72.0

type RuleGroupRateLimitIpPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupRateLimitIpPtrOutput) Elem added in v0.72.0

func (RuleGroupRateLimitIpPtrOutput) ElementType added in v0.72.0

func (RuleGroupRateLimitIpPtrOutput) ToRuleGroupRateLimitIpPtrOutput added in v0.72.0

func (o RuleGroupRateLimitIpPtrOutput) ToRuleGroupRateLimitIpPtrOutput() RuleGroupRateLimitIpPtrOutput

func (RuleGroupRateLimitIpPtrOutput) ToRuleGroupRateLimitIpPtrOutputWithContext added in v0.72.0

func (o RuleGroupRateLimitIpPtrOutput) ToRuleGroupRateLimitIpPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitIpPtrOutput

type RuleGroupRateLimitLabelNamespace added in v0.70.0

type RuleGroupRateLimitLabelNamespace struct {
	// The namespace to use for aggregation.
	Namespace string `pulumi:"namespace"`
}

Specifies a label namespace to use as an aggregate key for a rate-based rule.

type RuleGroupRateLimitLabelNamespaceArgs added in v0.70.0

type RuleGroupRateLimitLabelNamespaceArgs struct {
	// The namespace to use for aggregation.
	Namespace pulumi.StringInput `pulumi:"namespace"`
}

Specifies a label namespace to use as an aggregate key for a rate-based rule.

func (RuleGroupRateLimitLabelNamespaceArgs) ElementType added in v0.70.0

func (RuleGroupRateLimitLabelNamespaceArgs) ToRuleGroupRateLimitLabelNamespaceOutput added in v0.70.0

func (i RuleGroupRateLimitLabelNamespaceArgs) ToRuleGroupRateLimitLabelNamespaceOutput() RuleGroupRateLimitLabelNamespaceOutput

func (RuleGroupRateLimitLabelNamespaceArgs) ToRuleGroupRateLimitLabelNamespaceOutputWithContext added in v0.70.0

func (i RuleGroupRateLimitLabelNamespaceArgs) ToRuleGroupRateLimitLabelNamespaceOutputWithContext(ctx context.Context) RuleGroupRateLimitLabelNamespaceOutput

func (RuleGroupRateLimitLabelNamespaceArgs) ToRuleGroupRateLimitLabelNamespacePtrOutput added in v0.70.0

func (i RuleGroupRateLimitLabelNamespaceArgs) ToRuleGroupRateLimitLabelNamespacePtrOutput() RuleGroupRateLimitLabelNamespacePtrOutput

func (RuleGroupRateLimitLabelNamespaceArgs) ToRuleGroupRateLimitLabelNamespacePtrOutputWithContext added in v0.70.0

func (i RuleGroupRateLimitLabelNamespaceArgs) ToRuleGroupRateLimitLabelNamespacePtrOutputWithContext(ctx context.Context) RuleGroupRateLimitLabelNamespacePtrOutput

type RuleGroupRateLimitLabelNamespaceInput added in v0.70.0

type RuleGroupRateLimitLabelNamespaceInput interface {
	pulumi.Input

	ToRuleGroupRateLimitLabelNamespaceOutput() RuleGroupRateLimitLabelNamespaceOutput
	ToRuleGroupRateLimitLabelNamespaceOutputWithContext(context.Context) RuleGroupRateLimitLabelNamespaceOutput
}

RuleGroupRateLimitLabelNamespaceInput is an input type that accepts RuleGroupRateLimitLabelNamespaceArgs and RuleGroupRateLimitLabelNamespaceOutput values. You can construct a concrete instance of `RuleGroupRateLimitLabelNamespaceInput` via:

RuleGroupRateLimitLabelNamespaceArgs{...}

type RuleGroupRateLimitLabelNamespaceOutput added in v0.70.0

type RuleGroupRateLimitLabelNamespaceOutput struct{ *pulumi.OutputState }

Specifies a label namespace to use as an aggregate key for a rate-based rule.

func (RuleGroupRateLimitLabelNamespaceOutput) ElementType added in v0.70.0

func (RuleGroupRateLimitLabelNamespaceOutput) Namespace added in v0.70.0

The namespace to use for aggregation.

func (RuleGroupRateLimitLabelNamespaceOutput) ToRuleGroupRateLimitLabelNamespaceOutput added in v0.70.0

func (o RuleGroupRateLimitLabelNamespaceOutput) ToRuleGroupRateLimitLabelNamespaceOutput() RuleGroupRateLimitLabelNamespaceOutput

func (RuleGroupRateLimitLabelNamespaceOutput) ToRuleGroupRateLimitLabelNamespaceOutputWithContext added in v0.70.0

func (o RuleGroupRateLimitLabelNamespaceOutput) ToRuleGroupRateLimitLabelNamespaceOutputWithContext(ctx context.Context) RuleGroupRateLimitLabelNamespaceOutput

func (RuleGroupRateLimitLabelNamespaceOutput) ToRuleGroupRateLimitLabelNamespacePtrOutput added in v0.70.0

func (o RuleGroupRateLimitLabelNamespaceOutput) ToRuleGroupRateLimitLabelNamespacePtrOutput() RuleGroupRateLimitLabelNamespacePtrOutput

func (RuleGroupRateLimitLabelNamespaceOutput) ToRuleGroupRateLimitLabelNamespacePtrOutputWithContext added in v0.70.0

func (o RuleGroupRateLimitLabelNamespaceOutput) ToRuleGroupRateLimitLabelNamespacePtrOutputWithContext(ctx context.Context) RuleGroupRateLimitLabelNamespacePtrOutput

type RuleGroupRateLimitLabelNamespacePtrInput added in v0.70.0

type RuleGroupRateLimitLabelNamespacePtrInput interface {
	pulumi.Input

	ToRuleGroupRateLimitLabelNamespacePtrOutput() RuleGroupRateLimitLabelNamespacePtrOutput
	ToRuleGroupRateLimitLabelNamespacePtrOutputWithContext(context.Context) RuleGroupRateLimitLabelNamespacePtrOutput
}

RuleGroupRateLimitLabelNamespacePtrInput is an input type that accepts RuleGroupRateLimitLabelNamespaceArgs, RuleGroupRateLimitLabelNamespacePtr and RuleGroupRateLimitLabelNamespacePtrOutput values. You can construct a concrete instance of `RuleGroupRateLimitLabelNamespacePtrInput` via:

        RuleGroupRateLimitLabelNamespaceArgs{...}

or:

        nil

type RuleGroupRateLimitLabelNamespacePtrOutput added in v0.70.0

type RuleGroupRateLimitLabelNamespacePtrOutput struct{ *pulumi.OutputState }

func (RuleGroupRateLimitLabelNamespacePtrOutput) Elem added in v0.70.0

func (RuleGroupRateLimitLabelNamespacePtrOutput) ElementType added in v0.70.0

func (RuleGroupRateLimitLabelNamespacePtrOutput) Namespace added in v0.70.0

The namespace to use for aggregation.

func (RuleGroupRateLimitLabelNamespacePtrOutput) ToRuleGroupRateLimitLabelNamespacePtrOutput added in v0.70.0

func (o RuleGroupRateLimitLabelNamespacePtrOutput) ToRuleGroupRateLimitLabelNamespacePtrOutput() RuleGroupRateLimitLabelNamespacePtrOutput

func (RuleGroupRateLimitLabelNamespacePtrOutput) ToRuleGroupRateLimitLabelNamespacePtrOutputWithContext added in v0.70.0

func (o RuleGroupRateLimitLabelNamespacePtrOutput) ToRuleGroupRateLimitLabelNamespacePtrOutputWithContext(ctx context.Context) RuleGroupRateLimitLabelNamespacePtrOutput

type RuleGroupRateLimitQueryArgument added in v0.70.0

type RuleGroupRateLimitQueryArgument struct {
	// The name of the query argument to use.
	Name string `pulumi:"name"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations []RuleGroupTextTransformation `pulumi:"textTransformations"`
}

Specifies a query argument in the request as an aggregate key for a rate-based rule.

type RuleGroupRateLimitQueryArgumentArgs added in v0.70.0

type RuleGroupRateLimitQueryArgumentArgs struct {
	// The name of the query argument to use.
	Name pulumi.StringInput `pulumi:"name"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations RuleGroupTextTransformationArrayInput `pulumi:"textTransformations"`
}

Specifies a query argument in the request as an aggregate key for a rate-based rule.

func (RuleGroupRateLimitQueryArgumentArgs) ElementType added in v0.70.0

func (RuleGroupRateLimitQueryArgumentArgs) ToRuleGroupRateLimitQueryArgumentOutput added in v0.70.0

func (i RuleGroupRateLimitQueryArgumentArgs) ToRuleGroupRateLimitQueryArgumentOutput() RuleGroupRateLimitQueryArgumentOutput

func (RuleGroupRateLimitQueryArgumentArgs) ToRuleGroupRateLimitQueryArgumentOutputWithContext added in v0.70.0

func (i RuleGroupRateLimitQueryArgumentArgs) ToRuleGroupRateLimitQueryArgumentOutputWithContext(ctx context.Context) RuleGroupRateLimitQueryArgumentOutput

func (RuleGroupRateLimitQueryArgumentArgs) ToRuleGroupRateLimitQueryArgumentPtrOutput added in v0.70.0

func (i RuleGroupRateLimitQueryArgumentArgs) ToRuleGroupRateLimitQueryArgumentPtrOutput() RuleGroupRateLimitQueryArgumentPtrOutput

func (RuleGroupRateLimitQueryArgumentArgs) ToRuleGroupRateLimitQueryArgumentPtrOutputWithContext added in v0.70.0

func (i RuleGroupRateLimitQueryArgumentArgs) ToRuleGroupRateLimitQueryArgumentPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitQueryArgumentPtrOutput

type RuleGroupRateLimitQueryArgumentInput added in v0.70.0

type RuleGroupRateLimitQueryArgumentInput interface {
	pulumi.Input

	ToRuleGroupRateLimitQueryArgumentOutput() RuleGroupRateLimitQueryArgumentOutput
	ToRuleGroupRateLimitQueryArgumentOutputWithContext(context.Context) RuleGroupRateLimitQueryArgumentOutput
}

RuleGroupRateLimitQueryArgumentInput is an input type that accepts RuleGroupRateLimitQueryArgumentArgs and RuleGroupRateLimitQueryArgumentOutput values. You can construct a concrete instance of `RuleGroupRateLimitQueryArgumentInput` via:

RuleGroupRateLimitQueryArgumentArgs{...}

type RuleGroupRateLimitQueryArgumentOutput added in v0.70.0

type RuleGroupRateLimitQueryArgumentOutput struct{ *pulumi.OutputState }

Specifies a query argument in the request as an aggregate key for a rate-based rule.

func (RuleGroupRateLimitQueryArgumentOutput) ElementType added in v0.70.0

func (RuleGroupRateLimitQueryArgumentOutput) Name added in v0.70.0

The name of the query argument to use.

func (RuleGroupRateLimitQueryArgumentOutput) TextTransformations added in v0.70.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (RuleGroupRateLimitQueryArgumentOutput) ToRuleGroupRateLimitQueryArgumentOutput added in v0.70.0

func (o RuleGroupRateLimitQueryArgumentOutput) ToRuleGroupRateLimitQueryArgumentOutput() RuleGroupRateLimitQueryArgumentOutput

func (RuleGroupRateLimitQueryArgumentOutput) ToRuleGroupRateLimitQueryArgumentOutputWithContext added in v0.70.0

func (o RuleGroupRateLimitQueryArgumentOutput) ToRuleGroupRateLimitQueryArgumentOutputWithContext(ctx context.Context) RuleGroupRateLimitQueryArgumentOutput

func (RuleGroupRateLimitQueryArgumentOutput) ToRuleGroupRateLimitQueryArgumentPtrOutput added in v0.70.0

func (o RuleGroupRateLimitQueryArgumentOutput) ToRuleGroupRateLimitQueryArgumentPtrOutput() RuleGroupRateLimitQueryArgumentPtrOutput

func (RuleGroupRateLimitQueryArgumentOutput) ToRuleGroupRateLimitQueryArgumentPtrOutputWithContext added in v0.70.0

func (o RuleGroupRateLimitQueryArgumentOutput) ToRuleGroupRateLimitQueryArgumentPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitQueryArgumentPtrOutput

type RuleGroupRateLimitQueryArgumentPtrInput added in v0.70.0

type RuleGroupRateLimitQueryArgumentPtrInput interface {
	pulumi.Input

	ToRuleGroupRateLimitQueryArgumentPtrOutput() RuleGroupRateLimitQueryArgumentPtrOutput
	ToRuleGroupRateLimitQueryArgumentPtrOutputWithContext(context.Context) RuleGroupRateLimitQueryArgumentPtrOutput
}

RuleGroupRateLimitQueryArgumentPtrInput is an input type that accepts RuleGroupRateLimitQueryArgumentArgs, RuleGroupRateLimitQueryArgumentPtr and RuleGroupRateLimitQueryArgumentPtrOutput values. You can construct a concrete instance of `RuleGroupRateLimitQueryArgumentPtrInput` via:

        RuleGroupRateLimitQueryArgumentArgs{...}

or:

        nil

type RuleGroupRateLimitQueryArgumentPtrOutput added in v0.70.0

type RuleGroupRateLimitQueryArgumentPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupRateLimitQueryArgumentPtrOutput) Elem added in v0.70.0

func (RuleGroupRateLimitQueryArgumentPtrOutput) ElementType added in v0.70.0

func (RuleGroupRateLimitQueryArgumentPtrOutput) Name added in v0.70.0

The name of the query argument to use.

func (RuleGroupRateLimitQueryArgumentPtrOutput) TextTransformations added in v0.70.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (RuleGroupRateLimitQueryArgumentPtrOutput) ToRuleGroupRateLimitQueryArgumentPtrOutput added in v0.70.0

func (o RuleGroupRateLimitQueryArgumentPtrOutput) ToRuleGroupRateLimitQueryArgumentPtrOutput() RuleGroupRateLimitQueryArgumentPtrOutput

func (RuleGroupRateLimitQueryArgumentPtrOutput) ToRuleGroupRateLimitQueryArgumentPtrOutputWithContext added in v0.70.0

func (o RuleGroupRateLimitQueryArgumentPtrOutput) ToRuleGroupRateLimitQueryArgumentPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitQueryArgumentPtrOutput

type RuleGroupRateLimitQueryString added in v0.70.0

type RuleGroupRateLimitQueryString struct {
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations []RuleGroupTextTransformation `pulumi:"textTransformations"`
}

Specifies the request's query string as an aggregate key for a rate-based rule.

type RuleGroupRateLimitQueryStringArgs added in v0.70.0

type RuleGroupRateLimitQueryStringArgs struct {
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations RuleGroupTextTransformationArrayInput `pulumi:"textTransformations"`
}

Specifies the request's query string as an aggregate key for a rate-based rule.

func (RuleGroupRateLimitQueryStringArgs) ElementType added in v0.70.0

func (RuleGroupRateLimitQueryStringArgs) ToRuleGroupRateLimitQueryStringOutput added in v0.70.0

func (i RuleGroupRateLimitQueryStringArgs) ToRuleGroupRateLimitQueryStringOutput() RuleGroupRateLimitQueryStringOutput

func (RuleGroupRateLimitQueryStringArgs) ToRuleGroupRateLimitQueryStringOutputWithContext added in v0.70.0

func (i RuleGroupRateLimitQueryStringArgs) ToRuleGroupRateLimitQueryStringOutputWithContext(ctx context.Context) RuleGroupRateLimitQueryStringOutput

func (RuleGroupRateLimitQueryStringArgs) ToRuleGroupRateLimitQueryStringPtrOutput added in v0.70.0

func (i RuleGroupRateLimitQueryStringArgs) ToRuleGroupRateLimitQueryStringPtrOutput() RuleGroupRateLimitQueryStringPtrOutput

func (RuleGroupRateLimitQueryStringArgs) ToRuleGroupRateLimitQueryStringPtrOutputWithContext added in v0.70.0

func (i RuleGroupRateLimitQueryStringArgs) ToRuleGroupRateLimitQueryStringPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitQueryStringPtrOutput

type RuleGroupRateLimitQueryStringInput added in v0.70.0

type RuleGroupRateLimitQueryStringInput interface {
	pulumi.Input

	ToRuleGroupRateLimitQueryStringOutput() RuleGroupRateLimitQueryStringOutput
	ToRuleGroupRateLimitQueryStringOutputWithContext(context.Context) RuleGroupRateLimitQueryStringOutput
}

RuleGroupRateLimitQueryStringInput is an input type that accepts RuleGroupRateLimitQueryStringArgs and RuleGroupRateLimitQueryStringOutput values. You can construct a concrete instance of `RuleGroupRateLimitQueryStringInput` via:

RuleGroupRateLimitQueryStringArgs{...}

type RuleGroupRateLimitQueryStringOutput added in v0.70.0

type RuleGroupRateLimitQueryStringOutput struct{ *pulumi.OutputState }

Specifies the request's query string as an aggregate key for a rate-based rule.

func (RuleGroupRateLimitQueryStringOutput) ElementType added in v0.70.0

func (RuleGroupRateLimitQueryStringOutput) TextTransformations added in v0.70.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (RuleGroupRateLimitQueryStringOutput) ToRuleGroupRateLimitQueryStringOutput added in v0.70.0

func (o RuleGroupRateLimitQueryStringOutput) ToRuleGroupRateLimitQueryStringOutput() RuleGroupRateLimitQueryStringOutput

func (RuleGroupRateLimitQueryStringOutput) ToRuleGroupRateLimitQueryStringOutputWithContext added in v0.70.0

func (o RuleGroupRateLimitQueryStringOutput) ToRuleGroupRateLimitQueryStringOutputWithContext(ctx context.Context) RuleGroupRateLimitQueryStringOutput

func (RuleGroupRateLimitQueryStringOutput) ToRuleGroupRateLimitQueryStringPtrOutput added in v0.70.0

func (o RuleGroupRateLimitQueryStringOutput) ToRuleGroupRateLimitQueryStringPtrOutput() RuleGroupRateLimitQueryStringPtrOutput

func (RuleGroupRateLimitQueryStringOutput) ToRuleGroupRateLimitQueryStringPtrOutputWithContext added in v0.70.0

func (o RuleGroupRateLimitQueryStringOutput) ToRuleGroupRateLimitQueryStringPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitQueryStringPtrOutput

type RuleGroupRateLimitQueryStringPtrInput added in v0.70.0

type RuleGroupRateLimitQueryStringPtrInput interface {
	pulumi.Input

	ToRuleGroupRateLimitQueryStringPtrOutput() RuleGroupRateLimitQueryStringPtrOutput
	ToRuleGroupRateLimitQueryStringPtrOutputWithContext(context.Context) RuleGroupRateLimitQueryStringPtrOutput
}

RuleGroupRateLimitQueryStringPtrInput is an input type that accepts RuleGroupRateLimitQueryStringArgs, RuleGroupRateLimitQueryStringPtr and RuleGroupRateLimitQueryStringPtrOutput values. You can construct a concrete instance of `RuleGroupRateLimitQueryStringPtrInput` via:

        RuleGroupRateLimitQueryStringArgs{...}

or:

        nil

type RuleGroupRateLimitQueryStringPtrOutput added in v0.70.0

type RuleGroupRateLimitQueryStringPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupRateLimitQueryStringPtrOutput) Elem added in v0.70.0

func (RuleGroupRateLimitQueryStringPtrOutput) ElementType added in v0.70.0

func (RuleGroupRateLimitQueryStringPtrOutput) TextTransformations added in v0.70.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (RuleGroupRateLimitQueryStringPtrOutput) ToRuleGroupRateLimitQueryStringPtrOutput added in v0.70.0

func (o RuleGroupRateLimitQueryStringPtrOutput) ToRuleGroupRateLimitQueryStringPtrOutput() RuleGroupRateLimitQueryStringPtrOutput

func (RuleGroupRateLimitQueryStringPtrOutput) ToRuleGroupRateLimitQueryStringPtrOutputWithContext added in v0.70.0

func (o RuleGroupRateLimitQueryStringPtrOutput) ToRuleGroupRateLimitQueryStringPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitQueryStringPtrOutput

type RuleGroupRateLimitUriPath added in v0.70.0

type RuleGroupRateLimitUriPath struct {
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations []RuleGroupTextTransformation `pulumi:"textTransformations"`
}

Specifies the request's URI Path as an aggregate key for a rate-based rule.

type RuleGroupRateLimitUriPathArgs added in v0.70.0

type RuleGroupRateLimitUriPathArgs struct {
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations RuleGroupTextTransformationArrayInput `pulumi:"textTransformations"`
}

Specifies the request's URI Path as an aggregate key for a rate-based rule.

func (RuleGroupRateLimitUriPathArgs) ElementType added in v0.70.0

func (RuleGroupRateLimitUriPathArgs) ToRuleGroupRateLimitUriPathOutput added in v0.70.0

func (i RuleGroupRateLimitUriPathArgs) ToRuleGroupRateLimitUriPathOutput() RuleGroupRateLimitUriPathOutput

func (RuleGroupRateLimitUriPathArgs) ToRuleGroupRateLimitUriPathOutputWithContext added in v0.70.0

func (i RuleGroupRateLimitUriPathArgs) ToRuleGroupRateLimitUriPathOutputWithContext(ctx context.Context) RuleGroupRateLimitUriPathOutput

func (RuleGroupRateLimitUriPathArgs) ToRuleGroupRateLimitUriPathPtrOutput added in v0.70.0

func (i RuleGroupRateLimitUriPathArgs) ToRuleGroupRateLimitUriPathPtrOutput() RuleGroupRateLimitUriPathPtrOutput

func (RuleGroupRateLimitUriPathArgs) ToRuleGroupRateLimitUriPathPtrOutputWithContext added in v0.70.0

func (i RuleGroupRateLimitUriPathArgs) ToRuleGroupRateLimitUriPathPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitUriPathPtrOutput

type RuleGroupRateLimitUriPathInput added in v0.70.0

type RuleGroupRateLimitUriPathInput interface {
	pulumi.Input

	ToRuleGroupRateLimitUriPathOutput() RuleGroupRateLimitUriPathOutput
	ToRuleGroupRateLimitUriPathOutputWithContext(context.Context) RuleGroupRateLimitUriPathOutput
}

RuleGroupRateLimitUriPathInput is an input type that accepts RuleGroupRateLimitUriPathArgs and RuleGroupRateLimitUriPathOutput values. You can construct a concrete instance of `RuleGroupRateLimitUriPathInput` via:

RuleGroupRateLimitUriPathArgs{...}

type RuleGroupRateLimitUriPathOutput added in v0.70.0

type RuleGroupRateLimitUriPathOutput struct{ *pulumi.OutputState }

Specifies the request's URI Path as an aggregate key for a rate-based rule.

func (RuleGroupRateLimitUriPathOutput) ElementType added in v0.70.0

func (RuleGroupRateLimitUriPathOutput) TextTransformations added in v0.70.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (RuleGroupRateLimitUriPathOutput) ToRuleGroupRateLimitUriPathOutput added in v0.70.0

func (o RuleGroupRateLimitUriPathOutput) ToRuleGroupRateLimitUriPathOutput() RuleGroupRateLimitUriPathOutput

func (RuleGroupRateLimitUriPathOutput) ToRuleGroupRateLimitUriPathOutputWithContext added in v0.70.0

func (o RuleGroupRateLimitUriPathOutput) ToRuleGroupRateLimitUriPathOutputWithContext(ctx context.Context) RuleGroupRateLimitUriPathOutput

func (RuleGroupRateLimitUriPathOutput) ToRuleGroupRateLimitUriPathPtrOutput added in v0.70.0

func (o RuleGroupRateLimitUriPathOutput) ToRuleGroupRateLimitUriPathPtrOutput() RuleGroupRateLimitUriPathPtrOutput

func (RuleGroupRateLimitUriPathOutput) ToRuleGroupRateLimitUriPathPtrOutputWithContext added in v0.70.0

func (o RuleGroupRateLimitUriPathOutput) ToRuleGroupRateLimitUriPathPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitUriPathPtrOutput

type RuleGroupRateLimitUriPathPtrInput added in v0.70.0

type RuleGroupRateLimitUriPathPtrInput interface {
	pulumi.Input

	ToRuleGroupRateLimitUriPathPtrOutput() RuleGroupRateLimitUriPathPtrOutput
	ToRuleGroupRateLimitUriPathPtrOutputWithContext(context.Context) RuleGroupRateLimitUriPathPtrOutput
}

RuleGroupRateLimitUriPathPtrInput is an input type that accepts RuleGroupRateLimitUriPathArgs, RuleGroupRateLimitUriPathPtr and RuleGroupRateLimitUriPathPtrOutput values. You can construct a concrete instance of `RuleGroupRateLimitUriPathPtrInput` via:

        RuleGroupRateLimitUriPathArgs{...}

or:

        nil

func RuleGroupRateLimitUriPathPtr added in v0.70.0

type RuleGroupRateLimitUriPathPtrOutput added in v0.70.0

type RuleGroupRateLimitUriPathPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupRateLimitUriPathPtrOutput) Elem added in v0.70.0

func (RuleGroupRateLimitUriPathPtrOutput) ElementType added in v0.70.0

func (RuleGroupRateLimitUriPathPtrOutput) TextTransformations added in v0.70.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (RuleGroupRateLimitUriPathPtrOutput) ToRuleGroupRateLimitUriPathPtrOutput added in v0.70.0

func (o RuleGroupRateLimitUriPathPtrOutput) ToRuleGroupRateLimitUriPathPtrOutput() RuleGroupRateLimitUriPathPtrOutput

func (RuleGroupRateLimitUriPathPtrOutput) ToRuleGroupRateLimitUriPathPtrOutputWithContext added in v0.70.0

func (o RuleGroupRateLimitUriPathPtrOutput) ToRuleGroupRateLimitUriPathPtrOutputWithContext(ctx context.Context) RuleGroupRateLimitUriPathPtrOutput

type RuleGroupRegexMatchStatement added in v0.9.0

type RuleGroupRegexMatchStatement struct {
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch RuleGroupFieldToMatch `pulumi:"fieldToMatch"`
	// The string representing the regular expression.
	RegexString string `pulumi:"regexString"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations []RuleGroupTextTransformation `pulumi:"textTransformations"`
}

type RuleGroupRegexMatchStatementArgs added in v0.9.0

type RuleGroupRegexMatchStatementArgs struct {
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch RuleGroupFieldToMatchInput `pulumi:"fieldToMatch"`
	// The string representing the regular expression.
	RegexString pulumi.StringInput `pulumi:"regexString"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations RuleGroupTextTransformationArrayInput `pulumi:"textTransformations"`
}

func (RuleGroupRegexMatchStatementArgs) ElementType added in v0.9.0

func (RuleGroupRegexMatchStatementArgs) ToRuleGroupRegexMatchStatementOutput added in v0.9.0

func (i RuleGroupRegexMatchStatementArgs) ToRuleGroupRegexMatchStatementOutput() RuleGroupRegexMatchStatementOutput

func (RuleGroupRegexMatchStatementArgs) ToRuleGroupRegexMatchStatementOutputWithContext added in v0.9.0

func (i RuleGroupRegexMatchStatementArgs) ToRuleGroupRegexMatchStatementOutputWithContext(ctx context.Context) RuleGroupRegexMatchStatementOutput

func (RuleGroupRegexMatchStatementArgs) ToRuleGroupRegexMatchStatementPtrOutput added in v0.9.0

func (i RuleGroupRegexMatchStatementArgs) ToRuleGroupRegexMatchStatementPtrOutput() RuleGroupRegexMatchStatementPtrOutput

func (RuleGroupRegexMatchStatementArgs) ToRuleGroupRegexMatchStatementPtrOutputWithContext added in v0.9.0

func (i RuleGroupRegexMatchStatementArgs) ToRuleGroupRegexMatchStatementPtrOutputWithContext(ctx context.Context) RuleGroupRegexMatchStatementPtrOutput

type RuleGroupRegexMatchStatementInput added in v0.9.0

type RuleGroupRegexMatchStatementInput interface {
	pulumi.Input

	ToRuleGroupRegexMatchStatementOutput() RuleGroupRegexMatchStatementOutput
	ToRuleGroupRegexMatchStatementOutputWithContext(context.Context) RuleGroupRegexMatchStatementOutput
}

RuleGroupRegexMatchStatementInput is an input type that accepts RuleGroupRegexMatchStatementArgs and RuleGroupRegexMatchStatementOutput values. You can construct a concrete instance of `RuleGroupRegexMatchStatementInput` via:

RuleGroupRegexMatchStatementArgs{...}

type RuleGroupRegexMatchStatementOutput added in v0.9.0

type RuleGroupRegexMatchStatementOutput struct{ *pulumi.OutputState }

func (RuleGroupRegexMatchStatementOutput) ElementType added in v0.9.0

func (RuleGroupRegexMatchStatementOutput) FieldToMatch added in v0.9.0

The part of the web request that you want AWS WAF to inspect.

func (RuleGroupRegexMatchStatementOutput) RegexString added in v0.9.0

The string representing the regular expression.

func (RuleGroupRegexMatchStatementOutput) TextTransformations added in v0.9.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (RuleGroupRegexMatchStatementOutput) ToRuleGroupRegexMatchStatementOutput added in v0.9.0

func (o RuleGroupRegexMatchStatementOutput) ToRuleGroupRegexMatchStatementOutput() RuleGroupRegexMatchStatementOutput

func (RuleGroupRegexMatchStatementOutput) ToRuleGroupRegexMatchStatementOutputWithContext added in v0.9.0

func (o RuleGroupRegexMatchStatementOutput) ToRuleGroupRegexMatchStatementOutputWithContext(ctx context.Context) RuleGroupRegexMatchStatementOutput

func (RuleGroupRegexMatchStatementOutput) ToRuleGroupRegexMatchStatementPtrOutput added in v0.9.0

func (o RuleGroupRegexMatchStatementOutput) ToRuleGroupRegexMatchStatementPtrOutput() RuleGroupRegexMatchStatementPtrOutput

func (RuleGroupRegexMatchStatementOutput) ToRuleGroupRegexMatchStatementPtrOutputWithContext added in v0.9.0

func (o RuleGroupRegexMatchStatementOutput) ToRuleGroupRegexMatchStatementPtrOutputWithContext(ctx context.Context) RuleGroupRegexMatchStatementPtrOutput

type RuleGroupRegexMatchStatementPtrInput added in v0.9.0

type RuleGroupRegexMatchStatementPtrInput interface {
	pulumi.Input

	ToRuleGroupRegexMatchStatementPtrOutput() RuleGroupRegexMatchStatementPtrOutput
	ToRuleGroupRegexMatchStatementPtrOutputWithContext(context.Context) RuleGroupRegexMatchStatementPtrOutput
}

RuleGroupRegexMatchStatementPtrInput is an input type that accepts RuleGroupRegexMatchStatementArgs, RuleGroupRegexMatchStatementPtr and RuleGroupRegexMatchStatementPtrOutput values. You can construct a concrete instance of `RuleGroupRegexMatchStatementPtrInput` via:

        RuleGroupRegexMatchStatementArgs{...}

or:

        nil

type RuleGroupRegexMatchStatementPtrOutput added in v0.9.0

type RuleGroupRegexMatchStatementPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupRegexMatchStatementPtrOutput) Elem added in v0.9.0

func (RuleGroupRegexMatchStatementPtrOutput) ElementType added in v0.9.0

func (RuleGroupRegexMatchStatementPtrOutput) FieldToMatch added in v0.9.0

The part of the web request that you want AWS WAF to inspect.

func (RuleGroupRegexMatchStatementPtrOutput) RegexString added in v0.9.0

The string representing the regular expression.

func (RuleGroupRegexMatchStatementPtrOutput) TextTransformations added in v0.9.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (RuleGroupRegexMatchStatementPtrOutput) ToRuleGroupRegexMatchStatementPtrOutput added in v0.9.0

func (o RuleGroupRegexMatchStatementPtrOutput) ToRuleGroupRegexMatchStatementPtrOutput() RuleGroupRegexMatchStatementPtrOutput

func (RuleGroupRegexMatchStatementPtrOutput) ToRuleGroupRegexMatchStatementPtrOutputWithContext added in v0.9.0

func (o RuleGroupRegexMatchStatementPtrOutput) ToRuleGroupRegexMatchStatementPtrOutputWithContext(ctx context.Context) RuleGroupRegexMatchStatementPtrOutput

type RuleGroupRegexPatternSetReferenceStatement

type RuleGroupRegexPatternSetReferenceStatement struct {
	// The Amazon Resource Name (ARN) of the `RegexPatternSet` that this statement references.
	Arn string `pulumi:"arn"`
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch RuleGroupFieldToMatch `pulumi:"fieldToMatch"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations []RuleGroupTextTransformation `pulumi:"textTransformations"`
}

type RuleGroupRegexPatternSetReferenceStatementArgs

type RuleGroupRegexPatternSetReferenceStatementArgs struct {
	// The Amazon Resource Name (ARN) of the `RegexPatternSet` that this statement references.
	Arn pulumi.StringInput `pulumi:"arn"`
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch RuleGroupFieldToMatchInput `pulumi:"fieldToMatch"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations RuleGroupTextTransformationArrayInput `pulumi:"textTransformations"`
}

func (RuleGroupRegexPatternSetReferenceStatementArgs) ElementType

func (RuleGroupRegexPatternSetReferenceStatementArgs) ToRuleGroupRegexPatternSetReferenceStatementOutput

func (i RuleGroupRegexPatternSetReferenceStatementArgs) ToRuleGroupRegexPatternSetReferenceStatementOutput() RuleGroupRegexPatternSetReferenceStatementOutput

func (RuleGroupRegexPatternSetReferenceStatementArgs) ToRuleGroupRegexPatternSetReferenceStatementOutputWithContext

func (i RuleGroupRegexPatternSetReferenceStatementArgs) ToRuleGroupRegexPatternSetReferenceStatementOutputWithContext(ctx context.Context) RuleGroupRegexPatternSetReferenceStatementOutput

func (RuleGroupRegexPatternSetReferenceStatementArgs) ToRuleGroupRegexPatternSetReferenceStatementPtrOutput

func (i RuleGroupRegexPatternSetReferenceStatementArgs) ToRuleGroupRegexPatternSetReferenceStatementPtrOutput() RuleGroupRegexPatternSetReferenceStatementPtrOutput

func (RuleGroupRegexPatternSetReferenceStatementArgs) ToRuleGroupRegexPatternSetReferenceStatementPtrOutputWithContext

func (i RuleGroupRegexPatternSetReferenceStatementArgs) ToRuleGroupRegexPatternSetReferenceStatementPtrOutputWithContext(ctx context.Context) RuleGroupRegexPatternSetReferenceStatementPtrOutput

type RuleGroupRegexPatternSetReferenceStatementInput

type RuleGroupRegexPatternSetReferenceStatementInput interface {
	pulumi.Input

	ToRuleGroupRegexPatternSetReferenceStatementOutput() RuleGroupRegexPatternSetReferenceStatementOutput
	ToRuleGroupRegexPatternSetReferenceStatementOutputWithContext(context.Context) RuleGroupRegexPatternSetReferenceStatementOutput
}

RuleGroupRegexPatternSetReferenceStatementInput is an input type that accepts RuleGroupRegexPatternSetReferenceStatementArgs and RuleGroupRegexPatternSetReferenceStatementOutput values. You can construct a concrete instance of `RuleGroupRegexPatternSetReferenceStatementInput` via:

RuleGroupRegexPatternSetReferenceStatementArgs{...}

type RuleGroupRegexPatternSetReferenceStatementOutput

type RuleGroupRegexPatternSetReferenceStatementOutput struct{ *pulumi.OutputState }

func (RuleGroupRegexPatternSetReferenceStatementOutput) Arn

The Amazon Resource Name (ARN) of the `RegexPatternSet` that this statement references.

func (RuleGroupRegexPatternSetReferenceStatementOutput) ElementType

func (RuleGroupRegexPatternSetReferenceStatementOutput) FieldToMatch

The part of the web request that you want AWS WAF to inspect.

func (RuleGroupRegexPatternSetReferenceStatementOutput) TextTransformations

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (RuleGroupRegexPatternSetReferenceStatementOutput) ToRuleGroupRegexPatternSetReferenceStatementOutput

func (o RuleGroupRegexPatternSetReferenceStatementOutput) ToRuleGroupRegexPatternSetReferenceStatementOutput() RuleGroupRegexPatternSetReferenceStatementOutput

func (RuleGroupRegexPatternSetReferenceStatementOutput) ToRuleGroupRegexPatternSetReferenceStatementOutputWithContext

func (o RuleGroupRegexPatternSetReferenceStatementOutput) ToRuleGroupRegexPatternSetReferenceStatementOutputWithContext(ctx context.Context) RuleGroupRegexPatternSetReferenceStatementOutput

func (RuleGroupRegexPatternSetReferenceStatementOutput) ToRuleGroupRegexPatternSetReferenceStatementPtrOutput

func (o RuleGroupRegexPatternSetReferenceStatementOutput) ToRuleGroupRegexPatternSetReferenceStatementPtrOutput() RuleGroupRegexPatternSetReferenceStatementPtrOutput

func (RuleGroupRegexPatternSetReferenceStatementOutput) ToRuleGroupRegexPatternSetReferenceStatementPtrOutputWithContext

func (o RuleGroupRegexPatternSetReferenceStatementOutput) ToRuleGroupRegexPatternSetReferenceStatementPtrOutputWithContext(ctx context.Context) RuleGroupRegexPatternSetReferenceStatementPtrOutput

type RuleGroupRegexPatternSetReferenceStatementPtrInput

type RuleGroupRegexPatternSetReferenceStatementPtrInput interface {
	pulumi.Input

	ToRuleGroupRegexPatternSetReferenceStatementPtrOutput() RuleGroupRegexPatternSetReferenceStatementPtrOutput
	ToRuleGroupRegexPatternSetReferenceStatementPtrOutputWithContext(context.Context) RuleGroupRegexPatternSetReferenceStatementPtrOutput
}

RuleGroupRegexPatternSetReferenceStatementPtrInput is an input type that accepts RuleGroupRegexPatternSetReferenceStatementArgs, RuleGroupRegexPatternSetReferenceStatementPtr and RuleGroupRegexPatternSetReferenceStatementPtrOutput values. You can construct a concrete instance of `RuleGroupRegexPatternSetReferenceStatementPtrInput` via:

        RuleGroupRegexPatternSetReferenceStatementArgs{...}

or:

        nil

type RuleGroupRegexPatternSetReferenceStatementPtrOutput

type RuleGroupRegexPatternSetReferenceStatementPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupRegexPatternSetReferenceStatementPtrOutput) Arn

The Amazon Resource Name (ARN) of the `RegexPatternSet` that this statement references.

func (RuleGroupRegexPatternSetReferenceStatementPtrOutput) Elem

func (RuleGroupRegexPatternSetReferenceStatementPtrOutput) ElementType

func (RuleGroupRegexPatternSetReferenceStatementPtrOutput) FieldToMatch

The part of the web request that you want AWS WAF to inspect.

func (RuleGroupRegexPatternSetReferenceStatementPtrOutput) TextTransformations

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (RuleGroupRegexPatternSetReferenceStatementPtrOutput) ToRuleGroupRegexPatternSetReferenceStatementPtrOutput

func (o RuleGroupRegexPatternSetReferenceStatementPtrOutput) ToRuleGroupRegexPatternSetReferenceStatementPtrOutput() RuleGroupRegexPatternSetReferenceStatementPtrOutput

func (RuleGroupRegexPatternSetReferenceStatementPtrOutput) ToRuleGroupRegexPatternSetReferenceStatementPtrOutputWithContext

func (o RuleGroupRegexPatternSetReferenceStatementPtrOutput) ToRuleGroupRegexPatternSetReferenceStatementPtrOutputWithContext(ctx context.Context) RuleGroupRegexPatternSetReferenceStatementPtrOutput

type RuleGroupResponseContentType added in v0.98.0

type RuleGroupResponseContentType string

Valid values are TEXT_PLAIN, TEXT_HTML, and APPLICATION_JSON.

func (RuleGroupResponseContentType) ElementType added in v0.98.0

func (RuleGroupResponseContentType) ToRuleGroupResponseContentTypeOutput added in v0.98.0

func (e RuleGroupResponseContentType) ToRuleGroupResponseContentTypeOutput() RuleGroupResponseContentTypeOutput

func (RuleGroupResponseContentType) ToRuleGroupResponseContentTypeOutputWithContext added in v0.98.0

func (e RuleGroupResponseContentType) ToRuleGroupResponseContentTypeOutputWithContext(ctx context.Context) RuleGroupResponseContentTypeOutput

func (RuleGroupResponseContentType) ToRuleGroupResponseContentTypePtrOutput added in v0.98.0

func (e RuleGroupResponseContentType) ToRuleGroupResponseContentTypePtrOutput() RuleGroupResponseContentTypePtrOutput

func (RuleGroupResponseContentType) ToRuleGroupResponseContentTypePtrOutputWithContext added in v0.98.0

func (e RuleGroupResponseContentType) ToRuleGroupResponseContentTypePtrOutputWithContext(ctx context.Context) RuleGroupResponseContentTypePtrOutput

func (RuleGroupResponseContentType) ToStringOutput added in v0.98.0

func (RuleGroupResponseContentType) ToStringOutputWithContext added in v0.98.0

func (e RuleGroupResponseContentType) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupResponseContentType) ToStringPtrOutput added in v0.98.0

func (e RuleGroupResponseContentType) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupResponseContentType) ToStringPtrOutputWithContext added in v0.98.0

func (e RuleGroupResponseContentType) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupResponseContentTypeInput added in v0.98.0

type RuleGroupResponseContentTypeInput interface {
	pulumi.Input

	ToRuleGroupResponseContentTypeOutput() RuleGroupResponseContentTypeOutput
	ToRuleGroupResponseContentTypeOutputWithContext(context.Context) RuleGroupResponseContentTypeOutput
}

RuleGroupResponseContentTypeInput is an input type that accepts values of the RuleGroupResponseContentType enum A concrete instance of `RuleGroupResponseContentTypeInput` can be one of the following:

RuleGroupResponseContentTypeTextPlain
RuleGroupResponseContentTypeTextHtml
RuleGroupResponseContentTypeApplicationJson

type RuleGroupResponseContentTypeOutput added in v0.98.0

type RuleGroupResponseContentTypeOutput struct{ *pulumi.OutputState }

func (RuleGroupResponseContentTypeOutput) ElementType added in v0.98.0

func (RuleGroupResponseContentTypeOutput) ToRuleGroupResponseContentTypeOutput added in v0.98.0

func (o RuleGroupResponseContentTypeOutput) ToRuleGroupResponseContentTypeOutput() RuleGroupResponseContentTypeOutput

func (RuleGroupResponseContentTypeOutput) ToRuleGroupResponseContentTypeOutputWithContext added in v0.98.0

func (o RuleGroupResponseContentTypeOutput) ToRuleGroupResponseContentTypeOutputWithContext(ctx context.Context) RuleGroupResponseContentTypeOutput

func (RuleGroupResponseContentTypeOutput) ToRuleGroupResponseContentTypePtrOutput added in v0.98.0

func (o RuleGroupResponseContentTypeOutput) ToRuleGroupResponseContentTypePtrOutput() RuleGroupResponseContentTypePtrOutput

func (RuleGroupResponseContentTypeOutput) ToRuleGroupResponseContentTypePtrOutputWithContext added in v0.98.0

func (o RuleGroupResponseContentTypeOutput) ToRuleGroupResponseContentTypePtrOutputWithContext(ctx context.Context) RuleGroupResponseContentTypePtrOutput

func (RuleGroupResponseContentTypeOutput) ToStringOutput added in v0.98.0

func (RuleGroupResponseContentTypeOutput) ToStringOutputWithContext added in v0.98.0

func (o RuleGroupResponseContentTypeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupResponseContentTypeOutput) ToStringPtrOutput added in v0.98.0

func (RuleGroupResponseContentTypeOutput) ToStringPtrOutputWithContext added in v0.98.0

func (o RuleGroupResponseContentTypeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupResponseContentTypePtrInput added in v0.98.0

type RuleGroupResponseContentTypePtrInput interface {
	pulumi.Input

	ToRuleGroupResponseContentTypePtrOutput() RuleGroupResponseContentTypePtrOutput
	ToRuleGroupResponseContentTypePtrOutputWithContext(context.Context) RuleGroupResponseContentTypePtrOutput
}

func RuleGroupResponseContentTypePtr added in v0.98.0

func RuleGroupResponseContentTypePtr(v string) RuleGroupResponseContentTypePtrInput

type RuleGroupResponseContentTypePtrOutput added in v0.98.0

type RuleGroupResponseContentTypePtrOutput struct{ *pulumi.OutputState }

func (RuleGroupResponseContentTypePtrOutput) Elem added in v0.98.0

func (RuleGroupResponseContentTypePtrOutput) ElementType added in v0.98.0

func (RuleGroupResponseContentTypePtrOutput) ToRuleGroupResponseContentTypePtrOutput added in v0.98.0

func (o RuleGroupResponseContentTypePtrOutput) ToRuleGroupResponseContentTypePtrOutput() RuleGroupResponseContentTypePtrOutput

func (RuleGroupResponseContentTypePtrOutput) ToRuleGroupResponseContentTypePtrOutputWithContext added in v0.98.0

func (o RuleGroupResponseContentTypePtrOutput) ToRuleGroupResponseContentTypePtrOutputWithContext(ctx context.Context) RuleGroupResponseContentTypePtrOutput

func (RuleGroupResponseContentTypePtrOutput) ToStringPtrOutput added in v0.98.0

func (RuleGroupResponseContentTypePtrOutput) ToStringPtrOutputWithContext added in v0.98.0

func (o RuleGroupResponseContentTypePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupRule

type RuleGroupRule struct {
	// The action that AWS WAF should take on a web request when it matches the rule statement. Settings at the web ACL level can override the rule action setting.
	Action *RuleGroupRuleAction `pulumi:"action"`
	// Specifies how AWS WAF should handle `CAPTCHA` evaluations. If you don't specify this, AWS WAF uses the `CAPTCHA` configuration that's defined for the web ACL.
	CaptchaConfig *RuleGroupCaptchaConfig `pulumi:"captchaConfig"`
	// Specifies how AWS WAF should handle `Challenge` evaluations. If you don't specify this, AWS WAF uses the challenge configuration that's defined for the web ACL.
	ChallengeConfig *RuleGroupChallengeConfig `pulumi:"challengeConfig"`
	// The name of the rule.
	//
	// If you change the name of a `Rule` after you create it and you want the rule's metric name to reflect the change, update the metric name in the rule's `VisibilityConfig` settings. AWS WAF doesn't automatically update the metric name when you update the rule name.
	Name string `pulumi:"name"`
	// If you define more than one `Rule` in a `WebACL` , AWS WAF evaluates each request against the `Rules` in order based on the value of `Priority` . AWS WAF processes rules with lower priority first. The priorities don't need to be consecutive, but they must all be different.
	Priority int `pulumi:"priority"`
	// Collection of Rule Labels.
	RuleLabels []RuleGroupLabel `pulumi:"ruleLabels"`
	// The AWS WAF processing statement for the rule, for example `ByteMatchStatement` or `SizeConstraintStatement` .
	Statement RuleGroupStatement `pulumi:"statement"`
	// Defines and enables Amazon CloudWatch metrics and web request sample collection.
	//
	// If you change the name of a `Rule` after you create it and you want the rule's metric name to reflect the change, update the metric name as well. AWS WAF doesn't automatically update the metric name.
	VisibilityConfig RuleGroupVisibilityConfig `pulumi:"visibilityConfig"`
}

Rule of RuleGroup that contains condition and action.

type RuleGroupRuleAction

type RuleGroupRuleAction struct {
	// Instructs AWS WAF to allow the web request.
	Allow *RuleGroupAllowAction `pulumi:"allow"`
	// Instructs AWS WAF to block the web request.
	Block *RuleGroupBlockAction `pulumi:"block"`
	// Specifies that AWS WAF should run a `CAPTCHA` check against the request:
	//
	// - If the request includes a valid, unexpired `CAPTCHA` token, AWS WAF allows the web request inspection to proceed to the next rule, similar to a `CountAction` .
	// - If the request doesn't include a valid, unexpired `CAPTCHA` token, AWS WAF discontinues the web ACL evaluation of the request and blocks it from going to its intended destination.
	//
	// AWS WAF generates a response that it sends back to the client, which includes the following:
	//
	// - The header `x-amzn-waf-action` with a value of `captcha` .
	// - The HTTP status code `405 Method Not Allowed` .
	// - If the request contains an `Accept` header with a value of `text/html` , the response includes a `CAPTCHA` challenge.
	//
	// You can configure the expiration time in the `CaptchaConfig` `ImmunityTimeProperty` setting at the rule and web ACL level. The rule setting overrides the web ACL setting.
	//
	// This action option is available for rules. It isn't available for web ACL default actions.
	Captcha *RuleGroupCaptchaAction `pulumi:"captcha"`
	// Instructs AWS WAF to run a `Challenge` check against the web request.
	Challenge *RuleGroupChallengeAction `pulumi:"challenge"`
	// Instructs AWS WAF to count the web request and then continue evaluating the request using the remaining rules in the web ACL.
	Count *RuleGroupCountAction `pulumi:"count"`
}

Action taken when Rule matches its condition.

type RuleGroupRuleActionArgs

type RuleGroupRuleActionArgs struct {
	// Instructs AWS WAF to allow the web request.
	Allow RuleGroupAllowActionPtrInput `pulumi:"allow"`
	// Instructs AWS WAF to block the web request.
	Block RuleGroupBlockActionPtrInput `pulumi:"block"`
	// Specifies that AWS WAF should run a `CAPTCHA` check against the request:
	//
	// - If the request includes a valid, unexpired `CAPTCHA` token, AWS WAF allows the web request inspection to proceed to the next rule, similar to a `CountAction` .
	// - If the request doesn't include a valid, unexpired `CAPTCHA` token, AWS WAF discontinues the web ACL evaluation of the request and blocks it from going to its intended destination.
	//
	// AWS WAF generates a response that it sends back to the client, which includes the following:
	//
	// - The header `x-amzn-waf-action` with a value of `captcha` .
	// - The HTTP status code `405 Method Not Allowed` .
	// - If the request contains an `Accept` header with a value of `text/html` , the response includes a `CAPTCHA` challenge.
	//
	// You can configure the expiration time in the `CaptchaConfig` `ImmunityTimeProperty` setting at the rule and web ACL level. The rule setting overrides the web ACL setting.
	//
	// This action option is available for rules. It isn't available for web ACL default actions.
	Captcha RuleGroupCaptchaActionPtrInput `pulumi:"captcha"`
	// Instructs AWS WAF to run a `Challenge` check against the web request.
	Challenge RuleGroupChallengeActionPtrInput `pulumi:"challenge"`
	// Instructs AWS WAF to count the web request and then continue evaluating the request using the remaining rules in the web ACL.
	Count RuleGroupCountActionPtrInput `pulumi:"count"`
}

Action taken when Rule matches its condition.

func (RuleGroupRuleActionArgs) ElementType

func (RuleGroupRuleActionArgs) ElementType() reflect.Type

func (RuleGroupRuleActionArgs) ToRuleGroupRuleActionOutput

func (i RuleGroupRuleActionArgs) ToRuleGroupRuleActionOutput() RuleGroupRuleActionOutput

func (RuleGroupRuleActionArgs) ToRuleGroupRuleActionOutputWithContext

func (i RuleGroupRuleActionArgs) ToRuleGroupRuleActionOutputWithContext(ctx context.Context) RuleGroupRuleActionOutput

func (RuleGroupRuleActionArgs) ToRuleGroupRuleActionPtrOutput

func (i RuleGroupRuleActionArgs) ToRuleGroupRuleActionPtrOutput() RuleGroupRuleActionPtrOutput

func (RuleGroupRuleActionArgs) ToRuleGroupRuleActionPtrOutputWithContext

func (i RuleGroupRuleActionArgs) ToRuleGroupRuleActionPtrOutputWithContext(ctx context.Context) RuleGroupRuleActionPtrOutput

type RuleGroupRuleActionInput

type RuleGroupRuleActionInput interface {
	pulumi.Input

	ToRuleGroupRuleActionOutput() RuleGroupRuleActionOutput
	ToRuleGroupRuleActionOutputWithContext(context.Context) RuleGroupRuleActionOutput
}

RuleGroupRuleActionInput is an input type that accepts RuleGroupRuleActionArgs and RuleGroupRuleActionOutput values. You can construct a concrete instance of `RuleGroupRuleActionInput` via:

RuleGroupRuleActionArgs{...}

type RuleGroupRuleActionOutput

type RuleGroupRuleActionOutput struct{ *pulumi.OutputState }

Action taken when Rule matches its condition.

func (RuleGroupRuleActionOutput) Allow

Instructs AWS WAF to allow the web request.

func (RuleGroupRuleActionOutput) Block

Instructs AWS WAF to block the web request.

func (RuleGroupRuleActionOutput) Captcha added in v0.9.0

Specifies that AWS WAF should run a `CAPTCHA` check against the request:

- If the request includes a valid, unexpired `CAPTCHA` token, AWS WAF allows the web request inspection to proceed to the next rule, similar to a `CountAction` . - If the request doesn't include a valid, unexpired `CAPTCHA` token, AWS WAF discontinues the web ACL evaluation of the request and blocks it from going to its intended destination.

AWS WAF generates a response that it sends back to the client, which includes the following:

- The header `x-amzn-waf-action` with a value of `captcha` . - The HTTP status code `405 Method Not Allowed` . - If the request contains an `Accept` header with a value of `text/html` , the response includes a `CAPTCHA` challenge.

You can configure the expiration time in the `CaptchaConfig` `ImmunityTimeProperty` setting at the rule and web ACL level. The rule setting overrides the web ACL setting.

This action option is available for rules. It isn't available for web ACL default actions.

func (RuleGroupRuleActionOutput) Challenge added in v0.45.0

Instructs AWS WAF to run a `Challenge` check against the web request.

func (RuleGroupRuleActionOutput) Count

Instructs AWS WAF to count the web request and then continue evaluating the request using the remaining rules in the web ACL.

func (RuleGroupRuleActionOutput) ElementType

func (RuleGroupRuleActionOutput) ElementType() reflect.Type

func (RuleGroupRuleActionOutput) ToRuleGroupRuleActionOutput

func (o RuleGroupRuleActionOutput) ToRuleGroupRuleActionOutput() RuleGroupRuleActionOutput

func (RuleGroupRuleActionOutput) ToRuleGroupRuleActionOutputWithContext

func (o RuleGroupRuleActionOutput) ToRuleGroupRuleActionOutputWithContext(ctx context.Context) RuleGroupRuleActionOutput

func (RuleGroupRuleActionOutput) ToRuleGroupRuleActionPtrOutput

func (o RuleGroupRuleActionOutput) ToRuleGroupRuleActionPtrOutput() RuleGroupRuleActionPtrOutput

func (RuleGroupRuleActionOutput) ToRuleGroupRuleActionPtrOutputWithContext

func (o RuleGroupRuleActionOutput) ToRuleGroupRuleActionPtrOutputWithContext(ctx context.Context) RuleGroupRuleActionPtrOutput

type RuleGroupRuleActionPtrInput

type RuleGroupRuleActionPtrInput interface {
	pulumi.Input

	ToRuleGroupRuleActionPtrOutput() RuleGroupRuleActionPtrOutput
	ToRuleGroupRuleActionPtrOutputWithContext(context.Context) RuleGroupRuleActionPtrOutput
}

RuleGroupRuleActionPtrInput is an input type that accepts RuleGroupRuleActionArgs, RuleGroupRuleActionPtr and RuleGroupRuleActionPtrOutput values. You can construct a concrete instance of `RuleGroupRuleActionPtrInput` via:

        RuleGroupRuleActionArgs{...}

or:

        nil

type RuleGroupRuleActionPtrOutput

type RuleGroupRuleActionPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupRuleActionPtrOutput) Allow

Instructs AWS WAF to allow the web request.

func (RuleGroupRuleActionPtrOutput) Block

Instructs AWS WAF to block the web request.

func (RuleGroupRuleActionPtrOutput) Captcha added in v0.9.0

Specifies that AWS WAF should run a `CAPTCHA` check against the request:

- If the request includes a valid, unexpired `CAPTCHA` token, AWS WAF allows the web request inspection to proceed to the next rule, similar to a `CountAction` . - If the request doesn't include a valid, unexpired `CAPTCHA` token, AWS WAF discontinues the web ACL evaluation of the request and blocks it from going to its intended destination.

AWS WAF generates a response that it sends back to the client, which includes the following:

- The header `x-amzn-waf-action` with a value of `captcha` . - The HTTP status code `405 Method Not Allowed` . - If the request contains an `Accept` header with a value of `text/html` , the response includes a `CAPTCHA` challenge.

You can configure the expiration time in the `CaptchaConfig` `ImmunityTimeProperty` setting at the rule and web ACL level. The rule setting overrides the web ACL setting.

This action option is available for rules. It isn't available for web ACL default actions.

func (RuleGroupRuleActionPtrOutput) Challenge added in v0.45.0

Instructs AWS WAF to run a `Challenge` check against the web request.

func (RuleGroupRuleActionPtrOutput) Count

Instructs AWS WAF to count the web request and then continue evaluating the request using the remaining rules in the web ACL.

func (RuleGroupRuleActionPtrOutput) Elem

func (RuleGroupRuleActionPtrOutput) ElementType

func (RuleGroupRuleActionPtrOutput) ToRuleGroupRuleActionPtrOutput

func (o RuleGroupRuleActionPtrOutput) ToRuleGroupRuleActionPtrOutput() RuleGroupRuleActionPtrOutput

func (RuleGroupRuleActionPtrOutput) ToRuleGroupRuleActionPtrOutputWithContext

func (o RuleGroupRuleActionPtrOutput) ToRuleGroupRuleActionPtrOutputWithContext(ctx context.Context) RuleGroupRuleActionPtrOutput

type RuleGroupRuleArgs

type RuleGroupRuleArgs struct {
	// The action that AWS WAF should take on a web request when it matches the rule statement. Settings at the web ACL level can override the rule action setting.
	Action RuleGroupRuleActionPtrInput `pulumi:"action"`
	// Specifies how AWS WAF should handle `CAPTCHA` evaluations. If you don't specify this, AWS WAF uses the `CAPTCHA` configuration that's defined for the web ACL.
	CaptchaConfig RuleGroupCaptchaConfigPtrInput `pulumi:"captchaConfig"`
	// Specifies how AWS WAF should handle `Challenge` evaluations. If you don't specify this, AWS WAF uses the challenge configuration that's defined for the web ACL.
	ChallengeConfig RuleGroupChallengeConfigPtrInput `pulumi:"challengeConfig"`
	// The name of the rule.
	//
	// If you change the name of a `Rule` after you create it and you want the rule's metric name to reflect the change, update the metric name in the rule's `VisibilityConfig` settings. AWS WAF doesn't automatically update the metric name when you update the rule name.
	Name pulumi.StringInput `pulumi:"name"`
	// If you define more than one `Rule` in a `WebACL` , AWS WAF evaluates each request against the `Rules` in order based on the value of `Priority` . AWS WAF processes rules with lower priority first. The priorities don't need to be consecutive, but they must all be different.
	Priority pulumi.IntInput `pulumi:"priority"`
	// Collection of Rule Labels.
	RuleLabels RuleGroupLabelArrayInput `pulumi:"ruleLabels"`
	// The AWS WAF processing statement for the rule, for example `ByteMatchStatement` or `SizeConstraintStatement` .
	Statement RuleGroupStatementInput `pulumi:"statement"`
	// Defines and enables Amazon CloudWatch metrics and web request sample collection.
	//
	// If you change the name of a `Rule` after you create it and you want the rule's metric name to reflect the change, update the metric name as well. AWS WAF doesn't automatically update the metric name.
	VisibilityConfig RuleGroupVisibilityConfigInput `pulumi:"visibilityConfig"`
}

Rule of RuleGroup that contains condition and action.

func (RuleGroupRuleArgs) ElementType

func (RuleGroupRuleArgs) ElementType() reflect.Type

func (RuleGroupRuleArgs) ToRuleGroupRuleOutput

func (i RuleGroupRuleArgs) ToRuleGroupRuleOutput() RuleGroupRuleOutput

func (RuleGroupRuleArgs) ToRuleGroupRuleOutputWithContext

func (i RuleGroupRuleArgs) ToRuleGroupRuleOutputWithContext(ctx context.Context) RuleGroupRuleOutput

type RuleGroupRuleArray

type RuleGroupRuleArray []RuleGroupRuleInput

func (RuleGroupRuleArray) ElementType

func (RuleGroupRuleArray) ElementType() reflect.Type

func (RuleGroupRuleArray) ToRuleGroupRuleArrayOutput

func (i RuleGroupRuleArray) ToRuleGroupRuleArrayOutput() RuleGroupRuleArrayOutput

func (RuleGroupRuleArray) ToRuleGroupRuleArrayOutputWithContext

func (i RuleGroupRuleArray) ToRuleGroupRuleArrayOutputWithContext(ctx context.Context) RuleGroupRuleArrayOutput

type RuleGroupRuleArrayInput

type RuleGroupRuleArrayInput interface {
	pulumi.Input

	ToRuleGroupRuleArrayOutput() RuleGroupRuleArrayOutput
	ToRuleGroupRuleArrayOutputWithContext(context.Context) RuleGroupRuleArrayOutput
}

RuleGroupRuleArrayInput is an input type that accepts RuleGroupRuleArray and RuleGroupRuleArrayOutput values. You can construct a concrete instance of `RuleGroupRuleArrayInput` via:

RuleGroupRuleArray{ RuleGroupRuleArgs{...} }

type RuleGroupRuleArrayOutput

type RuleGroupRuleArrayOutput struct{ *pulumi.OutputState }

func (RuleGroupRuleArrayOutput) ElementType

func (RuleGroupRuleArrayOutput) ElementType() reflect.Type

func (RuleGroupRuleArrayOutput) Index

func (RuleGroupRuleArrayOutput) ToRuleGroupRuleArrayOutput

func (o RuleGroupRuleArrayOutput) ToRuleGroupRuleArrayOutput() RuleGroupRuleArrayOutput

func (RuleGroupRuleArrayOutput) ToRuleGroupRuleArrayOutputWithContext

func (o RuleGroupRuleArrayOutput) ToRuleGroupRuleArrayOutputWithContext(ctx context.Context) RuleGroupRuleArrayOutput

type RuleGroupRuleInput

type RuleGroupRuleInput interface {
	pulumi.Input

	ToRuleGroupRuleOutput() RuleGroupRuleOutput
	ToRuleGroupRuleOutputWithContext(context.Context) RuleGroupRuleOutput
}

RuleGroupRuleInput is an input type that accepts RuleGroupRuleArgs and RuleGroupRuleOutput values. You can construct a concrete instance of `RuleGroupRuleInput` via:

RuleGroupRuleArgs{...}

type RuleGroupRuleOutput

type RuleGroupRuleOutput struct{ *pulumi.OutputState }

Rule of RuleGroup that contains condition and action.

func (RuleGroupRuleOutput) Action

The action that AWS WAF should take on a web request when it matches the rule statement. Settings at the web ACL level can override the rule action setting.

func (RuleGroupRuleOutput) CaptchaConfig added in v0.9.0

Specifies how AWS WAF should handle `CAPTCHA` evaluations. If you don't specify this, AWS WAF uses the `CAPTCHA` configuration that's defined for the web ACL.

func (RuleGroupRuleOutput) ChallengeConfig added in v0.45.0

Specifies how AWS WAF should handle `Challenge` evaluations. If you don't specify this, AWS WAF uses the challenge configuration that's defined for the web ACL.

func (RuleGroupRuleOutput) ElementType

func (RuleGroupRuleOutput) ElementType() reflect.Type

func (RuleGroupRuleOutput) Name

The name of the rule.

If you change the name of a `Rule` after you create it and you want the rule's metric name to reflect the change, update the metric name in the rule's `VisibilityConfig` settings. AWS WAF doesn't automatically update the metric name when you update the rule name.

func (RuleGroupRuleOutput) Priority

func (o RuleGroupRuleOutput) Priority() pulumi.IntOutput

If you define more than one `Rule` in a `WebACL` , AWS WAF evaluates each request against the `Rules` in order based on the value of `Priority` . AWS WAF processes rules with lower priority first. The priorities don't need to be consecutive, but they must all be different.

func (RuleGroupRuleOutput) RuleLabels

Collection of Rule Labels.

func (RuleGroupRuleOutput) Statement

The AWS WAF processing statement for the rule, for example `ByteMatchStatement` or `SizeConstraintStatement` .

func (RuleGroupRuleOutput) ToRuleGroupRuleOutput

func (o RuleGroupRuleOutput) ToRuleGroupRuleOutput() RuleGroupRuleOutput

func (RuleGroupRuleOutput) ToRuleGroupRuleOutputWithContext

func (o RuleGroupRuleOutput) ToRuleGroupRuleOutputWithContext(ctx context.Context) RuleGroupRuleOutput

func (RuleGroupRuleOutput) VisibilityConfig

Defines and enables Amazon CloudWatch metrics and web request sample collection.

If you change the name of a `Rule` after you create it and you want the rule's metric name to reflect the change, update the metric name as well. AWS WAF doesn't automatically update the metric name.

type RuleGroupScope

type RuleGroupScope string

Use CLOUDFRONT for CloudFront RuleGroup, use REGIONAL for Application Load Balancer and API Gateway.

func (RuleGroupScope) ElementType

func (RuleGroupScope) ElementType() reflect.Type

func (RuleGroupScope) ToRuleGroupScopeOutput

func (e RuleGroupScope) ToRuleGroupScopeOutput() RuleGroupScopeOutput

func (RuleGroupScope) ToRuleGroupScopeOutputWithContext

func (e RuleGroupScope) ToRuleGroupScopeOutputWithContext(ctx context.Context) RuleGroupScopeOutput

func (RuleGroupScope) ToRuleGroupScopePtrOutput

func (e RuleGroupScope) ToRuleGroupScopePtrOutput() RuleGroupScopePtrOutput

func (RuleGroupScope) ToRuleGroupScopePtrOutputWithContext

func (e RuleGroupScope) ToRuleGroupScopePtrOutputWithContext(ctx context.Context) RuleGroupScopePtrOutput

func (RuleGroupScope) ToStringOutput

func (e RuleGroupScope) ToStringOutput() pulumi.StringOutput

func (RuleGroupScope) ToStringOutputWithContext

func (e RuleGroupScope) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupScope) ToStringPtrOutput

func (e RuleGroupScope) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupScope) ToStringPtrOutputWithContext

func (e RuleGroupScope) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupScopeInput

type RuleGroupScopeInput interface {
	pulumi.Input

	ToRuleGroupScopeOutput() RuleGroupScopeOutput
	ToRuleGroupScopeOutputWithContext(context.Context) RuleGroupScopeOutput
}

RuleGroupScopeInput is an input type that accepts values of the RuleGroupScope enum A concrete instance of `RuleGroupScopeInput` can be one of the following:

RuleGroupScopeCloudfront
RuleGroupScopeRegional

type RuleGroupScopeOutput

type RuleGroupScopeOutput struct{ *pulumi.OutputState }

func (RuleGroupScopeOutput) ElementType

func (RuleGroupScopeOutput) ElementType() reflect.Type

func (RuleGroupScopeOutput) ToRuleGroupScopeOutput

func (o RuleGroupScopeOutput) ToRuleGroupScopeOutput() RuleGroupScopeOutput

func (RuleGroupScopeOutput) ToRuleGroupScopeOutputWithContext

func (o RuleGroupScopeOutput) ToRuleGroupScopeOutputWithContext(ctx context.Context) RuleGroupScopeOutput

func (RuleGroupScopeOutput) ToRuleGroupScopePtrOutput

func (o RuleGroupScopeOutput) ToRuleGroupScopePtrOutput() RuleGroupScopePtrOutput

func (RuleGroupScopeOutput) ToRuleGroupScopePtrOutputWithContext

func (o RuleGroupScopeOutput) ToRuleGroupScopePtrOutputWithContext(ctx context.Context) RuleGroupScopePtrOutput

func (RuleGroupScopeOutput) ToStringOutput

func (o RuleGroupScopeOutput) ToStringOutput() pulumi.StringOutput

func (RuleGroupScopeOutput) ToStringOutputWithContext

func (o RuleGroupScopeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupScopeOutput) ToStringPtrOutput

func (o RuleGroupScopeOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupScopeOutput) ToStringPtrOutputWithContext

func (o RuleGroupScopeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupScopePtrInput

type RuleGroupScopePtrInput interface {
	pulumi.Input

	ToRuleGroupScopePtrOutput() RuleGroupScopePtrOutput
	ToRuleGroupScopePtrOutputWithContext(context.Context) RuleGroupScopePtrOutput
}

func RuleGroupScopePtr

func RuleGroupScopePtr(v string) RuleGroupScopePtrInput

type RuleGroupScopePtrOutput

type RuleGroupScopePtrOutput struct{ *pulumi.OutputState }

func (RuleGroupScopePtrOutput) Elem

func (RuleGroupScopePtrOutput) ElementType

func (RuleGroupScopePtrOutput) ElementType() reflect.Type

func (RuleGroupScopePtrOutput) ToRuleGroupScopePtrOutput

func (o RuleGroupScopePtrOutput) ToRuleGroupScopePtrOutput() RuleGroupScopePtrOutput

func (RuleGroupScopePtrOutput) ToRuleGroupScopePtrOutputWithContext

func (o RuleGroupScopePtrOutput) ToRuleGroupScopePtrOutputWithContext(ctx context.Context) RuleGroupScopePtrOutput

func (RuleGroupScopePtrOutput) ToStringPtrOutput

func (o RuleGroupScopePtrOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupScopePtrOutput) ToStringPtrOutputWithContext

func (o RuleGroupScopePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupSensitivityLevel added in v0.21.0

type RuleGroupSensitivityLevel string

Sensitivity Level current only used for sqli match statements.

func (RuleGroupSensitivityLevel) ElementType added in v0.21.0

func (RuleGroupSensitivityLevel) ElementType() reflect.Type

func (RuleGroupSensitivityLevel) ToRuleGroupSensitivityLevelOutput added in v0.21.0

func (e RuleGroupSensitivityLevel) ToRuleGroupSensitivityLevelOutput() RuleGroupSensitivityLevelOutput

func (RuleGroupSensitivityLevel) ToRuleGroupSensitivityLevelOutputWithContext added in v0.21.0

func (e RuleGroupSensitivityLevel) ToRuleGroupSensitivityLevelOutputWithContext(ctx context.Context) RuleGroupSensitivityLevelOutput

func (RuleGroupSensitivityLevel) ToRuleGroupSensitivityLevelPtrOutput added in v0.21.0

func (e RuleGroupSensitivityLevel) ToRuleGroupSensitivityLevelPtrOutput() RuleGroupSensitivityLevelPtrOutput

func (RuleGroupSensitivityLevel) ToRuleGroupSensitivityLevelPtrOutputWithContext added in v0.21.0

func (e RuleGroupSensitivityLevel) ToRuleGroupSensitivityLevelPtrOutputWithContext(ctx context.Context) RuleGroupSensitivityLevelPtrOutput

func (RuleGroupSensitivityLevel) ToStringOutput added in v0.21.0

func (e RuleGroupSensitivityLevel) ToStringOutput() pulumi.StringOutput

func (RuleGroupSensitivityLevel) ToStringOutputWithContext added in v0.21.0

func (e RuleGroupSensitivityLevel) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupSensitivityLevel) ToStringPtrOutput added in v0.21.0

func (e RuleGroupSensitivityLevel) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupSensitivityLevel) ToStringPtrOutputWithContext added in v0.21.0

func (e RuleGroupSensitivityLevel) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupSensitivityLevelInput added in v0.21.0

type RuleGroupSensitivityLevelInput interface {
	pulumi.Input

	ToRuleGroupSensitivityLevelOutput() RuleGroupSensitivityLevelOutput
	ToRuleGroupSensitivityLevelOutputWithContext(context.Context) RuleGroupSensitivityLevelOutput
}

RuleGroupSensitivityLevelInput is an input type that accepts values of the RuleGroupSensitivityLevel enum A concrete instance of `RuleGroupSensitivityLevelInput` can be one of the following:

RuleGroupSensitivityLevelLow
RuleGroupSensitivityLevelHigh

type RuleGroupSensitivityLevelOutput added in v0.21.0

type RuleGroupSensitivityLevelOutput struct{ *pulumi.OutputState }

func (RuleGroupSensitivityLevelOutput) ElementType added in v0.21.0

func (RuleGroupSensitivityLevelOutput) ToRuleGroupSensitivityLevelOutput added in v0.21.0

func (o RuleGroupSensitivityLevelOutput) ToRuleGroupSensitivityLevelOutput() RuleGroupSensitivityLevelOutput

func (RuleGroupSensitivityLevelOutput) ToRuleGroupSensitivityLevelOutputWithContext added in v0.21.0

func (o RuleGroupSensitivityLevelOutput) ToRuleGroupSensitivityLevelOutputWithContext(ctx context.Context) RuleGroupSensitivityLevelOutput

func (RuleGroupSensitivityLevelOutput) ToRuleGroupSensitivityLevelPtrOutput added in v0.21.0

func (o RuleGroupSensitivityLevelOutput) ToRuleGroupSensitivityLevelPtrOutput() RuleGroupSensitivityLevelPtrOutput

func (RuleGroupSensitivityLevelOutput) ToRuleGroupSensitivityLevelPtrOutputWithContext added in v0.21.0

func (o RuleGroupSensitivityLevelOutput) ToRuleGroupSensitivityLevelPtrOutputWithContext(ctx context.Context) RuleGroupSensitivityLevelPtrOutput

func (RuleGroupSensitivityLevelOutput) ToStringOutput added in v0.21.0

func (RuleGroupSensitivityLevelOutput) ToStringOutputWithContext added in v0.21.0

func (o RuleGroupSensitivityLevelOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupSensitivityLevelOutput) ToStringPtrOutput added in v0.21.0

func (RuleGroupSensitivityLevelOutput) ToStringPtrOutputWithContext added in v0.21.0

func (o RuleGroupSensitivityLevelOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupSensitivityLevelPtrInput added in v0.21.0

type RuleGroupSensitivityLevelPtrInput interface {
	pulumi.Input

	ToRuleGroupSensitivityLevelPtrOutput() RuleGroupSensitivityLevelPtrOutput
	ToRuleGroupSensitivityLevelPtrOutputWithContext(context.Context) RuleGroupSensitivityLevelPtrOutput
}

func RuleGroupSensitivityLevelPtr added in v0.21.0

func RuleGroupSensitivityLevelPtr(v string) RuleGroupSensitivityLevelPtrInput

type RuleGroupSensitivityLevelPtrOutput added in v0.21.0

type RuleGroupSensitivityLevelPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupSensitivityLevelPtrOutput) Elem added in v0.21.0

func (RuleGroupSensitivityLevelPtrOutput) ElementType added in v0.21.0

func (RuleGroupSensitivityLevelPtrOutput) ToRuleGroupSensitivityLevelPtrOutput added in v0.21.0

func (o RuleGroupSensitivityLevelPtrOutput) ToRuleGroupSensitivityLevelPtrOutput() RuleGroupSensitivityLevelPtrOutput

func (RuleGroupSensitivityLevelPtrOutput) ToRuleGroupSensitivityLevelPtrOutputWithContext added in v0.21.0

func (o RuleGroupSensitivityLevelPtrOutput) ToRuleGroupSensitivityLevelPtrOutputWithContext(ctx context.Context) RuleGroupSensitivityLevelPtrOutput

func (RuleGroupSensitivityLevelPtrOutput) ToStringPtrOutput added in v0.21.0

func (RuleGroupSensitivityLevelPtrOutput) ToStringPtrOutputWithContext added in v0.21.0

func (o RuleGroupSensitivityLevelPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupSizeConstraintStatement

type RuleGroupSizeConstraintStatement struct {
	// The operator to use to compare the request part to the size setting.
	ComparisonOperator RuleGroupSizeConstraintStatementComparisonOperator `pulumi:"comparisonOperator"`
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch RuleGroupFieldToMatch `pulumi:"fieldToMatch"`
	// The size, in byte, to compare to the request part, after any transformations.
	Size float64 `pulumi:"size"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations []RuleGroupTextTransformation `pulumi:"textTransformations"`
}

Size Constraint statement.

type RuleGroupSizeConstraintStatementArgs

type RuleGroupSizeConstraintStatementArgs struct {
	// The operator to use to compare the request part to the size setting.
	ComparisonOperator RuleGroupSizeConstraintStatementComparisonOperatorInput `pulumi:"comparisonOperator"`
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch RuleGroupFieldToMatchInput `pulumi:"fieldToMatch"`
	// The size, in byte, to compare to the request part, after any transformations.
	Size pulumi.Float64Input `pulumi:"size"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations RuleGroupTextTransformationArrayInput `pulumi:"textTransformations"`
}

Size Constraint statement.

func (RuleGroupSizeConstraintStatementArgs) ElementType

func (RuleGroupSizeConstraintStatementArgs) ToRuleGroupSizeConstraintStatementOutput

func (i RuleGroupSizeConstraintStatementArgs) ToRuleGroupSizeConstraintStatementOutput() RuleGroupSizeConstraintStatementOutput

func (RuleGroupSizeConstraintStatementArgs) ToRuleGroupSizeConstraintStatementOutputWithContext

func (i RuleGroupSizeConstraintStatementArgs) ToRuleGroupSizeConstraintStatementOutputWithContext(ctx context.Context) RuleGroupSizeConstraintStatementOutput

func (RuleGroupSizeConstraintStatementArgs) ToRuleGroupSizeConstraintStatementPtrOutput

func (i RuleGroupSizeConstraintStatementArgs) ToRuleGroupSizeConstraintStatementPtrOutput() RuleGroupSizeConstraintStatementPtrOutput

func (RuleGroupSizeConstraintStatementArgs) ToRuleGroupSizeConstraintStatementPtrOutputWithContext

func (i RuleGroupSizeConstraintStatementArgs) ToRuleGroupSizeConstraintStatementPtrOutputWithContext(ctx context.Context) RuleGroupSizeConstraintStatementPtrOutput

type RuleGroupSizeConstraintStatementComparisonOperator

type RuleGroupSizeConstraintStatementComparisonOperator string

The operator to use to compare the request part to the size setting.

func (RuleGroupSizeConstraintStatementComparisonOperator) ElementType

func (RuleGroupSizeConstraintStatementComparisonOperator) ToRuleGroupSizeConstraintStatementComparisonOperatorOutput

func (e RuleGroupSizeConstraintStatementComparisonOperator) ToRuleGroupSizeConstraintStatementComparisonOperatorOutput() RuleGroupSizeConstraintStatementComparisonOperatorOutput

func (RuleGroupSizeConstraintStatementComparisonOperator) ToRuleGroupSizeConstraintStatementComparisonOperatorOutputWithContext

func (e RuleGroupSizeConstraintStatementComparisonOperator) ToRuleGroupSizeConstraintStatementComparisonOperatorOutputWithContext(ctx context.Context) RuleGroupSizeConstraintStatementComparisonOperatorOutput

func (RuleGroupSizeConstraintStatementComparisonOperator) ToRuleGroupSizeConstraintStatementComparisonOperatorPtrOutput

func (e RuleGroupSizeConstraintStatementComparisonOperator) ToRuleGroupSizeConstraintStatementComparisonOperatorPtrOutput() RuleGroupSizeConstraintStatementComparisonOperatorPtrOutput

func (RuleGroupSizeConstraintStatementComparisonOperator) ToRuleGroupSizeConstraintStatementComparisonOperatorPtrOutputWithContext

func (e RuleGroupSizeConstraintStatementComparisonOperator) ToRuleGroupSizeConstraintStatementComparisonOperatorPtrOutputWithContext(ctx context.Context) RuleGroupSizeConstraintStatementComparisonOperatorPtrOutput

func (RuleGroupSizeConstraintStatementComparisonOperator) ToStringOutput

func (RuleGroupSizeConstraintStatementComparisonOperator) ToStringOutputWithContext

func (RuleGroupSizeConstraintStatementComparisonOperator) ToStringPtrOutput

func (RuleGroupSizeConstraintStatementComparisonOperator) ToStringPtrOutputWithContext

type RuleGroupSizeConstraintStatementComparisonOperatorInput

type RuleGroupSizeConstraintStatementComparisonOperatorInput interface {
	pulumi.Input

	ToRuleGroupSizeConstraintStatementComparisonOperatorOutput() RuleGroupSizeConstraintStatementComparisonOperatorOutput
	ToRuleGroupSizeConstraintStatementComparisonOperatorOutputWithContext(context.Context) RuleGroupSizeConstraintStatementComparisonOperatorOutput
}

RuleGroupSizeConstraintStatementComparisonOperatorInput is an input type that accepts values of the RuleGroupSizeConstraintStatementComparisonOperator enum A concrete instance of `RuleGroupSizeConstraintStatementComparisonOperatorInput` can be one of the following:

RuleGroupSizeConstraintStatementComparisonOperatorEq
RuleGroupSizeConstraintStatementComparisonOperatorNe
RuleGroupSizeConstraintStatementComparisonOperatorLe
RuleGroupSizeConstraintStatementComparisonOperatorLt
RuleGroupSizeConstraintStatementComparisonOperatorGe
RuleGroupSizeConstraintStatementComparisonOperatorGt

type RuleGroupSizeConstraintStatementComparisonOperatorOutput

type RuleGroupSizeConstraintStatementComparisonOperatorOutput struct{ *pulumi.OutputState }

func (RuleGroupSizeConstraintStatementComparisonOperatorOutput) ElementType

func (RuleGroupSizeConstraintStatementComparisonOperatorOutput) ToRuleGroupSizeConstraintStatementComparisonOperatorOutput

func (RuleGroupSizeConstraintStatementComparisonOperatorOutput) ToRuleGroupSizeConstraintStatementComparisonOperatorOutputWithContext

func (o RuleGroupSizeConstraintStatementComparisonOperatorOutput) ToRuleGroupSizeConstraintStatementComparisonOperatorOutputWithContext(ctx context.Context) RuleGroupSizeConstraintStatementComparisonOperatorOutput

func (RuleGroupSizeConstraintStatementComparisonOperatorOutput) ToRuleGroupSizeConstraintStatementComparisonOperatorPtrOutput

func (RuleGroupSizeConstraintStatementComparisonOperatorOutput) ToRuleGroupSizeConstraintStatementComparisonOperatorPtrOutputWithContext

func (o RuleGroupSizeConstraintStatementComparisonOperatorOutput) ToRuleGroupSizeConstraintStatementComparisonOperatorPtrOutputWithContext(ctx context.Context) RuleGroupSizeConstraintStatementComparisonOperatorPtrOutput

func (RuleGroupSizeConstraintStatementComparisonOperatorOutput) ToStringOutput

func (RuleGroupSizeConstraintStatementComparisonOperatorOutput) ToStringOutputWithContext

func (RuleGroupSizeConstraintStatementComparisonOperatorOutput) ToStringPtrOutput

func (RuleGroupSizeConstraintStatementComparisonOperatorOutput) ToStringPtrOutputWithContext

type RuleGroupSizeConstraintStatementComparisonOperatorPtrInput

type RuleGroupSizeConstraintStatementComparisonOperatorPtrInput interface {
	pulumi.Input

	ToRuleGroupSizeConstraintStatementComparisonOperatorPtrOutput() RuleGroupSizeConstraintStatementComparisonOperatorPtrOutput
	ToRuleGroupSizeConstraintStatementComparisonOperatorPtrOutputWithContext(context.Context) RuleGroupSizeConstraintStatementComparisonOperatorPtrOutput
}

type RuleGroupSizeConstraintStatementComparisonOperatorPtrOutput

type RuleGroupSizeConstraintStatementComparisonOperatorPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupSizeConstraintStatementComparisonOperatorPtrOutput) Elem

func (RuleGroupSizeConstraintStatementComparisonOperatorPtrOutput) ElementType

func (RuleGroupSizeConstraintStatementComparisonOperatorPtrOutput) ToRuleGroupSizeConstraintStatementComparisonOperatorPtrOutput

func (RuleGroupSizeConstraintStatementComparisonOperatorPtrOutput) ToRuleGroupSizeConstraintStatementComparisonOperatorPtrOutputWithContext

func (o RuleGroupSizeConstraintStatementComparisonOperatorPtrOutput) ToRuleGroupSizeConstraintStatementComparisonOperatorPtrOutputWithContext(ctx context.Context) RuleGroupSizeConstraintStatementComparisonOperatorPtrOutput

func (RuleGroupSizeConstraintStatementComparisonOperatorPtrOutput) ToStringPtrOutput

func (RuleGroupSizeConstraintStatementComparisonOperatorPtrOutput) ToStringPtrOutputWithContext

type RuleGroupSizeConstraintStatementInput

type RuleGroupSizeConstraintStatementInput interface {
	pulumi.Input

	ToRuleGroupSizeConstraintStatementOutput() RuleGroupSizeConstraintStatementOutput
	ToRuleGroupSizeConstraintStatementOutputWithContext(context.Context) RuleGroupSizeConstraintStatementOutput
}

RuleGroupSizeConstraintStatementInput is an input type that accepts RuleGroupSizeConstraintStatementArgs and RuleGroupSizeConstraintStatementOutput values. You can construct a concrete instance of `RuleGroupSizeConstraintStatementInput` via:

RuleGroupSizeConstraintStatementArgs{...}

type RuleGroupSizeConstraintStatementOutput

type RuleGroupSizeConstraintStatementOutput struct{ *pulumi.OutputState }

Size Constraint statement.

func (RuleGroupSizeConstraintStatementOutput) ComparisonOperator

The operator to use to compare the request part to the size setting.

func (RuleGroupSizeConstraintStatementOutput) ElementType

func (RuleGroupSizeConstraintStatementOutput) FieldToMatch

The part of the web request that you want AWS WAF to inspect.

func (RuleGroupSizeConstraintStatementOutput) Size

The size, in byte, to compare to the request part, after any transformations.

func (RuleGroupSizeConstraintStatementOutput) TextTransformations

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (RuleGroupSizeConstraintStatementOutput) ToRuleGroupSizeConstraintStatementOutput

func (o RuleGroupSizeConstraintStatementOutput) ToRuleGroupSizeConstraintStatementOutput() RuleGroupSizeConstraintStatementOutput

func (RuleGroupSizeConstraintStatementOutput) ToRuleGroupSizeConstraintStatementOutputWithContext

func (o RuleGroupSizeConstraintStatementOutput) ToRuleGroupSizeConstraintStatementOutputWithContext(ctx context.Context) RuleGroupSizeConstraintStatementOutput

func (RuleGroupSizeConstraintStatementOutput) ToRuleGroupSizeConstraintStatementPtrOutput

func (o RuleGroupSizeConstraintStatementOutput) ToRuleGroupSizeConstraintStatementPtrOutput() RuleGroupSizeConstraintStatementPtrOutput

func (RuleGroupSizeConstraintStatementOutput) ToRuleGroupSizeConstraintStatementPtrOutputWithContext

func (o RuleGroupSizeConstraintStatementOutput) ToRuleGroupSizeConstraintStatementPtrOutputWithContext(ctx context.Context) RuleGroupSizeConstraintStatementPtrOutput

type RuleGroupSizeConstraintStatementPtrInput

type RuleGroupSizeConstraintStatementPtrInput interface {
	pulumi.Input

	ToRuleGroupSizeConstraintStatementPtrOutput() RuleGroupSizeConstraintStatementPtrOutput
	ToRuleGroupSizeConstraintStatementPtrOutputWithContext(context.Context) RuleGroupSizeConstraintStatementPtrOutput
}

RuleGroupSizeConstraintStatementPtrInput is an input type that accepts RuleGroupSizeConstraintStatementArgs, RuleGroupSizeConstraintStatementPtr and RuleGroupSizeConstraintStatementPtrOutput values. You can construct a concrete instance of `RuleGroupSizeConstraintStatementPtrInput` via:

        RuleGroupSizeConstraintStatementArgs{...}

or:

        nil

type RuleGroupSizeConstraintStatementPtrOutput

type RuleGroupSizeConstraintStatementPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupSizeConstraintStatementPtrOutput) ComparisonOperator

The operator to use to compare the request part to the size setting.

func (RuleGroupSizeConstraintStatementPtrOutput) Elem

func (RuleGroupSizeConstraintStatementPtrOutput) ElementType

func (RuleGroupSizeConstraintStatementPtrOutput) FieldToMatch

The part of the web request that you want AWS WAF to inspect.

func (RuleGroupSizeConstraintStatementPtrOutput) Size

The size, in byte, to compare to the request part, after any transformations.

func (RuleGroupSizeConstraintStatementPtrOutput) TextTransformations

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (RuleGroupSizeConstraintStatementPtrOutput) ToRuleGroupSizeConstraintStatementPtrOutput

func (o RuleGroupSizeConstraintStatementPtrOutput) ToRuleGroupSizeConstraintStatementPtrOutput() RuleGroupSizeConstraintStatementPtrOutput

func (RuleGroupSizeConstraintStatementPtrOutput) ToRuleGroupSizeConstraintStatementPtrOutputWithContext

func (o RuleGroupSizeConstraintStatementPtrOutput) ToRuleGroupSizeConstraintStatementPtrOutputWithContext(ctx context.Context) RuleGroupSizeConstraintStatementPtrOutput

type RuleGroupSqliMatchStatement

type RuleGroupSqliMatchStatement struct {
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch RuleGroupFieldToMatch `pulumi:"fieldToMatch"`
	// The sensitivity that you want AWS WAF to use to inspect for SQL injection attacks.
	//
	// `HIGH` detects more attacks, but might generate more false positives, especially if your web requests frequently contain unusual strings. For information about identifying and mitigating false positives, see [Testing and tuning](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-testing.html) in the *AWS WAF Developer Guide* .
	//
	// `LOW` is generally a better choice for resources that already have other protections against SQL injection attacks or that have a low tolerance for false positives.
	//
	// Default: `LOW`
	SensitivityLevel *RuleGroupSensitivityLevel `pulumi:"sensitivityLevel"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations []RuleGroupTextTransformation `pulumi:"textTransformations"`
}

Sqli Match Statement.

type RuleGroupSqliMatchStatementArgs

type RuleGroupSqliMatchStatementArgs struct {
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch RuleGroupFieldToMatchInput `pulumi:"fieldToMatch"`
	// The sensitivity that you want AWS WAF to use to inspect for SQL injection attacks.
	//
	// `HIGH` detects more attacks, but might generate more false positives, especially if your web requests frequently contain unusual strings. For information about identifying and mitigating false positives, see [Testing and tuning](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-testing.html) in the *AWS WAF Developer Guide* .
	//
	// `LOW` is generally a better choice for resources that already have other protections against SQL injection attacks or that have a low tolerance for false positives.
	//
	// Default: `LOW`
	SensitivityLevel RuleGroupSensitivityLevelPtrInput `pulumi:"sensitivityLevel"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations RuleGroupTextTransformationArrayInput `pulumi:"textTransformations"`
}

Sqli Match Statement.

func (RuleGroupSqliMatchStatementArgs) ElementType

func (RuleGroupSqliMatchStatementArgs) ToRuleGroupSqliMatchStatementOutput

func (i RuleGroupSqliMatchStatementArgs) ToRuleGroupSqliMatchStatementOutput() RuleGroupSqliMatchStatementOutput

func (RuleGroupSqliMatchStatementArgs) ToRuleGroupSqliMatchStatementOutputWithContext

func (i RuleGroupSqliMatchStatementArgs) ToRuleGroupSqliMatchStatementOutputWithContext(ctx context.Context) RuleGroupSqliMatchStatementOutput

func (RuleGroupSqliMatchStatementArgs) ToRuleGroupSqliMatchStatementPtrOutput

func (i RuleGroupSqliMatchStatementArgs) ToRuleGroupSqliMatchStatementPtrOutput() RuleGroupSqliMatchStatementPtrOutput

func (RuleGroupSqliMatchStatementArgs) ToRuleGroupSqliMatchStatementPtrOutputWithContext

func (i RuleGroupSqliMatchStatementArgs) ToRuleGroupSqliMatchStatementPtrOutputWithContext(ctx context.Context) RuleGroupSqliMatchStatementPtrOutput

type RuleGroupSqliMatchStatementInput

type RuleGroupSqliMatchStatementInput interface {
	pulumi.Input

	ToRuleGroupSqliMatchStatementOutput() RuleGroupSqliMatchStatementOutput
	ToRuleGroupSqliMatchStatementOutputWithContext(context.Context) RuleGroupSqliMatchStatementOutput
}

RuleGroupSqliMatchStatementInput is an input type that accepts RuleGroupSqliMatchStatementArgs and RuleGroupSqliMatchStatementOutput values. You can construct a concrete instance of `RuleGroupSqliMatchStatementInput` via:

RuleGroupSqliMatchStatementArgs{...}

type RuleGroupSqliMatchStatementOutput

type RuleGroupSqliMatchStatementOutput struct{ *pulumi.OutputState }

Sqli Match Statement.

func (RuleGroupSqliMatchStatementOutput) ElementType

func (RuleGroupSqliMatchStatementOutput) FieldToMatch

The part of the web request that you want AWS WAF to inspect.

func (RuleGroupSqliMatchStatementOutput) SensitivityLevel added in v0.21.0

The sensitivity that you want AWS WAF to use to inspect for SQL injection attacks.

`HIGH` detects more attacks, but might generate more false positives, especially if your web requests frequently contain unusual strings. For information about identifying and mitigating false positives, see [Testing and tuning](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-testing.html) in the *AWS WAF Developer Guide* .

`LOW` is generally a better choice for resources that already have other protections against SQL injection attacks or that have a low tolerance for false positives.

Default: `LOW`

func (RuleGroupSqliMatchStatementOutput) TextTransformations

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (RuleGroupSqliMatchStatementOutput) ToRuleGroupSqliMatchStatementOutput

func (o RuleGroupSqliMatchStatementOutput) ToRuleGroupSqliMatchStatementOutput() RuleGroupSqliMatchStatementOutput

func (RuleGroupSqliMatchStatementOutput) ToRuleGroupSqliMatchStatementOutputWithContext

func (o RuleGroupSqliMatchStatementOutput) ToRuleGroupSqliMatchStatementOutputWithContext(ctx context.Context) RuleGroupSqliMatchStatementOutput

func (RuleGroupSqliMatchStatementOutput) ToRuleGroupSqliMatchStatementPtrOutput

func (o RuleGroupSqliMatchStatementOutput) ToRuleGroupSqliMatchStatementPtrOutput() RuleGroupSqliMatchStatementPtrOutput

func (RuleGroupSqliMatchStatementOutput) ToRuleGroupSqliMatchStatementPtrOutputWithContext

func (o RuleGroupSqliMatchStatementOutput) ToRuleGroupSqliMatchStatementPtrOutputWithContext(ctx context.Context) RuleGroupSqliMatchStatementPtrOutput

type RuleGroupSqliMatchStatementPtrInput

type RuleGroupSqliMatchStatementPtrInput interface {
	pulumi.Input

	ToRuleGroupSqliMatchStatementPtrOutput() RuleGroupSqliMatchStatementPtrOutput
	ToRuleGroupSqliMatchStatementPtrOutputWithContext(context.Context) RuleGroupSqliMatchStatementPtrOutput
}

RuleGroupSqliMatchStatementPtrInput is an input type that accepts RuleGroupSqliMatchStatementArgs, RuleGroupSqliMatchStatementPtr and RuleGroupSqliMatchStatementPtrOutput values. You can construct a concrete instance of `RuleGroupSqliMatchStatementPtrInput` via:

        RuleGroupSqliMatchStatementArgs{...}

or:

        nil

type RuleGroupSqliMatchStatementPtrOutput

type RuleGroupSqliMatchStatementPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupSqliMatchStatementPtrOutput) Elem

func (RuleGroupSqliMatchStatementPtrOutput) ElementType

func (RuleGroupSqliMatchStatementPtrOutput) FieldToMatch

The part of the web request that you want AWS WAF to inspect.

func (RuleGroupSqliMatchStatementPtrOutput) SensitivityLevel added in v0.21.0

The sensitivity that you want AWS WAF to use to inspect for SQL injection attacks.

`HIGH` detects more attacks, but might generate more false positives, especially if your web requests frequently contain unusual strings. For information about identifying and mitigating false positives, see [Testing and tuning](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-testing.html) in the *AWS WAF Developer Guide* .

`LOW` is generally a better choice for resources that already have other protections against SQL injection attacks or that have a low tolerance for false positives.

Default: `LOW`

func (RuleGroupSqliMatchStatementPtrOutput) TextTransformations

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (RuleGroupSqliMatchStatementPtrOutput) ToRuleGroupSqliMatchStatementPtrOutput

func (o RuleGroupSqliMatchStatementPtrOutput) ToRuleGroupSqliMatchStatementPtrOutput() RuleGroupSqliMatchStatementPtrOutput

func (RuleGroupSqliMatchStatementPtrOutput) ToRuleGroupSqliMatchStatementPtrOutputWithContext

func (o RuleGroupSqliMatchStatementPtrOutput) ToRuleGroupSqliMatchStatementPtrOutputWithContext(ctx context.Context) RuleGroupSqliMatchStatementPtrOutput

type RuleGroupState

type RuleGroupState struct {
}

func (RuleGroupState) ElementType

func (RuleGroupState) ElementType() reflect.Type

type RuleGroupStatement

type RuleGroupStatement struct {
	// A logical rule statement used to combine other rule statements with AND logic. You provide more than one `Statement` within the `AndStatement` .
	AndStatement *RuleGroupAndStatement `pulumi:"andStatement"`
	// A rule statement that defines a string match search for AWS WAF to apply to web requests. The byte match statement provides the bytes to search for, the location in requests that you want AWS WAF to search, and other settings. The bytes to search for are typically a string that corresponds with ASCII characters. In the AWS WAF console and the developer guide, this is called a string match statement.
	ByteMatchStatement *RuleGroupByteMatchStatement `pulumi:"byteMatchStatement"`
	// A rule statement that labels web requests by country and region and that matches against web requests based on country code. A geo match rule labels every request that it inspects regardless of whether it finds a match.
	//
	// - To manage requests only by country, you can use this statement by itself and specify the countries that you want to match against in the `CountryCodes` array.
	// - Otherwise, configure your geo match rule with Count action so that it only labels requests. Then, add one or more label match rules to run after the geo match rule and configure them to match against the geographic labels and handle the requests as needed.
	//
	// AWS WAF labels requests using the alpha-2 country and region codes from the International Organization for Standardization (ISO) 3166 standard. AWS WAF determines the codes using either the IP address in the web request origin or, if you specify it, the address in the geo match `ForwardedIPConfig` .
	//
	// If you use the web request origin, the label formats are `awswaf:clientip:geo:region:<ISO country code>-<ISO region code>` and `awswaf:clientip:geo:country:<ISO country code>` .
	//
	// If you use a forwarded IP address, the label formats are `awswaf:forwardedip:geo:region:<ISO country code>-<ISO region code>` and `awswaf:forwardedip:geo:country:<ISO country code>` .
	//
	// For additional details, see [Geographic match rule statement](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-geo-match.html) in the [AWS WAF Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .
	GeoMatchStatement *RuleGroupGeoMatchStatement `pulumi:"geoMatchStatement"`
	// A rule statement used to detect web requests coming from particular IP addresses or address ranges. To use this, create an `IPSet` that specifies the addresses you want to detect, then use the ARN of that set in this statement.
	//
	// Each IP set rule statement references an IP set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it.
	IpSetReferenceStatement *RuleGroupIpSetReferenceStatement `pulumi:"ipSetReferenceStatement"`
	// A rule statement to match against labels that have been added to the web request by rules that have already run in the web ACL.
	//
	// The label match statement provides the label or namespace string to search for. The label string can represent a part or all of the fully qualified label name that had been added to the web request. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label. If you do not provide the fully qualified name in your label match string, AWS WAF performs the search for labels that were added in the same context as the label match statement.
	LabelMatchStatement *RuleGroupLabelMatchStatement `pulumi:"labelMatchStatement"`
	// A logical rule statement used to negate the results of another rule statement. You provide one `Statement` within the `NotStatement` .
	NotStatement *RuleGroupNotStatement `pulumi:"notStatement"`
	// A logical rule statement used to combine other rule statements with OR logic. You provide more than one `Statement` within the `OrStatement` .
	OrStatement *RuleGroupOrStatement `pulumi:"orStatement"`
	// A rate-based rule counts incoming requests and rate limits requests when they are coming at too fast a rate. The rule categorizes requests according to your aggregation criteria, collects them into aggregation instances, and counts and rate limits the requests for each instance.
	//
	// > If you change any of these settings in a rule that's currently in use, the change resets the rule's rate limiting counts. This can pause the rule's rate limiting activities for up to a minute.
	//
	// You can specify individual aggregation keys, like IP address or HTTP method. You can also specify aggregation key combinations, like IP address and HTTP method, or HTTP method, query argument, and cookie.
	//
	// Each unique set of values for the aggregation keys that you specify is a separate aggregation instance, with the value from each key contributing to the aggregation instance definition.
	//
	// For example, assume the rule evaluates web requests with the following IP address and HTTP method values:
	//
	// - IP address 10.1.1.1, HTTP method POST
	// - IP address 10.1.1.1, HTTP method GET
	// - IP address 127.0.0.0, HTTP method POST
	// - IP address 10.1.1.1, HTTP method GET
	//
	// The rule would create different aggregation instances according to your aggregation criteria, for example:
	//
	// - If the aggregation criteria is just the IP address, then each individual address is an aggregation instance, and AWS WAF counts requests separately for each. The aggregation instances and request counts for our example would be the following:
	//
	// - IP address 10.1.1.1: count 3
	// - IP address 127.0.0.0: count 1
	// - If the aggregation criteria is HTTP method, then each individual HTTP method is an aggregation instance. The aggregation instances and request counts for our example would be the following:
	//
	// - HTTP method POST: count 2
	// - HTTP method GET: count 2
	// - If the aggregation criteria is IP address and HTTP method, then each IP address and each HTTP method would contribute to the combined aggregation instance. The aggregation instances and request counts for our example would be the following:
	//
	// - IP address 10.1.1.1, HTTP method POST: count 1
	// - IP address 10.1.1.1, HTTP method GET: count 2
	// - IP address 127.0.0.0, HTTP method POST: count 1
	//
	// For any n-tuple of aggregation keys, each unique combination of values for the keys defines a separate aggregation instance, which AWS WAF counts and rate-limits individually.
	//
	// You can optionally nest another statement inside the rate-based statement, to narrow the scope of the rule so that it only counts and rate limits requests that match the nested statement. You can use this nested scope-down statement in conjunction with your aggregation key specifications or you can just count and rate limit all requests that match the scope-down statement, without additional aggregation. When you choose to just manage all requests that match a scope-down statement, the aggregation instance is singular for the rule.
	//
	// You cannot nest a `RateBasedStatement` inside another statement, for example inside a `NotStatement` or `OrStatement` . You can define a `RateBasedStatement` inside a web ACL and inside a rule group.
	//
	// For additional information about the options, see [Rate limiting web requests using rate-based rules](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rate-based-rules.html) in the *AWS WAF Developer Guide* .
	//
	// If you only aggregate on the individual IP address or forwarded IP address, you can retrieve the list of IP addresses that AWS WAF is currently rate limiting for a rule through the API call `GetRateBasedStatementManagedKeys` . This option is not available for other aggregation configurations.
	//
	// AWS WAF tracks and manages web requests separately for each instance of a rate-based rule that you use. For example, if you provide the same rate-based rule settings in two web ACLs, each of the two rule statements represents a separate instance of the rate-based rule and gets its own tracking and management by AWS WAF . If you define a rate-based rule inside a rule group, and then use that rule group in multiple places, each use creates a separate instance of the rate-based rule that gets its own tracking and management by AWS WAF .
	RateBasedStatement *RuleGroupRateBasedStatement `pulumi:"rateBasedStatement"`
	// A rule statement used to search web request components for a match against a single regular expression.
	RegexMatchStatement *RuleGroupRegexMatchStatement `pulumi:"regexMatchStatement"`
	// A rule statement used to search web request components for matches with regular expressions. To use this, create a `RegexPatternSet` that specifies the expressions that you want to detect, then use the ARN of that set in this statement. A web request matches the pattern set rule statement if the request component matches any of the patterns in the set.
	//
	// Each regex pattern set rule statement references a regex pattern set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it.
	RegexPatternSetReferenceStatement *RuleGroupRegexPatternSetReferenceStatement `pulumi:"regexPatternSetReferenceStatement"`
	// A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes.
	//
	// If you configure AWS WAF to inspect the request body, AWS WAF inspects only the number of bytes in the body up to the limit for the web ACL and protected resource type. If you know that the request body for your web requests should never exceed the inspection limit, you can use a size constraint statement to block requests that have a larger request body size. For more information about the inspection limits, see `Body` and `JsonBody` settings for the `FieldToMatch` data type.
	//
	// If you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI `/logo.jpg` is nine characters long.
	SizeConstraintStatement *RuleGroupSizeConstraintStatement `pulumi:"sizeConstraintStatement"`
	// A rule statement that inspects for malicious SQL code. Attackers insert malicious SQL code into web requests to do things like modify your database or extract data from it.
	SqliMatchStatement *RuleGroupSqliMatchStatement `pulumi:"sqliMatchStatement"`
	// A rule statement that inspects for cross-site scripting (XSS) attacks. In XSS attacks, the attacker uses vulnerabilities in a benign website as a vehicle to inject malicious client-site scripts into other legitimate web browsers.
	XssMatchStatement *RuleGroupXssMatchStatement `pulumi:"xssMatchStatement"`
}

First level statement that contains conditions, such as ByteMatch, SizeConstraint, etc

type RuleGroupStatementArgs

type RuleGroupStatementArgs struct {
	// A logical rule statement used to combine other rule statements with AND logic. You provide more than one `Statement` within the `AndStatement` .
	AndStatement RuleGroupAndStatementPtrInput `pulumi:"andStatement"`
	// A rule statement that defines a string match search for AWS WAF to apply to web requests. The byte match statement provides the bytes to search for, the location in requests that you want AWS WAF to search, and other settings. The bytes to search for are typically a string that corresponds with ASCII characters. In the AWS WAF console and the developer guide, this is called a string match statement.
	ByteMatchStatement RuleGroupByteMatchStatementPtrInput `pulumi:"byteMatchStatement"`
	// A rule statement that labels web requests by country and region and that matches against web requests based on country code. A geo match rule labels every request that it inspects regardless of whether it finds a match.
	//
	// - To manage requests only by country, you can use this statement by itself and specify the countries that you want to match against in the `CountryCodes` array.
	// - Otherwise, configure your geo match rule with Count action so that it only labels requests. Then, add one or more label match rules to run after the geo match rule and configure them to match against the geographic labels and handle the requests as needed.
	//
	// AWS WAF labels requests using the alpha-2 country and region codes from the International Organization for Standardization (ISO) 3166 standard. AWS WAF determines the codes using either the IP address in the web request origin or, if you specify it, the address in the geo match `ForwardedIPConfig` .
	//
	// If you use the web request origin, the label formats are `awswaf:clientip:geo:region:<ISO country code>-<ISO region code>` and `awswaf:clientip:geo:country:<ISO country code>` .
	//
	// If you use a forwarded IP address, the label formats are `awswaf:forwardedip:geo:region:<ISO country code>-<ISO region code>` and `awswaf:forwardedip:geo:country:<ISO country code>` .
	//
	// For additional details, see [Geographic match rule statement](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-geo-match.html) in the [AWS WAF Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .
	GeoMatchStatement RuleGroupGeoMatchStatementPtrInput `pulumi:"geoMatchStatement"`
	// A rule statement used to detect web requests coming from particular IP addresses or address ranges. To use this, create an `IPSet` that specifies the addresses you want to detect, then use the ARN of that set in this statement.
	//
	// Each IP set rule statement references an IP set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it.
	IpSetReferenceStatement RuleGroupIpSetReferenceStatementPtrInput `pulumi:"ipSetReferenceStatement"`
	// A rule statement to match against labels that have been added to the web request by rules that have already run in the web ACL.
	//
	// The label match statement provides the label or namespace string to search for. The label string can represent a part or all of the fully qualified label name that had been added to the web request. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label. If you do not provide the fully qualified name in your label match string, AWS WAF performs the search for labels that were added in the same context as the label match statement.
	LabelMatchStatement RuleGroupLabelMatchStatementPtrInput `pulumi:"labelMatchStatement"`
	// A logical rule statement used to negate the results of another rule statement. You provide one `Statement` within the `NotStatement` .
	NotStatement RuleGroupNotStatementPtrInput `pulumi:"notStatement"`
	// A logical rule statement used to combine other rule statements with OR logic. You provide more than one `Statement` within the `OrStatement` .
	OrStatement RuleGroupOrStatementPtrInput `pulumi:"orStatement"`
	// A rate-based rule counts incoming requests and rate limits requests when they are coming at too fast a rate. The rule categorizes requests according to your aggregation criteria, collects them into aggregation instances, and counts and rate limits the requests for each instance.
	//
	// > If you change any of these settings in a rule that's currently in use, the change resets the rule's rate limiting counts. This can pause the rule's rate limiting activities for up to a minute.
	//
	// You can specify individual aggregation keys, like IP address or HTTP method. You can also specify aggregation key combinations, like IP address and HTTP method, or HTTP method, query argument, and cookie.
	//
	// Each unique set of values for the aggregation keys that you specify is a separate aggregation instance, with the value from each key contributing to the aggregation instance definition.
	//
	// For example, assume the rule evaluates web requests with the following IP address and HTTP method values:
	//
	// - IP address 10.1.1.1, HTTP method POST
	// - IP address 10.1.1.1, HTTP method GET
	// - IP address 127.0.0.0, HTTP method POST
	// - IP address 10.1.1.1, HTTP method GET
	//
	// The rule would create different aggregation instances according to your aggregation criteria, for example:
	//
	// - If the aggregation criteria is just the IP address, then each individual address is an aggregation instance, and AWS WAF counts requests separately for each. The aggregation instances and request counts for our example would be the following:
	//
	// - IP address 10.1.1.1: count 3
	// - IP address 127.0.0.0: count 1
	// - If the aggregation criteria is HTTP method, then each individual HTTP method is an aggregation instance. The aggregation instances and request counts for our example would be the following:
	//
	// - HTTP method POST: count 2
	// - HTTP method GET: count 2
	// - If the aggregation criteria is IP address and HTTP method, then each IP address and each HTTP method would contribute to the combined aggregation instance. The aggregation instances and request counts for our example would be the following:
	//
	// - IP address 10.1.1.1, HTTP method POST: count 1
	// - IP address 10.1.1.1, HTTP method GET: count 2
	// - IP address 127.0.0.0, HTTP method POST: count 1
	//
	// For any n-tuple of aggregation keys, each unique combination of values for the keys defines a separate aggregation instance, which AWS WAF counts and rate-limits individually.
	//
	// You can optionally nest another statement inside the rate-based statement, to narrow the scope of the rule so that it only counts and rate limits requests that match the nested statement. You can use this nested scope-down statement in conjunction with your aggregation key specifications or you can just count and rate limit all requests that match the scope-down statement, without additional aggregation. When you choose to just manage all requests that match a scope-down statement, the aggregation instance is singular for the rule.
	//
	// You cannot nest a `RateBasedStatement` inside another statement, for example inside a `NotStatement` or `OrStatement` . You can define a `RateBasedStatement` inside a web ACL and inside a rule group.
	//
	// For additional information about the options, see [Rate limiting web requests using rate-based rules](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rate-based-rules.html) in the *AWS WAF Developer Guide* .
	//
	// If you only aggregate on the individual IP address or forwarded IP address, you can retrieve the list of IP addresses that AWS WAF is currently rate limiting for a rule through the API call `GetRateBasedStatementManagedKeys` . This option is not available for other aggregation configurations.
	//
	// AWS WAF tracks and manages web requests separately for each instance of a rate-based rule that you use. For example, if you provide the same rate-based rule settings in two web ACLs, each of the two rule statements represents a separate instance of the rate-based rule and gets its own tracking and management by AWS WAF . If you define a rate-based rule inside a rule group, and then use that rule group in multiple places, each use creates a separate instance of the rate-based rule that gets its own tracking and management by AWS WAF .
	RateBasedStatement RuleGroupRateBasedStatementPtrInput `pulumi:"rateBasedStatement"`
	// A rule statement used to search web request components for a match against a single regular expression.
	RegexMatchStatement RuleGroupRegexMatchStatementPtrInput `pulumi:"regexMatchStatement"`
	// A rule statement used to search web request components for matches with regular expressions. To use this, create a `RegexPatternSet` that specifies the expressions that you want to detect, then use the ARN of that set in this statement. A web request matches the pattern set rule statement if the request component matches any of the patterns in the set.
	//
	// Each regex pattern set rule statement references a regex pattern set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it.
	RegexPatternSetReferenceStatement RuleGroupRegexPatternSetReferenceStatementPtrInput `pulumi:"regexPatternSetReferenceStatement"`
	// A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes.
	//
	// If you configure AWS WAF to inspect the request body, AWS WAF inspects only the number of bytes in the body up to the limit for the web ACL and protected resource type. If you know that the request body for your web requests should never exceed the inspection limit, you can use a size constraint statement to block requests that have a larger request body size. For more information about the inspection limits, see `Body` and `JsonBody` settings for the `FieldToMatch` data type.
	//
	// If you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI `/logo.jpg` is nine characters long.
	SizeConstraintStatement RuleGroupSizeConstraintStatementPtrInput `pulumi:"sizeConstraintStatement"`
	// A rule statement that inspects for malicious SQL code. Attackers insert malicious SQL code into web requests to do things like modify your database or extract data from it.
	SqliMatchStatement RuleGroupSqliMatchStatementPtrInput `pulumi:"sqliMatchStatement"`
	// A rule statement that inspects for cross-site scripting (XSS) attacks. In XSS attacks, the attacker uses vulnerabilities in a benign website as a vehicle to inject malicious client-site scripts into other legitimate web browsers.
	XssMatchStatement RuleGroupXssMatchStatementPtrInput `pulumi:"xssMatchStatement"`
}

First level statement that contains conditions, such as ByteMatch, SizeConstraint, etc

func (RuleGroupStatementArgs) ElementType

func (RuleGroupStatementArgs) ElementType() reflect.Type

func (RuleGroupStatementArgs) ToRuleGroupStatementOutput

func (i RuleGroupStatementArgs) ToRuleGroupStatementOutput() RuleGroupStatementOutput

func (RuleGroupStatementArgs) ToRuleGroupStatementOutputWithContext

func (i RuleGroupStatementArgs) ToRuleGroupStatementOutputWithContext(ctx context.Context) RuleGroupStatementOutput

func (RuleGroupStatementArgs) ToRuleGroupStatementPtrOutput

func (i RuleGroupStatementArgs) ToRuleGroupStatementPtrOutput() RuleGroupStatementPtrOutput

func (RuleGroupStatementArgs) ToRuleGroupStatementPtrOutputWithContext

func (i RuleGroupStatementArgs) ToRuleGroupStatementPtrOutputWithContext(ctx context.Context) RuleGroupStatementPtrOutput

type RuleGroupStatementArray

type RuleGroupStatementArray []RuleGroupStatementInput

func (RuleGroupStatementArray) ElementType

func (RuleGroupStatementArray) ElementType() reflect.Type

func (RuleGroupStatementArray) ToRuleGroupStatementArrayOutput

func (i RuleGroupStatementArray) ToRuleGroupStatementArrayOutput() RuleGroupStatementArrayOutput

func (RuleGroupStatementArray) ToRuleGroupStatementArrayOutputWithContext

func (i RuleGroupStatementArray) ToRuleGroupStatementArrayOutputWithContext(ctx context.Context) RuleGroupStatementArrayOutput

type RuleGroupStatementArrayInput

type RuleGroupStatementArrayInput interface {
	pulumi.Input

	ToRuleGroupStatementArrayOutput() RuleGroupStatementArrayOutput
	ToRuleGroupStatementArrayOutputWithContext(context.Context) RuleGroupStatementArrayOutput
}

RuleGroupStatementArrayInput is an input type that accepts RuleGroupStatementArray and RuleGroupStatementArrayOutput values. You can construct a concrete instance of `RuleGroupStatementArrayInput` via:

RuleGroupStatementArray{ RuleGroupStatementArgs{...} }

type RuleGroupStatementArrayOutput

type RuleGroupStatementArrayOutput struct{ *pulumi.OutputState }

func (RuleGroupStatementArrayOutput) ElementType

func (RuleGroupStatementArrayOutput) Index

func (RuleGroupStatementArrayOutput) ToRuleGroupStatementArrayOutput

func (o RuleGroupStatementArrayOutput) ToRuleGroupStatementArrayOutput() RuleGroupStatementArrayOutput

func (RuleGroupStatementArrayOutput) ToRuleGroupStatementArrayOutputWithContext

func (o RuleGroupStatementArrayOutput) ToRuleGroupStatementArrayOutputWithContext(ctx context.Context) RuleGroupStatementArrayOutput

type RuleGroupStatementInput

type RuleGroupStatementInput interface {
	pulumi.Input

	ToRuleGroupStatementOutput() RuleGroupStatementOutput
	ToRuleGroupStatementOutputWithContext(context.Context) RuleGroupStatementOutput
}

RuleGroupStatementInput is an input type that accepts RuleGroupStatementArgs and RuleGroupStatementOutput values. You can construct a concrete instance of `RuleGroupStatementInput` via:

RuleGroupStatementArgs{...}

type RuleGroupStatementOutput

type RuleGroupStatementOutput struct{ *pulumi.OutputState }

First level statement that contains conditions, such as ByteMatch, SizeConstraint, etc

func (RuleGroupStatementOutput) AndStatement

A logical rule statement used to combine other rule statements with AND logic. You provide more than one `Statement` within the `AndStatement` .

func (RuleGroupStatementOutput) ByteMatchStatement

A rule statement that defines a string match search for AWS WAF to apply to web requests. The byte match statement provides the bytes to search for, the location in requests that you want AWS WAF to search, and other settings. The bytes to search for are typically a string that corresponds with ASCII characters. In the AWS WAF console and the developer guide, this is called a string match statement.

func (RuleGroupStatementOutput) ElementType

func (RuleGroupStatementOutput) ElementType() reflect.Type

func (RuleGroupStatementOutput) GeoMatchStatement

A rule statement that labels web requests by country and region and that matches against web requests based on country code. A geo match rule labels every request that it inspects regardless of whether it finds a match.

- To manage requests only by country, you can use this statement by itself and specify the countries that you want to match against in the `CountryCodes` array. - Otherwise, configure your geo match rule with Count action so that it only labels requests. Then, add one or more label match rules to run after the geo match rule and configure them to match against the geographic labels and handle the requests as needed.

AWS WAF labels requests using the alpha-2 country and region codes from the International Organization for Standardization (ISO) 3166 standard. AWS WAF determines the codes using either the IP address in the web request origin or, if you specify it, the address in the geo match `ForwardedIPConfig` .

If you use the web request origin, the label formats are `awswaf:clientip:geo:region:<ISO country code>-<ISO region code>` and `awswaf:clientip:geo:country:<ISO country code>` .

If you use a forwarded IP address, the label formats are `awswaf:forwardedip:geo:region:<ISO country code>-<ISO region code>` and `awswaf:forwardedip:geo:country:<ISO country code>` .

For additional details, see [Geographic match rule statement](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-geo-match.html) in the [AWS WAF Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .

func (RuleGroupStatementOutput) IpSetReferenceStatement added in v0.72.0

A rule statement used to detect web requests coming from particular IP addresses or address ranges. To use this, create an `IPSet` that specifies the addresses you want to detect, then use the ARN of that set in this statement.

Each IP set rule statement references an IP set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it.

func (RuleGroupStatementOutput) LabelMatchStatement

A rule statement to match against labels that have been added to the web request by rules that have already run in the web ACL.

The label match statement provides the label or namespace string to search for. The label string can represent a part or all of the fully qualified label name that had been added to the web request. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label. If you do not provide the fully qualified name in your label match string, AWS WAF performs the search for labels that were added in the same context as the label match statement.

func (RuleGroupStatementOutput) NotStatement

A logical rule statement used to negate the results of another rule statement. You provide one `Statement` within the `NotStatement` .

func (RuleGroupStatementOutput) OrStatement

A logical rule statement used to combine other rule statements with OR logic. You provide more than one `Statement` within the `OrStatement` .

func (RuleGroupStatementOutput) RateBasedStatement

A rate-based rule counts incoming requests and rate limits requests when they are coming at too fast a rate. The rule categorizes requests according to your aggregation criteria, collects them into aggregation instances, and counts and rate limits the requests for each instance.

> If you change any of these settings in a rule that's currently in use, the change resets the rule's rate limiting counts. This can pause the rule's rate limiting activities for up to a minute.

You can specify individual aggregation keys, like IP address or HTTP method. You can also specify aggregation key combinations, like IP address and HTTP method, or HTTP method, query argument, and cookie.

Each unique set of values for the aggregation keys that you specify is a separate aggregation instance, with the value from each key contributing to the aggregation instance definition.

For example, assume the rule evaluates web requests with the following IP address and HTTP method values:

- IP address 10.1.1.1, HTTP method POST - IP address 10.1.1.1, HTTP method GET - IP address 127.0.0.0, HTTP method POST - IP address 10.1.1.1, HTTP method GET

The rule would create different aggregation instances according to your aggregation criteria, for example:

- If the aggregation criteria is just the IP address, then each individual address is an aggregation instance, and AWS WAF counts requests separately for each. The aggregation instances and request counts for our example would be the following:

- IP address 10.1.1.1: count 3 - IP address 127.0.0.0: count 1 - If the aggregation criteria is HTTP method, then each individual HTTP method is an aggregation instance. The aggregation instances and request counts for our example would be the following:

- HTTP method POST: count 2 - HTTP method GET: count 2 - If the aggregation criteria is IP address and HTTP method, then each IP address and each HTTP method would contribute to the combined aggregation instance. The aggregation instances and request counts for our example would be the following:

- IP address 10.1.1.1, HTTP method POST: count 1 - IP address 10.1.1.1, HTTP method GET: count 2 - IP address 127.0.0.0, HTTP method POST: count 1

For any n-tuple of aggregation keys, each unique combination of values for the keys defines a separate aggregation instance, which AWS WAF counts and rate-limits individually.

You can optionally nest another statement inside the rate-based statement, to narrow the scope of the rule so that it only counts and rate limits requests that match the nested statement. You can use this nested scope-down statement in conjunction with your aggregation key specifications or you can just count and rate limit all requests that match the scope-down statement, without additional aggregation. When you choose to just manage all requests that match a scope-down statement, the aggregation instance is singular for the rule.

You cannot nest a `RateBasedStatement` inside another statement, for example inside a `NotStatement` or `OrStatement` . You can define a `RateBasedStatement` inside a web ACL and inside a rule group.

For additional information about the options, see [Rate limiting web requests using rate-based rules](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rate-based-rules.html) in the *AWS WAF Developer Guide* .

If you only aggregate on the individual IP address or forwarded IP address, you can retrieve the list of IP addresses that AWS WAF is currently rate limiting for a rule through the API call `GetRateBasedStatementManagedKeys` . This option is not available for other aggregation configurations.

AWS WAF tracks and manages web requests separately for each instance of a rate-based rule that you use. For example, if you provide the same rate-based rule settings in two web ACLs, each of the two rule statements represents a separate instance of the rate-based rule and gets its own tracking and management by AWS WAF . If you define a rate-based rule inside a rule group, and then use that rule group in multiple places, each use creates a separate instance of the rate-based rule that gets its own tracking and management by AWS WAF .

func (RuleGroupStatementOutput) RegexMatchStatement added in v0.9.0

A rule statement used to search web request components for a match against a single regular expression.

func (RuleGroupStatementOutput) RegexPatternSetReferenceStatement

A rule statement used to search web request components for matches with regular expressions. To use this, create a `RegexPatternSet` that specifies the expressions that you want to detect, then use the ARN of that set in this statement. A web request matches the pattern set rule statement if the request component matches any of the patterns in the set.

Each regex pattern set rule statement references a regex pattern set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it.

func (RuleGroupStatementOutput) SizeConstraintStatement

A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes.

If you configure AWS WAF to inspect the request body, AWS WAF inspects only the number of bytes in the body up to the limit for the web ACL and protected resource type. If you know that the request body for your web requests should never exceed the inspection limit, you can use a size constraint statement to block requests that have a larger request body size. For more information about the inspection limits, see `Body` and `JsonBody` settings for the `FieldToMatch` data type.

If you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI `/logo.jpg` is nine characters long.

func (RuleGroupStatementOutput) SqliMatchStatement

A rule statement that inspects for malicious SQL code. Attackers insert malicious SQL code into web requests to do things like modify your database or extract data from it.

func (RuleGroupStatementOutput) ToRuleGroupStatementOutput

func (o RuleGroupStatementOutput) ToRuleGroupStatementOutput() RuleGroupStatementOutput

func (RuleGroupStatementOutput) ToRuleGroupStatementOutputWithContext

func (o RuleGroupStatementOutput) ToRuleGroupStatementOutputWithContext(ctx context.Context) RuleGroupStatementOutput

func (RuleGroupStatementOutput) ToRuleGroupStatementPtrOutput

func (o RuleGroupStatementOutput) ToRuleGroupStatementPtrOutput() RuleGroupStatementPtrOutput

func (RuleGroupStatementOutput) ToRuleGroupStatementPtrOutputWithContext

func (o RuleGroupStatementOutput) ToRuleGroupStatementPtrOutputWithContext(ctx context.Context) RuleGroupStatementPtrOutput

func (RuleGroupStatementOutput) XssMatchStatement

A rule statement that inspects for cross-site scripting (XSS) attacks. In XSS attacks, the attacker uses vulnerabilities in a benign website as a vehicle to inject malicious client-site scripts into other legitimate web browsers.

type RuleGroupStatementPtrInput

type RuleGroupStatementPtrInput interface {
	pulumi.Input

	ToRuleGroupStatementPtrOutput() RuleGroupStatementPtrOutput
	ToRuleGroupStatementPtrOutputWithContext(context.Context) RuleGroupStatementPtrOutput
}

RuleGroupStatementPtrInput is an input type that accepts RuleGroupStatementArgs, RuleGroupStatementPtr and RuleGroupStatementPtrOutput values. You can construct a concrete instance of `RuleGroupStatementPtrInput` via:

        RuleGroupStatementArgs{...}

or:

        nil

type RuleGroupStatementPtrOutput

type RuleGroupStatementPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupStatementPtrOutput) AndStatement

A logical rule statement used to combine other rule statements with AND logic. You provide more than one `Statement` within the `AndStatement` .

func (RuleGroupStatementPtrOutput) ByteMatchStatement

A rule statement that defines a string match search for AWS WAF to apply to web requests. The byte match statement provides the bytes to search for, the location in requests that you want AWS WAF to search, and other settings. The bytes to search for are typically a string that corresponds with ASCII characters. In the AWS WAF console and the developer guide, this is called a string match statement.

func (RuleGroupStatementPtrOutput) Elem

func (RuleGroupStatementPtrOutput) ElementType

func (RuleGroupStatementPtrOutput) GeoMatchStatement

A rule statement that labels web requests by country and region and that matches against web requests based on country code. A geo match rule labels every request that it inspects regardless of whether it finds a match.

- To manage requests only by country, you can use this statement by itself and specify the countries that you want to match against in the `CountryCodes` array. - Otherwise, configure your geo match rule with Count action so that it only labels requests. Then, add one or more label match rules to run after the geo match rule and configure them to match against the geographic labels and handle the requests as needed.

AWS WAF labels requests using the alpha-2 country and region codes from the International Organization for Standardization (ISO) 3166 standard. AWS WAF determines the codes using either the IP address in the web request origin or, if you specify it, the address in the geo match `ForwardedIPConfig` .

If you use the web request origin, the label formats are `awswaf:clientip:geo:region:<ISO country code>-<ISO region code>` and `awswaf:clientip:geo:country:<ISO country code>` .

If you use a forwarded IP address, the label formats are `awswaf:forwardedip:geo:region:<ISO country code>-<ISO region code>` and `awswaf:forwardedip:geo:country:<ISO country code>` .

For additional details, see [Geographic match rule statement](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-geo-match.html) in the [AWS WAF Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .

func (RuleGroupStatementPtrOutput) IpSetReferenceStatement added in v0.72.0

A rule statement used to detect web requests coming from particular IP addresses or address ranges. To use this, create an `IPSet` that specifies the addresses you want to detect, then use the ARN of that set in this statement.

Each IP set rule statement references an IP set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it.

func (RuleGroupStatementPtrOutput) LabelMatchStatement

A rule statement to match against labels that have been added to the web request by rules that have already run in the web ACL.

The label match statement provides the label or namespace string to search for. The label string can represent a part or all of the fully qualified label name that had been added to the web request. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label. If you do not provide the fully qualified name in your label match string, AWS WAF performs the search for labels that were added in the same context as the label match statement.

func (RuleGroupStatementPtrOutput) NotStatement

A logical rule statement used to negate the results of another rule statement. You provide one `Statement` within the `NotStatement` .

func (RuleGroupStatementPtrOutput) OrStatement

A logical rule statement used to combine other rule statements with OR logic. You provide more than one `Statement` within the `OrStatement` .

func (RuleGroupStatementPtrOutput) RateBasedStatement

A rate-based rule counts incoming requests and rate limits requests when they are coming at too fast a rate. The rule categorizes requests according to your aggregation criteria, collects them into aggregation instances, and counts and rate limits the requests for each instance.

> If you change any of these settings in a rule that's currently in use, the change resets the rule's rate limiting counts. This can pause the rule's rate limiting activities for up to a minute.

You can specify individual aggregation keys, like IP address or HTTP method. You can also specify aggregation key combinations, like IP address and HTTP method, or HTTP method, query argument, and cookie.

Each unique set of values for the aggregation keys that you specify is a separate aggregation instance, with the value from each key contributing to the aggregation instance definition.

For example, assume the rule evaluates web requests with the following IP address and HTTP method values:

- IP address 10.1.1.1, HTTP method POST - IP address 10.1.1.1, HTTP method GET - IP address 127.0.0.0, HTTP method POST - IP address 10.1.1.1, HTTP method GET

The rule would create different aggregation instances according to your aggregation criteria, for example:

- If the aggregation criteria is just the IP address, then each individual address is an aggregation instance, and AWS WAF counts requests separately for each. The aggregation instances and request counts for our example would be the following:

- IP address 10.1.1.1: count 3 - IP address 127.0.0.0: count 1 - If the aggregation criteria is HTTP method, then each individual HTTP method is an aggregation instance. The aggregation instances and request counts for our example would be the following:

- HTTP method POST: count 2 - HTTP method GET: count 2 - If the aggregation criteria is IP address and HTTP method, then each IP address and each HTTP method would contribute to the combined aggregation instance. The aggregation instances and request counts for our example would be the following:

- IP address 10.1.1.1, HTTP method POST: count 1 - IP address 10.1.1.1, HTTP method GET: count 2 - IP address 127.0.0.0, HTTP method POST: count 1

For any n-tuple of aggregation keys, each unique combination of values for the keys defines a separate aggregation instance, which AWS WAF counts and rate-limits individually.

You can optionally nest another statement inside the rate-based statement, to narrow the scope of the rule so that it only counts and rate limits requests that match the nested statement. You can use this nested scope-down statement in conjunction with your aggregation key specifications or you can just count and rate limit all requests that match the scope-down statement, without additional aggregation. When you choose to just manage all requests that match a scope-down statement, the aggregation instance is singular for the rule.

You cannot nest a `RateBasedStatement` inside another statement, for example inside a `NotStatement` or `OrStatement` . You can define a `RateBasedStatement` inside a web ACL and inside a rule group.

For additional information about the options, see [Rate limiting web requests using rate-based rules](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rate-based-rules.html) in the *AWS WAF Developer Guide* .

If you only aggregate on the individual IP address or forwarded IP address, you can retrieve the list of IP addresses that AWS WAF is currently rate limiting for a rule through the API call `GetRateBasedStatementManagedKeys` . This option is not available for other aggregation configurations.

AWS WAF tracks and manages web requests separately for each instance of a rate-based rule that you use. For example, if you provide the same rate-based rule settings in two web ACLs, each of the two rule statements represents a separate instance of the rate-based rule and gets its own tracking and management by AWS WAF . If you define a rate-based rule inside a rule group, and then use that rule group in multiple places, each use creates a separate instance of the rate-based rule that gets its own tracking and management by AWS WAF .

func (RuleGroupStatementPtrOutput) RegexMatchStatement added in v0.9.0

A rule statement used to search web request components for a match against a single regular expression.

func (RuleGroupStatementPtrOutput) RegexPatternSetReferenceStatement

A rule statement used to search web request components for matches with regular expressions. To use this, create a `RegexPatternSet` that specifies the expressions that you want to detect, then use the ARN of that set in this statement. A web request matches the pattern set rule statement if the request component matches any of the patterns in the set.

Each regex pattern set rule statement references a regex pattern set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it.

func (RuleGroupStatementPtrOutput) SizeConstraintStatement

A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes.

If you configure AWS WAF to inspect the request body, AWS WAF inspects only the number of bytes in the body up to the limit for the web ACL and protected resource type. If you know that the request body for your web requests should never exceed the inspection limit, you can use a size constraint statement to block requests that have a larger request body size. For more information about the inspection limits, see `Body` and `JsonBody` settings for the `FieldToMatch` data type.

If you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI `/logo.jpg` is nine characters long.

func (RuleGroupStatementPtrOutput) SqliMatchStatement

A rule statement that inspects for malicious SQL code. Attackers insert malicious SQL code into web requests to do things like modify your database or extract data from it.

func (RuleGroupStatementPtrOutput) ToRuleGroupStatementPtrOutput

func (o RuleGroupStatementPtrOutput) ToRuleGroupStatementPtrOutput() RuleGroupStatementPtrOutput

func (RuleGroupStatementPtrOutput) ToRuleGroupStatementPtrOutputWithContext

func (o RuleGroupStatementPtrOutput) ToRuleGroupStatementPtrOutputWithContext(ctx context.Context) RuleGroupStatementPtrOutput

func (RuleGroupStatementPtrOutput) XssMatchStatement

A rule statement that inspects for cross-site scripting (XSS) attacks. In XSS attacks, the attacker uses vulnerabilities in a benign website as a vehicle to inject malicious client-site scripts into other legitimate web browsers.

type RuleGroupTag

type RuleGroupTag struct {
	// Part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as "customer." Tag keys are case-sensitive.
	Key *string `pulumi:"key"`
	// Part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as "companyA" or "companyB." Tag values are case-sensitive.
	Value *string `pulumi:"value"`
}

type RuleGroupTextTransformation

type RuleGroupTextTransformation struct {
	// Sets the relative processing order for multiple transformations. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content. The priorities don't need to be consecutive, but they must all be different.
	Priority int `pulumi:"priority"`
	// For detailed descriptions of each of the transformation types, see [Text transformations](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-transformation.html) in the *AWS WAF Developer Guide* .
	Type RuleGroupTextTransformationType `pulumi:"type"`
}

Text Transformation on the Search String before match.

type RuleGroupTextTransformationArgs

type RuleGroupTextTransformationArgs struct {
	// Sets the relative processing order for multiple transformations. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content. The priorities don't need to be consecutive, but they must all be different.
	Priority pulumi.IntInput `pulumi:"priority"`
	// For detailed descriptions of each of the transformation types, see [Text transformations](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-transformation.html) in the *AWS WAF Developer Guide* .
	Type RuleGroupTextTransformationTypeInput `pulumi:"type"`
}

Text Transformation on the Search String before match.

func (RuleGroupTextTransformationArgs) ElementType

func (RuleGroupTextTransformationArgs) ToRuleGroupTextTransformationOutput

func (i RuleGroupTextTransformationArgs) ToRuleGroupTextTransformationOutput() RuleGroupTextTransformationOutput

func (RuleGroupTextTransformationArgs) ToRuleGroupTextTransformationOutputWithContext

func (i RuleGroupTextTransformationArgs) ToRuleGroupTextTransformationOutputWithContext(ctx context.Context) RuleGroupTextTransformationOutput

type RuleGroupTextTransformationArray

type RuleGroupTextTransformationArray []RuleGroupTextTransformationInput

func (RuleGroupTextTransformationArray) ElementType

func (RuleGroupTextTransformationArray) ToRuleGroupTextTransformationArrayOutput

func (i RuleGroupTextTransformationArray) ToRuleGroupTextTransformationArrayOutput() RuleGroupTextTransformationArrayOutput

func (RuleGroupTextTransformationArray) ToRuleGroupTextTransformationArrayOutputWithContext

func (i RuleGroupTextTransformationArray) ToRuleGroupTextTransformationArrayOutputWithContext(ctx context.Context) RuleGroupTextTransformationArrayOutput

type RuleGroupTextTransformationArrayInput

type RuleGroupTextTransformationArrayInput interface {
	pulumi.Input

	ToRuleGroupTextTransformationArrayOutput() RuleGroupTextTransformationArrayOutput
	ToRuleGroupTextTransformationArrayOutputWithContext(context.Context) RuleGroupTextTransformationArrayOutput
}

RuleGroupTextTransformationArrayInput is an input type that accepts RuleGroupTextTransformationArray and RuleGroupTextTransformationArrayOutput values. You can construct a concrete instance of `RuleGroupTextTransformationArrayInput` via:

RuleGroupTextTransformationArray{ RuleGroupTextTransformationArgs{...} }

type RuleGroupTextTransformationArrayOutput

type RuleGroupTextTransformationArrayOutput struct{ *pulumi.OutputState }

func (RuleGroupTextTransformationArrayOutput) ElementType

func (RuleGroupTextTransformationArrayOutput) Index

func (RuleGroupTextTransformationArrayOutput) ToRuleGroupTextTransformationArrayOutput

func (o RuleGroupTextTransformationArrayOutput) ToRuleGroupTextTransformationArrayOutput() RuleGroupTextTransformationArrayOutput

func (RuleGroupTextTransformationArrayOutput) ToRuleGroupTextTransformationArrayOutputWithContext

func (o RuleGroupTextTransformationArrayOutput) ToRuleGroupTextTransformationArrayOutputWithContext(ctx context.Context) RuleGroupTextTransformationArrayOutput

type RuleGroupTextTransformationInput

type RuleGroupTextTransformationInput interface {
	pulumi.Input

	ToRuleGroupTextTransformationOutput() RuleGroupTextTransformationOutput
	ToRuleGroupTextTransformationOutputWithContext(context.Context) RuleGroupTextTransformationOutput
}

RuleGroupTextTransformationInput is an input type that accepts RuleGroupTextTransformationArgs and RuleGroupTextTransformationOutput values. You can construct a concrete instance of `RuleGroupTextTransformationInput` via:

RuleGroupTextTransformationArgs{...}

type RuleGroupTextTransformationOutput

type RuleGroupTextTransformationOutput struct{ *pulumi.OutputState }

Text Transformation on the Search String before match.

func (RuleGroupTextTransformationOutput) ElementType

func (RuleGroupTextTransformationOutput) Priority

Sets the relative processing order for multiple transformations. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content. The priorities don't need to be consecutive, but they must all be different.

func (RuleGroupTextTransformationOutput) ToRuleGroupTextTransformationOutput

func (o RuleGroupTextTransformationOutput) ToRuleGroupTextTransformationOutput() RuleGroupTextTransformationOutput

func (RuleGroupTextTransformationOutput) ToRuleGroupTextTransformationOutputWithContext

func (o RuleGroupTextTransformationOutput) ToRuleGroupTextTransformationOutputWithContext(ctx context.Context) RuleGroupTextTransformationOutput

func (RuleGroupTextTransformationOutput) Type

For detailed descriptions of each of the transformation types, see [Text transformations](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-transformation.html) in the *AWS WAF Developer Guide* .

type RuleGroupTextTransformationType

type RuleGroupTextTransformationType string

Type of text transformation.

func (RuleGroupTextTransformationType) ElementType

func (RuleGroupTextTransformationType) ToRuleGroupTextTransformationTypeOutput

func (e RuleGroupTextTransformationType) ToRuleGroupTextTransformationTypeOutput() RuleGroupTextTransformationTypeOutput

func (RuleGroupTextTransformationType) ToRuleGroupTextTransformationTypeOutputWithContext

func (e RuleGroupTextTransformationType) ToRuleGroupTextTransformationTypeOutputWithContext(ctx context.Context) RuleGroupTextTransformationTypeOutput

func (RuleGroupTextTransformationType) ToRuleGroupTextTransformationTypePtrOutput

func (e RuleGroupTextTransformationType) ToRuleGroupTextTransformationTypePtrOutput() RuleGroupTextTransformationTypePtrOutput

func (RuleGroupTextTransformationType) ToRuleGroupTextTransformationTypePtrOutputWithContext

func (e RuleGroupTextTransformationType) ToRuleGroupTextTransformationTypePtrOutputWithContext(ctx context.Context) RuleGroupTextTransformationTypePtrOutput

func (RuleGroupTextTransformationType) ToStringOutput

func (RuleGroupTextTransformationType) ToStringOutputWithContext

func (e RuleGroupTextTransformationType) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupTextTransformationType) ToStringPtrOutput

func (RuleGroupTextTransformationType) ToStringPtrOutputWithContext

func (e RuleGroupTextTransformationType) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupTextTransformationTypeInput

type RuleGroupTextTransformationTypeInput interface {
	pulumi.Input

	ToRuleGroupTextTransformationTypeOutput() RuleGroupTextTransformationTypeOutput
	ToRuleGroupTextTransformationTypeOutputWithContext(context.Context) RuleGroupTextTransformationTypeOutput
}

RuleGroupTextTransformationTypeInput is an input type that accepts values of the RuleGroupTextTransformationType enum A concrete instance of `RuleGroupTextTransformationTypeInput` can be one of the following:

RuleGroupTextTransformationTypeNone
RuleGroupTextTransformationTypeCompressWhiteSpace
RuleGroupTextTransformationTypeHtmlEntityDecode
RuleGroupTextTransformationTypeLowercase
RuleGroupTextTransformationTypeCmdLine
RuleGroupTextTransformationTypeUrlDecode
RuleGroupTextTransformationTypeBase64Decode
RuleGroupTextTransformationTypeHexDecode
RuleGroupTextTransformationTypeMd5
RuleGroupTextTransformationTypeReplaceComments
RuleGroupTextTransformationTypeEscapeSeqDecode
RuleGroupTextTransformationTypeSqlHexDecode
RuleGroupTextTransformationTypeCssDecode
RuleGroupTextTransformationTypeJsDecode
RuleGroupTextTransformationTypeNormalizePath
RuleGroupTextTransformationTypeNormalizePathWin
RuleGroupTextTransformationTypeRemoveNulls
RuleGroupTextTransformationTypeReplaceNulls
RuleGroupTextTransformationTypeBase64DecodeExt
RuleGroupTextTransformationTypeUrlDecodeUni
RuleGroupTextTransformationTypeUtf8ToUnicode

type RuleGroupTextTransformationTypeOutput

type RuleGroupTextTransformationTypeOutput struct{ *pulumi.OutputState }

func (RuleGroupTextTransformationTypeOutput) ElementType

func (RuleGroupTextTransformationTypeOutput) ToRuleGroupTextTransformationTypeOutput

func (o RuleGroupTextTransformationTypeOutput) ToRuleGroupTextTransformationTypeOutput() RuleGroupTextTransformationTypeOutput

func (RuleGroupTextTransformationTypeOutput) ToRuleGroupTextTransformationTypeOutputWithContext

func (o RuleGroupTextTransformationTypeOutput) ToRuleGroupTextTransformationTypeOutputWithContext(ctx context.Context) RuleGroupTextTransformationTypeOutput

func (RuleGroupTextTransformationTypeOutput) ToRuleGroupTextTransformationTypePtrOutput

func (o RuleGroupTextTransformationTypeOutput) ToRuleGroupTextTransformationTypePtrOutput() RuleGroupTextTransformationTypePtrOutput

func (RuleGroupTextTransformationTypeOutput) ToRuleGroupTextTransformationTypePtrOutputWithContext

func (o RuleGroupTextTransformationTypeOutput) ToRuleGroupTextTransformationTypePtrOutputWithContext(ctx context.Context) RuleGroupTextTransformationTypePtrOutput

func (RuleGroupTextTransformationTypeOutput) ToStringOutput

func (RuleGroupTextTransformationTypeOutput) ToStringOutputWithContext

func (o RuleGroupTextTransformationTypeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupTextTransformationTypeOutput) ToStringPtrOutput

func (RuleGroupTextTransformationTypeOutput) ToStringPtrOutputWithContext

func (o RuleGroupTextTransformationTypeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupTextTransformationTypePtrInput

type RuleGroupTextTransformationTypePtrInput interface {
	pulumi.Input

	ToRuleGroupTextTransformationTypePtrOutput() RuleGroupTextTransformationTypePtrOutput
	ToRuleGroupTextTransformationTypePtrOutputWithContext(context.Context) RuleGroupTextTransformationTypePtrOutput
}

type RuleGroupTextTransformationTypePtrOutput

type RuleGroupTextTransformationTypePtrOutput struct{ *pulumi.OutputState }

func (RuleGroupTextTransformationTypePtrOutput) Elem

func (RuleGroupTextTransformationTypePtrOutput) ElementType

func (RuleGroupTextTransformationTypePtrOutput) ToRuleGroupTextTransformationTypePtrOutput

func (o RuleGroupTextTransformationTypePtrOutput) ToRuleGroupTextTransformationTypePtrOutput() RuleGroupTextTransformationTypePtrOutput

func (RuleGroupTextTransformationTypePtrOutput) ToRuleGroupTextTransformationTypePtrOutputWithContext

func (o RuleGroupTextTransformationTypePtrOutput) ToRuleGroupTextTransformationTypePtrOutputWithContext(ctx context.Context) RuleGroupTextTransformationTypePtrOutput

func (RuleGroupTextTransformationTypePtrOutput) ToStringPtrOutput

func (RuleGroupTextTransformationTypePtrOutput) ToStringPtrOutputWithContext

type RuleGroupVisibilityConfig

type RuleGroupVisibilityConfig struct {
	// Indicates whether the associated resource sends metrics to Amazon CloudWatch. For the list of available metrics, see [AWS WAF Metrics](https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#waf-metrics) in the *AWS WAF Developer Guide* .
	//
	// For web ACLs, the metrics are for web requests that have the web ACL default action applied. AWS WAF applies the default action to web requests that pass the inspection of all rules in the web ACL without being either allowed or blocked. For more information,
	// see [The web ACL default action](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-default-action.html) in the *AWS WAF Developer Guide* .
	CloudWatchMetricsEnabled bool `pulumi:"cloudWatchMetricsEnabled"`
	// A name of the Amazon CloudWatch metric dimension. The name can contain only the characters: A-Z, a-z, 0-9, - (hyphen), and _ (underscore). The name can be from one to 128 characters long. It can't contain whitespace or metric names that are reserved for AWS WAF , for example `All` and `Default_Action` .
	MetricName string `pulumi:"metricName"`
	// Indicates whether AWS WAF should store a sampling of the web requests that match the rules. You can view the sampled requests through the AWS WAF console.
	//
	// > Request sampling doesn't provide a field redaction option, and any field redaction that you specify in your logging configuration doesn't affect sampling. The only way to exclude fields from request sampling is by disabling sampling in the web ACL visibility configuration.
	SampledRequestsEnabled bool `pulumi:"sampledRequestsEnabled"`
}

Visibility Metric of the RuleGroup.

type RuleGroupVisibilityConfigArgs

type RuleGroupVisibilityConfigArgs struct {
	// Indicates whether the associated resource sends metrics to Amazon CloudWatch. For the list of available metrics, see [AWS WAF Metrics](https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#waf-metrics) in the *AWS WAF Developer Guide* .
	//
	// For web ACLs, the metrics are for web requests that have the web ACL default action applied. AWS WAF applies the default action to web requests that pass the inspection of all rules in the web ACL without being either allowed or blocked. For more information,
	// see [The web ACL default action](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-default-action.html) in the *AWS WAF Developer Guide* .
	CloudWatchMetricsEnabled pulumi.BoolInput `pulumi:"cloudWatchMetricsEnabled"`
	// A name of the Amazon CloudWatch metric dimension. The name can contain only the characters: A-Z, a-z, 0-9, - (hyphen), and _ (underscore). The name can be from one to 128 characters long. It can't contain whitespace or metric names that are reserved for AWS WAF , for example `All` and `Default_Action` .
	MetricName pulumi.StringInput `pulumi:"metricName"`
	// Indicates whether AWS WAF should store a sampling of the web requests that match the rules. You can view the sampled requests through the AWS WAF console.
	//
	// > Request sampling doesn't provide a field redaction option, and any field redaction that you specify in your logging configuration doesn't affect sampling. The only way to exclude fields from request sampling is by disabling sampling in the web ACL visibility configuration.
	SampledRequestsEnabled pulumi.BoolInput `pulumi:"sampledRequestsEnabled"`
}

Visibility Metric of the RuleGroup.

func (RuleGroupVisibilityConfigArgs) ElementType

func (RuleGroupVisibilityConfigArgs) ToRuleGroupVisibilityConfigOutput

func (i RuleGroupVisibilityConfigArgs) ToRuleGroupVisibilityConfigOutput() RuleGroupVisibilityConfigOutput

func (RuleGroupVisibilityConfigArgs) ToRuleGroupVisibilityConfigOutputWithContext

func (i RuleGroupVisibilityConfigArgs) ToRuleGroupVisibilityConfigOutputWithContext(ctx context.Context) RuleGroupVisibilityConfigOutput

type RuleGroupVisibilityConfigInput

type RuleGroupVisibilityConfigInput interface {
	pulumi.Input

	ToRuleGroupVisibilityConfigOutput() RuleGroupVisibilityConfigOutput
	ToRuleGroupVisibilityConfigOutputWithContext(context.Context) RuleGroupVisibilityConfigOutput
}

RuleGroupVisibilityConfigInput is an input type that accepts RuleGroupVisibilityConfigArgs and RuleGroupVisibilityConfigOutput values. You can construct a concrete instance of `RuleGroupVisibilityConfigInput` via:

RuleGroupVisibilityConfigArgs{...}

type RuleGroupVisibilityConfigOutput

type RuleGroupVisibilityConfigOutput struct{ *pulumi.OutputState }

Visibility Metric of the RuleGroup.

func (RuleGroupVisibilityConfigOutput) CloudWatchMetricsEnabled

func (o RuleGroupVisibilityConfigOutput) CloudWatchMetricsEnabled() pulumi.BoolOutput

Indicates whether the associated resource sends metrics to Amazon CloudWatch. For the list of available metrics, see [AWS WAF Metrics](https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#waf-metrics) in the *AWS WAF Developer Guide* .

For web ACLs, the metrics are for web requests that have the web ACL default action applied. AWS WAF applies the default action to web requests that pass the inspection of all rules in the web ACL without being either allowed or blocked. For more information, see [The web ACL default action](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-default-action.html) in the *AWS WAF Developer Guide* .

func (RuleGroupVisibilityConfigOutput) ElementType

func (RuleGroupVisibilityConfigOutput) MetricName

A name of the Amazon CloudWatch metric dimension. The name can contain only the characters: A-Z, a-z, 0-9, - (hyphen), and _ (underscore). The name can be from one to 128 characters long. It can't contain whitespace or metric names that are reserved for AWS WAF , for example `All` and `Default_Action` .

func (RuleGroupVisibilityConfigOutput) SampledRequestsEnabled

func (o RuleGroupVisibilityConfigOutput) SampledRequestsEnabled() pulumi.BoolOutput

Indicates whether AWS WAF should store a sampling of the web requests that match the rules. You can view the sampled requests through the AWS WAF console.

> Request sampling doesn't provide a field redaction option, and any field redaction that you specify in your logging configuration doesn't affect sampling. The only way to exclude fields from request sampling is by disabling sampling in the web ACL visibility configuration.

func (RuleGroupVisibilityConfigOutput) ToRuleGroupVisibilityConfigOutput

func (o RuleGroupVisibilityConfigOutput) ToRuleGroupVisibilityConfigOutput() RuleGroupVisibilityConfigOutput

func (RuleGroupVisibilityConfigOutput) ToRuleGroupVisibilityConfigOutputWithContext

func (o RuleGroupVisibilityConfigOutput) ToRuleGroupVisibilityConfigOutputWithContext(ctx context.Context) RuleGroupVisibilityConfigOutput

type RuleGroupVisibilityConfigPtrOutput

type RuleGroupVisibilityConfigPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupVisibilityConfigPtrOutput) CloudWatchMetricsEnabled

func (o RuleGroupVisibilityConfigPtrOutput) CloudWatchMetricsEnabled() pulumi.BoolPtrOutput

Indicates whether the associated resource sends metrics to Amazon CloudWatch. For the list of available metrics, see [AWS WAF Metrics](https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#waf-metrics) in the *AWS WAF Developer Guide* .

For web ACLs, the metrics are for web requests that have the web ACL default action applied. AWS WAF applies the default action to web requests that pass the inspection of all rules in the web ACL without being either allowed or blocked. For more information, see [The web ACL default action](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-default-action.html) in the *AWS WAF Developer Guide* .

func (RuleGroupVisibilityConfigPtrOutput) Elem

func (RuleGroupVisibilityConfigPtrOutput) ElementType

func (RuleGroupVisibilityConfigPtrOutput) MetricName

A name of the Amazon CloudWatch metric dimension. The name can contain only the characters: A-Z, a-z, 0-9, - (hyphen), and _ (underscore). The name can be from one to 128 characters long. It can't contain whitespace or metric names that are reserved for AWS WAF , for example `All` and `Default_Action` .

func (RuleGroupVisibilityConfigPtrOutput) SampledRequestsEnabled

func (o RuleGroupVisibilityConfigPtrOutput) SampledRequestsEnabled() pulumi.BoolPtrOutput

Indicates whether AWS WAF should store a sampling of the web requests that match the rules. You can view the sampled requests through the AWS WAF console.

> Request sampling doesn't provide a field redaction option, and any field redaction that you specify in your logging configuration doesn't affect sampling. The only way to exclude fields from request sampling is by disabling sampling in the web ACL visibility configuration.

func (RuleGroupVisibilityConfigPtrOutput) ToRuleGroupVisibilityConfigPtrOutput

func (o RuleGroupVisibilityConfigPtrOutput) ToRuleGroupVisibilityConfigPtrOutput() RuleGroupVisibilityConfigPtrOutput

func (RuleGroupVisibilityConfigPtrOutput) ToRuleGroupVisibilityConfigPtrOutputWithContext

func (o RuleGroupVisibilityConfigPtrOutput) ToRuleGroupVisibilityConfigPtrOutputWithContext(ctx context.Context) RuleGroupVisibilityConfigPtrOutput

type RuleGroupXssMatchStatement

type RuleGroupXssMatchStatement struct {
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch RuleGroupFieldToMatch `pulumi:"fieldToMatch"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations []RuleGroupTextTransformation `pulumi:"textTransformations"`
}

Xss Match Statement.

type RuleGroupXssMatchStatementArgs

type RuleGroupXssMatchStatementArgs struct {
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch RuleGroupFieldToMatchInput `pulumi:"fieldToMatch"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations RuleGroupTextTransformationArrayInput `pulumi:"textTransformations"`
}

Xss Match Statement.

func (RuleGroupXssMatchStatementArgs) ElementType

func (RuleGroupXssMatchStatementArgs) ToRuleGroupXssMatchStatementOutput

func (i RuleGroupXssMatchStatementArgs) ToRuleGroupXssMatchStatementOutput() RuleGroupXssMatchStatementOutput

func (RuleGroupXssMatchStatementArgs) ToRuleGroupXssMatchStatementOutputWithContext

func (i RuleGroupXssMatchStatementArgs) ToRuleGroupXssMatchStatementOutputWithContext(ctx context.Context) RuleGroupXssMatchStatementOutput

func (RuleGroupXssMatchStatementArgs) ToRuleGroupXssMatchStatementPtrOutput

func (i RuleGroupXssMatchStatementArgs) ToRuleGroupXssMatchStatementPtrOutput() RuleGroupXssMatchStatementPtrOutput

func (RuleGroupXssMatchStatementArgs) ToRuleGroupXssMatchStatementPtrOutputWithContext

func (i RuleGroupXssMatchStatementArgs) ToRuleGroupXssMatchStatementPtrOutputWithContext(ctx context.Context) RuleGroupXssMatchStatementPtrOutput

type RuleGroupXssMatchStatementInput

type RuleGroupXssMatchStatementInput interface {
	pulumi.Input

	ToRuleGroupXssMatchStatementOutput() RuleGroupXssMatchStatementOutput
	ToRuleGroupXssMatchStatementOutputWithContext(context.Context) RuleGroupXssMatchStatementOutput
}

RuleGroupXssMatchStatementInput is an input type that accepts RuleGroupXssMatchStatementArgs and RuleGroupXssMatchStatementOutput values. You can construct a concrete instance of `RuleGroupXssMatchStatementInput` via:

RuleGroupXssMatchStatementArgs{...}

type RuleGroupXssMatchStatementOutput

type RuleGroupXssMatchStatementOutput struct{ *pulumi.OutputState }

Xss Match Statement.

func (RuleGroupXssMatchStatementOutput) ElementType

func (RuleGroupXssMatchStatementOutput) FieldToMatch

The part of the web request that you want AWS WAF to inspect.

func (RuleGroupXssMatchStatementOutput) TextTransformations

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (RuleGroupXssMatchStatementOutput) ToRuleGroupXssMatchStatementOutput

func (o RuleGroupXssMatchStatementOutput) ToRuleGroupXssMatchStatementOutput() RuleGroupXssMatchStatementOutput

func (RuleGroupXssMatchStatementOutput) ToRuleGroupXssMatchStatementOutputWithContext

func (o RuleGroupXssMatchStatementOutput) ToRuleGroupXssMatchStatementOutputWithContext(ctx context.Context) RuleGroupXssMatchStatementOutput

func (RuleGroupXssMatchStatementOutput) ToRuleGroupXssMatchStatementPtrOutput

func (o RuleGroupXssMatchStatementOutput) ToRuleGroupXssMatchStatementPtrOutput() RuleGroupXssMatchStatementPtrOutput

func (RuleGroupXssMatchStatementOutput) ToRuleGroupXssMatchStatementPtrOutputWithContext

func (o RuleGroupXssMatchStatementOutput) ToRuleGroupXssMatchStatementPtrOutputWithContext(ctx context.Context) RuleGroupXssMatchStatementPtrOutput

type RuleGroupXssMatchStatementPtrInput

type RuleGroupXssMatchStatementPtrInput interface {
	pulumi.Input

	ToRuleGroupXssMatchStatementPtrOutput() RuleGroupXssMatchStatementPtrOutput
	ToRuleGroupXssMatchStatementPtrOutputWithContext(context.Context) RuleGroupXssMatchStatementPtrOutput
}

RuleGroupXssMatchStatementPtrInput is an input type that accepts RuleGroupXssMatchStatementArgs, RuleGroupXssMatchStatementPtr and RuleGroupXssMatchStatementPtrOutput values. You can construct a concrete instance of `RuleGroupXssMatchStatementPtrInput` via:

        RuleGroupXssMatchStatementArgs{...}

or:

        nil

type RuleGroupXssMatchStatementPtrOutput

type RuleGroupXssMatchStatementPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupXssMatchStatementPtrOutput) Elem

func (RuleGroupXssMatchStatementPtrOutput) ElementType

func (RuleGroupXssMatchStatementPtrOutput) FieldToMatch

The part of the web request that you want AWS WAF to inspect.

func (RuleGroupXssMatchStatementPtrOutput) TextTransformations

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (RuleGroupXssMatchStatementPtrOutput) ToRuleGroupXssMatchStatementPtrOutput

func (o RuleGroupXssMatchStatementPtrOutput) ToRuleGroupXssMatchStatementPtrOutput() RuleGroupXssMatchStatementPtrOutput

func (RuleGroupXssMatchStatementPtrOutput) ToRuleGroupXssMatchStatementPtrOutputWithContext

func (o RuleGroupXssMatchStatementPtrOutput) ToRuleGroupXssMatchStatementPtrOutputWithContext(ctx context.Context) RuleGroupXssMatchStatementPtrOutput

type WebAcl added in v0.72.0

type WebAcl struct {
	pulumi.CustomResourceState

	// The Amazon Resource Name (ARN) of the web ACL.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// Specifies custom configurations for the associations between the web ACL and protected resources.
	//
	// Use this to customize the maximum size of the request body that your protected resources forward to AWS WAF for inspection. You can customize this setting for CloudFront, API Gateway, Amazon Cognito, App Runner, or Verified Access resources. The default setting is 16 KB (16,384 bytes).
	//
	// > You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see [AWS WAF Pricing](https://docs.aws.amazon.com/waf/pricing/) .
	//
	// For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	AssociationConfig WebAclAssociationConfigPtrOutput `pulumi:"associationConfig"`
	// The ID of the web ACL.
	AwsId pulumi.StringOutput `pulumi:"awsId"`
	// The web ACL capacity units (WCUs) currently being used by this web ACL.
	//
	// AWS WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. AWS WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500.
	Capacity pulumi.IntOutput `pulumi:"capacity"`
	// Specifies how AWS WAF should handle `CAPTCHA` evaluations for rules that don't have their own `CaptchaConfig` settings. If you don't specify this, AWS WAF uses its default settings for `CaptchaConfig` .
	CaptchaConfig WebAclCaptchaConfigPtrOutput `pulumi:"captchaConfig"`
	// Specifies how AWS WAF should handle challenge evaluations for rules that don't have their own `ChallengeConfig` settings. If you don't specify this, AWS WAF uses its default settings for `ChallengeConfig` .
	ChallengeConfig WebAclChallengeConfigPtrOutput `pulumi:"challengeConfig"`
	// A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the web ACL, and then use them in the rules and default actions that you define in the web ACL.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	//
	// For information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* .
	CustomResponseBodies WebAclCustomResponseBodyMapOutput `pulumi:"customResponseBodies"`
	// The action to perform if none of the `Rules` contained in the `WebACL` match.
	DefaultAction WebAclDefaultActionOutput `pulumi:"defaultAction"`
	// A description of the web ACL that helps with identification.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// The label namespace prefix for this web ACL. All labels added by rules in this web ACL have this prefix.
	//
	// The syntax for the label namespace prefix for a web ACL is the following: `awswaf:<account ID>:webacl:<web ACL name>:`
	//
	// When a rule with a label matches a web request, AWS WAF adds the fully qualified label to the request. A fully qualified label is made up of the label namespace from the rule group or web ACL where the rule is defined and the label from the rule, separated by a colon.
	LabelNamespace pulumi.StringOutput `pulumi:"labelNamespace"`
	// The name of the web ACL. You cannot change the name of a web ACL after you create it.
	Name pulumi.StringPtrOutput `pulumi:"name"`
	// Collection of Rules.
	Rules WebAclRuleArrayOutput `pulumi:"rules"`
	// Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .
	//
	// > For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .
	//
	// For information about how to define the association of the web ACL with your resource, see `WebACLAssociation` .
	Scope WebAclScopeOutput `pulumi:"scope"`
	// Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.
	//
	// > To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.
	Tags aws.TagArrayOutput `pulumi:"tags"`
	// Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
	TokenDomains pulumi.StringArrayOutput `pulumi:"tokenDomains"`
	// Defines and enables Amazon CloudWatch metrics and web request sample collection.
	VisibilityConfig WebAclVisibilityConfigOutput `pulumi:"visibilityConfig"`
}

Contains the Rules that identify the requests that you want to allow, block, or count. In a WebACL, you also specify a default action (ALLOW or BLOCK), and the action for each Rule that you add to a WebACL, for example, block requests from specified IP addresses or block requests from specified referrers. You also associate the WebACL with a CloudFront distribution to identify the requests that you want AWS WAF to filter. If you add more than one Rule to a WebACL, a request needs to match only one of the specifications to be allowed, blocked, or counted.

func GetWebAcl added in v0.72.0

func GetWebAcl(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *WebAclState, opts ...pulumi.ResourceOption) (*WebAcl, error)

GetWebAcl gets an existing WebAcl resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewWebAcl added in v0.72.0

func NewWebAcl(ctx *pulumi.Context,
	name string, args *WebAclArgs, opts ...pulumi.ResourceOption) (*WebAcl, error)

NewWebAcl registers a new resource with the given unique name, arguments, and options.

func (*WebAcl) ElementType added in v0.72.0

func (*WebAcl) ElementType() reflect.Type

func (*WebAcl) ToWebAclOutput added in v0.72.0

func (i *WebAcl) ToWebAclOutput() WebAclOutput

func (*WebAcl) ToWebAclOutputWithContext added in v0.72.0

func (i *WebAcl) ToWebAclOutputWithContext(ctx context.Context) WebAclOutput

type WebAclAllowAction added in v0.72.0

type WebAclAllowAction struct {
	// Defines custom handling for the web request.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	CustomRequestHandling *WebAclCustomRequestHandling `pulumi:"customRequestHandling"`
}

Allow traffic towards application.

type WebAclAllowActionArgs added in v0.72.0

type WebAclAllowActionArgs struct {
	// Defines custom handling for the web request.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	CustomRequestHandling WebAclCustomRequestHandlingPtrInput `pulumi:"customRequestHandling"`
}

Allow traffic towards application.

func (WebAclAllowActionArgs) ElementType added in v0.72.0

func (WebAclAllowActionArgs) ElementType() reflect.Type

func (WebAclAllowActionArgs) ToWebAclAllowActionOutput added in v0.72.0

func (i WebAclAllowActionArgs) ToWebAclAllowActionOutput() WebAclAllowActionOutput

func (WebAclAllowActionArgs) ToWebAclAllowActionOutputWithContext added in v0.72.0

func (i WebAclAllowActionArgs) ToWebAclAllowActionOutputWithContext(ctx context.Context) WebAclAllowActionOutput

func (WebAclAllowActionArgs) ToWebAclAllowActionPtrOutput added in v0.72.0

func (i WebAclAllowActionArgs) ToWebAclAllowActionPtrOutput() WebAclAllowActionPtrOutput

func (WebAclAllowActionArgs) ToWebAclAllowActionPtrOutputWithContext added in v0.72.0

func (i WebAclAllowActionArgs) ToWebAclAllowActionPtrOutputWithContext(ctx context.Context) WebAclAllowActionPtrOutput

type WebAclAllowActionInput added in v0.72.0

type WebAclAllowActionInput interface {
	pulumi.Input

	ToWebAclAllowActionOutput() WebAclAllowActionOutput
	ToWebAclAllowActionOutputWithContext(context.Context) WebAclAllowActionOutput
}

WebAclAllowActionInput is an input type that accepts WebAclAllowActionArgs and WebAclAllowActionOutput values. You can construct a concrete instance of `WebAclAllowActionInput` via:

WebAclAllowActionArgs{...}

type WebAclAllowActionOutput added in v0.72.0

type WebAclAllowActionOutput struct{ *pulumi.OutputState }

Allow traffic towards application.

func (WebAclAllowActionOutput) CustomRequestHandling added in v0.72.0

Defines custom handling for the web request.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

func (WebAclAllowActionOutput) ElementType added in v0.72.0

func (WebAclAllowActionOutput) ElementType() reflect.Type

func (WebAclAllowActionOutput) ToWebAclAllowActionOutput added in v0.72.0

func (o WebAclAllowActionOutput) ToWebAclAllowActionOutput() WebAclAllowActionOutput

func (WebAclAllowActionOutput) ToWebAclAllowActionOutputWithContext added in v0.72.0

func (o WebAclAllowActionOutput) ToWebAclAllowActionOutputWithContext(ctx context.Context) WebAclAllowActionOutput

func (WebAclAllowActionOutput) ToWebAclAllowActionPtrOutput added in v0.72.0

func (o WebAclAllowActionOutput) ToWebAclAllowActionPtrOutput() WebAclAllowActionPtrOutput

func (WebAclAllowActionOutput) ToWebAclAllowActionPtrOutputWithContext added in v0.72.0

func (o WebAclAllowActionOutput) ToWebAclAllowActionPtrOutputWithContext(ctx context.Context) WebAclAllowActionPtrOutput

type WebAclAllowActionPtrInput added in v0.72.0

type WebAclAllowActionPtrInput interface {
	pulumi.Input

	ToWebAclAllowActionPtrOutput() WebAclAllowActionPtrOutput
	ToWebAclAllowActionPtrOutputWithContext(context.Context) WebAclAllowActionPtrOutput
}

WebAclAllowActionPtrInput is an input type that accepts WebAclAllowActionArgs, WebAclAllowActionPtr and WebAclAllowActionPtrOutput values. You can construct a concrete instance of `WebAclAllowActionPtrInput` via:

        WebAclAllowActionArgs{...}

or:

        nil

func WebAclAllowActionPtr added in v0.72.0

func WebAclAllowActionPtr(v *WebAclAllowActionArgs) WebAclAllowActionPtrInput

type WebAclAllowActionPtrOutput added in v0.72.0

type WebAclAllowActionPtrOutput struct{ *pulumi.OutputState }

func (WebAclAllowActionPtrOutput) CustomRequestHandling added in v0.72.0

Defines custom handling for the web request.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

func (WebAclAllowActionPtrOutput) Elem added in v0.72.0

func (WebAclAllowActionPtrOutput) ElementType added in v0.72.0

func (WebAclAllowActionPtrOutput) ElementType() reflect.Type

func (WebAclAllowActionPtrOutput) ToWebAclAllowActionPtrOutput added in v0.72.0

func (o WebAclAllowActionPtrOutput) ToWebAclAllowActionPtrOutput() WebAclAllowActionPtrOutput

func (WebAclAllowActionPtrOutput) ToWebAclAllowActionPtrOutputWithContext added in v0.72.0

func (o WebAclAllowActionPtrOutput) ToWebAclAllowActionPtrOutputWithContext(ctx context.Context) WebAclAllowActionPtrOutput

type WebAclAndStatement added in v0.72.0

type WebAclAndStatement struct {
	// The statements to combine with AND logic. You can use any statements that can be nested.
	Statements []WebAclStatement `pulumi:"statements"`
}

type WebAclAndStatementArgs added in v0.72.0

type WebAclAndStatementArgs struct {
	// The statements to combine with AND logic. You can use any statements that can be nested.
	Statements WebAclStatementArrayInput `pulumi:"statements"`
}

func (WebAclAndStatementArgs) ElementType added in v0.72.0

func (WebAclAndStatementArgs) ElementType() reflect.Type

func (WebAclAndStatementArgs) ToWebAclAndStatementOutput added in v0.72.0

func (i WebAclAndStatementArgs) ToWebAclAndStatementOutput() WebAclAndStatementOutput

func (WebAclAndStatementArgs) ToWebAclAndStatementOutputWithContext added in v0.72.0

func (i WebAclAndStatementArgs) ToWebAclAndStatementOutputWithContext(ctx context.Context) WebAclAndStatementOutput

func (WebAclAndStatementArgs) ToWebAclAndStatementPtrOutput added in v0.72.0

func (i WebAclAndStatementArgs) ToWebAclAndStatementPtrOutput() WebAclAndStatementPtrOutput

func (WebAclAndStatementArgs) ToWebAclAndStatementPtrOutputWithContext added in v0.72.0

func (i WebAclAndStatementArgs) ToWebAclAndStatementPtrOutputWithContext(ctx context.Context) WebAclAndStatementPtrOutput

type WebAclAndStatementInput added in v0.72.0

type WebAclAndStatementInput interface {
	pulumi.Input

	ToWebAclAndStatementOutput() WebAclAndStatementOutput
	ToWebAclAndStatementOutputWithContext(context.Context) WebAclAndStatementOutput
}

WebAclAndStatementInput is an input type that accepts WebAclAndStatementArgs and WebAclAndStatementOutput values. You can construct a concrete instance of `WebAclAndStatementInput` via:

WebAclAndStatementArgs{...}

type WebAclAndStatementOutput added in v0.72.0

type WebAclAndStatementOutput struct{ *pulumi.OutputState }

func (WebAclAndStatementOutput) ElementType added in v0.72.0

func (WebAclAndStatementOutput) ElementType() reflect.Type

func (WebAclAndStatementOutput) Statements added in v0.72.0

The statements to combine with AND logic. You can use any statements that can be nested.

func (WebAclAndStatementOutput) ToWebAclAndStatementOutput added in v0.72.0

func (o WebAclAndStatementOutput) ToWebAclAndStatementOutput() WebAclAndStatementOutput

func (WebAclAndStatementOutput) ToWebAclAndStatementOutputWithContext added in v0.72.0

func (o WebAclAndStatementOutput) ToWebAclAndStatementOutputWithContext(ctx context.Context) WebAclAndStatementOutput

func (WebAclAndStatementOutput) ToWebAclAndStatementPtrOutput added in v0.72.0

func (o WebAclAndStatementOutput) ToWebAclAndStatementPtrOutput() WebAclAndStatementPtrOutput

func (WebAclAndStatementOutput) ToWebAclAndStatementPtrOutputWithContext added in v0.72.0

func (o WebAclAndStatementOutput) ToWebAclAndStatementPtrOutputWithContext(ctx context.Context) WebAclAndStatementPtrOutput

type WebAclAndStatementPtrInput added in v0.72.0

type WebAclAndStatementPtrInput interface {
	pulumi.Input

	ToWebAclAndStatementPtrOutput() WebAclAndStatementPtrOutput
	ToWebAclAndStatementPtrOutputWithContext(context.Context) WebAclAndStatementPtrOutput
}

WebAclAndStatementPtrInput is an input type that accepts WebAclAndStatementArgs, WebAclAndStatementPtr and WebAclAndStatementPtrOutput values. You can construct a concrete instance of `WebAclAndStatementPtrInput` via:

        WebAclAndStatementArgs{...}

or:

        nil

func WebAclAndStatementPtr added in v0.72.0

func WebAclAndStatementPtr(v *WebAclAndStatementArgs) WebAclAndStatementPtrInput

type WebAclAndStatementPtrOutput added in v0.72.0

type WebAclAndStatementPtrOutput struct{ *pulumi.OutputState }

func (WebAclAndStatementPtrOutput) Elem added in v0.72.0

func (WebAclAndStatementPtrOutput) ElementType added in v0.72.0

func (WebAclAndStatementPtrOutput) Statements added in v0.72.0

The statements to combine with AND logic. You can use any statements that can be nested.

func (WebAclAndStatementPtrOutput) ToWebAclAndStatementPtrOutput added in v0.72.0

func (o WebAclAndStatementPtrOutput) ToWebAclAndStatementPtrOutput() WebAclAndStatementPtrOutput

func (WebAclAndStatementPtrOutput) ToWebAclAndStatementPtrOutputWithContext added in v0.72.0

func (o WebAclAndStatementPtrOutput) ToWebAclAndStatementPtrOutputWithContext(ctx context.Context) WebAclAndStatementPtrOutput

type WebAclArgs added in v0.72.0

type WebAclArgs struct {
	// Specifies custom configurations for the associations between the web ACL and protected resources.
	//
	// Use this to customize the maximum size of the request body that your protected resources forward to AWS WAF for inspection. You can customize this setting for CloudFront, API Gateway, Amazon Cognito, App Runner, or Verified Access resources. The default setting is 16 KB (16,384 bytes).
	//
	// > You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see [AWS WAF Pricing](https://docs.aws.amazon.com/waf/pricing/) .
	//
	// For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	AssociationConfig WebAclAssociationConfigPtrInput
	// Specifies how AWS WAF should handle `CAPTCHA` evaluations for rules that don't have their own `CaptchaConfig` settings. If you don't specify this, AWS WAF uses its default settings for `CaptchaConfig` .
	CaptchaConfig WebAclCaptchaConfigPtrInput
	// Specifies how AWS WAF should handle challenge evaluations for rules that don't have their own `ChallengeConfig` settings. If you don't specify this, AWS WAF uses its default settings for `ChallengeConfig` .
	ChallengeConfig WebAclChallengeConfigPtrInput
	// A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the web ACL, and then use them in the rules and default actions that you define in the web ACL.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	//
	// For information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* .
	CustomResponseBodies WebAclCustomResponseBodyMapInput
	// The action to perform if none of the `Rules` contained in the `WebACL` match.
	DefaultAction WebAclDefaultActionInput
	// A description of the web ACL that helps with identification.
	Description pulumi.StringPtrInput
	// The name of the web ACL. You cannot change the name of a web ACL after you create it.
	Name pulumi.StringPtrInput
	// Collection of Rules.
	Rules WebAclRuleArrayInput
	// Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .
	//
	// > For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .
	//
	// For information about how to define the association of the web ACL with your resource, see `WebACLAssociation` .
	Scope WebAclScopeInput
	// Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.
	//
	// > To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.
	Tags aws.TagArrayInput
	// Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
	TokenDomains pulumi.StringArrayInput
	// Defines and enables Amazon CloudWatch metrics and web request sample collection.
	VisibilityConfig WebAclVisibilityConfigInput
}

The set of arguments for constructing a WebAcl resource.

func (WebAclArgs) ElementType added in v0.72.0

func (WebAclArgs) ElementType() reflect.Type

type WebAclAssociation added in v0.72.0

type WebAclAssociation struct {
	pulumi.CustomResourceState

	// The Amazon Resource Name (ARN) of the resource to associate with the web ACL.
	//
	// The ARN must be in one of the following formats:
	//
	// - For an Application Load Balancer: `arn: *partition* :elasticloadbalancing: *region* : *account-id* :loadbalancer/app/ *load-balancer-name* / *load-balancer-id*`
	// - For an Amazon API Gateway REST API: `arn: *partition* :apigateway: *region* ::/restapis/ *api-id* /stages/ *stage-name*`
	// - For an AWS AppSync GraphQL API: `arn: *partition* :appsync: *region* : *account-id* :apis/ *GraphQLApiId*`
	// - For an Amazon Cognito user pool: `arn: *partition* :cognito-idp: *region* : *account-id* :userpool/ *user-pool-id*`
	// - For an AWS App Runner service: `arn: *partition* :apprunner: *region* : *account-id* :service/ *apprunner-service-name* / *apprunner-service-id*`
	// - For an AWS Verified Access instance: `arn: *partition* :ec2: *region* : *account-id* :verified-access-instance/ *instance-id*`
	ResourceArn pulumi.StringOutput `pulumi:"resourceArn"`
	// The Amazon Resource Name (ARN) of the web ACL that you want to associate with the resource.
	WebAclArn pulumi.StringOutput `pulumi:"webAclArn"`
}

Associates WebACL to Application Load Balancer, CloudFront or API Gateway.

func GetWebAclAssociation added in v0.72.0

func GetWebAclAssociation(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *WebAclAssociationState, opts ...pulumi.ResourceOption) (*WebAclAssociation, error)

GetWebAclAssociation gets an existing WebAclAssociation resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewWebAclAssociation added in v0.72.0

func NewWebAclAssociation(ctx *pulumi.Context,
	name string, args *WebAclAssociationArgs, opts ...pulumi.ResourceOption) (*WebAclAssociation, error)

NewWebAclAssociation registers a new resource with the given unique name, arguments, and options.

func (*WebAclAssociation) ElementType added in v0.72.0

func (*WebAclAssociation) ElementType() reflect.Type

func (*WebAclAssociation) ToWebAclAssociationOutput added in v0.72.0

func (i *WebAclAssociation) ToWebAclAssociationOutput() WebAclAssociationOutput

func (*WebAclAssociation) ToWebAclAssociationOutputWithContext added in v0.72.0

func (i *WebAclAssociation) ToWebAclAssociationOutputWithContext(ctx context.Context) WebAclAssociationOutput

type WebAclAssociationArgs added in v0.72.0

type WebAclAssociationArgs struct {
	// The Amazon Resource Name (ARN) of the resource to associate with the web ACL.
	//
	// The ARN must be in one of the following formats:
	//
	// - For an Application Load Balancer: `arn: *partition* :elasticloadbalancing: *region* : *account-id* :loadbalancer/app/ *load-balancer-name* / *load-balancer-id*`
	// - For an Amazon API Gateway REST API: `arn: *partition* :apigateway: *region* ::/restapis/ *api-id* /stages/ *stage-name*`
	// - For an AWS AppSync GraphQL API: `arn: *partition* :appsync: *region* : *account-id* :apis/ *GraphQLApiId*`
	// - For an Amazon Cognito user pool: `arn: *partition* :cognito-idp: *region* : *account-id* :userpool/ *user-pool-id*`
	// - For an AWS App Runner service: `arn: *partition* :apprunner: *region* : *account-id* :service/ *apprunner-service-name* / *apprunner-service-id*`
	// - For an AWS Verified Access instance: `arn: *partition* :ec2: *region* : *account-id* :verified-access-instance/ *instance-id*`
	ResourceArn pulumi.StringInput
	// The Amazon Resource Name (ARN) of the web ACL that you want to associate with the resource.
	WebAclArn pulumi.StringInput
}

The set of arguments for constructing a WebAclAssociation resource.

func (WebAclAssociationArgs) ElementType added in v0.72.0

func (WebAclAssociationArgs) ElementType() reflect.Type

type WebAclAssociationConfig added in v0.72.0

type WebAclAssociationConfig struct {
	// Customizes the maximum size of the request body that your protected CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access resources forward to AWS WAF for inspection. The default size is 16 KB (16,384 bytes). You can change the setting for any of the available resource types.
	//
	// > You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see [AWS WAF Pricing](https://docs.aws.amazon.com/waf/pricing/) .
	//
	// Example JSON: `{ "API_GATEWAY": "KB_48", "APP_RUNNER_SERVICE": "KB_32" }`
	//
	// For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	RequestBody map[string]WebAclRequestBodyAssociatedResourceTypeConfig `pulumi:"requestBody"`
}

AssociationConfig for body inspection

type WebAclAssociationConfigArgs added in v0.72.0

type WebAclAssociationConfigArgs struct {
	// Customizes the maximum size of the request body that your protected CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access resources forward to AWS WAF for inspection. The default size is 16 KB (16,384 bytes). You can change the setting for any of the available resource types.
	//
	// > You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see [AWS WAF Pricing](https://docs.aws.amazon.com/waf/pricing/) .
	//
	// Example JSON: `{ "API_GATEWAY": "KB_48", "APP_RUNNER_SERVICE": "KB_32" }`
	//
	// For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	RequestBody WebAclRequestBodyAssociatedResourceTypeConfigMapInput `pulumi:"requestBody"`
}

AssociationConfig for body inspection

func (WebAclAssociationConfigArgs) ElementType added in v0.72.0

func (WebAclAssociationConfigArgs) ToWebAclAssociationConfigOutput added in v0.72.0

func (i WebAclAssociationConfigArgs) ToWebAclAssociationConfigOutput() WebAclAssociationConfigOutput

func (WebAclAssociationConfigArgs) ToWebAclAssociationConfigOutputWithContext added in v0.72.0

func (i WebAclAssociationConfigArgs) ToWebAclAssociationConfigOutputWithContext(ctx context.Context) WebAclAssociationConfigOutput

func (WebAclAssociationConfigArgs) ToWebAclAssociationConfigPtrOutput added in v0.72.0

func (i WebAclAssociationConfigArgs) ToWebAclAssociationConfigPtrOutput() WebAclAssociationConfigPtrOutput

func (WebAclAssociationConfigArgs) ToWebAclAssociationConfigPtrOutputWithContext added in v0.72.0

func (i WebAclAssociationConfigArgs) ToWebAclAssociationConfigPtrOutputWithContext(ctx context.Context) WebAclAssociationConfigPtrOutput

type WebAclAssociationConfigInput added in v0.72.0

type WebAclAssociationConfigInput interface {
	pulumi.Input

	ToWebAclAssociationConfigOutput() WebAclAssociationConfigOutput
	ToWebAclAssociationConfigOutputWithContext(context.Context) WebAclAssociationConfigOutput
}

WebAclAssociationConfigInput is an input type that accepts WebAclAssociationConfigArgs and WebAclAssociationConfigOutput values. You can construct a concrete instance of `WebAclAssociationConfigInput` via:

WebAclAssociationConfigArgs{...}

type WebAclAssociationConfigOutput added in v0.72.0

type WebAclAssociationConfigOutput struct{ *pulumi.OutputState }

AssociationConfig for body inspection

func (WebAclAssociationConfigOutput) ElementType added in v0.72.0

func (WebAclAssociationConfigOutput) RequestBody added in v0.72.0

Customizes the maximum size of the request body that your protected CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access resources forward to AWS WAF for inspection. The default size is 16 KB (16,384 bytes). You can change the setting for any of the available resource types.

> You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see [AWS WAF Pricing](https://docs.aws.amazon.com/waf/pricing/) .

Example JSON: `{ "API_GATEWAY": "KB_48", "APP_RUNNER_SERVICE": "KB_32" }`

For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).

func (WebAclAssociationConfigOutput) ToWebAclAssociationConfigOutput added in v0.72.0

func (o WebAclAssociationConfigOutput) ToWebAclAssociationConfigOutput() WebAclAssociationConfigOutput

func (WebAclAssociationConfigOutput) ToWebAclAssociationConfigOutputWithContext added in v0.72.0

func (o WebAclAssociationConfigOutput) ToWebAclAssociationConfigOutputWithContext(ctx context.Context) WebAclAssociationConfigOutput

func (WebAclAssociationConfigOutput) ToWebAclAssociationConfigPtrOutput added in v0.72.0

func (o WebAclAssociationConfigOutput) ToWebAclAssociationConfigPtrOutput() WebAclAssociationConfigPtrOutput

func (WebAclAssociationConfigOutput) ToWebAclAssociationConfigPtrOutputWithContext added in v0.72.0

func (o WebAclAssociationConfigOutput) ToWebAclAssociationConfigPtrOutputWithContext(ctx context.Context) WebAclAssociationConfigPtrOutput

type WebAclAssociationConfigPtrInput added in v0.72.0

type WebAclAssociationConfigPtrInput interface {
	pulumi.Input

	ToWebAclAssociationConfigPtrOutput() WebAclAssociationConfigPtrOutput
	ToWebAclAssociationConfigPtrOutputWithContext(context.Context) WebAclAssociationConfigPtrOutput
}

WebAclAssociationConfigPtrInput is an input type that accepts WebAclAssociationConfigArgs, WebAclAssociationConfigPtr and WebAclAssociationConfigPtrOutput values. You can construct a concrete instance of `WebAclAssociationConfigPtrInput` via:

        WebAclAssociationConfigArgs{...}

or:

        nil

func WebAclAssociationConfigPtr added in v0.72.0

func WebAclAssociationConfigPtr(v *WebAclAssociationConfigArgs) WebAclAssociationConfigPtrInput

type WebAclAssociationConfigPtrOutput added in v0.72.0

type WebAclAssociationConfigPtrOutput struct{ *pulumi.OutputState }

func (WebAclAssociationConfigPtrOutput) Elem added in v0.72.0

func (WebAclAssociationConfigPtrOutput) ElementType added in v0.72.0

func (WebAclAssociationConfigPtrOutput) RequestBody added in v0.72.0

Customizes the maximum size of the request body that your protected CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access resources forward to AWS WAF for inspection. The default size is 16 KB (16,384 bytes). You can change the setting for any of the available resource types.

> You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see [AWS WAF Pricing](https://docs.aws.amazon.com/waf/pricing/) .

Example JSON: `{ "API_GATEWAY": "KB_48", "APP_RUNNER_SERVICE": "KB_32" }`

For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).

func (WebAclAssociationConfigPtrOutput) ToWebAclAssociationConfigPtrOutput added in v0.72.0

func (o WebAclAssociationConfigPtrOutput) ToWebAclAssociationConfigPtrOutput() WebAclAssociationConfigPtrOutput

func (WebAclAssociationConfigPtrOutput) ToWebAclAssociationConfigPtrOutputWithContext added in v0.72.0

func (o WebAclAssociationConfigPtrOutput) ToWebAclAssociationConfigPtrOutputWithContext(ctx context.Context) WebAclAssociationConfigPtrOutput

type WebAclAssociationInput added in v0.72.0

type WebAclAssociationInput interface {
	pulumi.Input

	ToWebAclAssociationOutput() WebAclAssociationOutput
	ToWebAclAssociationOutputWithContext(ctx context.Context) WebAclAssociationOutput
}

type WebAclAssociationOutput added in v0.72.0

type WebAclAssociationOutput struct{ *pulumi.OutputState }

func (WebAclAssociationOutput) ElementType added in v0.72.0

func (WebAclAssociationOutput) ElementType() reflect.Type

func (WebAclAssociationOutput) ResourceArn added in v0.72.0

The Amazon Resource Name (ARN) of the resource to associate with the web ACL.

The ARN must be in one of the following formats:

- For an Application Load Balancer: `arn: *partition* :elasticloadbalancing: *region* : *account-id* :loadbalancer/app/ *load-balancer-name* / *load-balancer-id*` - For an Amazon API Gateway REST API: `arn: *partition* :apigateway: *region* ::/restapis/ *api-id* /stages/ *stage-name*` - For an AWS AppSync GraphQL API: `arn: *partition* :appsync: *region* : *account-id* :apis/ *GraphQLApiId*` - For an Amazon Cognito user pool: `arn: *partition* :cognito-idp: *region* : *account-id* :userpool/ *user-pool-id*` - For an AWS App Runner service: `arn: *partition* :apprunner: *region* : *account-id* :service/ *apprunner-service-name* / *apprunner-service-id*` - For an AWS Verified Access instance: `arn: *partition* :ec2: *region* : *account-id* :verified-access-instance/ *instance-id*`

func (WebAclAssociationOutput) ToWebAclAssociationOutput added in v0.72.0

func (o WebAclAssociationOutput) ToWebAclAssociationOutput() WebAclAssociationOutput

func (WebAclAssociationOutput) ToWebAclAssociationOutputWithContext added in v0.72.0

func (o WebAclAssociationOutput) ToWebAclAssociationOutputWithContext(ctx context.Context) WebAclAssociationOutput

func (WebAclAssociationOutput) WebAclArn added in v0.72.0

The Amazon Resource Name (ARN) of the web ACL that you want to associate with the resource.

type WebAclAssociationState added in v0.72.0

type WebAclAssociationState struct {
}

func (WebAclAssociationState) ElementType added in v0.72.0

func (WebAclAssociationState) ElementType() reflect.Type

type WebAclAwsManagedRulesAcfpRuleSet added in v0.72.0

type WebAclAwsManagedRulesAcfpRuleSet struct {
	// The path of the account creation endpoint for your application. This is the page on your website that accepts the completed registration form for a new user. This page must accept `POST` requests.
	//
	// For example, for the URL `https://example.com/web/newaccount` , you would provide the path `/web/newaccount` . Account creation page paths that start with the path that you provide are considered a match. For example `/web/newaccount` matches the account creation paths `/web/newaccount` , `/web/newaccount/` , `/web/newaccountPage` , and `/web/newaccount/thisPage` , but doesn't match the path `/home/web/newaccount` or `/website/newaccount` .
	CreationPath string `pulumi:"creationPath"`
	// Allow the use of regular expressions in the registration page path and the account creation path.
	EnableRegexInPath *bool `pulumi:"enableRegexInPath"`
	// The path of the account registration endpoint for your application. This is the page on your website that presents the registration form to new users.
	//
	// > This page must accept `GET` text/html requests.
	//
	// For example, for the URL `https://example.com/web/registration` , you would provide the path `/web/registration` . Registration page paths that start with the path that you provide are considered a match. For example `/web/registration` matches the registration paths `/web/registration` , `/web/registration/` , `/web/registrationPage` , and `/web/registration/thisPage` , but doesn't match the path `/home/web/registration` or `/website/registration` .
	RegistrationPagePath string `pulumi:"registrationPagePath"`
	// The criteria for inspecting account creation requests, used by the ACFP rule group to validate and track account creation attempts.
	RequestInspection WebAclRequestInspectionAcfp `pulumi:"requestInspection"`
	// The criteria for inspecting responses to account creation requests, used by the ACFP rule group to track account creation success rates.
	//
	// > Response inspection is available only in web ACLs that protect Amazon CloudFront distributions.
	//
	// The ACFP rule group evaluates the responses that your protected resources send back to client account creation attempts, keeping count of successful and failed attempts from each IP address and client session. Using this information, the rule group labels and mitigates requests from client sessions and IP addresses that have had too many successful account creation attempts in a short amount of time.
	ResponseInspection *WebAclResponseInspection `pulumi:"responseInspection"`
}

Configures how to use the Account creation fraud prevention managed rule group in the web ACL

type WebAclAwsManagedRulesAcfpRuleSetArgs added in v0.72.0

type WebAclAwsManagedRulesAcfpRuleSetArgs struct {
	// The path of the account creation endpoint for your application. This is the page on your website that accepts the completed registration form for a new user. This page must accept `POST` requests.
	//
	// For example, for the URL `https://example.com/web/newaccount` , you would provide the path `/web/newaccount` . Account creation page paths that start with the path that you provide are considered a match. For example `/web/newaccount` matches the account creation paths `/web/newaccount` , `/web/newaccount/` , `/web/newaccountPage` , and `/web/newaccount/thisPage` , but doesn't match the path `/home/web/newaccount` or `/website/newaccount` .
	CreationPath pulumi.StringInput `pulumi:"creationPath"`
	// Allow the use of regular expressions in the registration page path and the account creation path.
	EnableRegexInPath pulumi.BoolPtrInput `pulumi:"enableRegexInPath"`
	// The path of the account registration endpoint for your application. This is the page on your website that presents the registration form to new users.
	//
	// > This page must accept `GET` text/html requests.
	//
	// For example, for the URL `https://example.com/web/registration` , you would provide the path `/web/registration` . Registration page paths that start with the path that you provide are considered a match. For example `/web/registration` matches the registration paths `/web/registration` , `/web/registration/` , `/web/registrationPage` , and `/web/registration/thisPage` , but doesn't match the path `/home/web/registration` or `/website/registration` .
	RegistrationPagePath pulumi.StringInput `pulumi:"registrationPagePath"`
	// The criteria for inspecting account creation requests, used by the ACFP rule group to validate and track account creation attempts.
	RequestInspection WebAclRequestInspectionAcfpInput `pulumi:"requestInspection"`
	// The criteria for inspecting responses to account creation requests, used by the ACFP rule group to track account creation success rates.
	//
	// > Response inspection is available only in web ACLs that protect Amazon CloudFront distributions.
	//
	// The ACFP rule group evaluates the responses that your protected resources send back to client account creation attempts, keeping count of successful and failed attempts from each IP address and client session. Using this information, the rule group labels and mitigates requests from client sessions and IP addresses that have had too many successful account creation attempts in a short amount of time.
	ResponseInspection WebAclResponseInspectionPtrInput `pulumi:"responseInspection"`
}

Configures how to use the Account creation fraud prevention managed rule group in the web ACL

func (WebAclAwsManagedRulesAcfpRuleSetArgs) ElementType added in v0.72.0

func (WebAclAwsManagedRulesAcfpRuleSetArgs) ToWebAclAwsManagedRulesAcfpRuleSetOutput added in v0.72.0

func (i WebAclAwsManagedRulesAcfpRuleSetArgs) ToWebAclAwsManagedRulesAcfpRuleSetOutput() WebAclAwsManagedRulesAcfpRuleSetOutput

func (WebAclAwsManagedRulesAcfpRuleSetArgs) ToWebAclAwsManagedRulesAcfpRuleSetOutputWithContext added in v0.72.0

func (i WebAclAwsManagedRulesAcfpRuleSetArgs) ToWebAclAwsManagedRulesAcfpRuleSetOutputWithContext(ctx context.Context) WebAclAwsManagedRulesAcfpRuleSetOutput

func (WebAclAwsManagedRulesAcfpRuleSetArgs) ToWebAclAwsManagedRulesAcfpRuleSetPtrOutput added in v0.72.0

func (i WebAclAwsManagedRulesAcfpRuleSetArgs) ToWebAclAwsManagedRulesAcfpRuleSetPtrOutput() WebAclAwsManagedRulesAcfpRuleSetPtrOutput

func (WebAclAwsManagedRulesAcfpRuleSetArgs) ToWebAclAwsManagedRulesAcfpRuleSetPtrOutputWithContext added in v0.72.0

func (i WebAclAwsManagedRulesAcfpRuleSetArgs) ToWebAclAwsManagedRulesAcfpRuleSetPtrOutputWithContext(ctx context.Context) WebAclAwsManagedRulesAcfpRuleSetPtrOutput

type WebAclAwsManagedRulesAcfpRuleSetInput added in v0.72.0

type WebAclAwsManagedRulesAcfpRuleSetInput interface {
	pulumi.Input

	ToWebAclAwsManagedRulesAcfpRuleSetOutput() WebAclAwsManagedRulesAcfpRuleSetOutput
	ToWebAclAwsManagedRulesAcfpRuleSetOutputWithContext(context.Context) WebAclAwsManagedRulesAcfpRuleSetOutput
}

WebAclAwsManagedRulesAcfpRuleSetInput is an input type that accepts WebAclAwsManagedRulesAcfpRuleSetArgs and WebAclAwsManagedRulesAcfpRuleSetOutput values. You can construct a concrete instance of `WebAclAwsManagedRulesAcfpRuleSetInput` via:

WebAclAwsManagedRulesAcfpRuleSetArgs{...}

type WebAclAwsManagedRulesAcfpRuleSetOutput added in v0.72.0

type WebAclAwsManagedRulesAcfpRuleSetOutput struct{ *pulumi.OutputState }

Configures how to use the Account creation fraud prevention managed rule group in the web ACL

func (WebAclAwsManagedRulesAcfpRuleSetOutput) CreationPath added in v0.72.0

The path of the account creation endpoint for your application. This is the page on your website that accepts the completed registration form for a new user. This page must accept `POST` requests.

For example, for the URL `https://example.com/web/newaccount` , you would provide the path `/web/newaccount` . Account creation page paths that start with the path that you provide are considered a match. For example `/web/newaccount` matches the account creation paths `/web/newaccount` , `/web/newaccount/` , `/web/newaccountPage` , and `/web/newaccount/thisPage` , but doesn't match the path `/home/web/newaccount` or `/website/newaccount` .

func (WebAclAwsManagedRulesAcfpRuleSetOutput) ElementType added in v0.72.0

func (WebAclAwsManagedRulesAcfpRuleSetOutput) EnableRegexInPath added in v0.72.0

Allow the use of regular expressions in the registration page path and the account creation path.

func (WebAclAwsManagedRulesAcfpRuleSetOutput) RegistrationPagePath added in v0.72.0

The path of the account registration endpoint for your application. This is the page on your website that presents the registration form to new users.

> This page must accept `GET` text/html requests.

For example, for the URL `https://example.com/web/registration` , you would provide the path `/web/registration` . Registration page paths that start with the path that you provide are considered a match. For example `/web/registration` matches the registration paths `/web/registration` , `/web/registration/` , `/web/registrationPage` , and `/web/registration/thisPage` , but doesn't match the path `/home/web/registration` or `/website/registration` .

func (WebAclAwsManagedRulesAcfpRuleSetOutput) RequestInspection added in v0.72.0

The criteria for inspecting account creation requests, used by the ACFP rule group to validate and track account creation attempts.

func (WebAclAwsManagedRulesAcfpRuleSetOutput) ResponseInspection added in v0.72.0

The criteria for inspecting responses to account creation requests, used by the ACFP rule group to track account creation success rates.

> Response inspection is available only in web ACLs that protect Amazon CloudFront distributions.

The ACFP rule group evaluates the responses that your protected resources send back to client account creation attempts, keeping count of successful and failed attempts from each IP address and client session. Using this information, the rule group labels and mitigates requests from client sessions and IP addresses that have had too many successful account creation attempts in a short amount of time.

func (WebAclAwsManagedRulesAcfpRuleSetOutput) ToWebAclAwsManagedRulesAcfpRuleSetOutput added in v0.72.0

func (o WebAclAwsManagedRulesAcfpRuleSetOutput) ToWebAclAwsManagedRulesAcfpRuleSetOutput() WebAclAwsManagedRulesAcfpRuleSetOutput

func (WebAclAwsManagedRulesAcfpRuleSetOutput) ToWebAclAwsManagedRulesAcfpRuleSetOutputWithContext added in v0.72.0

func (o WebAclAwsManagedRulesAcfpRuleSetOutput) ToWebAclAwsManagedRulesAcfpRuleSetOutputWithContext(ctx context.Context) WebAclAwsManagedRulesAcfpRuleSetOutput

func (WebAclAwsManagedRulesAcfpRuleSetOutput) ToWebAclAwsManagedRulesAcfpRuleSetPtrOutput added in v0.72.0

func (o WebAclAwsManagedRulesAcfpRuleSetOutput) ToWebAclAwsManagedRulesAcfpRuleSetPtrOutput() WebAclAwsManagedRulesAcfpRuleSetPtrOutput

func (WebAclAwsManagedRulesAcfpRuleSetOutput) ToWebAclAwsManagedRulesAcfpRuleSetPtrOutputWithContext added in v0.72.0

func (o WebAclAwsManagedRulesAcfpRuleSetOutput) ToWebAclAwsManagedRulesAcfpRuleSetPtrOutputWithContext(ctx context.Context) WebAclAwsManagedRulesAcfpRuleSetPtrOutput

type WebAclAwsManagedRulesAcfpRuleSetPtrInput added in v0.72.0

type WebAclAwsManagedRulesAcfpRuleSetPtrInput interface {
	pulumi.Input

	ToWebAclAwsManagedRulesAcfpRuleSetPtrOutput() WebAclAwsManagedRulesAcfpRuleSetPtrOutput
	ToWebAclAwsManagedRulesAcfpRuleSetPtrOutputWithContext(context.Context) WebAclAwsManagedRulesAcfpRuleSetPtrOutput
}

WebAclAwsManagedRulesAcfpRuleSetPtrInput is an input type that accepts WebAclAwsManagedRulesAcfpRuleSetArgs, WebAclAwsManagedRulesAcfpRuleSetPtr and WebAclAwsManagedRulesAcfpRuleSetPtrOutput values. You can construct a concrete instance of `WebAclAwsManagedRulesAcfpRuleSetPtrInput` via:

        WebAclAwsManagedRulesAcfpRuleSetArgs{...}

or:

        nil

type WebAclAwsManagedRulesAcfpRuleSetPtrOutput added in v0.72.0

type WebAclAwsManagedRulesAcfpRuleSetPtrOutput struct{ *pulumi.OutputState }

func (WebAclAwsManagedRulesAcfpRuleSetPtrOutput) CreationPath added in v0.72.0

The path of the account creation endpoint for your application. This is the page on your website that accepts the completed registration form for a new user. This page must accept `POST` requests.

For example, for the URL `https://example.com/web/newaccount` , you would provide the path `/web/newaccount` . Account creation page paths that start with the path that you provide are considered a match. For example `/web/newaccount` matches the account creation paths `/web/newaccount` , `/web/newaccount/` , `/web/newaccountPage` , and `/web/newaccount/thisPage` , but doesn't match the path `/home/web/newaccount` or `/website/newaccount` .

func (WebAclAwsManagedRulesAcfpRuleSetPtrOutput) Elem added in v0.72.0

func (WebAclAwsManagedRulesAcfpRuleSetPtrOutput) ElementType added in v0.72.0

func (WebAclAwsManagedRulesAcfpRuleSetPtrOutput) EnableRegexInPath added in v0.72.0

Allow the use of regular expressions in the registration page path and the account creation path.

func (WebAclAwsManagedRulesAcfpRuleSetPtrOutput) RegistrationPagePath added in v0.72.0

The path of the account registration endpoint for your application. This is the page on your website that presents the registration form to new users.

> This page must accept `GET` text/html requests.

For example, for the URL `https://example.com/web/registration` , you would provide the path `/web/registration` . Registration page paths that start with the path that you provide are considered a match. For example `/web/registration` matches the registration paths `/web/registration` , `/web/registration/` , `/web/registrationPage` , and `/web/registration/thisPage` , but doesn't match the path `/home/web/registration` or `/website/registration` .

func (WebAclAwsManagedRulesAcfpRuleSetPtrOutput) RequestInspection added in v0.72.0

The criteria for inspecting account creation requests, used by the ACFP rule group to validate and track account creation attempts.

func (WebAclAwsManagedRulesAcfpRuleSetPtrOutput) ResponseInspection added in v0.72.0

The criteria for inspecting responses to account creation requests, used by the ACFP rule group to track account creation success rates.

> Response inspection is available only in web ACLs that protect Amazon CloudFront distributions.

The ACFP rule group evaluates the responses that your protected resources send back to client account creation attempts, keeping count of successful and failed attempts from each IP address and client session. Using this information, the rule group labels and mitigates requests from client sessions and IP addresses that have had too many successful account creation attempts in a short amount of time.

func (WebAclAwsManagedRulesAcfpRuleSetPtrOutput) ToWebAclAwsManagedRulesAcfpRuleSetPtrOutput added in v0.72.0

func (o WebAclAwsManagedRulesAcfpRuleSetPtrOutput) ToWebAclAwsManagedRulesAcfpRuleSetPtrOutput() WebAclAwsManagedRulesAcfpRuleSetPtrOutput

func (WebAclAwsManagedRulesAcfpRuleSetPtrOutput) ToWebAclAwsManagedRulesAcfpRuleSetPtrOutputWithContext added in v0.72.0

func (o WebAclAwsManagedRulesAcfpRuleSetPtrOutput) ToWebAclAwsManagedRulesAcfpRuleSetPtrOutputWithContext(ctx context.Context) WebAclAwsManagedRulesAcfpRuleSetPtrOutput

type WebAclAwsManagedRulesAtpRuleSet added in v0.72.0

type WebAclAwsManagedRulesAtpRuleSet struct {
	// Allow the use of regular expressions in the login page path.
	EnableRegexInPath *bool `pulumi:"enableRegexInPath"`
	// The path of the login endpoint for your application. For example, for the URL `https://example.com/web/login` , you would provide the path `/web/login` . Login paths that start with the path that you provide are considered a match. For example `/web/login` matches the login paths `/web/login` , `/web/login/` , `/web/loginPage` , and `/web/login/thisPage` , but doesn't match the login path `/home/web/login` or `/website/login` .
	//
	// The rule group inspects only HTTP `POST` requests to your specified login endpoint.
	LoginPath string `pulumi:"loginPath"`
	// The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage.
	RequestInspection *WebAclRequestInspection `pulumi:"requestInspection"`
	// The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates.
	//
	// > Response inspection is available only in web ACLs that protect Amazon CloudFront distributions.
	//
	// The ATP rule group evaluates the responses that your protected resources send back to client login attempts, keeping count of successful and failed attempts for each IP address and client session. Using this information, the rule group labels and mitigates requests from client sessions and IP addresses that have had too many failed login attempts in a short amount of time.
	ResponseInspection *WebAclResponseInspection `pulumi:"responseInspection"`
}

Configures how to use the Account Takeover Prevention managed rule group in the web ACL

type WebAclAwsManagedRulesAtpRuleSetArgs added in v0.72.0

type WebAclAwsManagedRulesAtpRuleSetArgs struct {
	// Allow the use of regular expressions in the login page path.
	EnableRegexInPath pulumi.BoolPtrInput `pulumi:"enableRegexInPath"`
	// The path of the login endpoint for your application. For example, for the URL `https://example.com/web/login` , you would provide the path `/web/login` . Login paths that start with the path that you provide are considered a match. For example `/web/login` matches the login paths `/web/login` , `/web/login/` , `/web/loginPage` , and `/web/login/thisPage` , but doesn't match the login path `/home/web/login` or `/website/login` .
	//
	// The rule group inspects only HTTP `POST` requests to your specified login endpoint.
	LoginPath pulumi.StringInput `pulumi:"loginPath"`
	// The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage.
	RequestInspection WebAclRequestInspectionPtrInput `pulumi:"requestInspection"`
	// The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates.
	//
	// > Response inspection is available only in web ACLs that protect Amazon CloudFront distributions.
	//
	// The ATP rule group evaluates the responses that your protected resources send back to client login attempts, keeping count of successful and failed attempts for each IP address and client session. Using this information, the rule group labels and mitigates requests from client sessions and IP addresses that have had too many failed login attempts in a short amount of time.
	ResponseInspection WebAclResponseInspectionPtrInput `pulumi:"responseInspection"`
}

Configures how to use the Account Takeover Prevention managed rule group in the web ACL

func (WebAclAwsManagedRulesAtpRuleSetArgs) ElementType added in v0.72.0

func (WebAclAwsManagedRulesAtpRuleSetArgs) ToWebAclAwsManagedRulesAtpRuleSetOutput added in v0.72.0

func (i WebAclAwsManagedRulesAtpRuleSetArgs) ToWebAclAwsManagedRulesAtpRuleSetOutput() WebAclAwsManagedRulesAtpRuleSetOutput

func (WebAclAwsManagedRulesAtpRuleSetArgs) ToWebAclAwsManagedRulesAtpRuleSetOutputWithContext added in v0.72.0

func (i WebAclAwsManagedRulesAtpRuleSetArgs) ToWebAclAwsManagedRulesAtpRuleSetOutputWithContext(ctx context.Context) WebAclAwsManagedRulesAtpRuleSetOutput

func (WebAclAwsManagedRulesAtpRuleSetArgs) ToWebAclAwsManagedRulesAtpRuleSetPtrOutput added in v0.72.0

func (i WebAclAwsManagedRulesAtpRuleSetArgs) ToWebAclAwsManagedRulesAtpRuleSetPtrOutput() WebAclAwsManagedRulesAtpRuleSetPtrOutput

func (WebAclAwsManagedRulesAtpRuleSetArgs) ToWebAclAwsManagedRulesAtpRuleSetPtrOutputWithContext added in v0.72.0

func (i WebAclAwsManagedRulesAtpRuleSetArgs) ToWebAclAwsManagedRulesAtpRuleSetPtrOutputWithContext(ctx context.Context) WebAclAwsManagedRulesAtpRuleSetPtrOutput

type WebAclAwsManagedRulesAtpRuleSetInput added in v0.72.0

type WebAclAwsManagedRulesAtpRuleSetInput interface {
	pulumi.Input

	ToWebAclAwsManagedRulesAtpRuleSetOutput() WebAclAwsManagedRulesAtpRuleSetOutput
	ToWebAclAwsManagedRulesAtpRuleSetOutputWithContext(context.Context) WebAclAwsManagedRulesAtpRuleSetOutput
}

WebAclAwsManagedRulesAtpRuleSetInput is an input type that accepts WebAclAwsManagedRulesAtpRuleSetArgs and WebAclAwsManagedRulesAtpRuleSetOutput values. You can construct a concrete instance of `WebAclAwsManagedRulesAtpRuleSetInput` via:

WebAclAwsManagedRulesAtpRuleSetArgs{...}

type WebAclAwsManagedRulesAtpRuleSetOutput added in v0.72.0

type WebAclAwsManagedRulesAtpRuleSetOutput struct{ *pulumi.OutputState }

Configures how to use the Account Takeover Prevention managed rule group in the web ACL

func (WebAclAwsManagedRulesAtpRuleSetOutput) ElementType added in v0.72.0

func (WebAclAwsManagedRulesAtpRuleSetOutput) EnableRegexInPath added in v0.72.0

Allow the use of regular expressions in the login page path.

func (WebAclAwsManagedRulesAtpRuleSetOutput) LoginPath added in v0.72.0

The path of the login endpoint for your application. For example, for the URL `https://example.com/web/login` , you would provide the path `/web/login` . Login paths that start with the path that you provide are considered a match. For example `/web/login` matches the login paths `/web/login` , `/web/login/` , `/web/loginPage` , and `/web/login/thisPage` , but doesn't match the login path `/home/web/login` or `/website/login` .

The rule group inspects only HTTP `POST` requests to your specified login endpoint.

func (WebAclAwsManagedRulesAtpRuleSetOutput) RequestInspection added in v0.72.0

The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage.

func (WebAclAwsManagedRulesAtpRuleSetOutput) ResponseInspection added in v0.72.0

The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates.

> Response inspection is available only in web ACLs that protect Amazon CloudFront distributions.

The ATP rule group evaluates the responses that your protected resources send back to client login attempts, keeping count of successful and failed attempts for each IP address and client session. Using this information, the rule group labels and mitigates requests from client sessions and IP addresses that have had too many failed login attempts in a short amount of time.

func (WebAclAwsManagedRulesAtpRuleSetOutput) ToWebAclAwsManagedRulesAtpRuleSetOutput added in v0.72.0

func (o WebAclAwsManagedRulesAtpRuleSetOutput) ToWebAclAwsManagedRulesAtpRuleSetOutput() WebAclAwsManagedRulesAtpRuleSetOutput

func (WebAclAwsManagedRulesAtpRuleSetOutput) ToWebAclAwsManagedRulesAtpRuleSetOutputWithContext added in v0.72.0

func (o WebAclAwsManagedRulesAtpRuleSetOutput) ToWebAclAwsManagedRulesAtpRuleSetOutputWithContext(ctx context.Context) WebAclAwsManagedRulesAtpRuleSetOutput

func (WebAclAwsManagedRulesAtpRuleSetOutput) ToWebAclAwsManagedRulesAtpRuleSetPtrOutput added in v0.72.0

func (o WebAclAwsManagedRulesAtpRuleSetOutput) ToWebAclAwsManagedRulesAtpRuleSetPtrOutput() WebAclAwsManagedRulesAtpRuleSetPtrOutput

func (WebAclAwsManagedRulesAtpRuleSetOutput) ToWebAclAwsManagedRulesAtpRuleSetPtrOutputWithContext added in v0.72.0

func (o WebAclAwsManagedRulesAtpRuleSetOutput) ToWebAclAwsManagedRulesAtpRuleSetPtrOutputWithContext(ctx context.Context) WebAclAwsManagedRulesAtpRuleSetPtrOutput

type WebAclAwsManagedRulesAtpRuleSetPtrInput added in v0.72.0

type WebAclAwsManagedRulesAtpRuleSetPtrInput interface {
	pulumi.Input

	ToWebAclAwsManagedRulesAtpRuleSetPtrOutput() WebAclAwsManagedRulesAtpRuleSetPtrOutput
	ToWebAclAwsManagedRulesAtpRuleSetPtrOutputWithContext(context.Context) WebAclAwsManagedRulesAtpRuleSetPtrOutput
}

WebAclAwsManagedRulesAtpRuleSetPtrInput is an input type that accepts WebAclAwsManagedRulesAtpRuleSetArgs, WebAclAwsManagedRulesAtpRuleSetPtr and WebAclAwsManagedRulesAtpRuleSetPtrOutput values. You can construct a concrete instance of `WebAclAwsManagedRulesAtpRuleSetPtrInput` via:

        WebAclAwsManagedRulesAtpRuleSetArgs{...}

or:

        nil

type WebAclAwsManagedRulesAtpRuleSetPtrOutput added in v0.72.0

type WebAclAwsManagedRulesAtpRuleSetPtrOutput struct{ *pulumi.OutputState }

func (WebAclAwsManagedRulesAtpRuleSetPtrOutput) Elem added in v0.72.0

func (WebAclAwsManagedRulesAtpRuleSetPtrOutput) ElementType added in v0.72.0

func (WebAclAwsManagedRulesAtpRuleSetPtrOutput) EnableRegexInPath added in v0.72.0

Allow the use of regular expressions in the login page path.

func (WebAclAwsManagedRulesAtpRuleSetPtrOutput) LoginPath added in v0.72.0

The path of the login endpoint for your application. For example, for the URL `https://example.com/web/login` , you would provide the path `/web/login` . Login paths that start with the path that you provide are considered a match. For example `/web/login` matches the login paths `/web/login` , `/web/login/` , `/web/loginPage` , and `/web/login/thisPage` , but doesn't match the login path `/home/web/login` or `/website/login` .

The rule group inspects only HTTP `POST` requests to your specified login endpoint.

func (WebAclAwsManagedRulesAtpRuleSetPtrOutput) RequestInspection added in v0.72.0

The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage.

func (WebAclAwsManagedRulesAtpRuleSetPtrOutput) ResponseInspection added in v0.72.0

The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates.

> Response inspection is available only in web ACLs that protect Amazon CloudFront distributions.

The ATP rule group evaluates the responses that your protected resources send back to client login attempts, keeping count of successful and failed attempts for each IP address and client session. Using this information, the rule group labels and mitigates requests from client sessions and IP addresses that have had too many failed login attempts in a short amount of time.

func (WebAclAwsManagedRulesAtpRuleSetPtrOutput) ToWebAclAwsManagedRulesAtpRuleSetPtrOutput added in v0.72.0

func (o WebAclAwsManagedRulesAtpRuleSetPtrOutput) ToWebAclAwsManagedRulesAtpRuleSetPtrOutput() WebAclAwsManagedRulesAtpRuleSetPtrOutput

func (WebAclAwsManagedRulesAtpRuleSetPtrOutput) ToWebAclAwsManagedRulesAtpRuleSetPtrOutputWithContext added in v0.72.0

func (o WebAclAwsManagedRulesAtpRuleSetPtrOutput) ToWebAclAwsManagedRulesAtpRuleSetPtrOutputWithContext(ctx context.Context) WebAclAwsManagedRulesAtpRuleSetPtrOutput

type WebAclAwsManagedRulesBotControlRuleSet added in v0.72.0

type WebAclAwsManagedRulesBotControlRuleSet struct {
	// Applies only to the targeted inspection level.
	//
	// Determines whether to use machine learning (ML) to analyze your web traffic for bot-related activity. Machine learning is required for the Bot Control rules `TGT_ML_CoordinatedActivityLow` and `TGT_ML_CoordinatedActivityMedium` , which
	// inspect for anomalous behavior that might indicate distributed, coordinated bot activity.
	//
	// For more information about this choice, see the listing for these rules in the table at [Bot Control rules listing](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html#aws-managed-rule-groups-bot-rules) in the *AWS WAF Developer Guide* .
	//
	// Default: `TRUE`
	EnableMachineLearning *bool `pulumi:"enableMachineLearning"`
	// The inspection level to use for the Bot Control rule group. The common level is the least expensive. The targeted level includes all common level rules and adds rules with more advanced inspection criteria. For details, see [AWS WAF Bot Control rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html) in the *AWS WAF Developer Guide* .
	InspectionLevel WebAclAwsManagedRulesBotControlRuleSetInspectionLevel `pulumi:"inspectionLevel"`
}

Configures how to use the Bot Control managed rule group in the web ACL

type WebAclAwsManagedRulesBotControlRuleSetArgs added in v0.72.0

type WebAclAwsManagedRulesBotControlRuleSetArgs struct {
	// Applies only to the targeted inspection level.
	//
	// Determines whether to use machine learning (ML) to analyze your web traffic for bot-related activity. Machine learning is required for the Bot Control rules `TGT_ML_CoordinatedActivityLow` and `TGT_ML_CoordinatedActivityMedium` , which
	// inspect for anomalous behavior that might indicate distributed, coordinated bot activity.
	//
	// For more information about this choice, see the listing for these rules in the table at [Bot Control rules listing](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html#aws-managed-rule-groups-bot-rules) in the *AWS WAF Developer Guide* .
	//
	// Default: `TRUE`
	EnableMachineLearning pulumi.BoolPtrInput `pulumi:"enableMachineLearning"`
	// The inspection level to use for the Bot Control rule group. The common level is the least expensive. The targeted level includes all common level rules and adds rules with more advanced inspection criteria. For details, see [AWS WAF Bot Control rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html) in the *AWS WAF Developer Guide* .
	InspectionLevel WebAclAwsManagedRulesBotControlRuleSetInspectionLevelInput `pulumi:"inspectionLevel"`
}

Configures how to use the Bot Control managed rule group in the web ACL

func (WebAclAwsManagedRulesBotControlRuleSetArgs) ElementType added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetArgs) ToWebAclAwsManagedRulesBotControlRuleSetOutput added in v0.72.0

func (i WebAclAwsManagedRulesBotControlRuleSetArgs) ToWebAclAwsManagedRulesBotControlRuleSetOutput() WebAclAwsManagedRulesBotControlRuleSetOutput

func (WebAclAwsManagedRulesBotControlRuleSetArgs) ToWebAclAwsManagedRulesBotControlRuleSetOutputWithContext added in v0.72.0

func (i WebAclAwsManagedRulesBotControlRuleSetArgs) ToWebAclAwsManagedRulesBotControlRuleSetOutputWithContext(ctx context.Context) WebAclAwsManagedRulesBotControlRuleSetOutput

func (WebAclAwsManagedRulesBotControlRuleSetArgs) ToWebAclAwsManagedRulesBotControlRuleSetPtrOutput added in v0.72.0

func (i WebAclAwsManagedRulesBotControlRuleSetArgs) ToWebAclAwsManagedRulesBotControlRuleSetPtrOutput() WebAclAwsManagedRulesBotControlRuleSetPtrOutput

func (WebAclAwsManagedRulesBotControlRuleSetArgs) ToWebAclAwsManagedRulesBotControlRuleSetPtrOutputWithContext added in v0.72.0

func (i WebAclAwsManagedRulesBotControlRuleSetArgs) ToWebAclAwsManagedRulesBotControlRuleSetPtrOutputWithContext(ctx context.Context) WebAclAwsManagedRulesBotControlRuleSetPtrOutput

type WebAclAwsManagedRulesBotControlRuleSetInput added in v0.72.0

type WebAclAwsManagedRulesBotControlRuleSetInput interface {
	pulumi.Input

	ToWebAclAwsManagedRulesBotControlRuleSetOutput() WebAclAwsManagedRulesBotControlRuleSetOutput
	ToWebAclAwsManagedRulesBotControlRuleSetOutputWithContext(context.Context) WebAclAwsManagedRulesBotControlRuleSetOutput
}

WebAclAwsManagedRulesBotControlRuleSetInput is an input type that accepts WebAclAwsManagedRulesBotControlRuleSetArgs and WebAclAwsManagedRulesBotControlRuleSetOutput values. You can construct a concrete instance of `WebAclAwsManagedRulesBotControlRuleSetInput` via:

WebAclAwsManagedRulesBotControlRuleSetArgs{...}

type WebAclAwsManagedRulesBotControlRuleSetInspectionLevel added in v0.72.0

type WebAclAwsManagedRulesBotControlRuleSetInspectionLevel string

The inspection level to use for the Bot Control rule group. The common level is the least expensive. The targeted level includes all common level rules and adds rules with more advanced inspection criteria. For details, see [AWS WAF Bot Control rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html) in the *AWS WAF Developer Guide* .

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevel) ElementType added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevel) ToStringOutput added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevel) ToStringOutputWithContext added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevel) ToStringPtrOutput added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevel) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevel) ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput added in v0.72.0

func (e WebAclAwsManagedRulesBotControlRuleSetInspectionLevel) ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput() WebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevel) ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutputWithContext added in v0.72.0

func (e WebAclAwsManagedRulesBotControlRuleSetInspectionLevel) ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutputWithContext(ctx context.Context) WebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevel) ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput added in v0.72.0

func (e WebAclAwsManagedRulesBotControlRuleSetInspectionLevel) ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput() WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevel) ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutputWithContext added in v0.72.0

func (e WebAclAwsManagedRulesBotControlRuleSetInspectionLevel) ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutputWithContext(ctx context.Context) WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput

type WebAclAwsManagedRulesBotControlRuleSetInspectionLevelInput added in v0.72.0

type WebAclAwsManagedRulesBotControlRuleSetInspectionLevelInput interface {
	pulumi.Input

	ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput() WebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput
	ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutputWithContext(context.Context) WebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput
}

WebAclAwsManagedRulesBotControlRuleSetInspectionLevelInput is an input type that accepts values of the WebAclAwsManagedRulesBotControlRuleSetInspectionLevel enum A concrete instance of `WebAclAwsManagedRulesBotControlRuleSetInspectionLevelInput` can be one of the following:

WebAclAwsManagedRulesBotControlRuleSetInspectionLevelCommon
WebAclAwsManagedRulesBotControlRuleSetInspectionLevelTargeted

type WebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput added in v0.72.0

type WebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput struct{ *pulumi.OutputState }

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput) ElementType added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput) ToStringOutput added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput) ToStringOutputWithContext added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput) ToStringPtrOutput added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput) ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput) ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutputWithContext added in v0.72.0

func (o WebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput) ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutputWithContext(ctx context.Context) WebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput) ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput) ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutputWithContext added in v0.72.0

func (o WebAclAwsManagedRulesBotControlRuleSetInspectionLevelOutput) ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutputWithContext(ctx context.Context) WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput

type WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrInput added in v0.72.0

type WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrInput interface {
	pulumi.Input

	ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput() WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput
	ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutputWithContext(context.Context) WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput
}

func WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtr added in v0.72.0

func WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtr(v string) WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrInput

type WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput added in v0.72.0

type WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput struct{ *pulumi.OutputState }

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput) Elem added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput) ElementType added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput) ToStringPtrOutput added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput) ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput) ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutputWithContext added in v0.72.0

func (o WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput) ToWebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutputWithContext(ctx context.Context) WebAclAwsManagedRulesBotControlRuleSetInspectionLevelPtrOutput

type WebAclAwsManagedRulesBotControlRuleSetOutput added in v0.72.0

type WebAclAwsManagedRulesBotControlRuleSetOutput struct{ *pulumi.OutputState }

Configures how to use the Bot Control managed rule group in the web ACL

func (WebAclAwsManagedRulesBotControlRuleSetOutput) ElementType added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetOutput) EnableMachineLearning added in v0.81.0

Applies only to the targeted inspection level.

Determines whether to use machine learning (ML) to analyze your web traffic for bot-related activity. Machine learning is required for the Bot Control rules `TGT_ML_CoordinatedActivityLow` and `TGT_ML_CoordinatedActivityMedium` , which inspect for anomalous behavior that might indicate distributed, coordinated bot activity.

For more information about this choice, see the listing for these rules in the table at [Bot Control rules listing](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html#aws-managed-rule-groups-bot-rules) in the *AWS WAF Developer Guide* .

Default: `TRUE`

func (WebAclAwsManagedRulesBotControlRuleSetOutput) InspectionLevel added in v0.72.0

The inspection level to use for the Bot Control rule group. The common level is the least expensive. The targeted level includes all common level rules and adds rules with more advanced inspection criteria. For details, see [AWS WAF Bot Control rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html) in the *AWS WAF Developer Guide* .

func (WebAclAwsManagedRulesBotControlRuleSetOutput) ToWebAclAwsManagedRulesBotControlRuleSetOutput added in v0.72.0

func (o WebAclAwsManagedRulesBotControlRuleSetOutput) ToWebAclAwsManagedRulesBotControlRuleSetOutput() WebAclAwsManagedRulesBotControlRuleSetOutput

func (WebAclAwsManagedRulesBotControlRuleSetOutput) ToWebAclAwsManagedRulesBotControlRuleSetOutputWithContext added in v0.72.0

func (o WebAclAwsManagedRulesBotControlRuleSetOutput) ToWebAclAwsManagedRulesBotControlRuleSetOutputWithContext(ctx context.Context) WebAclAwsManagedRulesBotControlRuleSetOutput

func (WebAclAwsManagedRulesBotControlRuleSetOutput) ToWebAclAwsManagedRulesBotControlRuleSetPtrOutput added in v0.72.0

func (o WebAclAwsManagedRulesBotControlRuleSetOutput) ToWebAclAwsManagedRulesBotControlRuleSetPtrOutput() WebAclAwsManagedRulesBotControlRuleSetPtrOutput

func (WebAclAwsManagedRulesBotControlRuleSetOutput) ToWebAclAwsManagedRulesBotControlRuleSetPtrOutputWithContext added in v0.72.0

func (o WebAclAwsManagedRulesBotControlRuleSetOutput) ToWebAclAwsManagedRulesBotControlRuleSetPtrOutputWithContext(ctx context.Context) WebAclAwsManagedRulesBotControlRuleSetPtrOutput

type WebAclAwsManagedRulesBotControlRuleSetPtrInput added in v0.72.0

type WebAclAwsManagedRulesBotControlRuleSetPtrInput interface {
	pulumi.Input

	ToWebAclAwsManagedRulesBotControlRuleSetPtrOutput() WebAclAwsManagedRulesBotControlRuleSetPtrOutput
	ToWebAclAwsManagedRulesBotControlRuleSetPtrOutputWithContext(context.Context) WebAclAwsManagedRulesBotControlRuleSetPtrOutput
}

WebAclAwsManagedRulesBotControlRuleSetPtrInput is an input type that accepts WebAclAwsManagedRulesBotControlRuleSetArgs, WebAclAwsManagedRulesBotControlRuleSetPtr and WebAclAwsManagedRulesBotControlRuleSetPtrOutput values. You can construct a concrete instance of `WebAclAwsManagedRulesBotControlRuleSetPtrInput` via:

        WebAclAwsManagedRulesBotControlRuleSetArgs{...}

or:

        nil

type WebAclAwsManagedRulesBotControlRuleSetPtrOutput added in v0.72.0

type WebAclAwsManagedRulesBotControlRuleSetPtrOutput struct{ *pulumi.OutputState }

func (WebAclAwsManagedRulesBotControlRuleSetPtrOutput) Elem added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetPtrOutput) ElementType added in v0.72.0

func (WebAclAwsManagedRulesBotControlRuleSetPtrOutput) EnableMachineLearning added in v0.81.0

Applies only to the targeted inspection level.

Determines whether to use machine learning (ML) to analyze your web traffic for bot-related activity. Machine learning is required for the Bot Control rules `TGT_ML_CoordinatedActivityLow` and `TGT_ML_CoordinatedActivityMedium` , which inspect for anomalous behavior that might indicate distributed, coordinated bot activity.

For more information about this choice, see the listing for these rules in the table at [Bot Control rules listing](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html#aws-managed-rule-groups-bot-rules) in the *AWS WAF Developer Guide* .

Default: `TRUE`

func (WebAclAwsManagedRulesBotControlRuleSetPtrOutput) InspectionLevel added in v0.72.0

The inspection level to use for the Bot Control rule group. The common level is the least expensive. The targeted level includes all common level rules and adds rules with more advanced inspection criteria. For details, see [AWS WAF Bot Control rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html) in the *AWS WAF Developer Guide* .

func (WebAclAwsManagedRulesBotControlRuleSetPtrOutput) ToWebAclAwsManagedRulesBotControlRuleSetPtrOutput added in v0.72.0

func (o WebAclAwsManagedRulesBotControlRuleSetPtrOutput) ToWebAclAwsManagedRulesBotControlRuleSetPtrOutput() WebAclAwsManagedRulesBotControlRuleSetPtrOutput

func (WebAclAwsManagedRulesBotControlRuleSetPtrOutput) ToWebAclAwsManagedRulesBotControlRuleSetPtrOutputWithContext added in v0.72.0

func (o WebAclAwsManagedRulesBotControlRuleSetPtrOutput) ToWebAclAwsManagedRulesBotControlRuleSetPtrOutputWithContext(ctx context.Context) WebAclAwsManagedRulesBotControlRuleSetPtrOutput

type WebAclBlockAction added in v0.72.0

type WebAclBlockAction struct {
	// Defines a custom response for the web request.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	CustomResponse *WebAclCustomResponse `pulumi:"customResponse"`
}

Block traffic towards application.

type WebAclBlockActionArgs added in v0.72.0

type WebAclBlockActionArgs struct {
	// Defines a custom response for the web request.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	CustomResponse WebAclCustomResponsePtrInput `pulumi:"customResponse"`
}

Block traffic towards application.

func (WebAclBlockActionArgs) ElementType added in v0.72.0

func (WebAclBlockActionArgs) ElementType() reflect.Type

func (WebAclBlockActionArgs) ToWebAclBlockActionOutput added in v0.72.0

func (i WebAclBlockActionArgs) ToWebAclBlockActionOutput() WebAclBlockActionOutput

func (WebAclBlockActionArgs) ToWebAclBlockActionOutputWithContext added in v0.72.0

func (i WebAclBlockActionArgs) ToWebAclBlockActionOutputWithContext(ctx context.Context) WebAclBlockActionOutput

func (WebAclBlockActionArgs) ToWebAclBlockActionPtrOutput added in v0.72.0

func (i WebAclBlockActionArgs) ToWebAclBlockActionPtrOutput() WebAclBlockActionPtrOutput

func (WebAclBlockActionArgs) ToWebAclBlockActionPtrOutputWithContext added in v0.72.0

func (i WebAclBlockActionArgs) ToWebAclBlockActionPtrOutputWithContext(ctx context.Context) WebAclBlockActionPtrOutput

type WebAclBlockActionInput added in v0.72.0

type WebAclBlockActionInput interface {
	pulumi.Input

	ToWebAclBlockActionOutput() WebAclBlockActionOutput
	ToWebAclBlockActionOutputWithContext(context.Context) WebAclBlockActionOutput
}

WebAclBlockActionInput is an input type that accepts WebAclBlockActionArgs and WebAclBlockActionOutput values. You can construct a concrete instance of `WebAclBlockActionInput` via:

WebAclBlockActionArgs{...}

type WebAclBlockActionOutput added in v0.72.0

type WebAclBlockActionOutput struct{ *pulumi.OutputState }

Block traffic towards application.

func (WebAclBlockActionOutput) CustomResponse added in v0.72.0

Defines a custom response for the web request.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

func (WebAclBlockActionOutput) ElementType added in v0.72.0

func (WebAclBlockActionOutput) ElementType() reflect.Type

func (WebAclBlockActionOutput) ToWebAclBlockActionOutput added in v0.72.0

func (o WebAclBlockActionOutput) ToWebAclBlockActionOutput() WebAclBlockActionOutput

func (WebAclBlockActionOutput) ToWebAclBlockActionOutputWithContext added in v0.72.0

func (o WebAclBlockActionOutput) ToWebAclBlockActionOutputWithContext(ctx context.Context) WebAclBlockActionOutput

func (WebAclBlockActionOutput) ToWebAclBlockActionPtrOutput added in v0.72.0

func (o WebAclBlockActionOutput) ToWebAclBlockActionPtrOutput() WebAclBlockActionPtrOutput

func (WebAclBlockActionOutput) ToWebAclBlockActionPtrOutputWithContext added in v0.72.0

func (o WebAclBlockActionOutput) ToWebAclBlockActionPtrOutputWithContext(ctx context.Context) WebAclBlockActionPtrOutput

type WebAclBlockActionPtrInput added in v0.72.0

type WebAclBlockActionPtrInput interface {
	pulumi.Input

	ToWebAclBlockActionPtrOutput() WebAclBlockActionPtrOutput
	ToWebAclBlockActionPtrOutputWithContext(context.Context) WebAclBlockActionPtrOutput
}

WebAclBlockActionPtrInput is an input type that accepts WebAclBlockActionArgs, WebAclBlockActionPtr and WebAclBlockActionPtrOutput values. You can construct a concrete instance of `WebAclBlockActionPtrInput` via:

        WebAclBlockActionArgs{...}

or:

        nil

func WebAclBlockActionPtr added in v0.72.0

func WebAclBlockActionPtr(v *WebAclBlockActionArgs) WebAclBlockActionPtrInput

type WebAclBlockActionPtrOutput added in v0.72.0

type WebAclBlockActionPtrOutput struct{ *pulumi.OutputState }

func (WebAclBlockActionPtrOutput) CustomResponse added in v0.72.0

Defines a custom response for the web request.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

func (WebAclBlockActionPtrOutput) Elem added in v0.72.0

func (WebAclBlockActionPtrOutput) ElementType added in v0.72.0

func (WebAclBlockActionPtrOutput) ElementType() reflect.Type

func (WebAclBlockActionPtrOutput) ToWebAclBlockActionPtrOutput added in v0.72.0

func (o WebAclBlockActionPtrOutput) ToWebAclBlockActionPtrOutput() WebAclBlockActionPtrOutput

func (WebAclBlockActionPtrOutput) ToWebAclBlockActionPtrOutputWithContext added in v0.72.0

func (o WebAclBlockActionPtrOutput) ToWebAclBlockActionPtrOutputWithContext(ctx context.Context) WebAclBlockActionPtrOutput

type WebAclBody added in v0.72.0

type WebAclBody struct {
	// What AWS WAF should do if the body is larger than AWS WAF can inspect.
	//
	// AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.
	//
	// - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	// - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
	//
	// The options for oversize handling are the following:
	//
	// - `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	//
	// You can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.
	//
	// Default: `CONTINUE`
	OversizeHandling *WebAclOversizeHandling `pulumi:"oversizeHandling"`
}

The body of a web request. This immediately follows the request headers.

type WebAclBodyArgs added in v0.72.0

type WebAclBodyArgs struct {
	// What AWS WAF should do if the body is larger than AWS WAF can inspect.
	//
	// AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.
	//
	// - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	// - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
	//
	// The options for oversize handling are the following:
	//
	// - `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	//
	// You can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.
	//
	// Default: `CONTINUE`
	OversizeHandling WebAclOversizeHandlingPtrInput `pulumi:"oversizeHandling"`
}

The body of a web request. This immediately follows the request headers.

func (WebAclBodyArgs) ElementType added in v0.72.0

func (WebAclBodyArgs) ElementType() reflect.Type

func (WebAclBodyArgs) ToWebAclBodyOutput added in v0.72.0

func (i WebAclBodyArgs) ToWebAclBodyOutput() WebAclBodyOutput

func (WebAclBodyArgs) ToWebAclBodyOutputWithContext added in v0.72.0

func (i WebAclBodyArgs) ToWebAclBodyOutputWithContext(ctx context.Context) WebAclBodyOutput

func (WebAclBodyArgs) ToWebAclBodyPtrOutput added in v0.72.0

func (i WebAclBodyArgs) ToWebAclBodyPtrOutput() WebAclBodyPtrOutput

func (WebAclBodyArgs) ToWebAclBodyPtrOutputWithContext added in v0.72.0

func (i WebAclBodyArgs) ToWebAclBodyPtrOutputWithContext(ctx context.Context) WebAclBodyPtrOutput

type WebAclBodyInput added in v0.72.0

type WebAclBodyInput interface {
	pulumi.Input

	ToWebAclBodyOutput() WebAclBodyOutput
	ToWebAclBodyOutputWithContext(context.Context) WebAclBodyOutput
}

WebAclBodyInput is an input type that accepts WebAclBodyArgs and WebAclBodyOutput values. You can construct a concrete instance of `WebAclBodyInput` via:

WebAclBodyArgs{...}

type WebAclBodyOutput added in v0.72.0

type WebAclBodyOutput struct{ *pulumi.OutputState }

The body of a web request. This immediately follows the request headers.

func (WebAclBodyOutput) ElementType added in v0.72.0

func (WebAclBodyOutput) ElementType() reflect.Type

func (WebAclBodyOutput) OversizeHandling added in v0.72.0

What AWS WAF should do if the body is larger than AWS WAF can inspect.

AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.

- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes). - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.

The options for oversize handling are the following:

- `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

You can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.

Default: `CONTINUE`

func (WebAclBodyOutput) ToWebAclBodyOutput added in v0.72.0

func (o WebAclBodyOutput) ToWebAclBodyOutput() WebAclBodyOutput

func (WebAclBodyOutput) ToWebAclBodyOutputWithContext added in v0.72.0

func (o WebAclBodyOutput) ToWebAclBodyOutputWithContext(ctx context.Context) WebAclBodyOutput

func (WebAclBodyOutput) ToWebAclBodyPtrOutput added in v0.72.0

func (o WebAclBodyOutput) ToWebAclBodyPtrOutput() WebAclBodyPtrOutput

func (WebAclBodyOutput) ToWebAclBodyPtrOutputWithContext added in v0.72.0

func (o WebAclBodyOutput) ToWebAclBodyPtrOutputWithContext(ctx context.Context) WebAclBodyPtrOutput

type WebAclBodyParsingFallbackBehavior added in v0.72.0

type WebAclBodyParsingFallbackBehavior string

The inspection behavior to fall back to if the JSON in the request body is invalid.

func (WebAclBodyParsingFallbackBehavior) ElementType added in v0.72.0

func (WebAclBodyParsingFallbackBehavior) ToStringOutput added in v0.72.0

func (WebAclBodyParsingFallbackBehavior) ToStringOutputWithContext added in v0.72.0

func (e WebAclBodyParsingFallbackBehavior) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclBodyParsingFallbackBehavior) ToStringPtrOutput added in v0.72.0

func (WebAclBodyParsingFallbackBehavior) ToStringPtrOutputWithContext added in v0.72.0

func (e WebAclBodyParsingFallbackBehavior) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclBodyParsingFallbackBehavior) ToWebAclBodyParsingFallbackBehaviorOutput added in v0.72.0

func (e WebAclBodyParsingFallbackBehavior) ToWebAclBodyParsingFallbackBehaviorOutput() WebAclBodyParsingFallbackBehaviorOutput

func (WebAclBodyParsingFallbackBehavior) ToWebAclBodyParsingFallbackBehaviorOutputWithContext added in v0.72.0

func (e WebAclBodyParsingFallbackBehavior) ToWebAclBodyParsingFallbackBehaviorOutputWithContext(ctx context.Context) WebAclBodyParsingFallbackBehaviorOutput

func (WebAclBodyParsingFallbackBehavior) ToWebAclBodyParsingFallbackBehaviorPtrOutput added in v0.72.0

func (e WebAclBodyParsingFallbackBehavior) ToWebAclBodyParsingFallbackBehaviorPtrOutput() WebAclBodyParsingFallbackBehaviorPtrOutput

func (WebAclBodyParsingFallbackBehavior) ToWebAclBodyParsingFallbackBehaviorPtrOutputWithContext added in v0.72.0

func (e WebAclBodyParsingFallbackBehavior) ToWebAclBodyParsingFallbackBehaviorPtrOutputWithContext(ctx context.Context) WebAclBodyParsingFallbackBehaviorPtrOutput

type WebAclBodyParsingFallbackBehaviorInput added in v0.72.0

type WebAclBodyParsingFallbackBehaviorInput interface {
	pulumi.Input

	ToWebAclBodyParsingFallbackBehaviorOutput() WebAclBodyParsingFallbackBehaviorOutput
	ToWebAclBodyParsingFallbackBehaviorOutputWithContext(context.Context) WebAclBodyParsingFallbackBehaviorOutput
}

WebAclBodyParsingFallbackBehaviorInput is an input type that accepts values of the WebAclBodyParsingFallbackBehavior enum A concrete instance of `WebAclBodyParsingFallbackBehaviorInput` can be one of the following:

WebAclBodyParsingFallbackBehaviorMatch
WebAclBodyParsingFallbackBehaviorNoMatch
WebAclBodyParsingFallbackBehaviorEvaluateAsString

type WebAclBodyParsingFallbackBehaviorOutput added in v0.72.0

type WebAclBodyParsingFallbackBehaviorOutput struct{ *pulumi.OutputState }

func (WebAclBodyParsingFallbackBehaviorOutput) ElementType added in v0.72.0

func (WebAclBodyParsingFallbackBehaviorOutput) ToStringOutput added in v0.72.0

func (WebAclBodyParsingFallbackBehaviorOutput) ToStringOutputWithContext added in v0.72.0

func (WebAclBodyParsingFallbackBehaviorOutput) ToStringPtrOutput added in v0.72.0

func (WebAclBodyParsingFallbackBehaviorOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclBodyParsingFallbackBehaviorOutput) ToWebAclBodyParsingFallbackBehaviorOutput added in v0.72.0

func (o WebAclBodyParsingFallbackBehaviorOutput) ToWebAclBodyParsingFallbackBehaviorOutput() WebAclBodyParsingFallbackBehaviorOutput

func (WebAclBodyParsingFallbackBehaviorOutput) ToWebAclBodyParsingFallbackBehaviorOutputWithContext added in v0.72.0

func (o WebAclBodyParsingFallbackBehaviorOutput) ToWebAclBodyParsingFallbackBehaviorOutputWithContext(ctx context.Context) WebAclBodyParsingFallbackBehaviorOutput

func (WebAclBodyParsingFallbackBehaviorOutput) ToWebAclBodyParsingFallbackBehaviorPtrOutput added in v0.72.0

func (o WebAclBodyParsingFallbackBehaviorOutput) ToWebAclBodyParsingFallbackBehaviorPtrOutput() WebAclBodyParsingFallbackBehaviorPtrOutput

func (WebAclBodyParsingFallbackBehaviorOutput) ToWebAclBodyParsingFallbackBehaviorPtrOutputWithContext added in v0.72.0

func (o WebAclBodyParsingFallbackBehaviorOutput) ToWebAclBodyParsingFallbackBehaviorPtrOutputWithContext(ctx context.Context) WebAclBodyParsingFallbackBehaviorPtrOutput

type WebAclBodyParsingFallbackBehaviorPtrInput added in v0.72.0

type WebAclBodyParsingFallbackBehaviorPtrInput interface {
	pulumi.Input

	ToWebAclBodyParsingFallbackBehaviorPtrOutput() WebAclBodyParsingFallbackBehaviorPtrOutput
	ToWebAclBodyParsingFallbackBehaviorPtrOutputWithContext(context.Context) WebAclBodyParsingFallbackBehaviorPtrOutput
}

func WebAclBodyParsingFallbackBehaviorPtr added in v0.72.0

func WebAclBodyParsingFallbackBehaviorPtr(v string) WebAclBodyParsingFallbackBehaviorPtrInput

type WebAclBodyParsingFallbackBehaviorPtrOutput added in v0.72.0

type WebAclBodyParsingFallbackBehaviorPtrOutput struct{ *pulumi.OutputState }

func (WebAclBodyParsingFallbackBehaviorPtrOutput) Elem added in v0.72.0

func (WebAclBodyParsingFallbackBehaviorPtrOutput) ElementType added in v0.72.0

func (WebAclBodyParsingFallbackBehaviorPtrOutput) ToStringPtrOutput added in v0.72.0

func (WebAclBodyParsingFallbackBehaviorPtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclBodyParsingFallbackBehaviorPtrOutput) ToWebAclBodyParsingFallbackBehaviorPtrOutput added in v0.72.0

func (o WebAclBodyParsingFallbackBehaviorPtrOutput) ToWebAclBodyParsingFallbackBehaviorPtrOutput() WebAclBodyParsingFallbackBehaviorPtrOutput

func (WebAclBodyParsingFallbackBehaviorPtrOutput) ToWebAclBodyParsingFallbackBehaviorPtrOutputWithContext added in v0.72.0

func (o WebAclBodyParsingFallbackBehaviorPtrOutput) ToWebAclBodyParsingFallbackBehaviorPtrOutputWithContext(ctx context.Context) WebAclBodyParsingFallbackBehaviorPtrOutput

type WebAclBodyPtrInput added in v0.72.0

type WebAclBodyPtrInput interface {
	pulumi.Input

	ToWebAclBodyPtrOutput() WebAclBodyPtrOutput
	ToWebAclBodyPtrOutputWithContext(context.Context) WebAclBodyPtrOutput
}

WebAclBodyPtrInput is an input type that accepts WebAclBodyArgs, WebAclBodyPtr and WebAclBodyPtrOutput values. You can construct a concrete instance of `WebAclBodyPtrInput` via:

        WebAclBodyArgs{...}

or:

        nil

func WebAclBodyPtr added in v0.72.0

func WebAclBodyPtr(v *WebAclBodyArgs) WebAclBodyPtrInput

type WebAclBodyPtrOutput added in v0.72.0

type WebAclBodyPtrOutput struct{ *pulumi.OutputState }

func (WebAclBodyPtrOutput) Elem added in v0.72.0

func (WebAclBodyPtrOutput) ElementType added in v0.72.0

func (WebAclBodyPtrOutput) ElementType() reflect.Type

func (WebAclBodyPtrOutput) OversizeHandling added in v0.72.0

What AWS WAF should do if the body is larger than AWS WAF can inspect.

AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.

- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes). - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.

The options for oversize handling are the following:

- `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

You can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.

Default: `CONTINUE`

func (WebAclBodyPtrOutput) ToWebAclBodyPtrOutput added in v0.72.0

func (o WebAclBodyPtrOutput) ToWebAclBodyPtrOutput() WebAclBodyPtrOutput

func (WebAclBodyPtrOutput) ToWebAclBodyPtrOutputWithContext added in v0.72.0

func (o WebAclBodyPtrOutput) ToWebAclBodyPtrOutputWithContext(ctx context.Context) WebAclBodyPtrOutput

type WebAclByteMatchStatement added in v0.72.0

type WebAclByteMatchStatement struct {
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch WebAclFieldToMatch `pulumi:"fieldToMatch"`
	// The area within the portion of the web request that you want AWS WAF to search for `SearchString` . Valid values include the following:
	//
	// *CONTAINS*
	//
	// The specified part of the web request must include the value of `SearchString` , but the location doesn't matter.
	//
	// *CONTAINS_WORD*
	//
	// The specified part of the web request must include the value of `SearchString` , and `SearchString` must contain only alphanumeric characters or underscore (A-Z, a-z, 0-9, or _). In addition, `SearchString` must be a word, which means that both of the following are true:
	//
	// - `SearchString` is at the beginning of the specified part of the web request or is preceded by a character other than an alphanumeric character or underscore (_). Examples include the value of a header and `;BadBot` .
	// - `SearchString` is at the end of the specified part of the web request or is followed by a character other than an alphanumeric character or underscore (_), for example, `BadBot;` and `-BadBot;` .
	//
	// *EXACTLY*
	//
	// The value of the specified part of the web request must exactly match the value of `SearchString` .
	//
	// *STARTS_WITH*
	//
	// The value of `SearchString` must appear at the beginning of the specified part of the web request.
	//
	// *ENDS_WITH*
	//
	// The value of `SearchString` must appear at the end of the specified part of the web request.
	PositionalConstraint WebAclPositionalConstraint `pulumi:"positionalConstraint"`
	// A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in `FieldToMatch` . The maximum length of the value is 200 bytes. For alphabetic characters A-Z and a-z, the value is case sensitive.
	//
	// Don't encode this string. Provide the value that you want AWS WAF to search for. AWS CloudFormation automatically base64 encodes the value for you.
	//
	// For example, suppose the value of `Type` is `HEADER` and the value of `Data` is `User-Agent` . If you want to search the `User-Agent` header for the value `BadBot` , you provide the string `BadBot` in the value of `SearchString` .
	//
	// You must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` .
	SearchString *string `pulumi:"searchString"`
	// String to search for in a web request component, base64-encoded. If you don't want to encode the string, specify the unencoded value in `SearchString` instead.
	//
	// You must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` .
	SearchStringBase64 *string `pulumi:"searchStringBase64"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations []WebAclTextTransformation `pulumi:"textTransformations"`
}

Byte Match statement.

type WebAclByteMatchStatementArgs added in v0.72.0

type WebAclByteMatchStatementArgs struct {
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch WebAclFieldToMatchInput `pulumi:"fieldToMatch"`
	// The area within the portion of the web request that you want AWS WAF to search for `SearchString` . Valid values include the following:
	//
	// *CONTAINS*
	//
	// The specified part of the web request must include the value of `SearchString` , but the location doesn't matter.
	//
	// *CONTAINS_WORD*
	//
	// The specified part of the web request must include the value of `SearchString` , and `SearchString` must contain only alphanumeric characters or underscore (A-Z, a-z, 0-9, or _). In addition, `SearchString` must be a word, which means that both of the following are true:
	//
	// - `SearchString` is at the beginning of the specified part of the web request or is preceded by a character other than an alphanumeric character or underscore (_). Examples include the value of a header and `;BadBot` .
	// - `SearchString` is at the end of the specified part of the web request or is followed by a character other than an alphanumeric character or underscore (_), for example, `BadBot;` and `-BadBot;` .
	//
	// *EXACTLY*
	//
	// The value of the specified part of the web request must exactly match the value of `SearchString` .
	//
	// *STARTS_WITH*
	//
	// The value of `SearchString` must appear at the beginning of the specified part of the web request.
	//
	// *ENDS_WITH*
	//
	// The value of `SearchString` must appear at the end of the specified part of the web request.
	PositionalConstraint WebAclPositionalConstraintInput `pulumi:"positionalConstraint"`
	// A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in `FieldToMatch` . The maximum length of the value is 200 bytes. For alphabetic characters A-Z and a-z, the value is case sensitive.
	//
	// Don't encode this string. Provide the value that you want AWS WAF to search for. AWS CloudFormation automatically base64 encodes the value for you.
	//
	// For example, suppose the value of `Type` is `HEADER` and the value of `Data` is `User-Agent` . If you want to search the `User-Agent` header for the value `BadBot` , you provide the string `BadBot` in the value of `SearchString` .
	//
	// You must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` .
	SearchString pulumi.StringPtrInput `pulumi:"searchString"`
	// String to search for in a web request component, base64-encoded. If you don't want to encode the string, specify the unencoded value in `SearchString` instead.
	//
	// You must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` .
	SearchStringBase64 pulumi.StringPtrInput `pulumi:"searchStringBase64"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations WebAclTextTransformationArrayInput `pulumi:"textTransformations"`
}

Byte Match statement.

func (WebAclByteMatchStatementArgs) ElementType added in v0.72.0

func (WebAclByteMatchStatementArgs) ToWebAclByteMatchStatementOutput added in v0.72.0

func (i WebAclByteMatchStatementArgs) ToWebAclByteMatchStatementOutput() WebAclByteMatchStatementOutput

func (WebAclByteMatchStatementArgs) ToWebAclByteMatchStatementOutputWithContext added in v0.72.0

func (i WebAclByteMatchStatementArgs) ToWebAclByteMatchStatementOutputWithContext(ctx context.Context) WebAclByteMatchStatementOutput

func (WebAclByteMatchStatementArgs) ToWebAclByteMatchStatementPtrOutput added in v0.72.0

func (i WebAclByteMatchStatementArgs) ToWebAclByteMatchStatementPtrOutput() WebAclByteMatchStatementPtrOutput

func (WebAclByteMatchStatementArgs) ToWebAclByteMatchStatementPtrOutputWithContext added in v0.72.0

func (i WebAclByteMatchStatementArgs) ToWebAclByteMatchStatementPtrOutputWithContext(ctx context.Context) WebAclByteMatchStatementPtrOutput

type WebAclByteMatchStatementInput added in v0.72.0

type WebAclByteMatchStatementInput interface {
	pulumi.Input

	ToWebAclByteMatchStatementOutput() WebAclByteMatchStatementOutput
	ToWebAclByteMatchStatementOutputWithContext(context.Context) WebAclByteMatchStatementOutput
}

WebAclByteMatchStatementInput is an input type that accepts WebAclByteMatchStatementArgs and WebAclByteMatchStatementOutput values. You can construct a concrete instance of `WebAclByteMatchStatementInput` via:

WebAclByteMatchStatementArgs{...}

type WebAclByteMatchStatementOutput added in v0.72.0

type WebAclByteMatchStatementOutput struct{ *pulumi.OutputState }

Byte Match statement.

func (WebAclByteMatchStatementOutput) ElementType added in v0.72.0

func (WebAclByteMatchStatementOutput) FieldToMatch added in v0.72.0

The part of the web request that you want AWS WAF to inspect.

func (WebAclByteMatchStatementOutput) PositionalConstraint added in v0.72.0

The area within the portion of the web request that you want AWS WAF to search for `SearchString` . Valid values include the following:

*CONTAINS*

The specified part of the web request must include the value of `SearchString` , but the location doesn't matter.

*CONTAINS_WORD*

The specified part of the web request must include the value of `SearchString` , and `SearchString` must contain only alphanumeric characters or underscore (A-Z, a-z, 0-9, or _). In addition, `SearchString` must be a word, which means that both of the following are true:

- `SearchString` is at the beginning of the specified part of the web request or is preceded by a character other than an alphanumeric character or underscore (_). Examples include the value of a header and `;BadBot` . - `SearchString` is at the end of the specified part of the web request or is followed by a character other than an alphanumeric character or underscore (_), for example, `BadBot;` and `-BadBot;` .

*EXACTLY*

The value of the specified part of the web request must exactly match the value of `SearchString` .

*STARTS_WITH*

The value of `SearchString` must appear at the beginning of the specified part of the web request.

*ENDS_WITH*

The value of `SearchString` must appear at the end of the specified part of the web request.

func (WebAclByteMatchStatementOutput) SearchString added in v0.72.0

A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in `FieldToMatch` . The maximum length of the value is 200 bytes. For alphabetic characters A-Z and a-z, the value is case sensitive.

Don't encode this string. Provide the value that you want AWS WAF to search for. AWS CloudFormation automatically base64 encodes the value for you.

For example, suppose the value of `Type` is `HEADER` and the value of `Data` is `User-Agent` . If you want to search the `User-Agent` header for the value `BadBot` , you provide the string `BadBot` in the value of `SearchString` .

You must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` .

func (WebAclByteMatchStatementOutput) SearchStringBase64 added in v0.72.0

func (o WebAclByteMatchStatementOutput) SearchStringBase64() pulumi.StringPtrOutput

String to search for in a web request component, base64-encoded. If you don't want to encode the string, specify the unencoded value in `SearchString` instead.

You must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` .

func (WebAclByteMatchStatementOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (WebAclByteMatchStatementOutput) ToWebAclByteMatchStatementOutput added in v0.72.0

func (o WebAclByteMatchStatementOutput) ToWebAclByteMatchStatementOutput() WebAclByteMatchStatementOutput

func (WebAclByteMatchStatementOutput) ToWebAclByteMatchStatementOutputWithContext added in v0.72.0

func (o WebAclByteMatchStatementOutput) ToWebAclByteMatchStatementOutputWithContext(ctx context.Context) WebAclByteMatchStatementOutput

func (WebAclByteMatchStatementOutput) ToWebAclByteMatchStatementPtrOutput added in v0.72.0

func (o WebAclByteMatchStatementOutput) ToWebAclByteMatchStatementPtrOutput() WebAclByteMatchStatementPtrOutput

func (WebAclByteMatchStatementOutput) ToWebAclByteMatchStatementPtrOutputWithContext added in v0.72.0

func (o WebAclByteMatchStatementOutput) ToWebAclByteMatchStatementPtrOutputWithContext(ctx context.Context) WebAclByteMatchStatementPtrOutput

type WebAclByteMatchStatementPtrInput added in v0.72.0

type WebAclByteMatchStatementPtrInput interface {
	pulumi.Input

	ToWebAclByteMatchStatementPtrOutput() WebAclByteMatchStatementPtrOutput
	ToWebAclByteMatchStatementPtrOutputWithContext(context.Context) WebAclByteMatchStatementPtrOutput
}

WebAclByteMatchStatementPtrInput is an input type that accepts WebAclByteMatchStatementArgs, WebAclByteMatchStatementPtr and WebAclByteMatchStatementPtrOutput values. You can construct a concrete instance of `WebAclByteMatchStatementPtrInput` via:

        WebAclByteMatchStatementArgs{...}

or:

        nil

func WebAclByteMatchStatementPtr added in v0.72.0

func WebAclByteMatchStatementPtr(v *WebAclByteMatchStatementArgs) WebAclByteMatchStatementPtrInput

type WebAclByteMatchStatementPtrOutput added in v0.72.0

type WebAclByteMatchStatementPtrOutput struct{ *pulumi.OutputState }

func (WebAclByteMatchStatementPtrOutput) Elem added in v0.72.0

func (WebAclByteMatchStatementPtrOutput) ElementType added in v0.72.0

func (WebAclByteMatchStatementPtrOutput) FieldToMatch added in v0.72.0

The part of the web request that you want AWS WAF to inspect.

func (WebAclByteMatchStatementPtrOutput) PositionalConstraint added in v0.72.0

The area within the portion of the web request that you want AWS WAF to search for `SearchString` . Valid values include the following:

*CONTAINS*

The specified part of the web request must include the value of `SearchString` , but the location doesn't matter.

*CONTAINS_WORD*

The specified part of the web request must include the value of `SearchString` , and `SearchString` must contain only alphanumeric characters or underscore (A-Z, a-z, 0-9, or _). In addition, `SearchString` must be a word, which means that both of the following are true:

- `SearchString` is at the beginning of the specified part of the web request or is preceded by a character other than an alphanumeric character or underscore (_). Examples include the value of a header and `;BadBot` . - `SearchString` is at the end of the specified part of the web request or is followed by a character other than an alphanumeric character or underscore (_), for example, `BadBot;` and `-BadBot;` .

*EXACTLY*

The value of the specified part of the web request must exactly match the value of `SearchString` .

*STARTS_WITH*

The value of `SearchString` must appear at the beginning of the specified part of the web request.

*ENDS_WITH*

The value of `SearchString` must appear at the end of the specified part of the web request.

func (WebAclByteMatchStatementPtrOutput) SearchString added in v0.72.0

A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in `FieldToMatch` . The maximum length of the value is 200 bytes. For alphabetic characters A-Z and a-z, the value is case sensitive.

Don't encode this string. Provide the value that you want AWS WAF to search for. AWS CloudFormation automatically base64 encodes the value for you.

For example, suppose the value of `Type` is `HEADER` and the value of `Data` is `User-Agent` . If you want to search the `User-Agent` header for the value `BadBot` , you provide the string `BadBot` in the value of `SearchString` .

You must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` .

func (WebAclByteMatchStatementPtrOutput) SearchStringBase64 added in v0.72.0

String to search for in a web request component, base64-encoded. If you don't want to encode the string, specify the unencoded value in `SearchString` instead.

You must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` .

func (WebAclByteMatchStatementPtrOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (WebAclByteMatchStatementPtrOutput) ToWebAclByteMatchStatementPtrOutput added in v0.72.0

func (o WebAclByteMatchStatementPtrOutput) ToWebAclByteMatchStatementPtrOutput() WebAclByteMatchStatementPtrOutput

func (WebAclByteMatchStatementPtrOutput) ToWebAclByteMatchStatementPtrOutputWithContext added in v0.72.0

func (o WebAclByteMatchStatementPtrOutput) ToWebAclByteMatchStatementPtrOutputWithContext(ctx context.Context) WebAclByteMatchStatementPtrOutput

type WebAclCaptchaAction added in v0.72.0

type WebAclCaptchaAction struct {
	// Defines custom handling for the web request, used when the `CAPTCHA` inspection determines that the request's token is valid and unexpired.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	CustomRequestHandling *WebAclCustomRequestHandling `pulumi:"customRequestHandling"`
}

Checks valid token exists with request.

type WebAclCaptchaActionArgs added in v0.72.0

type WebAclCaptchaActionArgs struct {
	// Defines custom handling for the web request, used when the `CAPTCHA` inspection determines that the request's token is valid and unexpired.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	CustomRequestHandling WebAclCustomRequestHandlingPtrInput `pulumi:"customRequestHandling"`
}

Checks valid token exists with request.

func (WebAclCaptchaActionArgs) ElementType added in v0.72.0

func (WebAclCaptchaActionArgs) ElementType() reflect.Type

func (WebAclCaptchaActionArgs) ToWebAclCaptchaActionOutput added in v0.72.0

func (i WebAclCaptchaActionArgs) ToWebAclCaptchaActionOutput() WebAclCaptchaActionOutput

func (WebAclCaptchaActionArgs) ToWebAclCaptchaActionOutputWithContext added in v0.72.0

func (i WebAclCaptchaActionArgs) ToWebAclCaptchaActionOutputWithContext(ctx context.Context) WebAclCaptchaActionOutput

func (WebAclCaptchaActionArgs) ToWebAclCaptchaActionPtrOutput added in v0.72.0

func (i WebAclCaptchaActionArgs) ToWebAclCaptchaActionPtrOutput() WebAclCaptchaActionPtrOutput

func (WebAclCaptchaActionArgs) ToWebAclCaptchaActionPtrOutputWithContext added in v0.72.0

func (i WebAclCaptchaActionArgs) ToWebAclCaptchaActionPtrOutputWithContext(ctx context.Context) WebAclCaptchaActionPtrOutput

type WebAclCaptchaActionInput added in v0.72.0

type WebAclCaptchaActionInput interface {
	pulumi.Input

	ToWebAclCaptchaActionOutput() WebAclCaptchaActionOutput
	ToWebAclCaptchaActionOutputWithContext(context.Context) WebAclCaptchaActionOutput
}

WebAclCaptchaActionInput is an input type that accepts WebAclCaptchaActionArgs and WebAclCaptchaActionOutput values. You can construct a concrete instance of `WebAclCaptchaActionInput` via:

WebAclCaptchaActionArgs{...}

type WebAclCaptchaActionOutput added in v0.72.0

type WebAclCaptchaActionOutput struct{ *pulumi.OutputState }

Checks valid token exists with request.

func (WebAclCaptchaActionOutput) CustomRequestHandling added in v0.72.0

Defines custom handling for the web request, used when the `CAPTCHA` inspection determines that the request's token is valid and unexpired.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

func (WebAclCaptchaActionOutput) ElementType added in v0.72.0

func (WebAclCaptchaActionOutput) ElementType() reflect.Type

func (WebAclCaptchaActionOutput) ToWebAclCaptchaActionOutput added in v0.72.0

func (o WebAclCaptchaActionOutput) ToWebAclCaptchaActionOutput() WebAclCaptchaActionOutput

func (WebAclCaptchaActionOutput) ToWebAclCaptchaActionOutputWithContext added in v0.72.0

func (o WebAclCaptchaActionOutput) ToWebAclCaptchaActionOutputWithContext(ctx context.Context) WebAclCaptchaActionOutput

func (WebAclCaptchaActionOutput) ToWebAclCaptchaActionPtrOutput added in v0.72.0

func (o WebAclCaptchaActionOutput) ToWebAclCaptchaActionPtrOutput() WebAclCaptchaActionPtrOutput

func (WebAclCaptchaActionOutput) ToWebAclCaptchaActionPtrOutputWithContext added in v0.72.0

func (o WebAclCaptchaActionOutput) ToWebAclCaptchaActionPtrOutputWithContext(ctx context.Context) WebAclCaptchaActionPtrOutput

type WebAclCaptchaActionPtrInput added in v0.72.0

type WebAclCaptchaActionPtrInput interface {
	pulumi.Input

	ToWebAclCaptchaActionPtrOutput() WebAclCaptchaActionPtrOutput
	ToWebAclCaptchaActionPtrOutputWithContext(context.Context) WebAclCaptchaActionPtrOutput
}

WebAclCaptchaActionPtrInput is an input type that accepts WebAclCaptchaActionArgs, WebAclCaptchaActionPtr and WebAclCaptchaActionPtrOutput values. You can construct a concrete instance of `WebAclCaptchaActionPtrInput` via:

        WebAclCaptchaActionArgs{...}

or:

        nil

func WebAclCaptchaActionPtr added in v0.72.0

func WebAclCaptchaActionPtr(v *WebAclCaptchaActionArgs) WebAclCaptchaActionPtrInput

type WebAclCaptchaActionPtrOutput added in v0.72.0

type WebAclCaptchaActionPtrOutput struct{ *pulumi.OutputState }

func (WebAclCaptchaActionPtrOutput) CustomRequestHandling added in v0.72.0

Defines custom handling for the web request, used when the `CAPTCHA` inspection determines that the request's token is valid and unexpired.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

func (WebAclCaptchaActionPtrOutput) Elem added in v0.72.0

func (WebAclCaptchaActionPtrOutput) ElementType added in v0.72.0

func (WebAclCaptchaActionPtrOutput) ToWebAclCaptchaActionPtrOutput added in v0.72.0

func (o WebAclCaptchaActionPtrOutput) ToWebAclCaptchaActionPtrOutput() WebAclCaptchaActionPtrOutput

func (WebAclCaptchaActionPtrOutput) ToWebAclCaptchaActionPtrOutputWithContext added in v0.72.0

func (o WebAclCaptchaActionPtrOutput) ToWebAclCaptchaActionPtrOutputWithContext(ctx context.Context) WebAclCaptchaActionPtrOutput

type WebAclCaptchaConfig added in v0.72.0

type WebAclCaptchaConfig struct {
	// Determines how long a `CAPTCHA` timestamp in the token remains valid after the client successfully solves a `CAPTCHA` puzzle.
	ImmunityTimeProperty *WebAclImmunityTimeProperty `pulumi:"immunityTimeProperty"`
}

type WebAclCaptchaConfigArgs added in v0.72.0

type WebAclCaptchaConfigArgs struct {
	// Determines how long a `CAPTCHA` timestamp in the token remains valid after the client successfully solves a `CAPTCHA` puzzle.
	ImmunityTimeProperty WebAclImmunityTimePropertyPtrInput `pulumi:"immunityTimeProperty"`
}

func (WebAclCaptchaConfigArgs) ElementType added in v0.72.0

func (WebAclCaptchaConfigArgs) ElementType() reflect.Type

func (WebAclCaptchaConfigArgs) ToWebAclCaptchaConfigOutput added in v0.72.0

func (i WebAclCaptchaConfigArgs) ToWebAclCaptchaConfigOutput() WebAclCaptchaConfigOutput

func (WebAclCaptchaConfigArgs) ToWebAclCaptchaConfigOutputWithContext added in v0.72.0

func (i WebAclCaptchaConfigArgs) ToWebAclCaptchaConfigOutputWithContext(ctx context.Context) WebAclCaptchaConfigOutput

func (WebAclCaptchaConfigArgs) ToWebAclCaptchaConfigPtrOutput added in v0.72.0

func (i WebAclCaptchaConfigArgs) ToWebAclCaptchaConfigPtrOutput() WebAclCaptchaConfigPtrOutput

func (WebAclCaptchaConfigArgs) ToWebAclCaptchaConfigPtrOutputWithContext added in v0.72.0

func (i WebAclCaptchaConfigArgs) ToWebAclCaptchaConfigPtrOutputWithContext(ctx context.Context) WebAclCaptchaConfigPtrOutput

type WebAclCaptchaConfigInput added in v0.72.0

type WebAclCaptchaConfigInput interface {
	pulumi.Input

	ToWebAclCaptchaConfigOutput() WebAclCaptchaConfigOutput
	ToWebAclCaptchaConfigOutputWithContext(context.Context) WebAclCaptchaConfigOutput
}

WebAclCaptchaConfigInput is an input type that accepts WebAclCaptchaConfigArgs and WebAclCaptchaConfigOutput values. You can construct a concrete instance of `WebAclCaptchaConfigInput` via:

WebAclCaptchaConfigArgs{...}

type WebAclCaptchaConfigOutput added in v0.72.0

type WebAclCaptchaConfigOutput struct{ *pulumi.OutputState }

func (WebAclCaptchaConfigOutput) ElementType added in v0.72.0

func (WebAclCaptchaConfigOutput) ElementType() reflect.Type

func (WebAclCaptchaConfigOutput) ImmunityTimeProperty added in v0.72.0

Determines how long a `CAPTCHA` timestamp in the token remains valid after the client successfully solves a `CAPTCHA` puzzle.

func (WebAclCaptchaConfigOutput) ToWebAclCaptchaConfigOutput added in v0.72.0

func (o WebAclCaptchaConfigOutput) ToWebAclCaptchaConfigOutput() WebAclCaptchaConfigOutput

func (WebAclCaptchaConfigOutput) ToWebAclCaptchaConfigOutputWithContext added in v0.72.0

func (o WebAclCaptchaConfigOutput) ToWebAclCaptchaConfigOutputWithContext(ctx context.Context) WebAclCaptchaConfigOutput

func (WebAclCaptchaConfigOutput) ToWebAclCaptchaConfigPtrOutput added in v0.72.0

func (o WebAclCaptchaConfigOutput) ToWebAclCaptchaConfigPtrOutput() WebAclCaptchaConfigPtrOutput

func (WebAclCaptchaConfigOutput) ToWebAclCaptchaConfigPtrOutputWithContext added in v0.72.0

func (o WebAclCaptchaConfigOutput) ToWebAclCaptchaConfigPtrOutputWithContext(ctx context.Context) WebAclCaptchaConfigPtrOutput

type WebAclCaptchaConfigPtrInput added in v0.72.0

type WebAclCaptchaConfigPtrInput interface {
	pulumi.Input

	ToWebAclCaptchaConfigPtrOutput() WebAclCaptchaConfigPtrOutput
	ToWebAclCaptchaConfigPtrOutputWithContext(context.Context) WebAclCaptchaConfigPtrOutput
}

WebAclCaptchaConfigPtrInput is an input type that accepts WebAclCaptchaConfigArgs, WebAclCaptchaConfigPtr and WebAclCaptchaConfigPtrOutput values. You can construct a concrete instance of `WebAclCaptchaConfigPtrInput` via:

        WebAclCaptchaConfigArgs{...}

or:

        nil

func WebAclCaptchaConfigPtr added in v0.72.0

func WebAclCaptchaConfigPtr(v *WebAclCaptchaConfigArgs) WebAclCaptchaConfigPtrInput

type WebAclCaptchaConfigPtrOutput added in v0.72.0

type WebAclCaptchaConfigPtrOutput struct{ *pulumi.OutputState }

func (WebAclCaptchaConfigPtrOutput) Elem added in v0.72.0

func (WebAclCaptchaConfigPtrOutput) ElementType added in v0.72.0

func (WebAclCaptchaConfigPtrOutput) ImmunityTimeProperty added in v0.72.0

Determines how long a `CAPTCHA` timestamp in the token remains valid after the client successfully solves a `CAPTCHA` puzzle.

func (WebAclCaptchaConfigPtrOutput) ToWebAclCaptchaConfigPtrOutput added in v0.72.0

func (o WebAclCaptchaConfigPtrOutput) ToWebAclCaptchaConfigPtrOutput() WebAclCaptchaConfigPtrOutput

func (WebAclCaptchaConfigPtrOutput) ToWebAclCaptchaConfigPtrOutputWithContext added in v0.72.0

func (o WebAclCaptchaConfigPtrOutput) ToWebAclCaptchaConfigPtrOutputWithContext(ctx context.Context) WebAclCaptchaConfigPtrOutput

type WebAclChallengeAction added in v0.72.0

type WebAclChallengeAction struct {
	// Defines custom handling for the web request, used when the challenge inspection determines that the request's token is valid and unexpired.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the [AWS WAF developer guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .
	CustomRequestHandling *WebAclCustomRequestHandling `pulumi:"customRequestHandling"`
}

Checks that the request has a valid token with an unexpired challenge timestamp and, if not, returns a browser challenge to the client.

type WebAclChallengeActionArgs added in v0.72.0

type WebAclChallengeActionArgs struct {
	// Defines custom handling for the web request, used when the challenge inspection determines that the request's token is valid and unexpired.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the [AWS WAF developer guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .
	CustomRequestHandling WebAclCustomRequestHandlingPtrInput `pulumi:"customRequestHandling"`
}

Checks that the request has a valid token with an unexpired challenge timestamp and, if not, returns a browser challenge to the client.

func (WebAclChallengeActionArgs) ElementType added in v0.72.0

func (WebAclChallengeActionArgs) ElementType() reflect.Type

func (WebAclChallengeActionArgs) ToWebAclChallengeActionOutput added in v0.72.0

func (i WebAclChallengeActionArgs) ToWebAclChallengeActionOutput() WebAclChallengeActionOutput

func (WebAclChallengeActionArgs) ToWebAclChallengeActionOutputWithContext added in v0.72.0

func (i WebAclChallengeActionArgs) ToWebAclChallengeActionOutputWithContext(ctx context.Context) WebAclChallengeActionOutput

func (WebAclChallengeActionArgs) ToWebAclChallengeActionPtrOutput added in v0.72.0

func (i WebAclChallengeActionArgs) ToWebAclChallengeActionPtrOutput() WebAclChallengeActionPtrOutput

func (WebAclChallengeActionArgs) ToWebAclChallengeActionPtrOutputWithContext added in v0.72.0

func (i WebAclChallengeActionArgs) ToWebAclChallengeActionPtrOutputWithContext(ctx context.Context) WebAclChallengeActionPtrOutput

type WebAclChallengeActionInput added in v0.72.0

type WebAclChallengeActionInput interface {
	pulumi.Input

	ToWebAclChallengeActionOutput() WebAclChallengeActionOutput
	ToWebAclChallengeActionOutputWithContext(context.Context) WebAclChallengeActionOutput
}

WebAclChallengeActionInput is an input type that accepts WebAclChallengeActionArgs and WebAclChallengeActionOutput values. You can construct a concrete instance of `WebAclChallengeActionInput` via:

WebAclChallengeActionArgs{...}

type WebAclChallengeActionOutput added in v0.72.0

type WebAclChallengeActionOutput struct{ *pulumi.OutputState }

Checks that the request has a valid token with an unexpired challenge timestamp and, if not, returns a browser challenge to the client.

func (WebAclChallengeActionOutput) CustomRequestHandling added in v0.72.0

Defines custom handling for the web request, used when the challenge inspection determines that the request's token is valid and unexpired.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the [AWS WAF developer guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .

func (WebAclChallengeActionOutput) ElementType added in v0.72.0

func (WebAclChallengeActionOutput) ToWebAclChallengeActionOutput added in v0.72.0

func (o WebAclChallengeActionOutput) ToWebAclChallengeActionOutput() WebAclChallengeActionOutput

func (WebAclChallengeActionOutput) ToWebAclChallengeActionOutputWithContext added in v0.72.0

func (o WebAclChallengeActionOutput) ToWebAclChallengeActionOutputWithContext(ctx context.Context) WebAclChallengeActionOutput

func (WebAclChallengeActionOutput) ToWebAclChallengeActionPtrOutput added in v0.72.0

func (o WebAclChallengeActionOutput) ToWebAclChallengeActionPtrOutput() WebAclChallengeActionPtrOutput

func (WebAclChallengeActionOutput) ToWebAclChallengeActionPtrOutputWithContext added in v0.72.0

func (o WebAclChallengeActionOutput) ToWebAclChallengeActionPtrOutputWithContext(ctx context.Context) WebAclChallengeActionPtrOutput

type WebAclChallengeActionPtrInput added in v0.72.0

type WebAclChallengeActionPtrInput interface {
	pulumi.Input

	ToWebAclChallengeActionPtrOutput() WebAclChallengeActionPtrOutput
	ToWebAclChallengeActionPtrOutputWithContext(context.Context) WebAclChallengeActionPtrOutput
}

WebAclChallengeActionPtrInput is an input type that accepts WebAclChallengeActionArgs, WebAclChallengeActionPtr and WebAclChallengeActionPtrOutput values. You can construct a concrete instance of `WebAclChallengeActionPtrInput` via:

        WebAclChallengeActionArgs{...}

or:

        nil

func WebAclChallengeActionPtr added in v0.72.0

func WebAclChallengeActionPtr(v *WebAclChallengeActionArgs) WebAclChallengeActionPtrInput

type WebAclChallengeActionPtrOutput added in v0.72.0

type WebAclChallengeActionPtrOutput struct{ *pulumi.OutputState }

func (WebAclChallengeActionPtrOutput) CustomRequestHandling added in v0.72.0

Defines custom handling for the web request, used when the challenge inspection determines that the request's token is valid and unexpired.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the [AWS WAF developer guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .

func (WebAclChallengeActionPtrOutput) Elem added in v0.72.0

func (WebAclChallengeActionPtrOutput) ElementType added in v0.72.0

func (WebAclChallengeActionPtrOutput) ToWebAclChallengeActionPtrOutput added in v0.72.0

func (o WebAclChallengeActionPtrOutput) ToWebAclChallengeActionPtrOutput() WebAclChallengeActionPtrOutput

func (WebAclChallengeActionPtrOutput) ToWebAclChallengeActionPtrOutputWithContext added in v0.72.0

func (o WebAclChallengeActionPtrOutput) ToWebAclChallengeActionPtrOutputWithContext(ctx context.Context) WebAclChallengeActionPtrOutput

type WebAclChallengeConfig added in v0.72.0

type WebAclChallengeConfig struct {
	// Determines how long a challenge timestamp in the token remains valid after the client successfully responds to a challenge.
	ImmunityTimeProperty *WebAclImmunityTimeProperty `pulumi:"immunityTimeProperty"`
}

type WebAclChallengeConfigArgs added in v0.72.0

type WebAclChallengeConfigArgs struct {
	// Determines how long a challenge timestamp in the token remains valid after the client successfully responds to a challenge.
	ImmunityTimeProperty WebAclImmunityTimePropertyPtrInput `pulumi:"immunityTimeProperty"`
}

func (WebAclChallengeConfigArgs) ElementType added in v0.72.0

func (WebAclChallengeConfigArgs) ElementType() reflect.Type

func (WebAclChallengeConfigArgs) ToWebAclChallengeConfigOutput added in v0.72.0

func (i WebAclChallengeConfigArgs) ToWebAclChallengeConfigOutput() WebAclChallengeConfigOutput

func (WebAclChallengeConfigArgs) ToWebAclChallengeConfigOutputWithContext added in v0.72.0

func (i WebAclChallengeConfigArgs) ToWebAclChallengeConfigOutputWithContext(ctx context.Context) WebAclChallengeConfigOutput

func (WebAclChallengeConfigArgs) ToWebAclChallengeConfigPtrOutput added in v0.72.0

func (i WebAclChallengeConfigArgs) ToWebAclChallengeConfigPtrOutput() WebAclChallengeConfigPtrOutput

func (WebAclChallengeConfigArgs) ToWebAclChallengeConfigPtrOutputWithContext added in v0.72.0

func (i WebAclChallengeConfigArgs) ToWebAclChallengeConfigPtrOutputWithContext(ctx context.Context) WebAclChallengeConfigPtrOutput

type WebAclChallengeConfigInput added in v0.72.0

type WebAclChallengeConfigInput interface {
	pulumi.Input

	ToWebAclChallengeConfigOutput() WebAclChallengeConfigOutput
	ToWebAclChallengeConfigOutputWithContext(context.Context) WebAclChallengeConfigOutput
}

WebAclChallengeConfigInput is an input type that accepts WebAclChallengeConfigArgs and WebAclChallengeConfigOutput values. You can construct a concrete instance of `WebAclChallengeConfigInput` via:

WebAclChallengeConfigArgs{...}

type WebAclChallengeConfigOutput added in v0.72.0

type WebAclChallengeConfigOutput struct{ *pulumi.OutputState }

func (WebAclChallengeConfigOutput) ElementType added in v0.72.0

func (WebAclChallengeConfigOutput) ImmunityTimeProperty added in v0.72.0

Determines how long a challenge timestamp in the token remains valid after the client successfully responds to a challenge.

func (WebAclChallengeConfigOutput) ToWebAclChallengeConfigOutput added in v0.72.0

func (o WebAclChallengeConfigOutput) ToWebAclChallengeConfigOutput() WebAclChallengeConfigOutput

func (WebAclChallengeConfigOutput) ToWebAclChallengeConfigOutputWithContext added in v0.72.0

func (o WebAclChallengeConfigOutput) ToWebAclChallengeConfigOutputWithContext(ctx context.Context) WebAclChallengeConfigOutput

func (WebAclChallengeConfigOutput) ToWebAclChallengeConfigPtrOutput added in v0.72.0

func (o WebAclChallengeConfigOutput) ToWebAclChallengeConfigPtrOutput() WebAclChallengeConfigPtrOutput

func (WebAclChallengeConfigOutput) ToWebAclChallengeConfigPtrOutputWithContext added in v0.72.0

func (o WebAclChallengeConfigOutput) ToWebAclChallengeConfigPtrOutputWithContext(ctx context.Context) WebAclChallengeConfigPtrOutput

type WebAclChallengeConfigPtrInput added in v0.72.0

type WebAclChallengeConfigPtrInput interface {
	pulumi.Input

	ToWebAclChallengeConfigPtrOutput() WebAclChallengeConfigPtrOutput
	ToWebAclChallengeConfigPtrOutputWithContext(context.Context) WebAclChallengeConfigPtrOutput
}

WebAclChallengeConfigPtrInput is an input type that accepts WebAclChallengeConfigArgs, WebAclChallengeConfigPtr and WebAclChallengeConfigPtrOutput values. You can construct a concrete instance of `WebAclChallengeConfigPtrInput` via:

        WebAclChallengeConfigArgs{...}

or:

        nil

func WebAclChallengeConfigPtr added in v0.72.0

func WebAclChallengeConfigPtr(v *WebAclChallengeConfigArgs) WebAclChallengeConfigPtrInput

type WebAclChallengeConfigPtrOutput added in v0.72.0

type WebAclChallengeConfigPtrOutput struct{ *pulumi.OutputState }

func (WebAclChallengeConfigPtrOutput) Elem added in v0.72.0

func (WebAclChallengeConfigPtrOutput) ElementType added in v0.72.0

func (WebAclChallengeConfigPtrOutput) ImmunityTimeProperty added in v0.72.0

Determines how long a challenge timestamp in the token remains valid after the client successfully responds to a challenge.

func (WebAclChallengeConfigPtrOutput) ToWebAclChallengeConfigPtrOutput added in v0.72.0

func (o WebAclChallengeConfigPtrOutput) ToWebAclChallengeConfigPtrOutput() WebAclChallengeConfigPtrOutput

func (WebAclChallengeConfigPtrOutput) ToWebAclChallengeConfigPtrOutputWithContext added in v0.72.0

func (o WebAclChallengeConfigPtrOutput) ToWebAclChallengeConfigPtrOutputWithContext(ctx context.Context) WebAclChallengeConfigPtrOutput

type WebAclCookieMatchPattern added in v0.72.0

type WebAclCookieMatchPattern struct {
	// Inspect all parts of the web request cookies.
	All interface{} `pulumi:"all"`
	// Inspect only the cookies whose keys don't match any of the strings specified here.
	ExcludedCookies []string `pulumi:"excludedCookies"`
	// Inspect only the cookies that have a key that matches one of the strings specified here.
	IncludedCookies []string `pulumi:"includedCookies"`
}

The pattern to look for in the request cookies.

type WebAclCookieMatchPatternArgs added in v0.72.0

type WebAclCookieMatchPatternArgs struct {
	// Inspect all parts of the web request cookies.
	All pulumi.Input `pulumi:"all"`
	// Inspect only the cookies whose keys don't match any of the strings specified here.
	ExcludedCookies pulumi.StringArrayInput `pulumi:"excludedCookies"`
	// Inspect only the cookies that have a key that matches one of the strings specified here.
	IncludedCookies pulumi.StringArrayInput `pulumi:"includedCookies"`
}

The pattern to look for in the request cookies.

func (WebAclCookieMatchPatternArgs) ElementType added in v0.72.0

func (WebAclCookieMatchPatternArgs) ToWebAclCookieMatchPatternOutput added in v0.72.0

func (i WebAclCookieMatchPatternArgs) ToWebAclCookieMatchPatternOutput() WebAclCookieMatchPatternOutput

func (WebAclCookieMatchPatternArgs) ToWebAclCookieMatchPatternOutputWithContext added in v0.72.0

func (i WebAclCookieMatchPatternArgs) ToWebAclCookieMatchPatternOutputWithContext(ctx context.Context) WebAclCookieMatchPatternOutput

func (WebAclCookieMatchPatternArgs) ToWebAclCookieMatchPatternPtrOutput added in v0.72.0

func (i WebAclCookieMatchPatternArgs) ToWebAclCookieMatchPatternPtrOutput() WebAclCookieMatchPatternPtrOutput

func (WebAclCookieMatchPatternArgs) ToWebAclCookieMatchPatternPtrOutputWithContext added in v0.72.0

func (i WebAclCookieMatchPatternArgs) ToWebAclCookieMatchPatternPtrOutputWithContext(ctx context.Context) WebAclCookieMatchPatternPtrOutput

type WebAclCookieMatchPatternInput added in v0.72.0

type WebAclCookieMatchPatternInput interface {
	pulumi.Input

	ToWebAclCookieMatchPatternOutput() WebAclCookieMatchPatternOutput
	ToWebAclCookieMatchPatternOutputWithContext(context.Context) WebAclCookieMatchPatternOutput
}

WebAclCookieMatchPatternInput is an input type that accepts WebAclCookieMatchPatternArgs and WebAclCookieMatchPatternOutput values. You can construct a concrete instance of `WebAclCookieMatchPatternInput` via:

WebAclCookieMatchPatternArgs{...}

type WebAclCookieMatchPatternOutput added in v0.72.0

type WebAclCookieMatchPatternOutput struct{ *pulumi.OutputState }

The pattern to look for in the request cookies.

func (WebAclCookieMatchPatternOutput) All added in v0.72.0

Inspect all parts of the web request cookies.

func (WebAclCookieMatchPatternOutput) ElementType added in v0.72.0

func (WebAclCookieMatchPatternOutput) ExcludedCookies added in v0.72.0

Inspect only the cookies whose keys don't match any of the strings specified here.

func (WebAclCookieMatchPatternOutput) IncludedCookies added in v0.72.0

Inspect only the cookies that have a key that matches one of the strings specified here.

func (WebAclCookieMatchPatternOutput) ToWebAclCookieMatchPatternOutput added in v0.72.0

func (o WebAclCookieMatchPatternOutput) ToWebAclCookieMatchPatternOutput() WebAclCookieMatchPatternOutput

func (WebAclCookieMatchPatternOutput) ToWebAclCookieMatchPatternOutputWithContext added in v0.72.0

func (o WebAclCookieMatchPatternOutput) ToWebAclCookieMatchPatternOutputWithContext(ctx context.Context) WebAclCookieMatchPatternOutput

func (WebAclCookieMatchPatternOutput) ToWebAclCookieMatchPatternPtrOutput added in v0.72.0

func (o WebAclCookieMatchPatternOutput) ToWebAclCookieMatchPatternPtrOutput() WebAclCookieMatchPatternPtrOutput

func (WebAclCookieMatchPatternOutput) ToWebAclCookieMatchPatternPtrOutputWithContext added in v0.72.0

func (o WebAclCookieMatchPatternOutput) ToWebAclCookieMatchPatternPtrOutputWithContext(ctx context.Context) WebAclCookieMatchPatternPtrOutput

type WebAclCookieMatchPatternPtrInput added in v0.72.0

type WebAclCookieMatchPatternPtrInput interface {
	pulumi.Input

	ToWebAclCookieMatchPatternPtrOutput() WebAclCookieMatchPatternPtrOutput
	ToWebAclCookieMatchPatternPtrOutputWithContext(context.Context) WebAclCookieMatchPatternPtrOutput
}

WebAclCookieMatchPatternPtrInput is an input type that accepts WebAclCookieMatchPatternArgs, WebAclCookieMatchPatternPtr and WebAclCookieMatchPatternPtrOutput values. You can construct a concrete instance of `WebAclCookieMatchPatternPtrInput` via:

        WebAclCookieMatchPatternArgs{...}

or:

        nil

func WebAclCookieMatchPatternPtr added in v0.72.0

func WebAclCookieMatchPatternPtr(v *WebAclCookieMatchPatternArgs) WebAclCookieMatchPatternPtrInput

type WebAclCookieMatchPatternPtrOutput added in v0.72.0

type WebAclCookieMatchPatternPtrOutput struct{ *pulumi.OutputState }

func (WebAclCookieMatchPatternPtrOutput) All added in v0.72.0

Inspect all parts of the web request cookies.

func (WebAclCookieMatchPatternPtrOutput) Elem added in v0.72.0

func (WebAclCookieMatchPatternPtrOutput) ElementType added in v0.72.0

func (WebAclCookieMatchPatternPtrOutput) ExcludedCookies added in v0.72.0

Inspect only the cookies whose keys don't match any of the strings specified here.

func (WebAclCookieMatchPatternPtrOutput) IncludedCookies added in v0.72.0

Inspect only the cookies that have a key that matches one of the strings specified here.

func (WebAclCookieMatchPatternPtrOutput) ToWebAclCookieMatchPatternPtrOutput added in v0.72.0

func (o WebAclCookieMatchPatternPtrOutput) ToWebAclCookieMatchPatternPtrOutput() WebAclCookieMatchPatternPtrOutput

func (WebAclCookieMatchPatternPtrOutput) ToWebAclCookieMatchPatternPtrOutputWithContext added in v0.72.0

func (o WebAclCookieMatchPatternPtrOutput) ToWebAclCookieMatchPatternPtrOutputWithContext(ctx context.Context) WebAclCookieMatchPatternPtrOutput

type WebAclCookies added in v0.72.0

type WebAclCookies struct {
	// The filter to use to identify the subset of cookies to inspect in a web request.
	//
	// You must specify exactly one setting: either `All` , `IncludedCookies` , or `ExcludedCookies` .
	//
	// Example JSON: `"MatchPattern": { "IncludedCookies": [ "session-id-time", "session-id" ] }`
	MatchPattern WebAclCookieMatchPattern `pulumi:"matchPattern"`
	// The parts of the cookies to inspect with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.
	//
	// `All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.
	MatchScope WebAclMapMatchScope `pulumi:"matchScope"`
	// What AWS WAF should do if the cookies of the request are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF .
	//
	// The options for oversize handling are the following:
	//
	// - `CONTINUE` - Inspect the available cookies normally, according to the rule inspection criteria.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	OversizeHandling WebAclOversizeHandling `pulumi:"oversizeHandling"`
}

Includes cookies of a web request.

type WebAclCookiesArgs added in v0.72.0

type WebAclCookiesArgs struct {
	// The filter to use to identify the subset of cookies to inspect in a web request.
	//
	// You must specify exactly one setting: either `All` , `IncludedCookies` , or `ExcludedCookies` .
	//
	// Example JSON: `"MatchPattern": { "IncludedCookies": [ "session-id-time", "session-id" ] }`
	MatchPattern WebAclCookieMatchPatternInput `pulumi:"matchPattern"`
	// The parts of the cookies to inspect with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.
	//
	// `All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.
	MatchScope WebAclMapMatchScopeInput `pulumi:"matchScope"`
	// What AWS WAF should do if the cookies of the request are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF .
	//
	// The options for oversize handling are the following:
	//
	// - `CONTINUE` - Inspect the available cookies normally, according to the rule inspection criteria.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	OversizeHandling WebAclOversizeHandlingInput `pulumi:"oversizeHandling"`
}

Includes cookies of a web request.

func (WebAclCookiesArgs) ElementType added in v0.72.0

func (WebAclCookiesArgs) ElementType() reflect.Type

func (WebAclCookiesArgs) ToWebAclCookiesOutput added in v0.72.0

func (i WebAclCookiesArgs) ToWebAclCookiesOutput() WebAclCookiesOutput

func (WebAclCookiesArgs) ToWebAclCookiesOutputWithContext added in v0.72.0

func (i WebAclCookiesArgs) ToWebAclCookiesOutputWithContext(ctx context.Context) WebAclCookiesOutput

func (WebAclCookiesArgs) ToWebAclCookiesPtrOutput added in v0.72.0

func (i WebAclCookiesArgs) ToWebAclCookiesPtrOutput() WebAclCookiesPtrOutput

func (WebAclCookiesArgs) ToWebAclCookiesPtrOutputWithContext added in v0.72.0

func (i WebAclCookiesArgs) ToWebAclCookiesPtrOutputWithContext(ctx context.Context) WebAclCookiesPtrOutput

type WebAclCookiesInput added in v0.72.0

type WebAclCookiesInput interface {
	pulumi.Input

	ToWebAclCookiesOutput() WebAclCookiesOutput
	ToWebAclCookiesOutputWithContext(context.Context) WebAclCookiesOutput
}

WebAclCookiesInput is an input type that accepts WebAclCookiesArgs and WebAclCookiesOutput values. You can construct a concrete instance of `WebAclCookiesInput` via:

WebAclCookiesArgs{...}

type WebAclCookiesOutput added in v0.72.0

type WebAclCookiesOutput struct{ *pulumi.OutputState }

Includes cookies of a web request.

func (WebAclCookiesOutput) ElementType added in v0.72.0

func (WebAclCookiesOutput) ElementType() reflect.Type

func (WebAclCookiesOutput) MatchPattern added in v0.72.0

The filter to use to identify the subset of cookies to inspect in a web request.

You must specify exactly one setting: either `All` , `IncludedCookies` , or `ExcludedCookies` .

Example JSON: `"MatchPattern": { "IncludedCookies": [ "session-id-time", "session-id" ] }`

func (WebAclCookiesOutput) MatchScope added in v0.72.0

The parts of the cookies to inspect with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.

`All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.

func (WebAclCookiesOutput) OversizeHandling added in v0.72.0

What AWS WAF should do if the cookies of the request are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF .

The options for oversize handling are the following:

- `CONTINUE` - Inspect the available cookies normally, according to the rule inspection criteria. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (WebAclCookiesOutput) ToWebAclCookiesOutput added in v0.72.0

func (o WebAclCookiesOutput) ToWebAclCookiesOutput() WebAclCookiesOutput

func (WebAclCookiesOutput) ToWebAclCookiesOutputWithContext added in v0.72.0

func (o WebAclCookiesOutput) ToWebAclCookiesOutputWithContext(ctx context.Context) WebAclCookiesOutput

func (WebAclCookiesOutput) ToWebAclCookiesPtrOutput added in v0.72.0

func (o WebAclCookiesOutput) ToWebAclCookiesPtrOutput() WebAclCookiesPtrOutput

func (WebAclCookiesOutput) ToWebAclCookiesPtrOutputWithContext added in v0.72.0

func (o WebAclCookiesOutput) ToWebAclCookiesPtrOutputWithContext(ctx context.Context) WebAclCookiesPtrOutput

type WebAclCookiesPtrInput added in v0.72.0

type WebAclCookiesPtrInput interface {
	pulumi.Input

	ToWebAclCookiesPtrOutput() WebAclCookiesPtrOutput
	ToWebAclCookiesPtrOutputWithContext(context.Context) WebAclCookiesPtrOutput
}

WebAclCookiesPtrInput is an input type that accepts WebAclCookiesArgs, WebAclCookiesPtr and WebAclCookiesPtrOutput values. You can construct a concrete instance of `WebAclCookiesPtrInput` via:

        WebAclCookiesArgs{...}

or:

        nil

func WebAclCookiesPtr added in v0.72.0

func WebAclCookiesPtr(v *WebAclCookiesArgs) WebAclCookiesPtrInput

type WebAclCookiesPtrOutput added in v0.72.0

type WebAclCookiesPtrOutput struct{ *pulumi.OutputState }

func (WebAclCookiesPtrOutput) Elem added in v0.72.0

func (WebAclCookiesPtrOutput) ElementType added in v0.72.0

func (WebAclCookiesPtrOutput) ElementType() reflect.Type

func (WebAclCookiesPtrOutput) MatchPattern added in v0.72.0

The filter to use to identify the subset of cookies to inspect in a web request.

You must specify exactly one setting: either `All` , `IncludedCookies` , or `ExcludedCookies` .

Example JSON: `"MatchPattern": { "IncludedCookies": [ "session-id-time", "session-id" ] }`

func (WebAclCookiesPtrOutput) MatchScope added in v0.72.0

The parts of the cookies to inspect with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.

`All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.

func (WebAclCookiesPtrOutput) OversizeHandling added in v0.72.0

What AWS WAF should do if the cookies of the request are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF .

The options for oversize handling are the following:

- `CONTINUE` - Inspect the available cookies normally, according to the rule inspection criteria. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (WebAclCookiesPtrOutput) ToWebAclCookiesPtrOutput added in v0.72.0

func (o WebAclCookiesPtrOutput) ToWebAclCookiesPtrOutput() WebAclCookiesPtrOutput

func (WebAclCookiesPtrOutput) ToWebAclCookiesPtrOutputWithContext added in v0.72.0

func (o WebAclCookiesPtrOutput) ToWebAclCookiesPtrOutputWithContext(ctx context.Context) WebAclCookiesPtrOutput

type WebAclCountAction added in v0.72.0

type WebAclCountAction struct {
	// Defines custom handling for the web request.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	CustomRequestHandling *WebAclCustomRequestHandling `pulumi:"customRequestHandling"`
}

Allow traffic towards application.

type WebAclCountActionArgs added in v0.72.0

type WebAclCountActionArgs struct {
	// Defines custom handling for the web request.
	//
	// For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .
	CustomRequestHandling WebAclCustomRequestHandlingPtrInput `pulumi:"customRequestHandling"`
}

Allow traffic towards application.

func (WebAclCountActionArgs) ElementType added in v0.72.0

func (WebAclCountActionArgs) ElementType() reflect.Type

func (WebAclCountActionArgs) ToWebAclCountActionOutput added in v0.72.0

func (i WebAclCountActionArgs) ToWebAclCountActionOutput() WebAclCountActionOutput

func (WebAclCountActionArgs) ToWebAclCountActionOutputWithContext added in v0.72.0

func (i WebAclCountActionArgs) ToWebAclCountActionOutputWithContext(ctx context.Context) WebAclCountActionOutput

func (WebAclCountActionArgs) ToWebAclCountActionPtrOutput added in v0.72.0

func (i WebAclCountActionArgs) ToWebAclCountActionPtrOutput() WebAclCountActionPtrOutput

func (WebAclCountActionArgs) ToWebAclCountActionPtrOutputWithContext added in v0.72.0

func (i WebAclCountActionArgs) ToWebAclCountActionPtrOutputWithContext(ctx context.Context) WebAclCountActionPtrOutput

type WebAclCountActionInput added in v0.72.0

type WebAclCountActionInput interface {
	pulumi.Input

	ToWebAclCountActionOutput() WebAclCountActionOutput
	ToWebAclCountActionOutputWithContext(context.Context) WebAclCountActionOutput
}

WebAclCountActionInput is an input type that accepts WebAclCountActionArgs and WebAclCountActionOutput values. You can construct a concrete instance of `WebAclCountActionInput` via:

WebAclCountActionArgs{...}

type WebAclCountActionOutput added in v0.72.0

type WebAclCountActionOutput struct{ *pulumi.OutputState }

Allow traffic towards application.

func (WebAclCountActionOutput) CustomRequestHandling added in v0.72.0

Defines custom handling for the web request.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

func (WebAclCountActionOutput) ElementType added in v0.72.0

func (WebAclCountActionOutput) ElementType() reflect.Type

func (WebAclCountActionOutput) ToWebAclCountActionOutput added in v0.72.0

func (o WebAclCountActionOutput) ToWebAclCountActionOutput() WebAclCountActionOutput

func (WebAclCountActionOutput) ToWebAclCountActionOutputWithContext added in v0.72.0

func (o WebAclCountActionOutput) ToWebAclCountActionOutputWithContext(ctx context.Context) WebAclCountActionOutput

func (WebAclCountActionOutput) ToWebAclCountActionPtrOutput added in v0.72.0

func (o WebAclCountActionOutput) ToWebAclCountActionPtrOutput() WebAclCountActionPtrOutput

func (WebAclCountActionOutput) ToWebAclCountActionPtrOutputWithContext added in v0.72.0

func (o WebAclCountActionOutput) ToWebAclCountActionPtrOutputWithContext(ctx context.Context) WebAclCountActionPtrOutput

type WebAclCountActionPtrInput added in v0.72.0

type WebAclCountActionPtrInput interface {
	pulumi.Input

	ToWebAclCountActionPtrOutput() WebAclCountActionPtrOutput
	ToWebAclCountActionPtrOutputWithContext(context.Context) WebAclCountActionPtrOutput
}

WebAclCountActionPtrInput is an input type that accepts WebAclCountActionArgs, WebAclCountActionPtr and WebAclCountActionPtrOutput values. You can construct a concrete instance of `WebAclCountActionPtrInput` via:

        WebAclCountActionArgs{...}

or:

        nil

func WebAclCountActionPtr added in v0.72.0

func WebAclCountActionPtr(v *WebAclCountActionArgs) WebAclCountActionPtrInput

type WebAclCountActionPtrOutput added in v0.72.0

type WebAclCountActionPtrOutput struct{ *pulumi.OutputState }

func (WebAclCountActionPtrOutput) CustomRequestHandling added in v0.72.0

Defines custom handling for the web request.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

func (WebAclCountActionPtrOutput) Elem added in v0.72.0

func (WebAclCountActionPtrOutput) ElementType added in v0.72.0

func (WebAclCountActionPtrOutput) ElementType() reflect.Type

func (WebAclCountActionPtrOutput) ToWebAclCountActionPtrOutput added in v0.72.0

func (o WebAclCountActionPtrOutput) ToWebAclCountActionPtrOutput() WebAclCountActionPtrOutput

func (WebAclCountActionPtrOutput) ToWebAclCountActionPtrOutputWithContext added in v0.72.0

func (o WebAclCountActionPtrOutput) ToWebAclCountActionPtrOutputWithContext(ctx context.Context) WebAclCountActionPtrOutput

type WebAclCustomHttpHeader added in v0.72.0

type WebAclCustomHttpHeader struct {
	// The name of the custom header.
	//
	// For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name `x-amzn-waf-` , to avoid confusion with the headers that are already in the request. For example, for the header name `sample` , AWS WAF inserts the header `x-amzn-waf-sample` .
	Name string `pulumi:"name"`
	// The value of the custom header.
	Value string `pulumi:"value"`
}

HTTP header.

type WebAclCustomHttpHeaderArgs added in v0.72.0

type WebAclCustomHttpHeaderArgs struct {
	// The name of the custom header.
	//
	// For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name `x-amzn-waf-` , to avoid confusion with the headers that are already in the request. For example, for the header name `sample` , AWS WAF inserts the header `x-amzn-waf-sample` .
	Name pulumi.StringInput `pulumi:"name"`
	// The value of the custom header.
	Value pulumi.StringInput `pulumi:"value"`
}

HTTP header.

func (WebAclCustomHttpHeaderArgs) ElementType added in v0.72.0

func (WebAclCustomHttpHeaderArgs) ElementType() reflect.Type

func (WebAclCustomHttpHeaderArgs) ToWebAclCustomHttpHeaderOutput added in v0.72.0

func (i WebAclCustomHttpHeaderArgs) ToWebAclCustomHttpHeaderOutput() WebAclCustomHttpHeaderOutput

func (WebAclCustomHttpHeaderArgs) ToWebAclCustomHttpHeaderOutputWithContext added in v0.72.0

func (i WebAclCustomHttpHeaderArgs) ToWebAclCustomHttpHeaderOutputWithContext(ctx context.Context) WebAclCustomHttpHeaderOutput

type WebAclCustomHttpHeaderArray added in v0.72.0

type WebAclCustomHttpHeaderArray []WebAclCustomHttpHeaderInput

func (WebAclCustomHttpHeaderArray) ElementType added in v0.72.0

func (WebAclCustomHttpHeaderArray) ToWebAclCustomHttpHeaderArrayOutput added in v0.72.0

func (i WebAclCustomHttpHeaderArray) ToWebAclCustomHttpHeaderArrayOutput() WebAclCustomHttpHeaderArrayOutput

func (WebAclCustomHttpHeaderArray) ToWebAclCustomHttpHeaderArrayOutputWithContext added in v0.72.0

func (i WebAclCustomHttpHeaderArray) ToWebAclCustomHttpHeaderArrayOutputWithContext(ctx context.Context) WebAclCustomHttpHeaderArrayOutput

type WebAclCustomHttpHeaderArrayInput added in v0.72.0

type WebAclCustomHttpHeaderArrayInput interface {
	pulumi.Input

	ToWebAclCustomHttpHeaderArrayOutput() WebAclCustomHttpHeaderArrayOutput
	ToWebAclCustomHttpHeaderArrayOutputWithContext(context.Context) WebAclCustomHttpHeaderArrayOutput
}

WebAclCustomHttpHeaderArrayInput is an input type that accepts WebAclCustomHttpHeaderArray and WebAclCustomHttpHeaderArrayOutput values. You can construct a concrete instance of `WebAclCustomHttpHeaderArrayInput` via:

WebAclCustomHttpHeaderArray{ WebAclCustomHttpHeaderArgs{...} }

type WebAclCustomHttpHeaderArrayOutput added in v0.72.0

type WebAclCustomHttpHeaderArrayOutput struct{ *pulumi.OutputState }

func (WebAclCustomHttpHeaderArrayOutput) ElementType added in v0.72.0

func (WebAclCustomHttpHeaderArrayOutput) Index added in v0.72.0

func (WebAclCustomHttpHeaderArrayOutput) ToWebAclCustomHttpHeaderArrayOutput added in v0.72.0

func (o WebAclCustomHttpHeaderArrayOutput) ToWebAclCustomHttpHeaderArrayOutput() WebAclCustomHttpHeaderArrayOutput

func (WebAclCustomHttpHeaderArrayOutput) ToWebAclCustomHttpHeaderArrayOutputWithContext added in v0.72.0

func (o WebAclCustomHttpHeaderArrayOutput) ToWebAclCustomHttpHeaderArrayOutputWithContext(ctx context.Context) WebAclCustomHttpHeaderArrayOutput

type WebAclCustomHttpHeaderInput added in v0.72.0

type WebAclCustomHttpHeaderInput interface {
	pulumi.Input

	ToWebAclCustomHttpHeaderOutput() WebAclCustomHttpHeaderOutput
	ToWebAclCustomHttpHeaderOutputWithContext(context.Context) WebAclCustomHttpHeaderOutput
}

WebAclCustomHttpHeaderInput is an input type that accepts WebAclCustomHttpHeaderArgs and WebAclCustomHttpHeaderOutput values. You can construct a concrete instance of `WebAclCustomHttpHeaderInput` via:

WebAclCustomHttpHeaderArgs{...}

type WebAclCustomHttpHeaderOutput added in v0.72.0

type WebAclCustomHttpHeaderOutput struct{ *pulumi.OutputState }

HTTP header.

func (WebAclCustomHttpHeaderOutput) ElementType added in v0.72.0

func (WebAclCustomHttpHeaderOutput) Name added in v0.72.0

The name of the custom header.

For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name `x-amzn-waf-` , to avoid confusion with the headers that are already in the request. For example, for the header name `sample` , AWS WAF inserts the header `x-amzn-waf-sample` .

func (WebAclCustomHttpHeaderOutput) ToWebAclCustomHttpHeaderOutput added in v0.72.0

func (o WebAclCustomHttpHeaderOutput) ToWebAclCustomHttpHeaderOutput() WebAclCustomHttpHeaderOutput

func (WebAclCustomHttpHeaderOutput) ToWebAclCustomHttpHeaderOutputWithContext added in v0.72.0

func (o WebAclCustomHttpHeaderOutput) ToWebAclCustomHttpHeaderOutputWithContext(ctx context.Context) WebAclCustomHttpHeaderOutput

func (WebAclCustomHttpHeaderOutput) Value added in v0.72.0

The value of the custom header.

type WebAclCustomRequestHandling added in v0.72.0

type WebAclCustomRequestHandling struct {
	// Collection of HTTP headers.
	InsertHeaders []WebAclCustomHttpHeader `pulumi:"insertHeaders"`
}

Custom request handling.

type WebAclCustomRequestHandlingArgs added in v0.72.0

type WebAclCustomRequestHandlingArgs struct {
	// Collection of HTTP headers.
	InsertHeaders WebAclCustomHttpHeaderArrayInput `pulumi:"insertHeaders"`
}

Custom request handling.

func (WebAclCustomRequestHandlingArgs) ElementType added in v0.72.0

func (WebAclCustomRequestHandlingArgs) ToWebAclCustomRequestHandlingOutput added in v0.72.0

func (i WebAclCustomRequestHandlingArgs) ToWebAclCustomRequestHandlingOutput() WebAclCustomRequestHandlingOutput

func (WebAclCustomRequestHandlingArgs) ToWebAclCustomRequestHandlingOutputWithContext added in v0.72.0

func (i WebAclCustomRequestHandlingArgs) ToWebAclCustomRequestHandlingOutputWithContext(ctx context.Context) WebAclCustomRequestHandlingOutput

func (WebAclCustomRequestHandlingArgs) ToWebAclCustomRequestHandlingPtrOutput added in v0.72.0

func (i WebAclCustomRequestHandlingArgs) ToWebAclCustomRequestHandlingPtrOutput() WebAclCustomRequestHandlingPtrOutput

func (WebAclCustomRequestHandlingArgs) ToWebAclCustomRequestHandlingPtrOutputWithContext added in v0.72.0

func (i WebAclCustomRequestHandlingArgs) ToWebAclCustomRequestHandlingPtrOutputWithContext(ctx context.Context) WebAclCustomRequestHandlingPtrOutput

type WebAclCustomRequestHandlingInput added in v0.72.0

type WebAclCustomRequestHandlingInput interface {
	pulumi.Input

	ToWebAclCustomRequestHandlingOutput() WebAclCustomRequestHandlingOutput
	ToWebAclCustomRequestHandlingOutputWithContext(context.Context) WebAclCustomRequestHandlingOutput
}

WebAclCustomRequestHandlingInput is an input type that accepts WebAclCustomRequestHandlingArgs and WebAclCustomRequestHandlingOutput values. You can construct a concrete instance of `WebAclCustomRequestHandlingInput` via:

WebAclCustomRequestHandlingArgs{...}

type WebAclCustomRequestHandlingOutput added in v0.72.0

type WebAclCustomRequestHandlingOutput struct{ *pulumi.OutputState }

Custom request handling.

func (WebAclCustomRequestHandlingOutput) ElementType added in v0.72.0

func (WebAclCustomRequestHandlingOutput) InsertHeaders added in v0.72.0

Collection of HTTP headers.

func (WebAclCustomRequestHandlingOutput) ToWebAclCustomRequestHandlingOutput added in v0.72.0

func (o WebAclCustomRequestHandlingOutput) ToWebAclCustomRequestHandlingOutput() WebAclCustomRequestHandlingOutput

func (WebAclCustomRequestHandlingOutput) ToWebAclCustomRequestHandlingOutputWithContext added in v0.72.0

func (o WebAclCustomRequestHandlingOutput) ToWebAclCustomRequestHandlingOutputWithContext(ctx context.Context) WebAclCustomRequestHandlingOutput

func (WebAclCustomRequestHandlingOutput) ToWebAclCustomRequestHandlingPtrOutput added in v0.72.0

func (o WebAclCustomRequestHandlingOutput) ToWebAclCustomRequestHandlingPtrOutput() WebAclCustomRequestHandlingPtrOutput

func (WebAclCustomRequestHandlingOutput) ToWebAclCustomRequestHandlingPtrOutputWithContext added in v0.72.0

func (o WebAclCustomRequestHandlingOutput) ToWebAclCustomRequestHandlingPtrOutputWithContext(ctx context.Context) WebAclCustomRequestHandlingPtrOutput

type WebAclCustomRequestHandlingPtrInput added in v0.72.0

type WebAclCustomRequestHandlingPtrInput interface {
	pulumi.Input

	ToWebAclCustomRequestHandlingPtrOutput() WebAclCustomRequestHandlingPtrOutput
	ToWebAclCustomRequestHandlingPtrOutputWithContext(context.Context) WebAclCustomRequestHandlingPtrOutput
}

WebAclCustomRequestHandlingPtrInput is an input type that accepts WebAclCustomRequestHandlingArgs, WebAclCustomRequestHandlingPtr and WebAclCustomRequestHandlingPtrOutput values. You can construct a concrete instance of `WebAclCustomRequestHandlingPtrInput` via:

        WebAclCustomRequestHandlingArgs{...}

or:

        nil

func WebAclCustomRequestHandlingPtr added in v0.72.0

type WebAclCustomRequestHandlingPtrOutput added in v0.72.0

type WebAclCustomRequestHandlingPtrOutput struct{ *pulumi.OutputState }

func (WebAclCustomRequestHandlingPtrOutput) Elem added in v0.72.0

func (WebAclCustomRequestHandlingPtrOutput) ElementType added in v0.72.0

func (WebAclCustomRequestHandlingPtrOutput) InsertHeaders added in v0.72.0

Collection of HTTP headers.

func (WebAclCustomRequestHandlingPtrOutput) ToWebAclCustomRequestHandlingPtrOutput added in v0.72.0

func (o WebAclCustomRequestHandlingPtrOutput) ToWebAclCustomRequestHandlingPtrOutput() WebAclCustomRequestHandlingPtrOutput

func (WebAclCustomRequestHandlingPtrOutput) ToWebAclCustomRequestHandlingPtrOutputWithContext added in v0.72.0

func (o WebAclCustomRequestHandlingPtrOutput) ToWebAclCustomRequestHandlingPtrOutputWithContext(ctx context.Context) WebAclCustomRequestHandlingPtrOutput

type WebAclCustomResponse added in v0.72.0

type WebAclCustomResponse struct {
	// Custom response body key.
	CustomResponseBodyKey *string `pulumi:"customResponseBodyKey"`
	// The HTTP status code to return to the client.
	//
	// For a list of status codes that you can use in your custom responses, see [Supported status codes for custom response](https://docs.aws.amazon.com/waf/latest/developerguide/customizing-the-response-status-codes.html) in the *AWS WAF Developer Guide* .
	ResponseCode int `pulumi:"responseCode"`
	// Collection of HTTP headers.
	ResponseHeaders []WebAclCustomHttpHeader `pulumi:"responseHeaders"`
}

Custom response.

type WebAclCustomResponseArgs added in v0.72.0

type WebAclCustomResponseArgs struct {
	// Custom response body key.
	CustomResponseBodyKey pulumi.StringPtrInput `pulumi:"customResponseBodyKey"`
	// The HTTP status code to return to the client.
	//
	// For a list of status codes that you can use in your custom responses, see [Supported status codes for custom response](https://docs.aws.amazon.com/waf/latest/developerguide/customizing-the-response-status-codes.html) in the *AWS WAF Developer Guide* .
	ResponseCode pulumi.IntInput `pulumi:"responseCode"`
	// Collection of HTTP headers.
	ResponseHeaders WebAclCustomHttpHeaderArrayInput `pulumi:"responseHeaders"`
}

Custom response.

func (WebAclCustomResponseArgs) ElementType added in v0.72.0

func (WebAclCustomResponseArgs) ElementType() reflect.Type

func (WebAclCustomResponseArgs) ToWebAclCustomResponseOutput added in v0.72.0

func (i WebAclCustomResponseArgs) ToWebAclCustomResponseOutput() WebAclCustomResponseOutput

func (WebAclCustomResponseArgs) ToWebAclCustomResponseOutputWithContext added in v0.72.0

func (i WebAclCustomResponseArgs) ToWebAclCustomResponseOutputWithContext(ctx context.Context) WebAclCustomResponseOutput

func (WebAclCustomResponseArgs) ToWebAclCustomResponsePtrOutput added in v0.72.0

func (i WebAclCustomResponseArgs) ToWebAclCustomResponsePtrOutput() WebAclCustomResponsePtrOutput

func (WebAclCustomResponseArgs) ToWebAclCustomResponsePtrOutputWithContext added in v0.72.0

func (i WebAclCustomResponseArgs) ToWebAclCustomResponsePtrOutputWithContext(ctx context.Context) WebAclCustomResponsePtrOutput

type WebAclCustomResponseBody added in v0.98.0

type WebAclCustomResponseBody struct {
	// The payload of the custom response.
	//
	// You can use JSON escape strings in JSON content. To do this, you must specify JSON content in the `ContentType` setting.
	//
	// For information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* .
	Content string `pulumi:"content"`
	// The type of content in the payload that you are defining in the `Content` string.
	ContentType WebAclResponseContentType `pulumi:"contentType"`
}

Custom response body.

type WebAclCustomResponseBodyArgs added in v0.98.0

type WebAclCustomResponseBodyArgs struct {
	// The payload of the custom response.
	//
	// You can use JSON escape strings in JSON content. To do this, you must specify JSON content in the `ContentType` setting.
	//
	// For information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* .
	Content pulumi.StringInput `pulumi:"content"`
	// The type of content in the payload that you are defining in the `Content` string.
	ContentType WebAclResponseContentTypeInput `pulumi:"contentType"`
}

Custom response body.

func (WebAclCustomResponseBodyArgs) ElementType added in v0.98.0

func (WebAclCustomResponseBodyArgs) ToWebAclCustomResponseBodyOutput added in v0.98.0

func (i WebAclCustomResponseBodyArgs) ToWebAclCustomResponseBodyOutput() WebAclCustomResponseBodyOutput

func (WebAclCustomResponseBodyArgs) ToWebAclCustomResponseBodyOutputWithContext added in v0.98.0

func (i WebAclCustomResponseBodyArgs) ToWebAclCustomResponseBodyOutputWithContext(ctx context.Context) WebAclCustomResponseBodyOutput

type WebAclCustomResponseBodyInput added in v0.98.0

type WebAclCustomResponseBodyInput interface {
	pulumi.Input

	ToWebAclCustomResponseBodyOutput() WebAclCustomResponseBodyOutput
	ToWebAclCustomResponseBodyOutputWithContext(context.Context) WebAclCustomResponseBodyOutput
}

WebAclCustomResponseBodyInput is an input type that accepts WebAclCustomResponseBodyArgs and WebAclCustomResponseBodyOutput values. You can construct a concrete instance of `WebAclCustomResponseBodyInput` via:

WebAclCustomResponseBodyArgs{...}

type WebAclCustomResponseBodyMap added in v0.98.0

type WebAclCustomResponseBodyMap map[string]WebAclCustomResponseBodyInput

func (WebAclCustomResponseBodyMap) ElementType added in v0.98.0

func (WebAclCustomResponseBodyMap) ToWebAclCustomResponseBodyMapOutput added in v0.98.0

func (i WebAclCustomResponseBodyMap) ToWebAclCustomResponseBodyMapOutput() WebAclCustomResponseBodyMapOutput

func (WebAclCustomResponseBodyMap) ToWebAclCustomResponseBodyMapOutputWithContext added in v0.98.0

func (i WebAclCustomResponseBodyMap) ToWebAclCustomResponseBodyMapOutputWithContext(ctx context.Context) WebAclCustomResponseBodyMapOutput

type WebAclCustomResponseBodyMapInput added in v0.98.0

type WebAclCustomResponseBodyMapInput interface {
	pulumi.Input

	ToWebAclCustomResponseBodyMapOutput() WebAclCustomResponseBodyMapOutput
	ToWebAclCustomResponseBodyMapOutputWithContext(context.Context) WebAclCustomResponseBodyMapOutput
}

WebAclCustomResponseBodyMapInput is an input type that accepts WebAclCustomResponseBodyMap and WebAclCustomResponseBodyMapOutput values. You can construct a concrete instance of `WebAclCustomResponseBodyMapInput` via:

WebAclCustomResponseBodyMap{ "key": WebAclCustomResponseBodyArgs{...} }

type WebAclCustomResponseBodyMapOutput added in v0.98.0

type WebAclCustomResponseBodyMapOutput struct{ *pulumi.OutputState }

func (WebAclCustomResponseBodyMapOutput) ElementType added in v0.98.0

func (WebAclCustomResponseBodyMapOutput) MapIndex added in v0.98.0

func (WebAclCustomResponseBodyMapOutput) ToWebAclCustomResponseBodyMapOutput added in v0.98.0

func (o WebAclCustomResponseBodyMapOutput) ToWebAclCustomResponseBodyMapOutput() WebAclCustomResponseBodyMapOutput

func (WebAclCustomResponseBodyMapOutput) ToWebAclCustomResponseBodyMapOutputWithContext added in v0.98.0

func (o WebAclCustomResponseBodyMapOutput) ToWebAclCustomResponseBodyMapOutputWithContext(ctx context.Context) WebAclCustomResponseBodyMapOutput

type WebAclCustomResponseBodyOutput added in v0.98.0

type WebAclCustomResponseBodyOutput struct{ *pulumi.OutputState }

Custom response body.

func (WebAclCustomResponseBodyOutput) Content added in v0.98.0

The payload of the custom response.

You can use JSON escape strings in JSON content. To do this, you must specify JSON content in the `ContentType` setting.

For information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* .

func (WebAclCustomResponseBodyOutput) ContentType added in v0.98.0

The type of content in the payload that you are defining in the `Content` string.

func (WebAclCustomResponseBodyOutput) ElementType added in v0.98.0

func (WebAclCustomResponseBodyOutput) ToWebAclCustomResponseBodyOutput added in v0.98.0

func (o WebAclCustomResponseBodyOutput) ToWebAclCustomResponseBodyOutput() WebAclCustomResponseBodyOutput

func (WebAclCustomResponseBodyOutput) ToWebAclCustomResponseBodyOutputWithContext added in v0.98.0

func (o WebAclCustomResponseBodyOutput) ToWebAclCustomResponseBodyOutputWithContext(ctx context.Context) WebAclCustomResponseBodyOutput

type WebAclCustomResponseInput added in v0.72.0

type WebAclCustomResponseInput interface {
	pulumi.Input

	ToWebAclCustomResponseOutput() WebAclCustomResponseOutput
	ToWebAclCustomResponseOutputWithContext(context.Context) WebAclCustomResponseOutput
}

WebAclCustomResponseInput is an input type that accepts WebAclCustomResponseArgs and WebAclCustomResponseOutput values. You can construct a concrete instance of `WebAclCustomResponseInput` via:

WebAclCustomResponseArgs{...}

type WebAclCustomResponseOutput added in v0.72.0

type WebAclCustomResponseOutput struct{ *pulumi.OutputState }

Custom response.

func (WebAclCustomResponseOutput) CustomResponseBodyKey added in v0.72.0

func (o WebAclCustomResponseOutput) CustomResponseBodyKey() pulumi.StringPtrOutput

Custom response body key.

func (WebAclCustomResponseOutput) ElementType added in v0.72.0

func (WebAclCustomResponseOutput) ElementType() reflect.Type

func (WebAclCustomResponseOutput) ResponseCode added in v0.72.0

func (o WebAclCustomResponseOutput) ResponseCode() pulumi.IntOutput

The HTTP status code to return to the client.

For a list of status codes that you can use in your custom responses, see [Supported status codes for custom response](https://docs.aws.amazon.com/waf/latest/developerguide/customizing-the-response-status-codes.html) in the *AWS WAF Developer Guide* .

func (WebAclCustomResponseOutput) ResponseHeaders added in v0.72.0

Collection of HTTP headers.

func (WebAclCustomResponseOutput) ToWebAclCustomResponseOutput added in v0.72.0

func (o WebAclCustomResponseOutput) ToWebAclCustomResponseOutput() WebAclCustomResponseOutput

func (WebAclCustomResponseOutput) ToWebAclCustomResponseOutputWithContext added in v0.72.0

func (o WebAclCustomResponseOutput) ToWebAclCustomResponseOutputWithContext(ctx context.Context) WebAclCustomResponseOutput

func (WebAclCustomResponseOutput) ToWebAclCustomResponsePtrOutput added in v0.72.0

func (o WebAclCustomResponseOutput) ToWebAclCustomResponsePtrOutput() WebAclCustomResponsePtrOutput

func (WebAclCustomResponseOutput) ToWebAclCustomResponsePtrOutputWithContext added in v0.72.0

func (o WebAclCustomResponseOutput) ToWebAclCustomResponsePtrOutputWithContext(ctx context.Context) WebAclCustomResponsePtrOutput

type WebAclCustomResponsePtrInput added in v0.72.0

type WebAclCustomResponsePtrInput interface {
	pulumi.Input

	ToWebAclCustomResponsePtrOutput() WebAclCustomResponsePtrOutput
	ToWebAclCustomResponsePtrOutputWithContext(context.Context) WebAclCustomResponsePtrOutput
}

WebAclCustomResponsePtrInput is an input type that accepts WebAclCustomResponseArgs, WebAclCustomResponsePtr and WebAclCustomResponsePtrOutput values. You can construct a concrete instance of `WebAclCustomResponsePtrInput` via:

        WebAclCustomResponseArgs{...}

or:

        nil

func WebAclCustomResponsePtr added in v0.72.0

func WebAclCustomResponsePtr(v *WebAclCustomResponseArgs) WebAclCustomResponsePtrInput

type WebAclCustomResponsePtrOutput added in v0.72.0

type WebAclCustomResponsePtrOutput struct{ *pulumi.OutputState }

func (WebAclCustomResponsePtrOutput) CustomResponseBodyKey added in v0.72.0

func (o WebAclCustomResponsePtrOutput) CustomResponseBodyKey() pulumi.StringPtrOutput

Custom response body key.

func (WebAclCustomResponsePtrOutput) Elem added in v0.72.0

func (WebAclCustomResponsePtrOutput) ElementType added in v0.72.0

func (WebAclCustomResponsePtrOutput) ResponseCode added in v0.72.0

The HTTP status code to return to the client.

For a list of status codes that you can use in your custom responses, see [Supported status codes for custom response](https://docs.aws.amazon.com/waf/latest/developerguide/customizing-the-response-status-codes.html) in the *AWS WAF Developer Guide* .

func (WebAclCustomResponsePtrOutput) ResponseHeaders added in v0.72.0

Collection of HTTP headers.

func (WebAclCustomResponsePtrOutput) ToWebAclCustomResponsePtrOutput added in v0.72.0

func (o WebAclCustomResponsePtrOutput) ToWebAclCustomResponsePtrOutput() WebAclCustomResponsePtrOutput

func (WebAclCustomResponsePtrOutput) ToWebAclCustomResponsePtrOutputWithContext added in v0.72.0

func (o WebAclCustomResponsePtrOutput) ToWebAclCustomResponsePtrOutputWithContext(ctx context.Context) WebAclCustomResponsePtrOutput

type WebAclDefaultAction added in v0.72.0

type WebAclDefaultAction struct {
	// Specifies that AWS WAF should allow requests by default.
	Allow *WebAclAllowAction `pulumi:"allow"`
	// Specifies that AWS WAF should block requests by default.
	Block *WebAclBlockAction `pulumi:"block"`
}

Default Action WebACL will take against ingress traffic when there is no matching Rule.

type WebAclDefaultActionArgs added in v0.72.0

type WebAclDefaultActionArgs struct {
	// Specifies that AWS WAF should allow requests by default.
	Allow WebAclAllowActionPtrInput `pulumi:"allow"`
	// Specifies that AWS WAF should block requests by default.
	Block WebAclBlockActionPtrInput `pulumi:"block"`
}

Default Action WebACL will take against ingress traffic when there is no matching Rule.

func (WebAclDefaultActionArgs) ElementType added in v0.72.0

func (WebAclDefaultActionArgs) ElementType() reflect.Type

func (WebAclDefaultActionArgs) ToWebAclDefaultActionOutput added in v0.72.0

func (i WebAclDefaultActionArgs) ToWebAclDefaultActionOutput() WebAclDefaultActionOutput

func (WebAclDefaultActionArgs) ToWebAclDefaultActionOutputWithContext added in v0.72.0

func (i WebAclDefaultActionArgs) ToWebAclDefaultActionOutputWithContext(ctx context.Context) WebAclDefaultActionOutput

type WebAclDefaultActionInput added in v0.72.0

type WebAclDefaultActionInput interface {
	pulumi.Input

	ToWebAclDefaultActionOutput() WebAclDefaultActionOutput
	ToWebAclDefaultActionOutputWithContext(context.Context) WebAclDefaultActionOutput
}

WebAclDefaultActionInput is an input type that accepts WebAclDefaultActionArgs and WebAclDefaultActionOutput values. You can construct a concrete instance of `WebAclDefaultActionInput` via:

WebAclDefaultActionArgs{...}

type WebAclDefaultActionOutput added in v0.72.0

type WebAclDefaultActionOutput struct{ *pulumi.OutputState }

Default Action WebACL will take against ingress traffic when there is no matching Rule.

func (WebAclDefaultActionOutput) Allow added in v0.72.0

Specifies that AWS WAF should allow requests by default.

func (WebAclDefaultActionOutput) Block added in v0.72.0

Specifies that AWS WAF should block requests by default.

func (WebAclDefaultActionOutput) ElementType added in v0.72.0

func (WebAclDefaultActionOutput) ElementType() reflect.Type

func (WebAclDefaultActionOutput) ToWebAclDefaultActionOutput added in v0.72.0

func (o WebAclDefaultActionOutput) ToWebAclDefaultActionOutput() WebAclDefaultActionOutput

func (WebAclDefaultActionOutput) ToWebAclDefaultActionOutputWithContext added in v0.72.0

func (o WebAclDefaultActionOutput) ToWebAclDefaultActionOutputWithContext(ctx context.Context) WebAclDefaultActionOutput

type WebAclDefaultActionPtrOutput added in v0.72.0

type WebAclDefaultActionPtrOutput struct{ *pulumi.OutputState }

func (WebAclDefaultActionPtrOutput) Allow added in v0.72.0

Specifies that AWS WAF should allow requests by default.

func (WebAclDefaultActionPtrOutput) Block added in v0.72.0

Specifies that AWS WAF should block requests by default.

func (WebAclDefaultActionPtrOutput) Elem added in v0.72.0

func (WebAclDefaultActionPtrOutput) ElementType added in v0.72.0

func (WebAclDefaultActionPtrOutput) ToWebAclDefaultActionPtrOutput added in v0.72.0

func (o WebAclDefaultActionPtrOutput) ToWebAclDefaultActionPtrOutput() WebAclDefaultActionPtrOutput

func (WebAclDefaultActionPtrOutput) ToWebAclDefaultActionPtrOutputWithContext added in v0.72.0

func (o WebAclDefaultActionPtrOutput) ToWebAclDefaultActionPtrOutputWithContext(ctx context.Context) WebAclDefaultActionPtrOutput

type WebAclExcludedRule added in v0.72.0

type WebAclExcludedRule struct {
	// The name of the rule whose action you want to override to `Count` .
	Name string `pulumi:"name"`
}

Excluded Rule in the RuleGroup or ManagedRuleGroup will not be evaluated.

type WebAclExcludedRuleArgs added in v0.72.0

type WebAclExcludedRuleArgs struct {
	// The name of the rule whose action you want to override to `Count` .
	Name pulumi.StringInput `pulumi:"name"`
}

Excluded Rule in the RuleGroup or ManagedRuleGroup will not be evaluated.

func (WebAclExcludedRuleArgs) ElementType added in v0.72.0

func (WebAclExcludedRuleArgs) ElementType() reflect.Type

func (WebAclExcludedRuleArgs) ToWebAclExcludedRuleOutput added in v0.72.0

func (i WebAclExcludedRuleArgs) ToWebAclExcludedRuleOutput() WebAclExcludedRuleOutput

func (WebAclExcludedRuleArgs) ToWebAclExcludedRuleOutputWithContext added in v0.72.0

func (i WebAclExcludedRuleArgs) ToWebAclExcludedRuleOutputWithContext(ctx context.Context) WebAclExcludedRuleOutput

type WebAclExcludedRuleArray added in v0.72.0

type WebAclExcludedRuleArray []WebAclExcludedRuleInput

func (WebAclExcludedRuleArray) ElementType added in v0.72.0

func (WebAclExcludedRuleArray) ElementType() reflect.Type

func (WebAclExcludedRuleArray) ToWebAclExcludedRuleArrayOutput added in v0.72.0

func (i WebAclExcludedRuleArray) ToWebAclExcludedRuleArrayOutput() WebAclExcludedRuleArrayOutput

func (WebAclExcludedRuleArray) ToWebAclExcludedRuleArrayOutputWithContext added in v0.72.0

func (i WebAclExcludedRuleArray) ToWebAclExcludedRuleArrayOutputWithContext(ctx context.Context) WebAclExcludedRuleArrayOutput

type WebAclExcludedRuleArrayInput added in v0.72.0

type WebAclExcludedRuleArrayInput interface {
	pulumi.Input

	ToWebAclExcludedRuleArrayOutput() WebAclExcludedRuleArrayOutput
	ToWebAclExcludedRuleArrayOutputWithContext(context.Context) WebAclExcludedRuleArrayOutput
}

WebAclExcludedRuleArrayInput is an input type that accepts WebAclExcludedRuleArray and WebAclExcludedRuleArrayOutput values. You can construct a concrete instance of `WebAclExcludedRuleArrayInput` via:

WebAclExcludedRuleArray{ WebAclExcludedRuleArgs{...} }

type WebAclExcludedRuleArrayOutput added in v0.72.0

type WebAclExcludedRuleArrayOutput struct{ *pulumi.OutputState }

func (WebAclExcludedRuleArrayOutput) ElementType added in v0.72.0

func (WebAclExcludedRuleArrayOutput) Index added in v0.72.0

func (WebAclExcludedRuleArrayOutput) ToWebAclExcludedRuleArrayOutput added in v0.72.0

func (o WebAclExcludedRuleArrayOutput) ToWebAclExcludedRuleArrayOutput() WebAclExcludedRuleArrayOutput

func (WebAclExcludedRuleArrayOutput) ToWebAclExcludedRuleArrayOutputWithContext added in v0.72.0

func (o WebAclExcludedRuleArrayOutput) ToWebAclExcludedRuleArrayOutputWithContext(ctx context.Context) WebAclExcludedRuleArrayOutput

type WebAclExcludedRuleInput added in v0.72.0

type WebAclExcludedRuleInput interface {
	pulumi.Input

	ToWebAclExcludedRuleOutput() WebAclExcludedRuleOutput
	ToWebAclExcludedRuleOutputWithContext(context.Context) WebAclExcludedRuleOutput
}

WebAclExcludedRuleInput is an input type that accepts WebAclExcludedRuleArgs and WebAclExcludedRuleOutput values. You can construct a concrete instance of `WebAclExcludedRuleInput` via:

WebAclExcludedRuleArgs{...}

type WebAclExcludedRuleOutput added in v0.72.0

type WebAclExcludedRuleOutput struct{ *pulumi.OutputState }

Excluded Rule in the RuleGroup or ManagedRuleGroup will not be evaluated.

func (WebAclExcludedRuleOutput) ElementType added in v0.72.0

func (WebAclExcludedRuleOutput) ElementType() reflect.Type

func (WebAclExcludedRuleOutput) Name added in v0.72.0

The name of the rule whose action you want to override to `Count` .

func (WebAclExcludedRuleOutput) ToWebAclExcludedRuleOutput added in v0.72.0

func (o WebAclExcludedRuleOutput) ToWebAclExcludedRuleOutput() WebAclExcludedRuleOutput

func (WebAclExcludedRuleOutput) ToWebAclExcludedRuleOutputWithContext added in v0.72.0

func (o WebAclExcludedRuleOutput) ToWebAclExcludedRuleOutputWithContext(ctx context.Context) WebAclExcludedRuleOutput

type WebAclFieldIdentifier added in v0.72.0

type WebAclFieldIdentifier struct {
	// The name of the field.
	//
	// When the `PayloadType` in the request inspection is `JSON` , this identifier must be in JSON pointer syntax. For example `/form/username` . For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// When the `PayloadType` is `FORM_ENCODED` , use the HTML form names. For example, `username` .
	//
	// For more information, see the descriptions for each field type in the request inspection properties.
	Identifier string `pulumi:"identifier"`
}

type WebAclFieldIdentifierArgs added in v0.72.0

type WebAclFieldIdentifierArgs struct {
	// The name of the field.
	//
	// When the `PayloadType` in the request inspection is `JSON` , this identifier must be in JSON pointer syntax. For example `/form/username` . For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// When the `PayloadType` is `FORM_ENCODED` , use the HTML form names. For example, `username` .
	//
	// For more information, see the descriptions for each field type in the request inspection properties.
	Identifier pulumi.StringInput `pulumi:"identifier"`
}

func (WebAclFieldIdentifierArgs) ElementType added in v0.72.0

func (WebAclFieldIdentifierArgs) ElementType() reflect.Type

func (WebAclFieldIdentifierArgs) ToWebAclFieldIdentifierOutput added in v0.72.0

func (i WebAclFieldIdentifierArgs) ToWebAclFieldIdentifierOutput() WebAclFieldIdentifierOutput

func (WebAclFieldIdentifierArgs) ToWebAclFieldIdentifierOutputWithContext added in v0.72.0

func (i WebAclFieldIdentifierArgs) ToWebAclFieldIdentifierOutputWithContext(ctx context.Context) WebAclFieldIdentifierOutput

func (WebAclFieldIdentifierArgs) ToWebAclFieldIdentifierPtrOutput added in v0.72.0

func (i WebAclFieldIdentifierArgs) ToWebAclFieldIdentifierPtrOutput() WebAclFieldIdentifierPtrOutput

func (WebAclFieldIdentifierArgs) ToWebAclFieldIdentifierPtrOutputWithContext added in v0.72.0

func (i WebAclFieldIdentifierArgs) ToWebAclFieldIdentifierPtrOutputWithContext(ctx context.Context) WebAclFieldIdentifierPtrOutput

type WebAclFieldIdentifierArray added in v0.72.0

type WebAclFieldIdentifierArray []WebAclFieldIdentifierInput

func (WebAclFieldIdentifierArray) ElementType added in v0.72.0

func (WebAclFieldIdentifierArray) ElementType() reflect.Type

func (WebAclFieldIdentifierArray) ToWebAclFieldIdentifierArrayOutput added in v0.72.0

func (i WebAclFieldIdentifierArray) ToWebAclFieldIdentifierArrayOutput() WebAclFieldIdentifierArrayOutput

func (WebAclFieldIdentifierArray) ToWebAclFieldIdentifierArrayOutputWithContext added in v0.72.0

func (i WebAclFieldIdentifierArray) ToWebAclFieldIdentifierArrayOutputWithContext(ctx context.Context) WebAclFieldIdentifierArrayOutput

type WebAclFieldIdentifierArrayInput added in v0.72.0

type WebAclFieldIdentifierArrayInput interface {
	pulumi.Input

	ToWebAclFieldIdentifierArrayOutput() WebAclFieldIdentifierArrayOutput
	ToWebAclFieldIdentifierArrayOutputWithContext(context.Context) WebAclFieldIdentifierArrayOutput
}

WebAclFieldIdentifierArrayInput is an input type that accepts WebAclFieldIdentifierArray and WebAclFieldIdentifierArrayOutput values. You can construct a concrete instance of `WebAclFieldIdentifierArrayInput` via:

WebAclFieldIdentifierArray{ WebAclFieldIdentifierArgs{...} }

type WebAclFieldIdentifierArrayOutput added in v0.72.0

type WebAclFieldIdentifierArrayOutput struct{ *pulumi.OutputState }

func (WebAclFieldIdentifierArrayOutput) ElementType added in v0.72.0

func (WebAclFieldIdentifierArrayOutput) Index added in v0.72.0

func (WebAclFieldIdentifierArrayOutput) ToWebAclFieldIdentifierArrayOutput added in v0.72.0

func (o WebAclFieldIdentifierArrayOutput) ToWebAclFieldIdentifierArrayOutput() WebAclFieldIdentifierArrayOutput

func (WebAclFieldIdentifierArrayOutput) ToWebAclFieldIdentifierArrayOutputWithContext added in v0.72.0

func (o WebAclFieldIdentifierArrayOutput) ToWebAclFieldIdentifierArrayOutputWithContext(ctx context.Context) WebAclFieldIdentifierArrayOutput

type WebAclFieldIdentifierInput added in v0.72.0

type WebAclFieldIdentifierInput interface {
	pulumi.Input

	ToWebAclFieldIdentifierOutput() WebAclFieldIdentifierOutput
	ToWebAclFieldIdentifierOutputWithContext(context.Context) WebAclFieldIdentifierOutput
}

WebAclFieldIdentifierInput is an input type that accepts WebAclFieldIdentifierArgs and WebAclFieldIdentifierOutput values. You can construct a concrete instance of `WebAclFieldIdentifierInput` via:

WebAclFieldIdentifierArgs{...}

type WebAclFieldIdentifierOutput added in v0.72.0

type WebAclFieldIdentifierOutput struct{ *pulumi.OutputState }

func (WebAclFieldIdentifierOutput) ElementType added in v0.72.0

func (WebAclFieldIdentifierOutput) Identifier added in v0.72.0

The name of the field.

When the `PayloadType` in the request inspection is `JSON` , this identifier must be in JSON pointer syntax. For example `/form/username` . For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

When the `PayloadType` is `FORM_ENCODED` , use the HTML form names. For example, `username` .

For more information, see the descriptions for each field type in the request inspection properties.

func (WebAclFieldIdentifierOutput) ToWebAclFieldIdentifierOutput added in v0.72.0

func (o WebAclFieldIdentifierOutput) ToWebAclFieldIdentifierOutput() WebAclFieldIdentifierOutput

func (WebAclFieldIdentifierOutput) ToWebAclFieldIdentifierOutputWithContext added in v0.72.0

func (o WebAclFieldIdentifierOutput) ToWebAclFieldIdentifierOutputWithContext(ctx context.Context) WebAclFieldIdentifierOutput

func (WebAclFieldIdentifierOutput) ToWebAclFieldIdentifierPtrOutput added in v0.72.0

func (o WebAclFieldIdentifierOutput) ToWebAclFieldIdentifierPtrOutput() WebAclFieldIdentifierPtrOutput

func (WebAclFieldIdentifierOutput) ToWebAclFieldIdentifierPtrOutputWithContext added in v0.72.0

func (o WebAclFieldIdentifierOutput) ToWebAclFieldIdentifierPtrOutputWithContext(ctx context.Context) WebAclFieldIdentifierPtrOutput

type WebAclFieldIdentifierPtrInput added in v0.72.0

type WebAclFieldIdentifierPtrInput interface {
	pulumi.Input

	ToWebAclFieldIdentifierPtrOutput() WebAclFieldIdentifierPtrOutput
	ToWebAclFieldIdentifierPtrOutputWithContext(context.Context) WebAclFieldIdentifierPtrOutput
}

WebAclFieldIdentifierPtrInput is an input type that accepts WebAclFieldIdentifierArgs, WebAclFieldIdentifierPtr and WebAclFieldIdentifierPtrOutput values. You can construct a concrete instance of `WebAclFieldIdentifierPtrInput` via:

        WebAclFieldIdentifierArgs{...}

or:

        nil

func WebAclFieldIdentifierPtr added in v0.72.0

func WebAclFieldIdentifierPtr(v *WebAclFieldIdentifierArgs) WebAclFieldIdentifierPtrInput

type WebAclFieldIdentifierPtrOutput added in v0.72.0

type WebAclFieldIdentifierPtrOutput struct{ *pulumi.OutputState }

func (WebAclFieldIdentifierPtrOutput) Elem added in v0.72.0

func (WebAclFieldIdentifierPtrOutput) ElementType added in v0.72.0

func (WebAclFieldIdentifierPtrOutput) Identifier added in v0.72.0

The name of the field.

When the `PayloadType` in the request inspection is `JSON` , this identifier must be in JSON pointer syntax. For example `/form/username` . For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

When the `PayloadType` is `FORM_ENCODED` , use the HTML form names. For example, `username` .

For more information, see the descriptions for each field type in the request inspection properties.

func (WebAclFieldIdentifierPtrOutput) ToWebAclFieldIdentifierPtrOutput added in v0.72.0

func (o WebAclFieldIdentifierPtrOutput) ToWebAclFieldIdentifierPtrOutput() WebAclFieldIdentifierPtrOutput

func (WebAclFieldIdentifierPtrOutput) ToWebAclFieldIdentifierPtrOutputWithContext added in v0.72.0

func (o WebAclFieldIdentifierPtrOutput) ToWebAclFieldIdentifierPtrOutputWithContext(ctx context.Context) WebAclFieldIdentifierPtrOutput

type WebAclFieldToMatch added in v0.72.0

type WebAclFieldToMatch struct {
	// All query arguments of a web request.
	AllQueryArguments interface{} `pulumi:"allQueryArguments"`
	// Inspect the request body as plain text. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.
	//
	// AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.
	//
	// - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	// - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
	//
	// For information about how to handle oversized request bodies, see the `Body` object configuration.
	Body *WebAclBody `pulumi:"body"`
	// Inspect the request cookies. You must configure scope and pattern matching filters in the `Cookies` object, to define the set of cookies and the parts of the cookies that AWS WAF inspects.
	//
	// Only the first 8 KB (8192 bytes) of a request's cookies and only the first 200 cookies are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize cookie content in the `Cookies` object. AWS WAF applies the pattern matching filters to the cookies that it receives from the underlying host service.
	Cookies *WebAclCookies `pulumi:"cookies"`
	// Inspect the request headers. You must configure scope and pattern matching filters in the `Headers` object, to define the set of headers to and the parts of the headers that AWS WAF inspects.
	//
	// Only the first 8 KB (8192 bytes) of a request's headers and only the first 200 headers are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize header content in the `Headers` object. AWS WAF applies the pattern matching filters to the headers that it receives from the underlying host service.
	Headers *WebAclHeaders `pulumi:"headers"`
	// Match against the request's JA3 fingerprint. The JA3 fingerprint is a 32-character hash derived from the TLS Client Hello of an incoming request. This fingerprint serves as a unique identifier for the client's TLS configuration. AWS WAF calculates and logs this fingerprint for each request that has enough TLS Client Hello information for the calculation. Almost all web requests include this information.
	//
	// > You can use this choice only with a string match `ByteMatchStatement` with the `PositionalConstraint` set to `EXACTLY` .
	//
	// You can obtain the JA3 fingerprint for client requests from the web ACL logs. If AWS WAF is able to calculate the fingerprint, it includes it in the logs. For information about the logging fields, see [Log fields](https://docs.aws.amazon.com/waf/latest/developerguide/logging-fields.html) in the *AWS WAF Developer Guide* .
	//
	// Provide the JA3 fingerprint string from the logs in your string match statement specification, to match with any future requests that have the same TLS configuration.
	Ja3Fingerprint *WebAclJa3Fingerprint `pulumi:"ja3Fingerprint"`
	// Inspect the request body as JSON. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.
	//
	// AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.
	//
	// - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	// - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
	//
	// For information about how to handle oversized request bodies, see the `JsonBody` object configuration.
	JsonBody *WebAclJsonBody `pulumi:"jsonBody"`
	// The HTTP method of a web request. The method indicates the type of operation that the request is asking the origin to perform.
	Method interface{} `pulumi:"method"`
	// The query string of a web request. This is the part of a URL that appears after a ? character, if any.
	QueryString interface{} `pulumi:"queryString"`
	// Inspect a single header. Provide the name of the header to inspect, for example, `User-Agent` or `Referer` . This setting isn't case sensitive.
	//
	// Example JSON: `"SingleHeader": { "Name": "haystack" }`
	//
	// Alternately, you can filter and inspect all headers with the `Headers` `FieldToMatch` setting.
	SingleHeader *WebAclFieldToMatchSingleHeaderProperties `pulumi:"singleHeader"`
	// One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.
	SingleQueryArgument *WebAclFieldToMatchSingleQueryArgumentProperties `pulumi:"singleQueryArgument"`
	// The path component of the URI of a web request. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
	UriPath interface{} `pulumi:"uriPath"`
}

Field of the request to match.

type WebAclFieldToMatchArgs added in v0.72.0

type WebAclFieldToMatchArgs struct {
	// All query arguments of a web request.
	AllQueryArguments pulumi.Input `pulumi:"allQueryArguments"`
	// Inspect the request body as plain text. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.
	//
	// AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.
	//
	// - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	// - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
	//
	// For information about how to handle oversized request bodies, see the `Body` object configuration.
	Body WebAclBodyPtrInput `pulumi:"body"`
	// Inspect the request cookies. You must configure scope and pattern matching filters in the `Cookies` object, to define the set of cookies and the parts of the cookies that AWS WAF inspects.
	//
	// Only the first 8 KB (8192 bytes) of a request's cookies and only the first 200 cookies are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize cookie content in the `Cookies` object. AWS WAF applies the pattern matching filters to the cookies that it receives from the underlying host service.
	Cookies WebAclCookiesPtrInput `pulumi:"cookies"`
	// Inspect the request headers. You must configure scope and pattern matching filters in the `Headers` object, to define the set of headers to and the parts of the headers that AWS WAF inspects.
	//
	// Only the first 8 KB (8192 bytes) of a request's headers and only the first 200 headers are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize header content in the `Headers` object. AWS WAF applies the pattern matching filters to the headers that it receives from the underlying host service.
	Headers WebAclHeadersPtrInput `pulumi:"headers"`
	// Match against the request's JA3 fingerprint. The JA3 fingerprint is a 32-character hash derived from the TLS Client Hello of an incoming request. This fingerprint serves as a unique identifier for the client's TLS configuration. AWS WAF calculates and logs this fingerprint for each request that has enough TLS Client Hello information for the calculation. Almost all web requests include this information.
	//
	// > You can use this choice only with a string match `ByteMatchStatement` with the `PositionalConstraint` set to `EXACTLY` .
	//
	// You can obtain the JA3 fingerprint for client requests from the web ACL logs. If AWS WAF is able to calculate the fingerprint, it includes it in the logs. For information about the logging fields, see [Log fields](https://docs.aws.amazon.com/waf/latest/developerguide/logging-fields.html) in the *AWS WAF Developer Guide* .
	//
	// Provide the JA3 fingerprint string from the logs in your string match statement specification, to match with any future requests that have the same TLS configuration.
	Ja3Fingerprint WebAclJa3FingerprintPtrInput `pulumi:"ja3Fingerprint"`
	// Inspect the request body as JSON. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.
	//
	// AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.
	//
	// - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	// - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
	//
	// For information about how to handle oversized request bodies, see the `JsonBody` object configuration.
	JsonBody WebAclJsonBodyPtrInput `pulumi:"jsonBody"`
	// The HTTP method of a web request. The method indicates the type of operation that the request is asking the origin to perform.
	Method pulumi.Input `pulumi:"method"`
	// The query string of a web request. This is the part of a URL that appears after a ? character, if any.
	QueryString pulumi.Input `pulumi:"queryString"`
	// Inspect a single header. Provide the name of the header to inspect, for example, `User-Agent` or `Referer` . This setting isn't case sensitive.
	//
	// Example JSON: `"SingleHeader": { "Name": "haystack" }`
	//
	// Alternately, you can filter and inspect all headers with the `Headers` `FieldToMatch` setting.
	SingleHeader WebAclFieldToMatchSingleHeaderPropertiesPtrInput `pulumi:"singleHeader"`
	// One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.
	SingleQueryArgument WebAclFieldToMatchSingleQueryArgumentPropertiesPtrInput `pulumi:"singleQueryArgument"`
	// The path component of the URI of a web request. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
	UriPath pulumi.Input `pulumi:"uriPath"`
}

Field of the request to match.

func (WebAclFieldToMatchArgs) ElementType added in v0.72.0

func (WebAclFieldToMatchArgs) ElementType() reflect.Type

func (WebAclFieldToMatchArgs) ToWebAclFieldToMatchOutput added in v0.72.0

func (i WebAclFieldToMatchArgs) ToWebAclFieldToMatchOutput() WebAclFieldToMatchOutput

func (WebAclFieldToMatchArgs) ToWebAclFieldToMatchOutputWithContext added in v0.72.0

func (i WebAclFieldToMatchArgs) ToWebAclFieldToMatchOutputWithContext(ctx context.Context) WebAclFieldToMatchOutput

func (WebAclFieldToMatchArgs) ToWebAclFieldToMatchPtrOutput added in v0.72.0

func (i WebAclFieldToMatchArgs) ToWebAclFieldToMatchPtrOutput() WebAclFieldToMatchPtrOutput

func (WebAclFieldToMatchArgs) ToWebAclFieldToMatchPtrOutputWithContext added in v0.72.0

func (i WebAclFieldToMatchArgs) ToWebAclFieldToMatchPtrOutputWithContext(ctx context.Context) WebAclFieldToMatchPtrOutput

type WebAclFieldToMatchInput added in v0.72.0

type WebAclFieldToMatchInput interface {
	pulumi.Input

	ToWebAclFieldToMatchOutput() WebAclFieldToMatchOutput
	ToWebAclFieldToMatchOutputWithContext(context.Context) WebAclFieldToMatchOutput
}

WebAclFieldToMatchInput is an input type that accepts WebAclFieldToMatchArgs and WebAclFieldToMatchOutput values. You can construct a concrete instance of `WebAclFieldToMatchInput` via:

WebAclFieldToMatchArgs{...}

type WebAclFieldToMatchOutput added in v0.72.0

type WebAclFieldToMatchOutput struct{ *pulumi.OutputState }

Field of the request to match.

func (WebAclFieldToMatchOutput) AllQueryArguments added in v0.72.0

func (o WebAclFieldToMatchOutput) AllQueryArguments() pulumi.AnyOutput

All query arguments of a web request.

func (WebAclFieldToMatchOutput) Body added in v0.72.0

Inspect the request body as plain text. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.

AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.

- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes). - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.

For information about how to handle oversized request bodies, see the `Body` object configuration.

func (WebAclFieldToMatchOutput) Cookies added in v0.72.0

Inspect the request cookies. You must configure scope and pattern matching filters in the `Cookies` object, to define the set of cookies and the parts of the cookies that AWS WAF inspects.

Only the first 8 KB (8192 bytes) of a request's cookies and only the first 200 cookies are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize cookie content in the `Cookies` object. AWS WAF applies the pattern matching filters to the cookies that it receives from the underlying host service.

func (WebAclFieldToMatchOutput) ElementType added in v0.72.0

func (WebAclFieldToMatchOutput) ElementType() reflect.Type

func (WebAclFieldToMatchOutput) Headers added in v0.72.0

Inspect the request headers. You must configure scope and pattern matching filters in the `Headers` object, to define the set of headers to and the parts of the headers that AWS WAF inspects.

Only the first 8 KB (8192 bytes) of a request's headers and only the first 200 headers are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize header content in the `Headers` object. AWS WAF applies the pattern matching filters to the headers that it receives from the underlying host service.

func (WebAclFieldToMatchOutput) Ja3Fingerprint added in v0.99.0

Match against the request's JA3 fingerprint. The JA3 fingerprint is a 32-character hash derived from the TLS Client Hello of an incoming request. This fingerprint serves as a unique identifier for the client's TLS configuration. AWS WAF calculates and logs this fingerprint for each request that has enough TLS Client Hello information for the calculation. Almost all web requests include this information.

> You can use this choice only with a string match `ByteMatchStatement` with the `PositionalConstraint` set to `EXACTLY` .

You can obtain the JA3 fingerprint for client requests from the web ACL logs. If AWS WAF is able to calculate the fingerprint, it includes it in the logs. For information about the logging fields, see [Log fields](https://docs.aws.amazon.com/waf/latest/developerguide/logging-fields.html) in the *AWS WAF Developer Guide* .

Provide the JA3 fingerprint string from the logs in your string match statement specification, to match with any future requests that have the same TLS configuration.

func (WebAclFieldToMatchOutput) JsonBody added in v0.72.0

Inspect the request body as JSON. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.

AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.

- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes). - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.

For information about how to handle oversized request bodies, see the `JsonBody` object configuration.

func (WebAclFieldToMatchOutput) Method added in v0.72.0

The HTTP method of a web request. The method indicates the type of operation that the request is asking the origin to perform.

func (WebAclFieldToMatchOutput) QueryString added in v0.72.0

func (o WebAclFieldToMatchOutput) QueryString() pulumi.AnyOutput

The query string of a web request. This is the part of a URL that appears after a ? character, if any.

func (WebAclFieldToMatchOutput) SingleHeader added in v0.72.0

Inspect a single header. Provide the name of the header to inspect, for example, `User-Agent` or `Referer` . This setting isn't case sensitive.

Example JSON: `"SingleHeader": { "Name": "haystack" }`

Alternately, you can filter and inspect all headers with the `Headers` `FieldToMatch` setting.

func (WebAclFieldToMatchOutput) SingleQueryArgument added in v0.72.0

One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.

func (WebAclFieldToMatchOutput) ToWebAclFieldToMatchOutput added in v0.72.0

func (o WebAclFieldToMatchOutput) ToWebAclFieldToMatchOutput() WebAclFieldToMatchOutput

func (WebAclFieldToMatchOutput) ToWebAclFieldToMatchOutputWithContext added in v0.72.0

func (o WebAclFieldToMatchOutput) ToWebAclFieldToMatchOutputWithContext(ctx context.Context) WebAclFieldToMatchOutput

func (WebAclFieldToMatchOutput) ToWebAclFieldToMatchPtrOutput added in v0.72.0

func (o WebAclFieldToMatchOutput) ToWebAclFieldToMatchPtrOutput() WebAclFieldToMatchPtrOutput

func (WebAclFieldToMatchOutput) ToWebAclFieldToMatchPtrOutputWithContext added in v0.72.0

func (o WebAclFieldToMatchOutput) ToWebAclFieldToMatchPtrOutputWithContext(ctx context.Context) WebAclFieldToMatchPtrOutput

func (WebAclFieldToMatchOutput) UriPath added in v0.72.0

The path component of the URI of a web request. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

type WebAclFieldToMatchPtrInput added in v0.72.0

type WebAclFieldToMatchPtrInput interface {
	pulumi.Input

	ToWebAclFieldToMatchPtrOutput() WebAclFieldToMatchPtrOutput
	ToWebAclFieldToMatchPtrOutputWithContext(context.Context) WebAclFieldToMatchPtrOutput
}

WebAclFieldToMatchPtrInput is an input type that accepts WebAclFieldToMatchArgs, WebAclFieldToMatchPtr and WebAclFieldToMatchPtrOutput values. You can construct a concrete instance of `WebAclFieldToMatchPtrInput` via:

        WebAclFieldToMatchArgs{...}

or:

        nil

func WebAclFieldToMatchPtr added in v0.72.0

func WebAclFieldToMatchPtr(v *WebAclFieldToMatchArgs) WebAclFieldToMatchPtrInput

type WebAclFieldToMatchPtrOutput added in v0.72.0

type WebAclFieldToMatchPtrOutput struct{ *pulumi.OutputState }

func (WebAclFieldToMatchPtrOutput) AllQueryArguments added in v0.72.0

func (o WebAclFieldToMatchPtrOutput) AllQueryArguments() pulumi.AnyOutput

All query arguments of a web request.

func (WebAclFieldToMatchPtrOutput) Body added in v0.72.0

Inspect the request body as plain text. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.

AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.

- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes). - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.

For information about how to handle oversized request bodies, see the `Body` object configuration.

func (WebAclFieldToMatchPtrOutput) Cookies added in v0.72.0

Inspect the request cookies. You must configure scope and pattern matching filters in the `Cookies` object, to define the set of cookies and the parts of the cookies that AWS WAF inspects.

Only the first 8 KB (8192 bytes) of a request's cookies and only the first 200 cookies are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize cookie content in the `Cookies` object. AWS WAF applies the pattern matching filters to the cookies that it receives from the underlying host service.

func (WebAclFieldToMatchPtrOutput) Elem added in v0.72.0

func (WebAclFieldToMatchPtrOutput) ElementType added in v0.72.0

func (WebAclFieldToMatchPtrOutput) Headers added in v0.72.0

Inspect the request headers. You must configure scope and pattern matching filters in the `Headers` object, to define the set of headers to and the parts of the headers that AWS WAF inspects.

Only the first 8 KB (8192 bytes) of a request's headers and only the first 200 headers are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize header content in the `Headers` object. AWS WAF applies the pattern matching filters to the headers that it receives from the underlying host service.

func (WebAclFieldToMatchPtrOutput) Ja3Fingerprint added in v0.99.0

Match against the request's JA3 fingerprint. The JA3 fingerprint is a 32-character hash derived from the TLS Client Hello of an incoming request. This fingerprint serves as a unique identifier for the client's TLS configuration. AWS WAF calculates and logs this fingerprint for each request that has enough TLS Client Hello information for the calculation. Almost all web requests include this information.

> You can use this choice only with a string match `ByteMatchStatement` with the `PositionalConstraint` set to `EXACTLY` .

You can obtain the JA3 fingerprint for client requests from the web ACL logs. If AWS WAF is able to calculate the fingerprint, it includes it in the logs. For information about the logging fields, see [Log fields](https://docs.aws.amazon.com/waf/latest/developerguide/logging-fields.html) in the *AWS WAF Developer Guide* .

Provide the JA3 fingerprint string from the logs in your string match statement specification, to match with any future requests that have the same TLS configuration.

func (WebAclFieldToMatchPtrOutput) JsonBody added in v0.72.0

Inspect the request body as JSON. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.

AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.

- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes). - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.

For information about how to handle oversized request bodies, see the `JsonBody` object configuration.

func (WebAclFieldToMatchPtrOutput) Method added in v0.72.0

The HTTP method of a web request. The method indicates the type of operation that the request is asking the origin to perform.

func (WebAclFieldToMatchPtrOutput) QueryString added in v0.72.0

The query string of a web request. This is the part of a URL that appears after a ? character, if any.

func (WebAclFieldToMatchPtrOutput) SingleHeader added in v0.72.0

Inspect a single header. Provide the name of the header to inspect, for example, `User-Agent` or `Referer` . This setting isn't case sensitive.

Example JSON: `"SingleHeader": { "Name": "haystack" }`

Alternately, you can filter and inspect all headers with the `Headers` `FieldToMatch` setting.

func (WebAclFieldToMatchPtrOutput) SingleQueryArgument added in v0.72.0

One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.

func (WebAclFieldToMatchPtrOutput) ToWebAclFieldToMatchPtrOutput added in v0.72.0

func (o WebAclFieldToMatchPtrOutput) ToWebAclFieldToMatchPtrOutput() WebAclFieldToMatchPtrOutput

func (WebAclFieldToMatchPtrOutput) ToWebAclFieldToMatchPtrOutputWithContext added in v0.72.0

func (o WebAclFieldToMatchPtrOutput) ToWebAclFieldToMatchPtrOutputWithContext(ctx context.Context) WebAclFieldToMatchPtrOutput

func (WebAclFieldToMatchPtrOutput) UriPath added in v0.72.0

The path component of the URI of a web request. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

type WebAclFieldToMatchSingleHeaderProperties added in v0.72.0

type WebAclFieldToMatchSingleHeaderProperties struct {
	Name string `pulumi:"name"`
}

Inspect a single header. Provide the name of the header to inspect, for example, `User-Agent` or `Referer` . This setting isn't case sensitive.

Example JSON: `"SingleHeader": { "Name": "haystack" }`

Alternately, you can filter and inspect all headers with the `Headers` `FieldToMatch` setting.

type WebAclFieldToMatchSingleHeaderPropertiesArgs added in v0.72.0

type WebAclFieldToMatchSingleHeaderPropertiesArgs struct {
	Name pulumi.StringInput `pulumi:"name"`
}

Inspect a single header. Provide the name of the header to inspect, for example, `User-Agent` or `Referer` . This setting isn't case sensitive.

Example JSON: `"SingleHeader": { "Name": "haystack" }`

Alternately, you can filter and inspect all headers with the `Headers` `FieldToMatch` setting.

func (WebAclFieldToMatchSingleHeaderPropertiesArgs) ElementType added in v0.72.0

func (WebAclFieldToMatchSingleHeaderPropertiesArgs) ToWebAclFieldToMatchSingleHeaderPropertiesOutput added in v0.72.0

func (i WebAclFieldToMatchSingleHeaderPropertiesArgs) ToWebAclFieldToMatchSingleHeaderPropertiesOutput() WebAclFieldToMatchSingleHeaderPropertiesOutput

func (WebAclFieldToMatchSingleHeaderPropertiesArgs) ToWebAclFieldToMatchSingleHeaderPropertiesOutputWithContext added in v0.72.0

func (i WebAclFieldToMatchSingleHeaderPropertiesArgs) ToWebAclFieldToMatchSingleHeaderPropertiesOutputWithContext(ctx context.Context) WebAclFieldToMatchSingleHeaderPropertiesOutput

func (WebAclFieldToMatchSingleHeaderPropertiesArgs) ToWebAclFieldToMatchSingleHeaderPropertiesPtrOutput added in v0.72.0

func (i WebAclFieldToMatchSingleHeaderPropertiesArgs) ToWebAclFieldToMatchSingleHeaderPropertiesPtrOutput() WebAclFieldToMatchSingleHeaderPropertiesPtrOutput

func (WebAclFieldToMatchSingleHeaderPropertiesArgs) ToWebAclFieldToMatchSingleHeaderPropertiesPtrOutputWithContext added in v0.72.0

func (i WebAclFieldToMatchSingleHeaderPropertiesArgs) ToWebAclFieldToMatchSingleHeaderPropertiesPtrOutputWithContext(ctx context.Context) WebAclFieldToMatchSingleHeaderPropertiesPtrOutput

type WebAclFieldToMatchSingleHeaderPropertiesInput added in v0.72.0

type WebAclFieldToMatchSingleHeaderPropertiesInput interface {
	pulumi.Input

	ToWebAclFieldToMatchSingleHeaderPropertiesOutput() WebAclFieldToMatchSingleHeaderPropertiesOutput
	ToWebAclFieldToMatchSingleHeaderPropertiesOutputWithContext(context.Context) WebAclFieldToMatchSingleHeaderPropertiesOutput
}

WebAclFieldToMatchSingleHeaderPropertiesInput is an input type that accepts WebAclFieldToMatchSingleHeaderPropertiesArgs and WebAclFieldToMatchSingleHeaderPropertiesOutput values. You can construct a concrete instance of `WebAclFieldToMatchSingleHeaderPropertiesInput` via:

WebAclFieldToMatchSingleHeaderPropertiesArgs{...}

type WebAclFieldToMatchSingleHeaderPropertiesOutput added in v0.72.0

type WebAclFieldToMatchSingleHeaderPropertiesOutput struct{ *pulumi.OutputState }

Inspect a single header. Provide the name of the header to inspect, for example, `User-Agent` or `Referer` . This setting isn't case sensitive.

Example JSON: `"SingleHeader": { "Name": "haystack" }`

Alternately, you can filter and inspect all headers with the `Headers` `FieldToMatch` setting.

func (WebAclFieldToMatchSingleHeaderPropertiesOutput) ElementType added in v0.72.0

func (WebAclFieldToMatchSingleHeaderPropertiesOutput) Name added in v0.72.0

func (WebAclFieldToMatchSingleHeaderPropertiesOutput) ToWebAclFieldToMatchSingleHeaderPropertiesOutput added in v0.72.0

func (o WebAclFieldToMatchSingleHeaderPropertiesOutput) ToWebAclFieldToMatchSingleHeaderPropertiesOutput() WebAclFieldToMatchSingleHeaderPropertiesOutput

func (WebAclFieldToMatchSingleHeaderPropertiesOutput) ToWebAclFieldToMatchSingleHeaderPropertiesOutputWithContext added in v0.72.0

func (o WebAclFieldToMatchSingleHeaderPropertiesOutput) ToWebAclFieldToMatchSingleHeaderPropertiesOutputWithContext(ctx context.Context) WebAclFieldToMatchSingleHeaderPropertiesOutput

func (WebAclFieldToMatchSingleHeaderPropertiesOutput) ToWebAclFieldToMatchSingleHeaderPropertiesPtrOutput added in v0.72.0

func (o WebAclFieldToMatchSingleHeaderPropertiesOutput) ToWebAclFieldToMatchSingleHeaderPropertiesPtrOutput() WebAclFieldToMatchSingleHeaderPropertiesPtrOutput

func (WebAclFieldToMatchSingleHeaderPropertiesOutput) ToWebAclFieldToMatchSingleHeaderPropertiesPtrOutputWithContext added in v0.72.0

func (o WebAclFieldToMatchSingleHeaderPropertiesOutput) ToWebAclFieldToMatchSingleHeaderPropertiesPtrOutputWithContext(ctx context.Context) WebAclFieldToMatchSingleHeaderPropertiesPtrOutput

type WebAclFieldToMatchSingleHeaderPropertiesPtrInput added in v0.72.0

type WebAclFieldToMatchSingleHeaderPropertiesPtrInput interface {
	pulumi.Input

	ToWebAclFieldToMatchSingleHeaderPropertiesPtrOutput() WebAclFieldToMatchSingleHeaderPropertiesPtrOutput
	ToWebAclFieldToMatchSingleHeaderPropertiesPtrOutputWithContext(context.Context) WebAclFieldToMatchSingleHeaderPropertiesPtrOutput
}

WebAclFieldToMatchSingleHeaderPropertiesPtrInput is an input type that accepts WebAclFieldToMatchSingleHeaderPropertiesArgs, WebAclFieldToMatchSingleHeaderPropertiesPtr and WebAclFieldToMatchSingleHeaderPropertiesPtrOutput values. You can construct a concrete instance of `WebAclFieldToMatchSingleHeaderPropertiesPtrInput` via:

        WebAclFieldToMatchSingleHeaderPropertiesArgs{...}

or:

        nil

type WebAclFieldToMatchSingleHeaderPropertiesPtrOutput added in v0.72.0

type WebAclFieldToMatchSingleHeaderPropertiesPtrOutput struct{ *pulumi.OutputState }

func (WebAclFieldToMatchSingleHeaderPropertiesPtrOutput) Elem added in v0.72.0

func (WebAclFieldToMatchSingleHeaderPropertiesPtrOutput) ElementType added in v0.72.0

func (WebAclFieldToMatchSingleHeaderPropertiesPtrOutput) Name added in v0.72.0

func (WebAclFieldToMatchSingleHeaderPropertiesPtrOutput) ToWebAclFieldToMatchSingleHeaderPropertiesPtrOutput added in v0.72.0

func (o WebAclFieldToMatchSingleHeaderPropertiesPtrOutput) ToWebAclFieldToMatchSingleHeaderPropertiesPtrOutput() WebAclFieldToMatchSingleHeaderPropertiesPtrOutput

func (WebAclFieldToMatchSingleHeaderPropertiesPtrOutput) ToWebAclFieldToMatchSingleHeaderPropertiesPtrOutputWithContext added in v0.72.0

func (o WebAclFieldToMatchSingleHeaderPropertiesPtrOutput) ToWebAclFieldToMatchSingleHeaderPropertiesPtrOutputWithContext(ctx context.Context) WebAclFieldToMatchSingleHeaderPropertiesPtrOutput

type WebAclFieldToMatchSingleQueryArgumentProperties added in v0.72.0

type WebAclFieldToMatchSingleQueryArgumentProperties struct {
	Name string `pulumi:"name"`
}

One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.

type WebAclFieldToMatchSingleQueryArgumentPropertiesArgs added in v0.72.0

type WebAclFieldToMatchSingleQueryArgumentPropertiesArgs struct {
	Name pulumi.StringInput `pulumi:"name"`
}

One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.

func (WebAclFieldToMatchSingleQueryArgumentPropertiesArgs) ElementType added in v0.72.0

func (WebAclFieldToMatchSingleQueryArgumentPropertiesArgs) ToWebAclFieldToMatchSingleQueryArgumentPropertiesOutput added in v0.72.0

func (i WebAclFieldToMatchSingleQueryArgumentPropertiesArgs) ToWebAclFieldToMatchSingleQueryArgumentPropertiesOutput() WebAclFieldToMatchSingleQueryArgumentPropertiesOutput

func (WebAclFieldToMatchSingleQueryArgumentPropertiesArgs) ToWebAclFieldToMatchSingleQueryArgumentPropertiesOutputWithContext added in v0.72.0

func (i WebAclFieldToMatchSingleQueryArgumentPropertiesArgs) ToWebAclFieldToMatchSingleQueryArgumentPropertiesOutputWithContext(ctx context.Context) WebAclFieldToMatchSingleQueryArgumentPropertiesOutput

func (WebAclFieldToMatchSingleQueryArgumentPropertiesArgs) ToWebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput added in v0.72.0

func (i WebAclFieldToMatchSingleQueryArgumentPropertiesArgs) ToWebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput() WebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput

func (WebAclFieldToMatchSingleQueryArgumentPropertiesArgs) ToWebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutputWithContext added in v0.72.0

func (i WebAclFieldToMatchSingleQueryArgumentPropertiesArgs) ToWebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutputWithContext(ctx context.Context) WebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput

type WebAclFieldToMatchSingleQueryArgumentPropertiesInput added in v0.72.0

type WebAclFieldToMatchSingleQueryArgumentPropertiesInput interface {
	pulumi.Input

	ToWebAclFieldToMatchSingleQueryArgumentPropertiesOutput() WebAclFieldToMatchSingleQueryArgumentPropertiesOutput
	ToWebAclFieldToMatchSingleQueryArgumentPropertiesOutputWithContext(context.Context) WebAclFieldToMatchSingleQueryArgumentPropertiesOutput
}

WebAclFieldToMatchSingleQueryArgumentPropertiesInput is an input type that accepts WebAclFieldToMatchSingleQueryArgumentPropertiesArgs and WebAclFieldToMatchSingleQueryArgumentPropertiesOutput values. You can construct a concrete instance of `WebAclFieldToMatchSingleQueryArgumentPropertiesInput` via:

WebAclFieldToMatchSingleQueryArgumentPropertiesArgs{...}

type WebAclFieldToMatchSingleQueryArgumentPropertiesOutput added in v0.72.0

type WebAclFieldToMatchSingleQueryArgumentPropertiesOutput struct{ *pulumi.OutputState }

One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.

func (WebAclFieldToMatchSingleQueryArgumentPropertiesOutput) ElementType added in v0.72.0

func (WebAclFieldToMatchSingleQueryArgumentPropertiesOutput) Name added in v0.72.0

func (WebAclFieldToMatchSingleQueryArgumentPropertiesOutput) ToWebAclFieldToMatchSingleQueryArgumentPropertiesOutput added in v0.72.0

func (WebAclFieldToMatchSingleQueryArgumentPropertiesOutput) ToWebAclFieldToMatchSingleQueryArgumentPropertiesOutputWithContext added in v0.72.0

func (o WebAclFieldToMatchSingleQueryArgumentPropertiesOutput) ToWebAclFieldToMatchSingleQueryArgumentPropertiesOutputWithContext(ctx context.Context) WebAclFieldToMatchSingleQueryArgumentPropertiesOutput

func (WebAclFieldToMatchSingleQueryArgumentPropertiesOutput) ToWebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput added in v0.72.0

func (o WebAclFieldToMatchSingleQueryArgumentPropertiesOutput) ToWebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput() WebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput

func (WebAclFieldToMatchSingleQueryArgumentPropertiesOutput) ToWebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutputWithContext added in v0.72.0

func (o WebAclFieldToMatchSingleQueryArgumentPropertiesOutput) ToWebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutputWithContext(ctx context.Context) WebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput

type WebAclFieldToMatchSingleQueryArgumentPropertiesPtrInput added in v0.72.0

type WebAclFieldToMatchSingleQueryArgumentPropertiesPtrInput interface {
	pulumi.Input

	ToWebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput() WebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput
	ToWebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutputWithContext(context.Context) WebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput
}

WebAclFieldToMatchSingleQueryArgumentPropertiesPtrInput is an input type that accepts WebAclFieldToMatchSingleQueryArgumentPropertiesArgs, WebAclFieldToMatchSingleQueryArgumentPropertiesPtr and WebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput values. You can construct a concrete instance of `WebAclFieldToMatchSingleQueryArgumentPropertiesPtrInput` via:

        WebAclFieldToMatchSingleQueryArgumentPropertiesArgs{...}

or:

        nil

type WebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput added in v0.72.0

type WebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput struct{ *pulumi.OutputState }

func (WebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput) Elem added in v0.72.0

func (WebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput) ElementType added in v0.72.0

func (WebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput) Name added in v0.72.0

func (WebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput) ToWebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput added in v0.72.0

func (WebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput) ToWebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutputWithContext added in v0.72.0

func (o WebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput) ToWebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutputWithContext(ctx context.Context) WebAclFieldToMatchSingleQueryArgumentPropertiesPtrOutput

type WebAclForwardedIpConfiguration added in v0.72.0

type WebAclForwardedIpConfiguration struct {
	// The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	//
	// You can specify the following fallback behaviors:
	//
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	FallbackBehavior WebAclForwardedIpConfigurationFallbackBehavior `pulumi:"fallbackBehavior"`
	// The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	HeaderName string `pulumi:"headerName"`
}

type WebAclForwardedIpConfigurationArgs added in v0.72.0

type WebAclForwardedIpConfigurationArgs struct {
	// The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	//
	// You can specify the following fallback behaviors:
	//
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	FallbackBehavior WebAclForwardedIpConfigurationFallbackBehaviorInput `pulumi:"fallbackBehavior"`
	// The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	HeaderName pulumi.StringInput `pulumi:"headerName"`
}

func (WebAclForwardedIpConfigurationArgs) ElementType added in v0.72.0

func (WebAclForwardedIpConfigurationArgs) ToWebAclForwardedIpConfigurationOutput added in v0.72.0

func (i WebAclForwardedIpConfigurationArgs) ToWebAclForwardedIpConfigurationOutput() WebAclForwardedIpConfigurationOutput

func (WebAclForwardedIpConfigurationArgs) ToWebAclForwardedIpConfigurationOutputWithContext added in v0.72.0

func (i WebAclForwardedIpConfigurationArgs) ToWebAclForwardedIpConfigurationOutputWithContext(ctx context.Context) WebAclForwardedIpConfigurationOutput

func (WebAclForwardedIpConfigurationArgs) ToWebAclForwardedIpConfigurationPtrOutput added in v0.72.0

func (i WebAclForwardedIpConfigurationArgs) ToWebAclForwardedIpConfigurationPtrOutput() WebAclForwardedIpConfigurationPtrOutput

func (WebAclForwardedIpConfigurationArgs) ToWebAclForwardedIpConfigurationPtrOutputWithContext added in v0.72.0

func (i WebAclForwardedIpConfigurationArgs) ToWebAclForwardedIpConfigurationPtrOutputWithContext(ctx context.Context) WebAclForwardedIpConfigurationPtrOutput

type WebAclForwardedIpConfigurationFallbackBehavior added in v0.72.0

type WebAclForwardedIpConfigurationFallbackBehavior string

The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

You can specify the following fallback behaviors:

- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (WebAclForwardedIpConfigurationFallbackBehavior) ElementType added in v0.72.0

func (WebAclForwardedIpConfigurationFallbackBehavior) ToStringOutput added in v0.72.0

func (WebAclForwardedIpConfigurationFallbackBehavior) ToStringOutputWithContext added in v0.72.0

func (WebAclForwardedIpConfigurationFallbackBehavior) ToStringPtrOutput added in v0.72.0

func (WebAclForwardedIpConfigurationFallbackBehavior) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclForwardedIpConfigurationFallbackBehavior) ToWebAclForwardedIpConfigurationFallbackBehaviorOutput added in v0.72.0

func (e WebAclForwardedIpConfigurationFallbackBehavior) ToWebAclForwardedIpConfigurationFallbackBehaviorOutput() WebAclForwardedIpConfigurationFallbackBehaviorOutput

func (WebAclForwardedIpConfigurationFallbackBehavior) ToWebAclForwardedIpConfigurationFallbackBehaviorOutputWithContext added in v0.72.0

func (e WebAclForwardedIpConfigurationFallbackBehavior) ToWebAclForwardedIpConfigurationFallbackBehaviorOutputWithContext(ctx context.Context) WebAclForwardedIpConfigurationFallbackBehaviorOutput

func (WebAclForwardedIpConfigurationFallbackBehavior) ToWebAclForwardedIpConfigurationFallbackBehaviorPtrOutput added in v0.72.0

func (e WebAclForwardedIpConfigurationFallbackBehavior) ToWebAclForwardedIpConfigurationFallbackBehaviorPtrOutput() WebAclForwardedIpConfigurationFallbackBehaviorPtrOutput

func (WebAclForwardedIpConfigurationFallbackBehavior) ToWebAclForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext added in v0.72.0

func (e WebAclForwardedIpConfigurationFallbackBehavior) ToWebAclForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext(ctx context.Context) WebAclForwardedIpConfigurationFallbackBehaviorPtrOutput

type WebAclForwardedIpConfigurationFallbackBehaviorInput added in v0.72.0

type WebAclForwardedIpConfigurationFallbackBehaviorInput interface {
	pulumi.Input

	ToWebAclForwardedIpConfigurationFallbackBehaviorOutput() WebAclForwardedIpConfigurationFallbackBehaviorOutput
	ToWebAclForwardedIpConfigurationFallbackBehaviorOutputWithContext(context.Context) WebAclForwardedIpConfigurationFallbackBehaviorOutput
}

WebAclForwardedIpConfigurationFallbackBehaviorInput is an input type that accepts values of the WebAclForwardedIpConfigurationFallbackBehavior enum A concrete instance of `WebAclForwardedIpConfigurationFallbackBehaviorInput` can be one of the following:

WebAclForwardedIpConfigurationFallbackBehaviorMatch
WebAclForwardedIpConfigurationFallbackBehaviorNoMatch

type WebAclForwardedIpConfigurationFallbackBehaviorOutput added in v0.72.0

type WebAclForwardedIpConfigurationFallbackBehaviorOutput struct{ *pulumi.OutputState }

func (WebAclForwardedIpConfigurationFallbackBehaviorOutput) ElementType added in v0.72.0

func (WebAclForwardedIpConfigurationFallbackBehaviorOutput) ToStringOutput added in v0.72.0

func (WebAclForwardedIpConfigurationFallbackBehaviorOutput) ToStringOutputWithContext added in v0.72.0

func (WebAclForwardedIpConfigurationFallbackBehaviorOutput) ToStringPtrOutput added in v0.72.0

func (WebAclForwardedIpConfigurationFallbackBehaviorOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclForwardedIpConfigurationFallbackBehaviorOutput) ToWebAclForwardedIpConfigurationFallbackBehaviorOutput added in v0.72.0

func (WebAclForwardedIpConfigurationFallbackBehaviorOutput) ToWebAclForwardedIpConfigurationFallbackBehaviorOutputWithContext added in v0.72.0

func (o WebAclForwardedIpConfigurationFallbackBehaviorOutput) ToWebAclForwardedIpConfigurationFallbackBehaviorOutputWithContext(ctx context.Context) WebAclForwardedIpConfigurationFallbackBehaviorOutput

func (WebAclForwardedIpConfigurationFallbackBehaviorOutput) ToWebAclForwardedIpConfigurationFallbackBehaviorPtrOutput added in v0.72.0

func (o WebAclForwardedIpConfigurationFallbackBehaviorOutput) ToWebAclForwardedIpConfigurationFallbackBehaviorPtrOutput() WebAclForwardedIpConfigurationFallbackBehaviorPtrOutput

func (WebAclForwardedIpConfigurationFallbackBehaviorOutput) ToWebAclForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext added in v0.72.0

func (o WebAclForwardedIpConfigurationFallbackBehaviorOutput) ToWebAclForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext(ctx context.Context) WebAclForwardedIpConfigurationFallbackBehaviorPtrOutput

type WebAclForwardedIpConfigurationFallbackBehaviorPtrInput added in v0.72.0

type WebAclForwardedIpConfigurationFallbackBehaviorPtrInput interface {
	pulumi.Input

	ToWebAclForwardedIpConfigurationFallbackBehaviorPtrOutput() WebAclForwardedIpConfigurationFallbackBehaviorPtrOutput
	ToWebAclForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext(context.Context) WebAclForwardedIpConfigurationFallbackBehaviorPtrOutput
}

func WebAclForwardedIpConfigurationFallbackBehaviorPtr added in v0.72.0

func WebAclForwardedIpConfigurationFallbackBehaviorPtr(v string) WebAclForwardedIpConfigurationFallbackBehaviorPtrInput

type WebAclForwardedIpConfigurationFallbackBehaviorPtrOutput added in v0.72.0

type WebAclForwardedIpConfigurationFallbackBehaviorPtrOutput struct{ *pulumi.OutputState }

func (WebAclForwardedIpConfigurationFallbackBehaviorPtrOutput) Elem added in v0.72.0

func (WebAclForwardedIpConfigurationFallbackBehaviorPtrOutput) ElementType added in v0.72.0

func (WebAclForwardedIpConfigurationFallbackBehaviorPtrOutput) ToStringPtrOutput added in v0.72.0

func (WebAclForwardedIpConfigurationFallbackBehaviorPtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclForwardedIpConfigurationFallbackBehaviorPtrOutput) ToWebAclForwardedIpConfigurationFallbackBehaviorPtrOutput added in v0.72.0

func (WebAclForwardedIpConfigurationFallbackBehaviorPtrOutput) ToWebAclForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext added in v0.72.0

func (o WebAclForwardedIpConfigurationFallbackBehaviorPtrOutput) ToWebAclForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext(ctx context.Context) WebAclForwardedIpConfigurationFallbackBehaviorPtrOutput

type WebAclForwardedIpConfigurationInput added in v0.72.0

type WebAclForwardedIpConfigurationInput interface {
	pulumi.Input

	ToWebAclForwardedIpConfigurationOutput() WebAclForwardedIpConfigurationOutput
	ToWebAclForwardedIpConfigurationOutputWithContext(context.Context) WebAclForwardedIpConfigurationOutput
}

WebAclForwardedIpConfigurationInput is an input type that accepts WebAclForwardedIpConfigurationArgs and WebAclForwardedIpConfigurationOutput values. You can construct a concrete instance of `WebAclForwardedIpConfigurationInput` via:

WebAclForwardedIpConfigurationArgs{...}

type WebAclForwardedIpConfigurationOutput added in v0.72.0

type WebAclForwardedIpConfigurationOutput struct{ *pulumi.OutputState }

func (WebAclForwardedIpConfigurationOutput) ElementType added in v0.72.0

func (WebAclForwardedIpConfigurationOutput) FallbackBehavior added in v0.72.0

The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

You can specify the following fallback behaviors:

- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (WebAclForwardedIpConfigurationOutput) HeaderName added in v0.72.0

The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

func (WebAclForwardedIpConfigurationOutput) ToWebAclForwardedIpConfigurationOutput added in v0.72.0

func (o WebAclForwardedIpConfigurationOutput) ToWebAclForwardedIpConfigurationOutput() WebAclForwardedIpConfigurationOutput

func (WebAclForwardedIpConfigurationOutput) ToWebAclForwardedIpConfigurationOutputWithContext added in v0.72.0

func (o WebAclForwardedIpConfigurationOutput) ToWebAclForwardedIpConfigurationOutputWithContext(ctx context.Context) WebAclForwardedIpConfigurationOutput

func (WebAclForwardedIpConfigurationOutput) ToWebAclForwardedIpConfigurationPtrOutput added in v0.72.0

func (o WebAclForwardedIpConfigurationOutput) ToWebAclForwardedIpConfigurationPtrOutput() WebAclForwardedIpConfigurationPtrOutput

func (WebAclForwardedIpConfigurationOutput) ToWebAclForwardedIpConfigurationPtrOutputWithContext added in v0.72.0

func (o WebAclForwardedIpConfigurationOutput) ToWebAclForwardedIpConfigurationPtrOutputWithContext(ctx context.Context) WebAclForwardedIpConfigurationPtrOutput

type WebAclForwardedIpConfigurationPtrInput added in v0.72.0

type WebAclForwardedIpConfigurationPtrInput interface {
	pulumi.Input

	ToWebAclForwardedIpConfigurationPtrOutput() WebAclForwardedIpConfigurationPtrOutput
	ToWebAclForwardedIpConfigurationPtrOutputWithContext(context.Context) WebAclForwardedIpConfigurationPtrOutput
}

WebAclForwardedIpConfigurationPtrInput is an input type that accepts WebAclForwardedIpConfigurationArgs, WebAclForwardedIpConfigurationPtr and WebAclForwardedIpConfigurationPtrOutput values. You can construct a concrete instance of `WebAclForwardedIpConfigurationPtrInput` via:

        WebAclForwardedIpConfigurationArgs{...}

or:

        nil

type WebAclForwardedIpConfigurationPtrOutput added in v0.72.0

type WebAclForwardedIpConfigurationPtrOutput struct{ *pulumi.OutputState }

func (WebAclForwardedIpConfigurationPtrOutput) Elem added in v0.72.0

func (WebAclForwardedIpConfigurationPtrOutput) ElementType added in v0.72.0

func (WebAclForwardedIpConfigurationPtrOutput) FallbackBehavior added in v0.72.0

The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

You can specify the following fallback behaviors:

- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (WebAclForwardedIpConfigurationPtrOutput) HeaderName added in v0.72.0

The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

func (WebAclForwardedIpConfigurationPtrOutput) ToWebAclForwardedIpConfigurationPtrOutput added in v0.72.0

func (o WebAclForwardedIpConfigurationPtrOutput) ToWebAclForwardedIpConfigurationPtrOutput() WebAclForwardedIpConfigurationPtrOutput

func (WebAclForwardedIpConfigurationPtrOutput) ToWebAclForwardedIpConfigurationPtrOutputWithContext added in v0.72.0

func (o WebAclForwardedIpConfigurationPtrOutput) ToWebAclForwardedIpConfigurationPtrOutputWithContext(ctx context.Context) WebAclForwardedIpConfigurationPtrOutput

type WebAclGeoMatchStatement added in v0.72.0

type WebAclGeoMatchStatement struct {
	// An array of two-character country codes that you want to match against, for example, `[ "US", "CN" ]` , from the alpha-2 country ISO codes of the ISO 3166 international standard.
	//
	// When you use a geo match statement just for the region and country labels that it adds to requests, you still have to supply a country code for the rule to evaluate. In this case, you configure the rule to only count matching requests, but it will still generate logging and count metrics for any matches. You can reduce the logging and metrics that the rule produces by specifying a country that's unlikely to be a source of traffic to your site.
	CountryCodes []string `pulumi:"countryCodes"`
	// The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	ForwardedIpConfig *WebAclForwardedIpConfiguration `pulumi:"forwardedIpConfig"`
}

type WebAclGeoMatchStatementArgs added in v0.72.0

type WebAclGeoMatchStatementArgs struct {
	// An array of two-character country codes that you want to match against, for example, `[ "US", "CN" ]` , from the alpha-2 country ISO codes of the ISO 3166 international standard.
	//
	// When you use a geo match statement just for the region and country labels that it adds to requests, you still have to supply a country code for the rule to evaluate. In this case, you configure the rule to only count matching requests, but it will still generate logging and count metrics for any matches. You can reduce the logging and metrics that the rule produces by specifying a country that's unlikely to be a source of traffic to your site.
	CountryCodes pulumi.StringArrayInput `pulumi:"countryCodes"`
	// The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	ForwardedIpConfig WebAclForwardedIpConfigurationPtrInput `pulumi:"forwardedIpConfig"`
}

func (WebAclGeoMatchStatementArgs) ElementType added in v0.72.0

func (WebAclGeoMatchStatementArgs) ToWebAclGeoMatchStatementOutput added in v0.72.0

func (i WebAclGeoMatchStatementArgs) ToWebAclGeoMatchStatementOutput() WebAclGeoMatchStatementOutput

func (WebAclGeoMatchStatementArgs) ToWebAclGeoMatchStatementOutputWithContext added in v0.72.0

func (i WebAclGeoMatchStatementArgs) ToWebAclGeoMatchStatementOutputWithContext(ctx context.Context) WebAclGeoMatchStatementOutput

func (WebAclGeoMatchStatementArgs) ToWebAclGeoMatchStatementPtrOutput added in v0.72.0

func (i WebAclGeoMatchStatementArgs) ToWebAclGeoMatchStatementPtrOutput() WebAclGeoMatchStatementPtrOutput

func (WebAclGeoMatchStatementArgs) ToWebAclGeoMatchStatementPtrOutputWithContext added in v0.72.0

func (i WebAclGeoMatchStatementArgs) ToWebAclGeoMatchStatementPtrOutputWithContext(ctx context.Context) WebAclGeoMatchStatementPtrOutput

type WebAclGeoMatchStatementInput added in v0.72.0

type WebAclGeoMatchStatementInput interface {
	pulumi.Input

	ToWebAclGeoMatchStatementOutput() WebAclGeoMatchStatementOutput
	ToWebAclGeoMatchStatementOutputWithContext(context.Context) WebAclGeoMatchStatementOutput
}

WebAclGeoMatchStatementInput is an input type that accepts WebAclGeoMatchStatementArgs and WebAclGeoMatchStatementOutput values. You can construct a concrete instance of `WebAclGeoMatchStatementInput` via:

WebAclGeoMatchStatementArgs{...}

type WebAclGeoMatchStatementOutput added in v0.72.0

type WebAclGeoMatchStatementOutput struct{ *pulumi.OutputState }

func (WebAclGeoMatchStatementOutput) CountryCodes added in v0.72.0

An array of two-character country codes that you want to match against, for example, `[ "US", "CN" ]` , from the alpha-2 country ISO codes of the ISO 3166 international standard.

When you use a geo match statement just for the region and country labels that it adds to requests, you still have to supply a country code for the rule to evaluate. In this case, you configure the rule to only count matching requests, but it will still generate logging and count metrics for any matches. You can reduce the logging and metrics that the rule produces by specifying a country that's unlikely to be a source of traffic to your site.

func (WebAclGeoMatchStatementOutput) ElementType added in v0.72.0

func (WebAclGeoMatchStatementOutput) ForwardedIpConfig added in v0.72.0

The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

func (WebAclGeoMatchStatementOutput) ToWebAclGeoMatchStatementOutput added in v0.72.0

func (o WebAclGeoMatchStatementOutput) ToWebAclGeoMatchStatementOutput() WebAclGeoMatchStatementOutput

func (WebAclGeoMatchStatementOutput) ToWebAclGeoMatchStatementOutputWithContext added in v0.72.0

func (o WebAclGeoMatchStatementOutput) ToWebAclGeoMatchStatementOutputWithContext(ctx context.Context) WebAclGeoMatchStatementOutput

func (WebAclGeoMatchStatementOutput) ToWebAclGeoMatchStatementPtrOutput added in v0.72.0

func (o WebAclGeoMatchStatementOutput) ToWebAclGeoMatchStatementPtrOutput() WebAclGeoMatchStatementPtrOutput

func (WebAclGeoMatchStatementOutput) ToWebAclGeoMatchStatementPtrOutputWithContext added in v0.72.0

func (o WebAclGeoMatchStatementOutput) ToWebAclGeoMatchStatementPtrOutputWithContext(ctx context.Context) WebAclGeoMatchStatementPtrOutput

type WebAclGeoMatchStatementPtrInput added in v0.72.0

type WebAclGeoMatchStatementPtrInput interface {
	pulumi.Input

	ToWebAclGeoMatchStatementPtrOutput() WebAclGeoMatchStatementPtrOutput
	ToWebAclGeoMatchStatementPtrOutputWithContext(context.Context) WebAclGeoMatchStatementPtrOutput
}

WebAclGeoMatchStatementPtrInput is an input type that accepts WebAclGeoMatchStatementArgs, WebAclGeoMatchStatementPtr and WebAclGeoMatchStatementPtrOutput values. You can construct a concrete instance of `WebAclGeoMatchStatementPtrInput` via:

        WebAclGeoMatchStatementArgs{...}

or:

        nil

func WebAclGeoMatchStatementPtr added in v0.72.0

func WebAclGeoMatchStatementPtr(v *WebAclGeoMatchStatementArgs) WebAclGeoMatchStatementPtrInput

type WebAclGeoMatchStatementPtrOutput added in v0.72.0

type WebAclGeoMatchStatementPtrOutput struct{ *pulumi.OutputState }

func (WebAclGeoMatchStatementPtrOutput) CountryCodes added in v0.72.0

An array of two-character country codes that you want to match against, for example, `[ "US", "CN" ]` , from the alpha-2 country ISO codes of the ISO 3166 international standard.

When you use a geo match statement just for the region and country labels that it adds to requests, you still have to supply a country code for the rule to evaluate. In this case, you configure the rule to only count matching requests, but it will still generate logging and count metrics for any matches. You can reduce the logging and metrics that the rule produces by specifying a country that's unlikely to be a source of traffic to your site.

func (WebAclGeoMatchStatementPtrOutput) Elem added in v0.72.0

func (WebAclGeoMatchStatementPtrOutput) ElementType added in v0.72.0

func (WebAclGeoMatchStatementPtrOutput) ForwardedIpConfig added in v0.72.0

The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

func (WebAclGeoMatchStatementPtrOutput) ToWebAclGeoMatchStatementPtrOutput added in v0.72.0

func (o WebAclGeoMatchStatementPtrOutput) ToWebAclGeoMatchStatementPtrOutput() WebAclGeoMatchStatementPtrOutput

func (WebAclGeoMatchStatementPtrOutput) ToWebAclGeoMatchStatementPtrOutputWithContext added in v0.72.0

func (o WebAclGeoMatchStatementPtrOutput) ToWebAclGeoMatchStatementPtrOutputWithContext(ctx context.Context) WebAclGeoMatchStatementPtrOutput

type WebAclHeaderMatchPattern added in v0.72.0

type WebAclHeaderMatchPattern struct {
	// Inspect all parts of the web request headers.
	All interface{} `pulumi:"all"`
	// Inspect only the headers whose keys don't match any of the strings specified here.
	ExcludedHeaders []string `pulumi:"excludedHeaders"`
	// Inspect only the headers that have a key that matches one of the strings specified here.
	IncludedHeaders []string `pulumi:"includedHeaders"`
}

The pattern to look for in the request headers.

type WebAclHeaderMatchPatternArgs added in v0.72.0

type WebAclHeaderMatchPatternArgs struct {
	// Inspect all parts of the web request headers.
	All pulumi.Input `pulumi:"all"`
	// Inspect only the headers whose keys don't match any of the strings specified here.
	ExcludedHeaders pulumi.StringArrayInput `pulumi:"excludedHeaders"`
	// Inspect only the headers that have a key that matches one of the strings specified here.
	IncludedHeaders pulumi.StringArrayInput `pulumi:"includedHeaders"`
}

The pattern to look for in the request headers.

func (WebAclHeaderMatchPatternArgs) ElementType added in v0.72.0

func (WebAclHeaderMatchPatternArgs) ToWebAclHeaderMatchPatternOutput added in v0.72.0

func (i WebAclHeaderMatchPatternArgs) ToWebAclHeaderMatchPatternOutput() WebAclHeaderMatchPatternOutput

func (WebAclHeaderMatchPatternArgs) ToWebAclHeaderMatchPatternOutputWithContext added in v0.72.0

func (i WebAclHeaderMatchPatternArgs) ToWebAclHeaderMatchPatternOutputWithContext(ctx context.Context) WebAclHeaderMatchPatternOutput

func (WebAclHeaderMatchPatternArgs) ToWebAclHeaderMatchPatternPtrOutput added in v0.72.0

func (i WebAclHeaderMatchPatternArgs) ToWebAclHeaderMatchPatternPtrOutput() WebAclHeaderMatchPatternPtrOutput

func (WebAclHeaderMatchPatternArgs) ToWebAclHeaderMatchPatternPtrOutputWithContext added in v0.72.0

func (i WebAclHeaderMatchPatternArgs) ToWebAclHeaderMatchPatternPtrOutputWithContext(ctx context.Context) WebAclHeaderMatchPatternPtrOutput

type WebAclHeaderMatchPatternInput added in v0.72.0

type WebAclHeaderMatchPatternInput interface {
	pulumi.Input

	ToWebAclHeaderMatchPatternOutput() WebAclHeaderMatchPatternOutput
	ToWebAclHeaderMatchPatternOutputWithContext(context.Context) WebAclHeaderMatchPatternOutput
}

WebAclHeaderMatchPatternInput is an input type that accepts WebAclHeaderMatchPatternArgs and WebAclHeaderMatchPatternOutput values. You can construct a concrete instance of `WebAclHeaderMatchPatternInput` via:

WebAclHeaderMatchPatternArgs{...}

type WebAclHeaderMatchPatternOutput added in v0.72.0

type WebAclHeaderMatchPatternOutput struct{ *pulumi.OutputState }

The pattern to look for in the request headers.

func (WebAclHeaderMatchPatternOutput) All added in v0.72.0

Inspect all parts of the web request headers.

func (WebAclHeaderMatchPatternOutput) ElementType added in v0.72.0

func (WebAclHeaderMatchPatternOutput) ExcludedHeaders added in v0.72.0

Inspect only the headers whose keys don't match any of the strings specified here.

func (WebAclHeaderMatchPatternOutput) IncludedHeaders added in v0.72.0

Inspect only the headers that have a key that matches one of the strings specified here.

func (WebAclHeaderMatchPatternOutput) ToWebAclHeaderMatchPatternOutput added in v0.72.0

func (o WebAclHeaderMatchPatternOutput) ToWebAclHeaderMatchPatternOutput() WebAclHeaderMatchPatternOutput

func (WebAclHeaderMatchPatternOutput) ToWebAclHeaderMatchPatternOutputWithContext added in v0.72.0

func (o WebAclHeaderMatchPatternOutput) ToWebAclHeaderMatchPatternOutputWithContext(ctx context.Context) WebAclHeaderMatchPatternOutput

func (WebAclHeaderMatchPatternOutput) ToWebAclHeaderMatchPatternPtrOutput added in v0.72.0

func (o WebAclHeaderMatchPatternOutput) ToWebAclHeaderMatchPatternPtrOutput() WebAclHeaderMatchPatternPtrOutput

func (WebAclHeaderMatchPatternOutput) ToWebAclHeaderMatchPatternPtrOutputWithContext added in v0.72.0

func (o WebAclHeaderMatchPatternOutput) ToWebAclHeaderMatchPatternPtrOutputWithContext(ctx context.Context) WebAclHeaderMatchPatternPtrOutput

type WebAclHeaderMatchPatternPtrInput added in v0.72.0

type WebAclHeaderMatchPatternPtrInput interface {
	pulumi.Input

	ToWebAclHeaderMatchPatternPtrOutput() WebAclHeaderMatchPatternPtrOutput
	ToWebAclHeaderMatchPatternPtrOutputWithContext(context.Context) WebAclHeaderMatchPatternPtrOutput
}

WebAclHeaderMatchPatternPtrInput is an input type that accepts WebAclHeaderMatchPatternArgs, WebAclHeaderMatchPatternPtr and WebAclHeaderMatchPatternPtrOutput values. You can construct a concrete instance of `WebAclHeaderMatchPatternPtrInput` via:

        WebAclHeaderMatchPatternArgs{...}

or:

        nil

func WebAclHeaderMatchPatternPtr added in v0.72.0

func WebAclHeaderMatchPatternPtr(v *WebAclHeaderMatchPatternArgs) WebAclHeaderMatchPatternPtrInput

type WebAclHeaderMatchPatternPtrOutput added in v0.72.0

type WebAclHeaderMatchPatternPtrOutput struct{ *pulumi.OutputState }

func (WebAclHeaderMatchPatternPtrOutput) All added in v0.72.0

Inspect all parts of the web request headers.

func (WebAclHeaderMatchPatternPtrOutput) Elem added in v0.72.0

func (WebAclHeaderMatchPatternPtrOutput) ElementType added in v0.72.0

func (WebAclHeaderMatchPatternPtrOutput) ExcludedHeaders added in v0.72.0

Inspect only the headers whose keys don't match any of the strings specified here.

func (WebAclHeaderMatchPatternPtrOutput) IncludedHeaders added in v0.72.0

Inspect only the headers that have a key that matches one of the strings specified here.

func (WebAclHeaderMatchPatternPtrOutput) ToWebAclHeaderMatchPatternPtrOutput added in v0.72.0

func (o WebAclHeaderMatchPatternPtrOutput) ToWebAclHeaderMatchPatternPtrOutput() WebAclHeaderMatchPatternPtrOutput

func (WebAclHeaderMatchPatternPtrOutput) ToWebAclHeaderMatchPatternPtrOutputWithContext added in v0.72.0

func (o WebAclHeaderMatchPatternPtrOutput) ToWebAclHeaderMatchPatternPtrOutputWithContext(ctx context.Context) WebAclHeaderMatchPatternPtrOutput

type WebAclHeaders added in v0.72.0

type WebAclHeaders struct {
	// The filter to use to identify the subset of headers to inspect in a web request.
	//
	// You must specify exactly one setting: either `All` , `IncludedHeaders` , or `ExcludedHeaders` .
	//
	// Example JSON: `"MatchPattern": { "ExcludedHeaders": [ "KeyToExclude1", "KeyToExclude2" ] }`
	MatchPattern WebAclHeaderMatchPattern `pulumi:"matchPattern"`
	// The parts of the headers to match with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.
	//
	// `All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.
	MatchScope WebAclMapMatchScope `pulumi:"matchScope"`
	// What AWS WAF should do if the headers of the request are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request headers when they exceed 8 KB (8192 bytes) or 200 total headers. The underlying host service forwards a maximum of 200 headers and at most 8 KB of header contents to AWS WAF .
	//
	// The options for oversize handling are the following:
	//
	// - `CONTINUE` - Inspect the available headers normally, according to the rule inspection criteria.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	OversizeHandling WebAclOversizeHandling `pulumi:"oversizeHandling"`
}

Includes headers of a web request.

type WebAclHeadersArgs added in v0.72.0

type WebAclHeadersArgs struct {
	// The filter to use to identify the subset of headers to inspect in a web request.
	//
	// You must specify exactly one setting: either `All` , `IncludedHeaders` , or `ExcludedHeaders` .
	//
	// Example JSON: `"MatchPattern": { "ExcludedHeaders": [ "KeyToExclude1", "KeyToExclude2" ] }`
	MatchPattern WebAclHeaderMatchPatternInput `pulumi:"matchPattern"`
	// The parts of the headers to match with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.
	//
	// `All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.
	MatchScope WebAclMapMatchScopeInput `pulumi:"matchScope"`
	// What AWS WAF should do if the headers of the request are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request headers when they exceed 8 KB (8192 bytes) or 200 total headers. The underlying host service forwards a maximum of 200 headers and at most 8 KB of header contents to AWS WAF .
	//
	// The options for oversize handling are the following:
	//
	// - `CONTINUE` - Inspect the available headers normally, according to the rule inspection criteria.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	OversizeHandling WebAclOversizeHandlingInput `pulumi:"oversizeHandling"`
}

Includes headers of a web request.

func (WebAclHeadersArgs) ElementType added in v0.72.0

func (WebAclHeadersArgs) ElementType() reflect.Type

func (WebAclHeadersArgs) ToWebAclHeadersOutput added in v0.72.0

func (i WebAclHeadersArgs) ToWebAclHeadersOutput() WebAclHeadersOutput

func (WebAclHeadersArgs) ToWebAclHeadersOutputWithContext added in v0.72.0

func (i WebAclHeadersArgs) ToWebAclHeadersOutputWithContext(ctx context.Context) WebAclHeadersOutput

func (WebAclHeadersArgs) ToWebAclHeadersPtrOutput added in v0.72.0

func (i WebAclHeadersArgs) ToWebAclHeadersPtrOutput() WebAclHeadersPtrOutput

func (WebAclHeadersArgs) ToWebAclHeadersPtrOutputWithContext added in v0.72.0

func (i WebAclHeadersArgs) ToWebAclHeadersPtrOutputWithContext(ctx context.Context) WebAclHeadersPtrOutput

type WebAclHeadersInput added in v0.72.0

type WebAclHeadersInput interface {
	pulumi.Input

	ToWebAclHeadersOutput() WebAclHeadersOutput
	ToWebAclHeadersOutputWithContext(context.Context) WebAclHeadersOutput
}

WebAclHeadersInput is an input type that accepts WebAclHeadersArgs and WebAclHeadersOutput values. You can construct a concrete instance of `WebAclHeadersInput` via:

WebAclHeadersArgs{...}

type WebAclHeadersOutput added in v0.72.0

type WebAclHeadersOutput struct{ *pulumi.OutputState }

Includes headers of a web request.

func (WebAclHeadersOutput) ElementType added in v0.72.0

func (WebAclHeadersOutput) ElementType() reflect.Type

func (WebAclHeadersOutput) MatchPattern added in v0.72.0

The filter to use to identify the subset of headers to inspect in a web request.

You must specify exactly one setting: either `All` , `IncludedHeaders` , or `ExcludedHeaders` .

Example JSON: `"MatchPattern": { "ExcludedHeaders": [ "KeyToExclude1", "KeyToExclude2" ] }`

func (WebAclHeadersOutput) MatchScope added in v0.72.0

The parts of the headers to match with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.

`All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.

func (WebAclHeadersOutput) OversizeHandling added in v0.72.0

What AWS WAF should do if the headers of the request are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request headers when they exceed 8 KB (8192 bytes) or 200 total headers. The underlying host service forwards a maximum of 200 headers and at most 8 KB of header contents to AWS WAF .

The options for oversize handling are the following:

- `CONTINUE` - Inspect the available headers normally, according to the rule inspection criteria. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (WebAclHeadersOutput) ToWebAclHeadersOutput added in v0.72.0

func (o WebAclHeadersOutput) ToWebAclHeadersOutput() WebAclHeadersOutput

func (WebAclHeadersOutput) ToWebAclHeadersOutputWithContext added in v0.72.0

func (o WebAclHeadersOutput) ToWebAclHeadersOutputWithContext(ctx context.Context) WebAclHeadersOutput

func (WebAclHeadersOutput) ToWebAclHeadersPtrOutput added in v0.72.0

func (o WebAclHeadersOutput) ToWebAclHeadersPtrOutput() WebAclHeadersPtrOutput

func (WebAclHeadersOutput) ToWebAclHeadersPtrOutputWithContext added in v0.72.0

func (o WebAclHeadersOutput) ToWebAclHeadersPtrOutputWithContext(ctx context.Context) WebAclHeadersPtrOutput

type WebAclHeadersPtrInput added in v0.72.0

type WebAclHeadersPtrInput interface {
	pulumi.Input

	ToWebAclHeadersPtrOutput() WebAclHeadersPtrOutput
	ToWebAclHeadersPtrOutputWithContext(context.Context) WebAclHeadersPtrOutput
}

WebAclHeadersPtrInput is an input type that accepts WebAclHeadersArgs, WebAclHeadersPtr and WebAclHeadersPtrOutput values. You can construct a concrete instance of `WebAclHeadersPtrInput` via:

        WebAclHeadersArgs{...}

or:

        nil

func WebAclHeadersPtr added in v0.72.0

func WebAclHeadersPtr(v *WebAclHeadersArgs) WebAclHeadersPtrInput

type WebAclHeadersPtrOutput added in v0.72.0

type WebAclHeadersPtrOutput struct{ *pulumi.OutputState }

func (WebAclHeadersPtrOutput) Elem added in v0.72.0

func (WebAclHeadersPtrOutput) ElementType added in v0.72.0

func (WebAclHeadersPtrOutput) ElementType() reflect.Type

func (WebAclHeadersPtrOutput) MatchPattern added in v0.72.0

The filter to use to identify the subset of headers to inspect in a web request.

You must specify exactly one setting: either `All` , `IncludedHeaders` , or `ExcludedHeaders` .

Example JSON: `"MatchPattern": { "ExcludedHeaders": [ "KeyToExclude1", "KeyToExclude2" ] }`

func (WebAclHeadersPtrOutput) MatchScope added in v0.72.0

The parts of the headers to match with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.

`All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.

func (WebAclHeadersPtrOutput) OversizeHandling added in v0.72.0

What AWS WAF should do if the headers of the request are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request headers when they exceed 8 KB (8192 bytes) or 200 total headers. The underlying host service forwards a maximum of 200 headers and at most 8 KB of header contents to AWS WAF .

The options for oversize handling are the following:

- `CONTINUE` - Inspect the available headers normally, according to the rule inspection criteria. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (WebAclHeadersPtrOutput) ToWebAclHeadersPtrOutput added in v0.72.0

func (o WebAclHeadersPtrOutput) ToWebAclHeadersPtrOutput() WebAclHeadersPtrOutput

func (WebAclHeadersPtrOutput) ToWebAclHeadersPtrOutputWithContext added in v0.72.0

func (o WebAclHeadersPtrOutput) ToWebAclHeadersPtrOutputWithContext(ctx context.Context) WebAclHeadersPtrOutput

type WebAclImmunityTimeProperty added in v0.72.0

type WebAclImmunityTimeProperty struct {
	// The amount of time, in seconds, that a `CAPTCHA` or challenge timestamp is considered valid by AWS WAF . The default setting is 300.
	//
	// For the Challenge action, the minimum setting is 300.
	ImmunityTime int `pulumi:"immunityTime"`
}

type WebAclImmunityTimePropertyArgs added in v0.72.0

type WebAclImmunityTimePropertyArgs struct {
	// The amount of time, in seconds, that a `CAPTCHA` or challenge timestamp is considered valid by AWS WAF . The default setting is 300.
	//
	// For the Challenge action, the minimum setting is 300.
	ImmunityTime pulumi.IntInput `pulumi:"immunityTime"`
}

func (WebAclImmunityTimePropertyArgs) ElementType added in v0.72.0

func (WebAclImmunityTimePropertyArgs) ToWebAclImmunityTimePropertyOutput added in v0.72.0

func (i WebAclImmunityTimePropertyArgs) ToWebAclImmunityTimePropertyOutput() WebAclImmunityTimePropertyOutput

func (WebAclImmunityTimePropertyArgs) ToWebAclImmunityTimePropertyOutputWithContext added in v0.72.0

func (i WebAclImmunityTimePropertyArgs) ToWebAclImmunityTimePropertyOutputWithContext(ctx context.Context) WebAclImmunityTimePropertyOutput

func (WebAclImmunityTimePropertyArgs) ToWebAclImmunityTimePropertyPtrOutput added in v0.72.0

func (i WebAclImmunityTimePropertyArgs) ToWebAclImmunityTimePropertyPtrOutput() WebAclImmunityTimePropertyPtrOutput

func (WebAclImmunityTimePropertyArgs) ToWebAclImmunityTimePropertyPtrOutputWithContext added in v0.72.0

func (i WebAclImmunityTimePropertyArgs) ToWebAclImmunityTimePropertyPtrOutputWithContext(ctx context.Context) WebAclImmunityTimePropertyPtrOutput

type WebAclImmunityTimePropertyInput added in v0.72.0

type WebAclImmunityTimePropertyInput interface {
	pulumi.Input

	ToWebAclImmunityTimePropertyOutput() WebAclImmunityTimePropertyOutput
	ToWebAclImmunityTimePropertyOutputWithContext(context.Context) WebAclImmunityTimePropertyOutput
}

WebAclImmunityTimePropertyInput is an input type that accepts WebAclImmunityTimePropertyArgs and WebAclImmunityTimePropertyOutput values. You can construct a concrete instance of `WebAclImmunityTimePropertyInput` via:

WebAclImmunityTimePropertyArgs{...}

type WebAclImmunityTimePropertyOutput added in v0.72.0

type WebAclImmunityTimePropertyOutput struct{ *pulumi.OutputState }

func (WebAclImmunityTimePropertyOutput) ElementType added in v0.72.0

func (WebAclImmunityTimePropertyOutput) ImmunityTime added in v0.72.0

The amount of time, in seconds, that a `CAPTCHA` or challenge timestamp is considered valid by AWS WAF . The default setting is 300.

For the Challenge action, the minimum setting is 300.

func (WebAclImmunityTimePropertyOutput) ToWebAclImmunityTimePropertyOutput added in v0.72.0

func (o WebAclImmunityTimePropertyOutput) ToWebAclImmunityTimePropertyOutput() WebAclImmunityTimePropertyOutput

func (WebAclImmunityTimePropertyOutput) ToWebAclImmunityTimePropertyOutputWithContext added in v0.72.0

func (o WebAclImmunityTimePropertyOutput) ToWebAclImmunityTimePropertyOutputWithContext(ctx context.Context) WebAclImmunityTimePropertyOutput

func (WebAclImmunityTimePropertyOutput) ToWebAclImmunityTimePropertyPtrOutput added in v0.72.0

func (o WebAclImmunityTimePropertyOutput) ToWebAclImmunityTimePropertyPtrOutput() WebAclImmunityTimePropertyPtrOutput

func (WebAclImmunityTimePropertyOutput) ToWebAclImmunityTimePropertyPtrOutputWithContext added in v0.72.0

func (o WebAclImmunityTimePropertyOutput) ToWebAclImmunityTimePropertyPtrOutputWithContext(ctx context.Context) WebAclImmunityTimePropertyPtrOutput

type WebAclImmunityTimePropertyPtrInput added in v0.72.0

type WebAclImmunityTimePropertyPtrInput interface {
	pulumi.Input

	ToWebAclImmunityTimePropertyPtrOutput() WebAclImmunityTimePropertyPtrOutput
	ToWebAclImmunityTimePropertyPtrOutputWithContext(context.Context) WebAclImmunityTimePropertyPtrOutput
}

WebAclImmunityTimePropertyPtrInput is an input type that accepts WebAclImmunityTimePropertyArgs, WebAclImmunityTimePropertyPtr and WebAclImmunityTimePropertyPtrOutput values. You can construct a concrete instance of `WebAclImmunityTimePropertyPtrInput` via:

        WebAclImmunityTimePropertyArgs{...}

or:

        nil

func WebAclImmunityTimePropertyPtr added in v0.72.0

type WebAclImmunityTimePropertyPtrOutput added in v0.72.0

type WebAclImmunityTimePropertyPtrOutput struct{ *pulumi.OutputState }

func (WebAclImmunityTimePropertyPtrOutput) Elem added in v0.72.0

func (WebAclImmunityTimePropertyPtrOutput) ElementType added in v0.72.0

func (WebAclImmunityTimePropertyPtrOutput) ImmunityTime added in v0.72.0

The amount of time, in seconds, that a `CAPTCHA` or challenge timestamp is considered valid by AWS WAF . The default setting is 300.

For the Challenge action, the minimum setting is 300.

func (WebAclImmunityTimePropertyPtrOutput) ToWebAclImmunityTimePropertyPtrOutput added in v0.72.0

func (o WebAclImmunityTimePropertyPtrOutput) ToWebAclImmunityTimePropertyPtrOutput() WebAclImmunityTimePropertyPtrOutput

func (WebAclImmunityTimePropertyPtrOutput) ToWebAclImmunityTimePropertyPtrOutputWithContext added in v0.72.0

func (o WebAclImmunityTimePropertyPtrOutput) ToWebAclImmunityTimePropertyPtrOutputWithContext(ctx context.Context) WebAclImmunityTimePropertyPtrOutput

type WebAclInput added in v0.72.0

type WebAclInput interface {
	pulumi.Input

	ToWebAclOutput() WebAclOutput
	ToWebAclOutputWithContext(ctx context.Context) WebAclOutput
}

type WebAclIpSetForwardedIpConfiguration added in v0.72.0

type WebAclIpSetForwardedIpConfiguration struct {
	// The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	//
	// You can specify the following fallback behaviors:
	//
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	FallbackBehavior WebAclIpSetForwardedIpConfigurationFallbackBehavior `pulumi:"fallbackBehavior"`
	// The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	HeaderName string `pulumi:"headerName"`
	// The position in the header to search for the IP address. The header can contain IP addresses of the original client and also of proxies. For example, the header value could be `10.1.1.1, 127.0.0.0, 10.10.10.10` where the first IP address identifies the original client and the rest identify proxies that the request went through.
	//
	// The options for this setting are the following:
	//
	// - FIRST - Inspect the first IP address in the list of IP addresses in the header. This is usually the client's original IP.
	// - LAST - Inspect the last IP address in the list of IP addresses in the header.
	// - ANY - Inspect all IP addresses in the header for a match. If the header contains more than 10 IP addresses, AWS WAF inspects the last 10.
	Position WebAclIpSetForwardedIpConfigurationPosition `pulumi:"position"`
}

type WebAclIpSetForwardedIpConfigurationArgs added in v0.72.0

type WebAclIpSetForwardedIpConfigurationArgs struct {
	// The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	//
	// You can specify the following fallback behaviors:
	//
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	FallbackBehavior WebAclIpSetForwardedIpConfigurationFallbackBehaviorInput `pulumi:"fallbackBehavior"`
	// The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	HeaderName pulumi.StringInput `pulumi:"headerName"`
	// The position in the header to search for the IP address. The header can contain IP addresses of the original client and also of proxies. For example, the header value could be `10.1.1.1, 127.0.0.0, 10.10.10.10` where the first IP address identifies the original client and the rest identify proxies that the request went through.
	//
	// The options for this setting are the following:
	//
	// - FIRST - Inspect the first IP address in the list of IP addresses in the header. This is usually the client's original IP.
	// - LAST - Inspect the last IP address in the list of IP addresses in the header.
	// - ANY - Inspect all IP addresses in the header for a match. If the header contains more than 10 IP addresses, AWS WAF inspects the last 10.
	Position WebAclIpSetForwardedIpConfigurationPositionInput `pulumi:"position"`
}

func (WebAclIpSetForwardedIpConfigurationArgs) ElementType added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationArgs) ToWebAclIpSetForwardedIpConfigurationOutput added in v0.72.0

func (i WebAclIpSetForwardedIpConfigurationArgs) ToWebAclIpSetForwardedIpConfigurationOutput() WebAclIpSetForwardedIpConfigurationOutput

func (WebAclIpSetForwardedIpConfigurationArgs) ToWebAclIpSetForwardedIpConfigurationOutputWithContext added in v0.72.0

func (i WebAclIpSetForwardedIpConfigurationArgs) ToWebAclIpSetForwardedIpConfigurationOutputWithContext(ctx context.Context) WebAclIpSetForwardedIpConfigurationOutput

func (WebAclIpSetForwardedIpConfigurationArgs) ToWebAclIpSetForwardedIpConfigurationPtrOutput added in v0.72.0

func (i WebAclIpSetForwardedIpConfigurationArgs) ToWebAclIpSetForwardedIpConfigurationPtrOutput() WebAclIpSetForwardedIpConfigurationPtrOutput

func (WebAclIpSetForwardedIpConfigurationArgs) ToWebAclIpSetForwardedIpConfigurationPtrOutputWithContext added in v0.72.0

func (i WebAclIpSetForwardedIpConfigurationArgs) ToWebAclIpSetForwardedIpConfigurationPtrOutputWithContext(ctx context.Context) WebAclIpSetForwardedIpConfigurationPtrOutput

type WebAclIpSetForwardedIpConfigurationFallbackBehavior added in v0.72.0

type WebAclIpSetForwardedIpConfigurationFallbackBehavior string

The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

You can specify the following fallback behaviors:

- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (WebAclIpSetForwardedIpConfigurationFallbackBehavior) ElementType added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationFallbackBehavior) ToStringOutput added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationFallbackBehavior) ToStringOutputWithContext added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationFallbackBehavior) ToStringPtrOutput added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationFallbackBehavior) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationFallbackBehavior) ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput added in v0.72.0

func (e WebAclIpSetForwardedIpConfigurationFallbackBehavior) ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput() WebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput

func (WebAclIpSetForwardedIpConfigurationFallbackBehavior) ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorOutputWithContext added in v0.72.0

func (e WebAclIpSetForwardedIpConfigurationFallbackBehavior) ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorOutputWithContext(ctx context.Context) WebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput

func (WebAclIpSetForwardedIpConfigurationFallbackBehavior) ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput added in v0.72.0

func (e WebAclIpSetForwardedIpConfigurationFallbackBehavior) ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput() WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput

func (WebAclIpSetForwardedIpConfigurationFallbackBehavior) ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext added in v0.72.0

func (e WebAclIpSetForwardedIpConfigurationFallbackBehavior) ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext(ctx context.Context) WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput

type WebAclIpSetForwardedIpConfigurationFallbackBehaviorInput added in v0.72.0

type WebAclIpSetForwardedIpConfigurationFallbackBehaviorInput interface {
	pulumi.Input

	ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput() WebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput
	ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorOutputWithContext(context.Context) WebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput
}

WebAclIpSetForwardedIpConfigurationFallbackBehaviorInput is an input type that accepts values of the WebAclIpSetForwardedIpConfigurationFallbackBehavior enum A concrete instance of `WebAclIpSetForwardedIpConfigurationFallbackBehaviorInput` can be one of the following:

WebAclIpSetForwardedIpConfigurationFallbackBehaviorMatch
WebAclIpSetForwardedIpConfigurationFallbackBehaviorNoMatch

type WebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput added in v0.72.0

type WebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput struct{ *pulumi.OutputState }

func (WebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput) ElementType added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToStringOutput added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToStringOutputWithContext added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToStringPtrOutput added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorOutputWithContext added in v0.72.0

func (o WebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorOutputWithContext(ctx context.Context) WebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput

func (WebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext added in v0.72.0

func (o WebAclIpSetForwardedIpConfigurationFallbackBehaviorOutput) ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext(ctx context.Context) WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput

type WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrInput added in v0.72.0

type WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrInput interface {
	pulumi.Input

	ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput() WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput
	ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext(context.Context) WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput
}

func WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtr added in v0.72.0

func WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtr(v string) WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrInput

type WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput added in v0.72.0

type WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput struct{ *pulumi.OutputState }

func (WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput) Elem added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput) ElementType added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput) ToStringPtrOutput added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput) ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput) ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext added in v0.72.0

func (o WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput) ToWebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutputWithContext(ctx context.Context) WebAclIpSetForwardedIpConfigurationFallbackBehaviorPtrOutput

type WebAclIpSetForwardedIpConfigurationInput added in v0.72.0

type WebAclIpSetForwardedIpConfigurationInput interface {
	pulumi.Input

	ToWebAclIpSetForwardedIpConfigurationOutput() WebAclIpSetForwardedIpConfigurationOutput
	ToWebAclIpSetForwardedIpConfigurationOutputWithContext(context.Context) WebAclIpSetForwardedIpConfigurationOutput
}

WebAclIpSetForwardedIpConfigurationInput is an input type that accepts WebAclIpSetForwardedIpConfigurationArgs and WebAclIpSetForwardedIpConfigurationOutput values. You can construct a concrete instance of `WebAclIpSetForwardedIpConfigurationInput` via:

WebAclIpSetForwardedIpConfigurationArgs{...}

type WebAclIpSetForwardedIpConfigurationOutput added in v0.72.0

type WebAclIpSetForwardedIpConfigurationOutput struct{ *pulumi.OutputState }

func (WebAclIpSetForwardedIpConfigurationOutput) ElementType added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationOutput) FallbackBehavior added in v0.72.0

The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

You can specify the following fallback behaviors:

- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (WebAclIpSetForwardedIpConfigurationOutput) HeaderName added in v0.72.0

The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

func (WebAclIpSetForwardedIpConfigurationOutput) Position added in v0.72.0

The position in the header to search for the IP address. The header can contain IP addresses of the original client and also of proxies. For example, the header value could be `10.1.1.1, 127.0.0.0, 10.10.10.10` where the first IP address identifies the original client and the rest identify proxies that the request went through.

The options for this setting are the following:

- FIRST - Inspect the first IP address in the list of IP addresses in the header. This is usually the client's original IP. - LAST - Inspect the last IP address in the list of IP addresses in the header. - ANY - Inspect all IP addresses in the header for a match. If the header contains more than 10 IP addresses, AWS WAF inspects the last 10.

func (WebAclIpSetForwardedIpConfigurationOutput) ToWebAclIpSetForwardedIpConfigurationOutput added in v0.72.0

func (o WebAclIpSetForwardedIpConfigurationOutput) ToWebAclIpSetForwardedIpConfigurationOutput() WebAclIpSetForwardedIpConfigurationOutput

func (WebAclIpSetForwardedIpConfigurationOutput) ToWebAclIpSetForwardedIpConfigurationOutputWithContext added in v0.72.0

func (o WebAclIpSetForwardedIpConfigurationOutput) ToWebAclIpSetForwardedIpConfigurationOutputWithContext(ctx context.Context) WebAclIpSetForwardedIpConfigurationOutput

func (WebAclIpSetForwardedIpConfigurationOutput) ToWebAclIpSetForwardedIpConfigurationPtrOutput added in v0.72.0

func (o WebAclIpSetForwardedIpConfigurationOutput) ToWebAclIpSetForwardedIpConfigurationPtrOutput() WebAclIpSetForwardedIpConfigurationPtrOutput

func (WebAclIpSetForwardedIpConfigurationOutput) ToWebAclIpSetForwardedIpConfigurationPtrOutputWithContext added in v0.72.0

func (o WebAclIpSetForwardedIpConfigurationOutput) ToWebAclIpSetForwardedIpConfigurationPtrOutputWithContext(ctx context.Context) WebAclIpSetForwardedIpConfigurationPtrOutput

type WebAclIpSetForwardedIpConfigurationPosition added in v0.72.0

type WebAclIpSetForwardedIpConfigurationPosition string

The position in the header to search for the IP address. The header can contain IP addresses of the original client and also of proxies. For example, the header value could be `10.1.1.1, 127.0.0.0, 10.10.10.10` where the first IP address identifies the original client and the rest identify proxies that the request went through.

The options for this setting are the following:

- FIRST - Inspect the first IP address in the list of IP addresses in the header. This is usually the client's original IP. - LAST - Inspect the last IP address in the list of IP addresses in the header. - ANY - Inspect all IP addresses in the header for a match. If the header contains more than 10 IP addresses, AWS WAF inspects the last 10.

func (WebAclIpSetForwardedIpConfigurationPosition) ElementType added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationPosition) ToStringOutput added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationPosition) ToStringOutputWithContext added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationPosition) ToStringPtrOutput added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationPosition) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationPosition) ToWebAclIpSetForwardedIpConfigurationPositionOutput added in v0.72.0

func (e WebAclIpSetForwardedIpConfigurationPosition) ToWebAclIpSetForwardedIpConfigurationPositionOutput() WebAclIpSetForwardedIpConfigurationPositionOutput

func (WebAclIpSetForwardedIpConfigurationPosition) ToWebAclIpSetForwardedIpConfigurationPositionOutputWithContext added in v0.72.0

func (e WebAclIpSetForwardedIpConfigurationPosition) ToWebAclIpSetForwardedIpConfigurationPositionOutputWithContext(ctx context.Context) WebAclIpSetForwardedIpConfigurationPositionOutput

func (WebAclIpSetForwardedIpConfigurationPosition) ToWebAclIpSetForwardedIpConfigurationPositionPtrOutput added in v0.72.0

func (e WebAclIpSetForwardedIpConfigurationPosition) ToWebAclIpSetForwardedIpConfigurationPositionPtrOutput() WebAclIpSetForwardedIpConfigurationPositionPtrOutput

func (WebAclIpSetForwardedIpConfigurationPosition) ToWebAclIpSetForwardedIpConfigurationPositionPtrOutputWithContext added in v0.72.0

func (e WebAclIpSetForwardedIpConfigurationPosition) ToWebAclIpSetForwardedIpConfigurationPositionPtrOutputWithContext(ctx context.Context) WebAclIpSetForwardedIpConfigurationPositionPtrOutput

type WebAclIpSetForwardedIpConfigurationPositionInput added in v0.72.0

type WebAclIpSetForwardedIpConfigurationPositionInput interface {
	pulumi.Input

	ToWebAclIpSetForwardedIpConfigurationPositionOutput() WebAclIpSetForwardedIpConfigurationPositionOutput
	ToWebAclIpSetForwardedIpConfigurationPositionOutputWithContext(context.Context) WebAclIpSetForwardedIpConfigurationPositionOutput
}

WebAclIpSetForwardedIpConfigurationPositionInput is an input type that accepts values of the WebAclIpSetForwardedIpConfigurationPosition enum A concrete instance of `WebAclIpSetForwardedIpConfigurationPositionInput` can be one of the following:

WebAclIpSetForwardedIpConfigurationPositionFirst
WebAclIpSetForwardedIpConfigurationPositionLast
WebAclIpSetForwardedIpConfigurationPositionAny

type WebAclIpSetForwardedIpConfigurationPositionOutput added in v0.72.0

type WebAclIpSetForwardedIpConfigurationPositionOutput struct{ *pulumi.OutputState }

func (WebAclIpSetForwardedIpConfigurationPositionOutput) ElementType added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationPositionOutput) ToStringOutput added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationPositionOutput) ToStringOutputWithContext added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationPositionOutput) ToStringPtrOutput added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationPositionOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationPositionOutput) ToWebAclIpSetForwardedIpConfigurationPositionOutput added in v0.72.0

func (o WebAclIpSetForwardedIpConfigurationPositionOutput) ToWebAclIpSetForwardedIpConfigurationPositionOutput() WebAclIpSetForwardedIpConfigurationPositionOutput

func (WebAclIpSetForwardedIpConfigurationPositionOutput) ToWebAclIpSetForwardedIpConfigurationPositionOutputWithContext added in v0.72.0

func (o WebAclIpSetForwardedIpConfigurationPositionOutput) ToWebAclIpSetForwardedIpConfigurationPositionOutputWithContext(ctx context.Context) WebAclIpSetForwardedIpConfigurationPositionOutput

func (WebAclIpSetForwardedIpConfigurationPositionOutput) ToWebAclIpSetForwardedIpConfigurationPositionPtrOutput added in v0.72.0

func (o WebAclIpSetForwardedIpConfigurationPositionOutput) ToWebAclIpSetForwardedIpConfigurationPositionPtrOutput() WebAclIpSetForwardedIpConfigurationPositionPtrOutput

func (WebAclIpSetForwardedIpConfigurationPositionOutput) ToWebAclIpSetForwardedIpConfigurationPositionPtrOutputWithContext added in v0.72.0

func (o WebAclIpSetForwardedIpConfigurationPositionOutput) ToWebAclIpSetForwardedIpConfigurationPositionPtrOutputWithContext(ctx context.Context) WebAclIpSetForwardedIpConfigurationPositionPtrOutput

type WebAclIpSetForwardedIpConfigurationPositionPtrInput added in v0.72.0

type WebAclIpSetForwardedIpConfigurationPositionPtrInput interface {
	pulumi.Input

	ToWebAclIpSetForwardedIpConfigurationPositionPtrOutput() WebAclIpSetForwardedIpConfigurationPositionPtrOutput
	ToWebAclIpSetForwardedIpConfigurationPositionPtrOutputWithContext(context.Context) WebAclIpSetForwardedIpConfigurationPositionPtrOutput
}

func WebAclIpSetForwardedIpConfigurationPositionPtr added in v0.72.0

func WebAclIpSetForwardedIpConfigurationPositionPtr(v string) WebAclIpSetForwardedIpConfigurationPositionPtrInput

type WebAclIpSetForwardedIpConfigurationPositionPtrOutput added in v0.72.0

type WebAclIpSetForwardedIpConfigurationPositionPtrOutput struct{ *pulumi.OutputState }

func (WebAclIpSetForwardedIpConfigurationPositionPtrOutput) Elem added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationPositionPtrOutput) ElementType added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationPositionPtrOutput) ToStringPtrOutput added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationPositionPtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationPositionPtrOutput) ToWebAclIpSetForwardedIpConfigurationPositionPtrOutput added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationPositionPtrOutput) ToWebAclIpSetForwardedIpConfigurationPositionPtrOutputWithContext added in v0.72.0

func (o WebAclIpSetForwardedIpConfigurationPositionPtrOutput) ToWebAclIpSetForwardedIpConfigurationPositionPtrOutputWithContext(ctx context.Context) WebAclIpSetForwardedIpConfigurationPositionPtrOutput

type WebAclIpSetForwardedIpConfigurationPtrInput added in v0.72.0

type WebAclIpSetForwardedIpConfigurationPtrInput interface {
	pulumi.Input

	ToWebAclIpSetForwardedIpConfigurationPtrOutput() WebAclIpSetForwardedIpConfigurationPtrOutput
	ToWebAclIpSetForwardedIpConfigurationPtrOutputWithContext(context.Context) WebAclIpSetForwardedIpConfigurationPtrOutput
}

WebAclIpSetForwardedIpConfigurationPtrInput is an input type that accepts WebAclIpSetForwardedIpConfigurationArgs, WebAclIpSetForwardedIpConfigurationPtr and WebAclIpSetForwardedIpConfigurationPtrOutput values. You can construct a concrete instance of `WebAclIpSetForwardedIpConfigurationPtrInput` via:

        WebAclIpSetForwardedIpConfigurationArgs{...}

or:

        nil

type WebAclIpSetForwardedIpConfigurationPtrOutput added in v0.72.0

type WebAclIpSetForwardedIpConfigurationPtrOutput struct{ *pulumi.OutputState }

func (WebAclIpSetForwardedIpConfigurationPtrOutput) Elem added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationPtrOutput) ElementType added in v0.72.0

func (WebAclIpSetForwardedIpConfigurationPtrOutput) FallbackBehavior added in v0.72.0

The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

You can specify the following fallback behaviors:

- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (WebAclIpSetForwardedIpConfigurationPtrOutput) HeaderName added in v0.72.0

The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

func (WebAclIpSetForwardedIpConfigurationPtrOutput) Position added in v0.72.0

The position in the header to search for the IP address. The header can contain IP addresses of the original client and also of proxies. For example, the header value could be `10.1.1.1, 127.0.0.0, 10.10.10.10` where the first IP address identifies the original client and the rest identify proxies that the request went through.

The options for this setting are the following:

- FIRST - Inspect the first IP address in the list of IP addresses in the header. This is usually the client's original IP. - LAST - Inspect the last IP address in the list of IP addresses in the header. - ANY - Inspect all IP addresses in the header for a match. If the header contains more than 10 IP addresses, AWS WAF inspects the last 10.

func (WebAclIpSetForwardedIpConfigurationPtrOutput) ToWebAclIpSetForwardedIpConfigurationPtrOutput added in v0.72.0

func (o WebAclIpSetForwardedIpConfigurationPtrOutput) ToWebAclIpSetForwardedIpConfigurationPtrOutput() WebAclIpSetForwardedIpConfigurationPtrOutput

func (WebAclIpSetForwardedIpConfigurationPtrOutput) ToWebAclIpSetForwardedIpConfigurationPtrOutputWithContext added in v0.72.0

func (o WebAclIpSetForwardedIpConfigurationPtrOutput) ToWebAclIpSetForwardedIpConfigurationPtrOutputWithContext(ctx context.Context) WebAclIpSetForwardedIpConfigurationPtrOutput

type WebAclIpSetReferenceStatement added in v0.72.0

type WebAclIpSetReferenceStatement struct {
	// The Amazon Resource Name (ARN) of the `IPSet` that this statement references.
	Arn string `pulumi:"arn"`
	// The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	IpSetForwardedIpConfig *WebAclIpSetForwardedIpConfiguration `pulumi:"ipSetForwardedIpConfig"`
}

type WebAclIpSetReferenceStatementArgs added in v0.72.0

type WebAclIpSetReferenceStatementArgs struct {
	// The Amazon Resource Name (ARN) of the `IPSet` that this statement references.
	Arn pulumi.StringInput `pulumi:"arn"`
	// The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	IpSetForwardedIpConfig WebAclIpSetForwardedIpConfigurationPtrInput `pulumi:"ipSetForwardedIpConfig"`
}

func (WebAclIpSetReferenceStatementArgs) ElementType added in v0.72.0

func (WebAclIpSetReferenceStatementArgs) ToWebAclIpSetReferenceStatementOutput added in v0.72.0

func (i WebAclIpSetReferenceStatementArgs) ToWebAclIpSetReferenceStatementOutput() WebAclIpSetReferenceStatementOutput

func (WebAclIpSetReferenceStatementArgs) ToWebAclIpSetReferenceStatementOutputWithContext added in v0.72.0

func (i WebAclIpSetReferenceStatementArgs) ToWebAclIpSetReferenceStatementOutputWithContext(ctx context.Context) WebAclIpSetReferenceStatementOutput

func (WebAclIpSetReferenceStatementArgs) ToWebAclIpSetReferenceStatementPtrOutput added in v0.72.0

func (i WebAclIpSetReferenceStatementArgs) ToWebAclIpSetReferenceStatementPtrOutput() WebAclIpSetReferenceStatementPtrOutput

func (WebAclIpSetReferenceStatementArgs) ToWebAclIpSetReferenceStatementPtrOutputWithContext added in v0.72.0

func (i WebAclIpSetReferenceStatementArgs) ToWebAclIpSetReferenceStatementPtrOutputWithContext(ctx context.Context) WebAclIpSetReferenceStatementPtrOutput

type WebAclIpSetReferenceStatementInput added in v0.72.0

type WebAclIpSetReferenceStatementInput interface {
	pulumi.Input

	ToWebAclIpSetReferenceStatementOutput() WebAclIpSetReferenceStatementOutput
	ToWebAclIpSetReferenceStatementOutputWithContext(context.Context) WebAclIpSetReferenceStatementOutput
}

WebAclIpSetReferenceStatementInput is an input type that accepts WebAclIpSetReferenceStatementArgs and WebAclIpSetReferenceStatementOutput values. You can construct a concrete instance of `WebAclIpSetReferenceStatementInput` via:

WebAclIpSetReferenceStatementArgs{...}

type WebAclIpSetReferenceStatementOutput added in v0.72.0

type WebAclIpSetReferenceStatementOutput struct{ *pulumi.OutputState }

func (WebAclIpSetReferenceStatementOutput) Arn added in v0.72.0

The Amazon Resource Name (ARN) of the `IPSet` that this statement references.

func (WebAclIpSetReferenceStatementOutput) ElementType added in v0.72.0

func (WebAclIpSetReferenceStatementOutput) IpSetForwardedIpConfig added in v0.72.0

The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

func (WebAclIpSetReferenceStatementOutput) ToWebAclIpSetReferenceStatementOutput added in v0.72.0

func (o WebAclIpSetReferenceStatementOutput) ToWebAclIpSetReferenceStatementOutput() WebAclIpSetReferenceStatementOutput

func (WebAclIpSetReferenceStatementOutput) ToWebAclIpSetReferenceStatementOutputWithContext added in v0.72.0

func (o WebAclIpSetReferenceStatementOutput) ToWebAclIpSetReferenceStatementOutputWithContext(ctx context.Context) WebAclIpSetReferenceStatementOutput

func (WebAclIpSetReferenceStatementOutput) ToWebAclIpSetReferenceStatementPtrOutput added in v0.72.0

func (o WebAclIpSetReferenceStatementOutput) ToWebAclIpSetReferenceStatementPtrOutput() WebAclIpSetReferenceStatementPtrOutput

func (WebAclIpSetReferenceStatementOutput) ToWebAclIpSetReferenceStatementPtrOutputWithContext added in v0.72.0

func (o WebAclIpSetReferenceStatementOutput) ToWebAclIpSetReferenceStatementPtrOutputWithContext(ctx context.Context) WebAclIpSetReferenceStatementPtrOutput

type WebAclIpSetReferenceStatementPtrInput added in v0.72.0

type WebAclIpSetReferenceStatementPtrInput interface {
	pulumi.Input

	ToWebAclIpSetReferenceStatementPtrOutput() WebAclIpSetReferenceStatementPtrOutput
	ToWebAclIpSetReferenceStatementPtrOutputWithContext(context.Context) WebAclIpSetReferenceStatementPtrOutput
}

WebAclIpSetReferenceStatementPtrInput is an input type that accepts WebAclIpSetReferenceStatementArgs, WebAclIpSetReferenceStatementPtr and WebAclIpSetReferenceStatementPtrOutput values. You can construct a concrete instance of `WebAclIpSetReferenceStatementPtrInput` via:

        WebAclIpSetReferenceStatementArgs{...}

or:

        nil

type WebAclIpSetReferenceStatementPtrOutput added in v0.72.0

type WebAclIpSetReferenceStatementPtrOutput struct{ *pulumi.OutputState }

func (WebAclIpSetReferenceStatementPtrOutput) Arn added in v0.72.0

The Amazon Resource Name (ARN) of the `IPSet` that this statement references.

func (WebAclIpSetReferenceStatementPtrOutput) Elem added in v0.72.0

func (WebAclIpSetReferenceStatementPtrOutput) ElementType added in v0.72.0

func (WebAclIpSetReferenceStatementPtrOutput) IpSetForwardedIpConfig added in v0.72.0

The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

func (WebAclIpSetReferenceStatementPtrOutput) ToWebAclIpSetReferenceStatementPtrOutput added in v0.72.0

func (o WebAclIpSetReferenceStatementPtrOutput) ToWebAclIpSetReferenceStatementPtrOutput() WebAclIpSetReferenceStatementPtrOutput

func (WebAclIpSetReferenceStatementPtrOutput) ToWebAclIpSetReferenceStatementPtrOutputWithContext added in v0.72.0

func (o WebAclIpSetReferenceStatementPtrOutput) ToWebAclIpSetReferenceStatementPtrOutputWithContext(ctx context.Context) WebAclIpSetReferenceStatementPtrOutput

type WebAclJa3Fingerprint added in v0.99.0

type WebAclJa3Fingerprint struct {
	// The match status to assign to the web request if the request doesn't have a JA3 fingerprint.
	//
	// You can specify the following fallback behaviors:
	//
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	FallbackBehavior WebAclJa3FingerprintFallbackBehavior `pulumi:"fallbackBehavior"`
}

Includes the JA3 fingerprint of a web request.

type WebAclJa3FingerprintArgs added in v0.99.0

type WebAclJa3FingerprintArgs struct {
	// The match status to assign to the web request if the request doesn't have a JA3 fingerprint.
	//
	// You can specify the following fallback behaviors:
	//
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	FallbackBehavior WebAclJa3FingerprintFallbackBehaviorInput `pulumi:"fallbackBehavior"`
}

Includes the JA3 fingerprint of a web request.

func (WebAclJa3FingerprintArgs) ElementType added in v0.99.0

func (WebAclJa3FingerprintArgs) ElementType() reflect.Type

func (WebAclJa3FingerprintArgs) ToWebAclJa3FingerprintOutput added in v0.99.0

func (i WebAclJa3FingerprintArgs) ToWebAclJa3FingerprintOutput() WebAclJa3FingerprintOutput

func (WebAclJa3FingerprintArgs) ToWebAclJa3FingerprintOutputWithContext added in v0.99.0

func (i WebAclJa3FingerprintArgs) ToWebAclJa3FingerprintOutputWithContext(ctx context.Context) WebAclJa3FingerprintOutput

func (WebAclJa3FingerprintArgs) ToWebAclJa3FingerprintPtrOutput added in v0.99.0

func (i WebAclJa3FingerprintArgs) ToWebAclJa3FingerprintPtrOutput() WebAclJa3FingerprintPtrOutput

func (WebAclJa3FingerprintArgs) ToWebAclJa3FingerprintPtrOutputWithContext added in v0.99.0

func (i WebAclJa3FingerprintArgs) ToWebAclJa3FingerprintPtrOutputWithContext(ctx context.Context) WebAclJa3FingerprintPtrOutput

type WebAclJa3FingerprintFallbackBehavior added in v0.99.0

type WebAclJa3FingerprintFallbackBehavior string

The match status to assign to the web request if the request doesn't have a JA3 fingerprint.

You can specify the following fallback behaviors:

- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (WebAclJa3FingerprintFallbackBehavior) ElementType added in v0.99.0

func (WebAclJa3FingerprintFallbackBehavior) ToStringOutput added in v0.99.0

func (WebAclJa3FingerprintFallbackBehavior) ToStringOutputWithContext added in v0.99.0

func (e WebAclJa3FingerprintFallbackBehavior) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclJa3FingerprintFallbackBehavior) ToStringPtrOutput added in v0.99.0

func (WebAclJa3FingerprintFallbackBehavior) ToStringPtrOutputWithContext added in v0.99.0

func (e WebAclJa3FingerprintFallbackBehavior) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclJa3FingerprintFallbackBehavior) ToWebAclJa3FingerprintFallbackBehaviorOutput added in v0.99.0

func (e WebAclJa3FingerprintFallbackBehavior) ToWebAclJa3FingerprintFallbackBehaviorOutput() WebAclJa3FingerprintFallbackBehaviorOutput

func (WebAclJa3FingerprintFallbackBehavior) ToWebAclJa3FingerprintFallbackBehaviorOutputWithContext added in v0.99.0

func (e WebAclJa3FingerprintFallbackBehavior) ToWebAclJa3FingerprintFallbackBehaviorOutputWithContext(ctx context.Context) WebAclJa3FingerprintFallbackBehaviorOutput

func (WebAclJa3FingerprintFallbackBehavior) ToWebAclJa3FingerprintFallbackBehaviorPtrOutput added in v0.99.0

func (e WebAclJa3FingerprintFallbackBehavior) ToWebAclJa3FingerprintFallbackBehaviorPtrOutput() WebAclJa3FingerprintFallbackBehaviorPtrOutput

func (WebAclJa3FingerprintFallbackBehavior) ToWebAclJa3FingerprintFallbackBehaviorPtrOutputWithContext added in v0.99.0

func (e WebAclJa3FingerprintFallbackBehavior) ToWebAclJa3FingerprintFallbackBehaviorPtrOutputWithContext(ctx context.Context) WebAclJa3FingerprintFallbackBehaviorPtrOutput

type WebAclJa3FingerprintFallbackBehaviorInput added in v0.99.0

type WebAclJa3FingerprintFallbackBehaviorInput interface {
	pulumi.Input

	ToWebAclJa3FingerprintFallbackBehaviorOutput() WebAclJa3FingerprintFallbackBehaviorOutput
	ToWebAclJa3FingerprintFallbackBehaviorOutputWithContext(context.Context) WebAclJa3FingerprintFallbackBehaviorOutput
}

WebAclJa3FingerprintFallbackBehaviorInput is an input type that accepts values of the WebAclJa3FingerprintFallbackBehavior enum A concrete instance of `WebAclJa3FingerprintFallbackBehaviorInput` can be one of the following:

WebAclJa3FingerprintFallbackBehaviorMatch
WebAclJa3FingerprintFallbackBehaviorNoMatch

type WebAclJa3FingerprintFallbackBehaviorOutput added in v0.99.0

type WebAclJa3FingerprintFallbackBehaviorOutput struct{ *pulumi.OutputState }

func (WebAclJa3FingerprintFallbackBehaviorOutput) ElementType added in v0.99.0

func (WebAclJa3FingerprintFallbackBehaviorOutput) ToStringOutput added in v0.99.0

func (WebAclJa3FingerprintFallbackBehaviorOutput) ToStringOutputWithContext added in v0.99.0

func (WebAclJa3FingerprintFallbackBehaviorOutput) ToStringPtrOutput added in v0.99.0

func (WebAclJa3FingerprintFallbackBehaviorOutput) ToStringPtrOutputWithContext added in v0.99.0

func (WebAclJa3FingerprintFallbackBehaviorOutput) ToWebAclJa3FingerprintFallbackBehaviorOutput added in v0.99.0

func (o WebAclJa3FingerprintFallbackBehaviorOutput) ToWebAclJa3FingerprintFallbackBehaviorOutput() WebAclJa3FingerprintFallbackBehaviorOutput

func (WebAclJa3FingerprintFallbackBehaviorOutput) ToWebAclJa3FingerprintFallbackBehaviorOutputWithContext added in v0.99.0

func (o WebAclJa3FingerprintFallbackBehaviorOutput) ToWebAclJa3FingerprintFallbackBehaviorOutputWithContext(ctx context.Context) WebAclJa3FingerprintFallbackBehaviorOutput

func (WebAclJa3FingerprintFallbackBehaviorOutput) ToWebAclJa3FingerprintFallbackBehaviorPtrOutput added in v0.99.0

func (o WebAclJa3FingerprintFallbackBehaviorOutput) ToWebAclJa3FingerprintFallbackBehaviorPtrOutput() WebAclJa3FingerprintFallbackBehaviorPtrOutput

func (WebAclJa3FingerprintFallbackBehaviorOutput) ToWebAclJa3FingerprintFallbackBehaviorPtrOutputWithContext added in v0.99.0

func (o WebAclJa3FingerprintFallbackBehaviorOutput) ToWebAclJa3FingerprintFallbackBehaviorPtrOutputWithContext(ctx context.Context) WebAclJa3FingerprintFallbackBehaviorPtrOutput

type WebAclJa3FingerprintFallbackBehaviorPtrInput added in v0.99.0

type WebAclJa3FingerprintFallbackBehaviorPtrInput interface {
	pulumi.Input

	ToWebAclJa3FingerprintFallbackBehaviorPtrOutput() WebAclJa3FingerprintFallbackBehaviorPtrOutput
	ToWebAclJa3FingerprintFallbackBehaviorPtrOutputWithContext(context.Context) WebAclJa3FingerprintFallbackBehaviorPtrOutput
}

func WebAclJa3FingerprintFallbackBehaviorPtr added in v0.99.0

func WebAclJa3FingerprintFallbackBehaviorPtr(v string) WebAclJa3FingerprintFallbackBehaviorPtrInput

type WebAclJa3FingerprintFallbackBehaviorPtrOutput added in v0.99.0

type WebAclJa3FingerprintFallbackBehaviorPtrOutput struct{ *pulumi.OutputState }

func (WebAclJa3FingerprintFallbackBehaviorPtrOutput) Elem added in v0.99.0

func (WebAclJa3FingerprintFallbackBehaviorPtrOutput) ElementType added in v0.99.0

func (WebAclJa3FingerprintFallbackBehaviorPtrOutput) ToStringPtrOutput added in v0.99.0

func (WebAclJa3FingerprintFallbackBehaviorPtrOutput) ToStringPtrOutputWithContext added in v0.99.0

func (WebAclJa3FingerprintFallbackBehaviorPtrOutput) ToWebAclJa3FingerprintFallbackBehaviorPtrOutput added in v0.99.0

func (o WebAclJa3FingerprintFallbackBehaviorPtrOutput) ToWebAclJa3FingerprintFallbackBehaviorPtrOutput() WebAclJa3FingerprintFallbackBehaviorPtrOutput

func (WebAclJa3FingerprintFallbackBehaviorPtrOutput) ToWebAclJa3FingerprintFallbackBehaviorPtrOutputWithContext added in v0.99.0

func (o WebAclJa3FingerprintFallbackBehaviorPtrOutput) ToWebAclJa3FingerprintFallbackBehaviorPtrOutputWithContext(ctx context.Context) WebAclJa3FingerprintFallbackBehaviorPtrOutput

type WebAclJa3FingerprintInput added in v0.99.0

type WebAclJa3FingerprintInput interface {
	pulumi.Input

	ToWebAclJa3FingerprintOutput() WebAclJa3FingerprintOutput
	ToWebAclJa3FingerprintOutputWithContext(context.Context) WebAclJa3FingerprintOutput
}

WebAclJa3FingerprintInput is an input type that accepts WebAclJa3FingerprintArgs and WebAclJa3FingerprintOutput values. You can construct a concrete instance of `WebAclJa3FingerprintInput` via:

WebAclJa3FingerprintArgs{...}

type WebAclJa3FingerprintOutput added in v0.99.0

type WebAclJa3FingerprintOutput struct{ *pulumi.OutputState }

Includes the JA3 fingerprint of a web request.

func (WebAclJa3FingerprintOutput) ElementType added in v0.99.0

func (WebAclJa3FingerprintOutput) ElementType() reflect.Type

func (WebAclJa3FingerprintOutput) FallbackBehavior added in v0.99.0

The match status to assign to the web request if the request doesn't have a JA3 fingerprint.

You can specify the following fallback behaviors:

- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (WebAclJa3FingerprintOutput) ToWebAclJa3FingerprintOutput added in v0.99.0

func (o WebAclJa3FingerprintOutput) ToWebAclJa3FingerprintOutput() WebAclJa3FingerprintOutput

func (WebAclJa3FingerprintOutput) ToWebAclJa3FingerprintOutputWithContext added in v0.99.0

func (o WebAclJa3FingerprintOutput) ToWebAclJa3FingerprintOutputWithContext(ctx context.Context) WebAclJa3FingerprintOutput

func (WebAclJa3FingerprintOutput) ToWebAclJa3FingerprintPtrOutput added in v0.99.0

func (o WebAclJa3FingerprintOutput) ToWebAclJa3FingerprintPtrOutput() WebAclJa3FingerprintPtrOutput

func (WebAclJa3FingerprintOutput) ToWebAclJa3FingerprintPtrOutputWithContext added in v0.99.0

func (o WebAclJa3FingerprintOutput) ToWebAclJa3FingerprintPtrOutputWithContext(ctx context.Context) WebAclJa3FingerprintPtrOutput

type WebAclJa3FingerprintPtrInput added in v0.99.0

type WebAclJa3FingerprintPtrInput interface {
	pulumi.Input

	ToWebAclJa3FingerprintPtrOutput() WebAclJa3FingerprintPtrOutput
	ToWebAclJa3FingerprintPtrOutputWithContext(context.Context) WebAclJa3FingerprintPtrOutput
}

WebAclJa3FingerprintPtrInput is an input type that accepts WebAclJa3FingerprintArgs, WebAclJa3FingerprintPtr and WebAclJa3FingerprintPtrOutput values. You can construct a concrete instance of `WebAclJa3FingerprintPtrInput` via:

        WebAclJa3FingerprintArgs{...}

or:

        nil

func WebAclJa3FingerprintPtr added in v0.99.0

func WebAclJa3FingerprintPtr(v *WebAclJa3FingerprintArgs) WebAclJa3FingerprintPtrInput

type WebAclJa3FingerprintPtrOutput added in v0.99.0

type WebAclJa3FingerprintPtrOutput struct{ *pulumi.OutputState }

func (WebAclJa3FingerprintPtrOutput) Elem added in v0.99.0

func (WebAclJa3FingerprintPtrOutput) ElementType added in v0.99.0

func (WebAclJa3FingerprintPtrOutput) FallbackBehavior added in v0.99.0

The match status to assign to the web request if the request doesn't have a JA3 fingerprint.

You can specify the following fallback behaviors:

- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

func (WebAclJa3FingerprintPtrOutput) ToWebAclJa3FingerprintPtrOutput added in v0.99.0

func (o WebAclJa3FingerprintPtrOutput) ToWebAclJa3FingerprintPtrOutput() WebAclJa3FingerprintPtrOutput

func (WebAclJa3FingerprintPtrOutput) ToWebAclJa3FingerprintPtrOutputWithContext added in v0.99.0

func (o WebAclJa3FingerprintPtrOutput) ToWebAclJa3FingerprintPtrOutputWithContext(ctx context.Context) WebAclJa3FingerprintPtrOutput

type WebAclJsonBody added in v0.72.0

type WebAclJsonBody struct {
	// What AWS WAF should do if it fails to completely parse the JSON body. The options are the following:
	//
	// - `EVALUATE_AS_STRING` - Inspect the body as plain text. AWS WAF applies the text transformations and inspection criteria that you defined for the JSON inspection to the body text string.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	//
	// If you don't provide this setting, AWS WAF parses and evaluates the content only up to the first parsing failure that it encounters.
	//
	// AWS WAF does its best to parse the entire JSON body, but might be forced to stop for reasons such as invalid characters, duplicate keys, truncation, and any content whose root node isn't an object or an array.
	//
	// AWS WAF parses the JSON in the following examples as two valid key, value pairs:
	//
	// - Missing comma: `{"key1":"value1""key2":"value2"}`
	// - Missing colon: `{"key1":"value1","key2""value2"}`
	// - Extra colons: `{"key1"::"value1","key2""value2"}`
	InvalidFallbackBehavior *WebAclBodyParsingFallbackBehavior `pulumi:"invalidFallbackBehavior"`
	// The patterns to look for in the JSON body. AWS WAF inspects the results of these pattern matches against the rule inspection criteria.
	MatchPattern WebAclJsonMatchPattern `pulumi:"matchPattern"`
	// The parts of the JSON to match against using the `MatchPattern` . If you specify `ALL` , AWS WAF matches against keys and values.
	//
	// `All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.
	MatchScope WebAclJsonMatchScope `pulumi:"matchScope"`
	// What AWS WAF should do if the body is larger than AWS WAF can inspect.
	//
	// AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.
	//
	// - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	// - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
	//
	// The options for oversize handling are the following:
	//
	// - `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	//
	// You can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.
	//
	// Default: `CONTINUE`
	OversizeHandling *WebAclOversizeHandling `pulumi:"oversizeHandling"`
}

Inspect the request body as JSON. The request body immediately follows the request headers.

type WebAclJsonBodyArgs added in v0.72.0

type WebAclJsonBodyArgs struct {
	// What AWS WAF should do if it fails to completely parse the JSON body. The options are the following:
	//
	// - `EVALUATE_AS_STRING` - Inspect the body as plain text. AWS WAF applies the text transformations and inspection criteria that you defined for the JSON inspection to the body text string.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	//
	// If you don't provide this setting, AWS WAF parses and evaluates the content only up to the first parsing failure that it encounters.
	//
	// AWS WAF does its best to parse the entire JSON body, but might be forced to stop for reasons such as invalid characters, duplicate keys, truncation, and any content whose root node isn't an object or an array.
	//
	// AWS WAF parses the JSON in the following examples as two valid key, value pairs:
	//
	// - Missing comma: `{"key1":"value1""key2":"value2"}`
	// - Missing colon: `{"key1":"value1","key2""value2"}`
	// - Extra colons: `{"key1"::"value1","key2""value2"}`
	InvalidFallbackBehavior WebAclBodyParsingFallbackBehaviorPtrInput `pulumi:"invalidFallbackBehavior"`
	// The patterns to look for in the JSON body. AWS WAF inspects the results of these pattern matches against the rule inspection criteria.
	MatchPattern WebAclJsonMatchPatternInput `pulumi:"matchPattern"`
	// The parts of the JSON to match against using the `MatchPattern` . If you specify `ALL` , AWS WAF matches against keys and values.
	//
	// `All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.
	MatchScope WebAclJsonMatchScopeInput `pulumi:"matchScope"`
	// What AWS WAF should do if the body is larger than AWS WAF can inspect.
	//
	// AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.
	//
	// - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
	// - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
	//
	// The options for oversize handling are the following:
	//
	// - `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria.
	// - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
	// - `NO_MATCH` - Treat the web request as not matching the rule statement.
	//
	// You can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.
	//
	// Default: `CONTINUE`
	OversizeHandling WebAclOversizeHandlingPtrInput `pulumi:"oversizeHandling"`
}

Inspect the request body as JSON. The request body immediately follows the request headers.

func (WebAclJsonBodyArgs) ElementType added in v0.72.0

func (WebAclJsonBodyArgs) ElementType() reflect.Type

func (WebAclJsonBodyArgs) ToWebAclJsonBodyOutput added in v0.72.0

func (i WebAclJsonBodyArgs) ToWebAclJsonBodyOutput() WebAclJsonBodyOutput

func (WebAclJsonBodyArgs) ToWebAclJsonBodyOutputWithContext added in v0.72.0

func (i WebAclJsonBodyArgs) ToWebAclJsonBodyOutputWithContext(ctx context.Context) WebAclJsonBodyOutput

func (WebAclJsonBodyArgs) ToWebAclJsonBodyPtrOutput added in v0.72.0

func (i WebAclJsonBodyArgs) ToWebAclJsonBodyPtrOutput() WebAclJsonBodyPtrOutput

func (WebAclJsonBodyArgs) ToWebAclJsonBodyPtrOutputWithContext added in v0.72.0

func (i WebAclJsonBodyArgs) ToWebAclJsonBodyPtrOutputWithContext(ctx context.Context) WebAclJsonBodyPtrOutput

type WebAclJsonBodyInput added in v0.72.0

type WebAclJsonBodyInput interface {
	pulumi.Input

	ToWebAclJsonBodyOutput() WebAclJsonBodyOutput
	ToWebAclJsonBodyOutputWithContext(context.Context) WebAclJsonBodyOutput
}

WebAclJsonBodyInput is an input type that accepts WebAclJsonBodyArgs and WebAclJsonBodyOutput values. You can construct a concrete instance of `WebAclJsonBodyInput` via:

WebAclJsonBodyArgs{...}

type WebAclJsonBodyOutput added in v0.72.0

type WebAclJsonBodyOutput struct{ *pulumi.OutputState }

Inspect the request body as JSON. The request body immediately follows the request headers.

func (WebAclJsonBodyOutput) ElementType added in v0.72.0

func (WebAclJsonBodyOutput) ElementType() reflect.Type

func (WebAclJsonBodyOutput) InvalidFallbackBehavior added in v0.72.0

What AWS WAF should do if it fails to completely parse the JSON body. The options are the following:

- `EVALUATE_AS_STRING` - Inspect the body as plain text. AWS WAF applies the text transformations and inspection criteria that you defined for the JSON inspection to the body text string. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

If you don't provide this setting, AWS WAF parses and evaluates the content only up to the first parsing failure that it encounters.

AWS WAF does its best to parse the entire JSON body, but might be forced to stop for reasons such as invalid characters, duplicate keys, truncation, and any content whose root node isn't an object or an array.

AWS WAF parses the JSON in the following examples as two valid key, value pairs:

- Missing comma: `{"key1":"value1""key2":"value2"}` - Missing colon: `{"key1":"value1","key2""value2"}` - Extra colons: `{"key1"::"value1","key2""value2"}`

func (WebAclJsonBodyOutput) MatchPattern added in v0.72.0

The patterns to look for in the JSON body. AWS WAF inspects the results of these pattern matches against the rule inspection criteria.

func (WebAclJsonBodyOutput) MatchScope added in v0.72.0

The parts of the JSON to match against using the `MatchPattern` . If you specify `ALL` , AWS WAF matches against keys and values.

`All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.

func (WebAclJsonBodyOutput) OversizeHandling added in v0.72.0

What AWS WAF should do if the body is larger than AWS WAF can inspect.

AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.

- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes). - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.

The options for oversize handling are the following:

- `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

You can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.

Default: `CONTINUE`

func (WebAclJsonBodyOutput) ToWebAclJsonBodyOutput added in v0.72.0

func (o WebAclJsonBodyOutput) ToWebAclJsonBodyOutput() WebAclJsonBodyOutput

func (WebAclJsonBodyOutput) ToWebAclJsonBodyOutputWithContext added in v0.72.0

func (o WebAclJsonBodyOutput) ToWebAclJsonBodyOutputWithContext(ctx context.Context) WebAclJsonBodyOutput

func (WebAclJsonBodyOutput) ToWebAclJsonBodyPtrOutput added in v0.72.0

func (o WebAclJsonBodyOutput) ToWebAclJsonBodyPtrOutput() WebAclJsonBodyPtrOutput

func (WebAclJsonBodyOutput) ToWebAclJsonBodyPtrOutputWithContext added in v0.72.0

func (o WebAclJsonBodyOutput) ToWebAclJsonBodyPtrOutputWithContext(ctx context.Context) WebAclJsonBodyPtrOutput

type WebAclJsonBodyPtrInput added in v0.72.0

type WebAclJsonBodyPtrInput interface {
	pulumi.Input

	ToWebAclJsonBodyPtrOutput() WebAclJsonBodyPtrOutput
	ToWebAclJsonBodyPtrOutputWithContext(context.Context) WebAclJsonBodyPtrOutput
}

WebAclJsonBodyPtrInput is an input type that accepts WebAclJsonBodyArgs, WebAclJsonBodyPtr and WebAclJsonBodyPtrOutput values. You can construct a concrete instance of `WebAclJsonBodyPtrInput` via:

        WebAclJsonBodyArgs{...}

or:

        nil

func WebAclJsonBodyPtr added in v0.72.0

func WebAclJsonBodyPtr(v *WebAclJsonBodyArgs) WebAclJsonBodyPtrInput

type WebAclJsonBodyPtrOutput added in v0.72.0

type WebAclJsonBodyPtrOutput struct{ *pulumi.OutputState }

func (WebAclJsonBodyPtrOutput) Elem added in v0.72.0

func (WebAclJsonBodyPtrOutput) ElementType added in v0.72.0

func (WebAclJsonBodyPtrOutput) ElementType() reflect.Type

func (WebAclJsonBodyPtrOutput) InvalidFallbackBehavior added in v0.72.0

What AWS WAF should do if it fails to completely parse the JSON body. The options are the following:

- `EVALUATE_AS_STRING` - Inspect the body as plain text. AWS WAF applies the text transformations and inspection criteria that you defined for the JSON inspection to the body text string. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

If you don't provide this setting, AWS WAF parses and evaluates the content only up to the first parsing failure that it encounters.

AWS WAF does its best to parse the entire JSON body, but might be forced to stop for reasons such as invalid characters, duplicate keys, truncation, and any content whose root node isn't an object or an array.

AWS WAF parses the JSON in the following examples as two valid key, value pairs:

- Missing comma: `{"key1":"value1""key2":"value2"}` - Missing colon: `{"key1":"value1","key2""value2"}` - Extra colons: `{"key1"::"value1","key2""value2"}`

func (WebAclJsonBodyPtrOutput) MatchPattern added in v0.72.0

The patterns to look for in the JSON body. AWS WAF inspects the results of these pattern matches against the rule inspection criteria.

func (WebAclJsonBodyPtrOutput) MatchScope added in v0.72.0

The parts of the JSON to match against using the `MatchPattern` . If you specify `ALL` , AWS WAF matches against keys and values.

`All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values.

func (WebAclJsonBodyPtrOutput) OversizeHandling added in v0.72.0

What AWS WAF should do if the body is larger than AWS WAF can inspect.

AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.

- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes). - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.

The options for oversize handling are the following:

- `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria. - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request. - `NO_MATCH` - Treat the web request as not matching the rule statement.

You can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.

Default: `CONTINUE`

func (WebAclJsonBodyPtrOutput) ToWebAclJsonBodyPtrOutput added in v0.72.0

func (o WebAclJsonBodyPtrOutput) ToWebAclJsonBodyPtrOutput() WebAclJsonBodyPtrOutput

func (WebAclJsonBodyPtrOutput) ToWebAclJsonBodyPtrOutputWithContext added in v0.72.0

func (o WebAclJsonBodyPtrOutput) ToWebAclJsonBodyPtrOutputWithContext(ctx context.Context) WebAclJsonBodyPtrOutput

type WebAclJsonMatchPattern added in v0.72.0

type WebAclJsonMatchPattern struct {
	// Inspect all parts of the web request's JSON body.
	All interface{} `pulumi:"all"`
	// Match only the specified include paths. See also `MatchScope` in the `JsonBody` `FieldToMatch` specification.
	//
	// Provide the include paths using JSON Pointer syntax. For example, `"IncludedPaths": ["/dogs/0/name", "/dogs/1/name"]` . For information about this syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// You must specify either this setting or the `All` setting, but not both.
	//
	// > Don't use this option to include all paths. Instead, use the `All` setting.
	IncludedPaths []string `pulumi:"includedPaths"`
}

The pattern to look for in the JSON body.

type WebAclJsonMatchPatternArgs added in v0.72.0

type WebAclJsonMatchPatternArgs struct {
	// Inspect all parts of the web request's JSON body.
	All pulumi.Input `pulumi:"all"`
	// Match only the specified include paths. See also `MatchScope` in the `JsonBody` `FieldToMatch` specification.
	//
	// Provide the include paths using JSON Pointer syntax. For example, `"IncludedPaths": ["/dogs/0/name", "/dogs/1/name"]` . For information about this syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// You must specify either this setting or the `All` setting, but not both.
	//
	// > Don't use this option to include all paths. Instead, use the `All` setting.
	IncludedPaths pulumi.StringArrayInput `pulumi:"includedPaths"`
}

The pattern to look for in the JSON body.

func (WebAclJsonMatchPatternArgs) ElementType added in v0.72.0

func (WebAclJsonMatchPatternArgs) ElementType() reflect.Type

func (WebAclJsonMatchPatternArgs) ToWebAclJsonMatchPatternOutput added in v0.72.0

func (i WebAclJsonMatchPatternArgs) ToWebAclJsonMatchPatternOutput() WebAclJsonMatchPatternOutput

func (WebAclJsonMatchPatternArgs) ToWebAclJsonMatchPatternOutputWithContext added in v0.72.0

func (i WebAclJsonMatchPatternArgs) ToWebAclJsonMatchPatternOutputWithContext(ctx context.Context) WebAclJsonMatchPatternOutput

func (WebAclJsonMatchPatternArgs) ToWebAclJsonMatchPatternPtrOutput added in v0.72.0

func (i WebAclJsonMatchPatternArgs) ToWebAclJsonMatchPatternPtrOutput() WebAclJsonMatchPatternPtrOutput

func (WebAclJsonMatchPatternArgs) ToWebAclJsonMatchPatternPtrOutputWithContext added in v0.72.0

func (i WebAclJsonMatchPatternArgs) ToWebAclJsonMatchPatternPtrOutputWithContext(ctx context.Context) WebAclJsonMatchPatternPtrOutput

type WebAclJsonMatchPatternInput added in v0.72.0

type WebAclJsonMatchPatternInput interface {
	pulumi.Input

	ToWebAclJsonMatchPatternOutput() WebAclJsonMatchPatternOutput
	ToWebAclJsonMatchPatternOutputWithContext(context.Context) WebAclJsonMatchPatternOutput
}

WebAclJsonMatchPatternInput is an input type that accepts WebAclJsonMatchPatternArgs and WebAclJsonMatchPatternOutput values. You can construct a concrete instance of `WebAclJsonMatchPatternInput` via:

WebAclJsonMatchPatternArgs{...}

type WebAclJsonMatchPatternOutput added in v0.72.0

type WebAclJsonMatchPatternOutput struct{ *pulumi.OutputState }

The pattern to look for in the JSON body.

func (WebAclJsonMatchPatternOutput) All added in v0.72.0

Inspect all parts of the web request's JSON body.

func (WebAclJsonMatchPatternOutput) ElementType added in v0.72.0

func (WebAclJsonMatchPatternOutput) IncludedPaths added in v0.72.0

Match only the specified include paths. See also `MatchScope` in the `JsonBody` `FieldToMatch` specification.

Provide the include paths using JSON Pointer syntax. For example, `"IncludedPaths": ["/dogs/0/name", "/dogs/1/name"]` . For information about this syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

You must specify either this setting or the `All` setting, but not both.

> Don't use this option to include all paths. Instead, use the `All` setting.

func (WebAclJsonMatchPatternOutput) ToWebAclJsonMatchPatternOutput added in v0.72.0

func (o WebAclJsonMatchPatternOutput) ToWebAclJsonMatchPatternOutput() WebAclJsonMatchPatternOutput

func (WebAclJsonMatchPatternOutput) ToWebAclJsonMatchPatternOutputWithContext added in v0.72.0

func (o WebAclJsonMatchPatternOutput) ToWebAclJsonMatchPatternOutputWithContext(ctx context.Context) WebAclJsonMatchPatternOutput

func (WebAclJsonMatchPatternOutput) ToWebAclJsonMatchPatternPtrOutput added in v0.72.0

func (o WebAclJsonMatchPatternOutput) ToWebAclJsonMatchPatternPtrOutput() WebAclJsonMatchPatternPtrOutput

func (WebAclJsonMatchPatternOutput) ToWebAclJsonMatchPatternPtrOutputWithContext added in v0.72.0

func (o WebAclJsonMatchPatternOutput) ToWebAclJsonMatchPatternPtrOutputWithContext(ctx context.Context) WebAclJsonMatchPatternPtrOutput

type WebAclJsonMatchPatternPtrInput added in v0.72.0

type WebAclJsonMatchPatternPtrInput interface {
	pulumi.Input

	ToWebAclJsonMatchPatternPtrOutput() WebAclJsonMatchPatternPtrOutput
	ToWebAclJsonMatchPatternPtrOutputWithContext(context.Context) WebAclJsonMatchPatternPtrOutput
}

WebAclJsonMatchPatternPtrInput is an input type that accepts WebAclJsonMatchPatternArgs, WebAclJsonMatchPatternPtr and WebAclJsonMatchPatternPtrOutput values. You can construct a concrete instance of `WebAclJsonMatchPatternPtrInput` via:

        WebAclJsonMatchPatternArgs{...}

or:

        nil

func WebAclJsonMatchPatternPtr added in v0.72.0

func WebAclJsonMatchPatternPtr(v *WebAclJsonMatchPatternArgs) WebAclJsonMatchPatternPtrInput

type WebAclJsonMatchPatternPtrOutput added in v0.72.0

type WebAclJsonMatchPatternPtrOutput struct{ *pulumi.OutputState }

func (WebAclJsonMatchPatternPtrOutput) All added in v0.72.0

Inspect all parts of the web request's JSON body.

func (WebAclJsonMatchPatternPtrOutput) Elem added in v0.72.0

func (WebAclJsonMatchPatternPtrOutput) ElementType added in v0.72.0

func (WebAclJsonMatchPatternPtrOutput) IncludedPaths added in v0.72.0

Match only the specified include paths. See also `MatchScope` in the `JsonBody` `FieldToMatch` specification.

Provide the include paths using JSON Pointer syntax. For example, `"IncludedPaths": ["/dogs/0/name", "/dogs/1/name"]` . For information about this syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

You must specify either this setting or the `All` setting, but not both.

> Don't use this option to include all paths. Instead, use the `All` setting.

func (WebAclJsonMatchPatternPtrOutput) ToWebAclJsonMatchPatternPtrOutput added in v0.72.0

func (o WebAclJsonMatchPatternPtrOutput) ToWebAclJsonMatchPatternPtrOutput() WebAclJsonMatchPatternPtrOutput

func (WebAclJsonMatchPatternPtrOutput) ToWebAclJsonMatchPatternPtrOutputWithContext added in v0.72.0

func (o WebAclJsonMatchPatternPtrOutput) ToWebAclJsonMatchPatternPtrOutputWithContext(ctx context.Context) WebAclJsonMatchPatternPtrOutput

type WebAclJsonMatchScope added in v0.72.0

type WebAclJsonMatchScope string

The parts of the JSON to match against using the MatchPattern.

func (WebAclJsonMatchScope) ElementType added in v0.72.0

func (WebAclJsonMatchScope) ElementType() reflect.Type

func (WebAclJsonMatchScope) ToStringOutput added in v0.72.0

func (e WebAclJsonMatchScope) ToStringOutput() pulumi.StringOutput

func (WebAclJsonMatchScope) ToStringOutputWithContext added in v0.72.0

func (e WebAclJsonMatchScope) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclJsonMatchScope) ToStringPtrOutput added in v0.72.0

func (e WebAclJsonMatchScope) ToStringPtrOutput() pulumi.StringPtrOutput

func (WebAclJsonMatchScope) ToStringPtrOutputWithContext added in v0.72.0

func (e WebAclJsonMatchScope) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclJsonMatchScope) ToWebAclJsonMatchScopeOutput added in v0.72.0

func (e WebAclJsonMatchScope) ToWebAclJsonMatchScopeOutput() WebAclJsonMatchScopeOutput

func (WebAclJsonMatchScope) ToWebAclJsonMatchScopeOutputWithContext added in v0.72.0

func (e WebAclJsonMatchScope) ToWebAclJsonMatchScopeOutputWithContext(ctx context.Context) WebAclJsonMatchScopeOutput

func (WebAclJsonMatchScope) ToWebAclJsonMatchScopePtrOutput added in v0.72.0

func (e WebAclJsonMatchScope) ToWebAclJsonMatchScopePtrOutput() WebAclJsonMatchScopePtrOutput

func (WebAclJsonMatchScope) ToWebAclJsonMatchScopePtrOutputWithContext added in v0.72.0

func (e WebAclJsonMatchScope) ToWebAclJsonMatchScopePtrOutputWithContext(ctx context.Context) WebAclJsonMatchScopePtrOutput

type WebAclJsonMatchScopeInput added in v0.72.0

type WebAclJsonMatchScopeInput interface {
	pulumi.Input

	ToWebAclJsonMatchScopeOutput() WebAclJsonMatchScopeOutput
	ToWebAclJsonMatchScopeOutputWithContext(context.Context) WebAclJsonMatchScopeOutput
}

WebAclJsonMatchScopeInput is an input type that accepts values of the WebAclJsonMatchScope enum A concrete instance of `WebAclJsonMatchScopeInput` can be one of the following:

WebAclJsonMatchScopeAll
WebAclJsonMatchScopeKey
WebAclJsonMatchScopeValue

type WebAclJsonMatchScopeOutput added in v0.72.0

type WebAclJsonMatchScopeOutput struct{ *pulumi.OutputState }

func (WebAclJsonMatchScopeOutput) ElementType added in v0.72.0

func (WebAclJsonMatchScopeOutput) ElementType() reflect.Type

func (WebAclJsonMatchScopeOutput) ToStringOutput added in v0.72.0

func (o WebAclJsonMatchScopeOutput) ToStringOutput() pulumi.StringOutput

func (WebAclJsonMatchScopeOutput) ToStringOutputWithContext added in v0.72.0

func (o WebAclJsonMatchScopeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclJsonMatchScopeOutput) ToStringPtrOutput added in v0.72.0

func (o WebAclJsonMatchScopeOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (WebAclJsonMatchScopeOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o WebAclJsonMatchScopeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclJsonMatchScopeOutput) ToWebAclJsonMatchScopeOutput added in v0.72.0

func (o WebAclJsonMatchScopeOutput) ToWebAclJsonMatchScopeOutput() WebAclJsonMatchScopeOutput

func (WebAclJsonMatchScopeOutput) ToWebAclJsonMatchScopeOutputWithContext added in v0.72.0

func (o WebAclJsonMatchScopeOutput) ToWebAclJsonMatchScopeOutputWithContext(ctx context.Context) WebAclJsonMatchScopeOutput

func (WebAclJsonMatchScopeOutput) ToWebAclJsonMatchScopePtrOutput added in v0.72.0

func (o WebAclJsonMatchScopeOutput) ToWebAclJsonMatchScopePtrOutput() WebAclJsonMatchScopePtrOutput

func (WebAclJsonMatchScopeOutput) ToWebAclJsonMatchScopePtrOutputWithContext added in v0.72.0

func (o WebAclJsonMatchScopeOutput) ToWebAclJsonMatchScopePtrOutputWithContext(ctx context.Context) WebAclJsonMatchScopePtrOutput

type WebAclJsonMatchScopePtrInput added in v0.72.0

type WebAclJsonMatchScopePtrInput interface {
	pulumi.Input

	ToWebAclJsonMatchScopePtrOutput() WebAclJsonMatchScopePtrOutput
	ToWebAclJsonMatchScopePtrOutputWithContext(context.Context) WebAclJsonMatchScopePtrOutput
}

func WebAclJsonMatchScopePtr added in v0.72.0

func WebAclJsonMatchScopePtr(v string) WebAclJsonMatchScopePtrInput

type WebAclJsonMatchScopePtrOutput added in v0.72.0

type WebAclJsonMatchScopePtrOutput struct{ *pulumi.OutputState }

func (WebAclJsonMatchScopePtrOutput) Elem added in v0.72.0

func (WebAclJsonMatchScopePtrOutput) ElementType added in v0.72.0

func (WebAclJsonMatchScopePtrOutput) ToStringPtrOutput added in v0.72.0

func (WebAclJsonMatchScopePtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o WebAclJsonMatchScopePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclJsonMatchScopePtrOutput) ToWebAclJsonMatchScopePtrOutput added in v0.72.0

func (o WebAclJsonMatchScopePtrOutput) ToWebAclJsonMatchScopePtrOutput() WebAclJsonMatchScopePtrOutput

func (WebAclJsonMatchScopePtrOutput) ToWebAclJsonMatchScopePtrOutputWithContext added in v0.72.0

func (o WebAclJsonMatchScopePtrOutput) ToWebAclJsonMatchScopePtrOutputWithContext(ctx context.Context) WebAclJsonMatchScopePtrOutput

type WebAclLabel added in v0.72.0

type WebAclLabel struct {
	// The label string.
	Name string `pulumi:"name"`
}

type WebAclLabelArgs added in v0.72.0

type WebAclLabelArgs struct {
	// The label string.
	Name pulumi.StringInput `pulumi:"name"`
}

func (WebAclLabelArgs) ElementType added in v0.72.0

func (WebAclLabelArgs) ElementType() reflect.Type

func (WebAclLabelArgs) ToWebAclLabelOutput added in v0.72.0

func (i WebAclLabelArgs) ToWebAclLabelOutput() WebAclLabelOutput

func (WebAclLabelArgs) ToWebAclLabelOutputWithContext added in v0.72.0

func (i WebAclLabelArgs) ToWebAclLabelOutputWithContext(ctx context.Context) WebAclLabelOutput

type WebAclLabelArray added in v0.72.0

type WebAclLabelArray []WebAclLabelInput

func (WebAclLabelArray) ElementType added in v0.72.0

func (WebAclLabelArray) ElementType() reflect.Type

func (WebAclLabelArray) ToWebAclLabelArrayOutput added in v0.72.0

func (i WebAclLabelArray) ToWebAclLabelArrayOutput() WebAclLabelArrayOutput

func (WebAclLabelArray) ToWebAclLabelArrayOutputWithContext added in v0.72.0

func (i WebAclLabelArray) ToWebAclLabelArrayOutputWithContext(ctx context.Context) WebAclLabelArrayOutput

type WebAclLabelArrayInput added in v0.72.0

type WebAclLabelArrayInput interface {
	pulumi.Input

	ToWebAclLabelArrayOutput() WebAclLabelArrayOutput
	ToWebAclLabelArrayOutputWithContext(context.Context) WebAclLabelArrayOutput
}

WebAclLabelArrayInput is an input type that accepts WebAclLabelArray and WebAclLabelArrayOutput values. You can construct a concrete instance of `WebAclLabelArrayInput` via:

WebAclLabelArray{ WebAclLabelArgs{...} }

type WebAclLabelArrayOutput added in v0.72.0

type WebAclLabelArrayOutput struct{ *pulumi.OutputState }

func (WebAclLabelArrayOutput) ElementType added in v0.72.0

func (WebAclLabelArrayOutput) ElementType() reflect.Type

func (WebAclLabelArrayOutput) Index added in v0.72.0

func (WebAclLabelArrayOutput) ToWebAclLabelArrayOutput added in v0.72.0

func (o WebAclLabelArrayOutput) ToWebAclLabelArrayOutput() WebAclLabelArrayOutput

func (WebAclLabelArrayOutput) ToWebAclLabelArrayOutputWithContext added in v0.72.0

func (o WebAclLabelArrayOutput) ToWebAclLabelArrayOutputWithContext(ctx context.Context) WebAclLabelArrayOutput

type WebAclLabelInput added in v0.72.0

type WebAclLabelInput interface {
	pulumi.Input

	ToWebAclLabelOutput() WebAclLabelOutput
	ToWebAclLabelOutputWithContext(context.Context) WebAclLabelOutput
}

WebAclLabelInput is an input type that accepts WebAclLabelArgs and WebAclLabelOutput values. You can construct a concrete instance of `WebAclLabelInput` via:

WebAclLabelArgs{...}

type WebAclLabelMatchScope added in v0.72.0

type WebAclLabelMatchScope string

func (WebAclLabelMatchScope) ElementType added in v0.72.0

func (WebAclLabelMatchScope) ElementType() reflect.Type

func (WebAclLabelMatchScope) ToStringOutput added in v0.72.0

func (e WebAclLabelMatchScope) ToStringOutput() pulumi.StringOutput

func (WebAclLabelMatchScope) ToStringOutputWithContext added in v0.72.0

func (e WebAclLabelMatchScope) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclLabelMatchScope) ToStringPtrOutput added in v0.72.0

func (e WebAclLabelMatchScope) ToStringPtrOutput() pulumi.StringPtrOutput

func (WebAclLabelMatchScope) ToStringPtrOutputWithContext added in v0.72.0

func (e WebAclLabelMatchScope) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclLabelMatchScope) ToWebAclLabelMatchScopeOutput added in v0.72.0

func (e WebAclLabelMatchScope) ToWebAclLabelMatchScopeOutput() WebAclLabelMatchScopeOutput

func (WebAclLabelMatchScope) ToWebAclLabelMatchScopeOutputWithContext added in v0.72.0

func (e WebAclLabelMatchScope) ToWebAclLabelMatchScopeOutputWithContext(ctx context.Context) WebAclLabelMatchScopeOutput

func (WebAclLabelMatchScope) ToWebAclLabelMatchScopePtrOutput added in v0.72.0

func (e WebAclLabelMatchScope) ToWebAclLabelMatchScopePtrOutput() WebAclLabelMatchScopePtrOutput

func (WebAclLabelMatchScope) ToWebAclLabelMatchScopePtrOutputWithContext added in v0.72.0

func (e WebAclLabelMatchScope) ToWebAclLabelMatchScopePtrOutputWithContext(ctx context.Context) WebAclLabelMatchScopePtrOutput

type WebAclLabelMatchScopeInput added in v0.72.0

type WebAclLabelMatchScopeInput interface {
	pulumi.Input

	ToWebAclLabelMatchScopeOutput() WebAclLabelMatchScopeOutput
	ToWebAclLabelMatchScopeOutputWithContext(context.Context) WebAclLabelMatchScopeOutput
}

WebAclLabelMatchScopeInput is an input type that accepts values of the WebAclLabelMatchScope enum A concrete instance of `WebAclLabelMatchScopeInput` can be one of the following:

WebAclLabelMatchScopeLabel
WebAclLabelMatchScopeNamespace

type WebAclLabelMatchScopeOutput added in v0.72.0

type WebAclLabelMatchScopeOutput struct{ *pulumi.OutputState }

func (WebAclLabelMatchScopeOutput) ElementType added in v0.72.0

func (WebAclLabelMatchScopeOutput) ToStringOutput added in v0.72.0

func (o WebAclLabelMatchScopeOutput) ToStringOutput() pulumi.StringOutput

func (WebAclLabelMatchScopeOutput) ToStringOutputWithContext added in v0.72.0

func (o WebAclLabelMatchScopeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclLabelMatchScopeOutput) ToStringPtrOutput added in v0.72.0

func (o WebAclLabelMatchScopeOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (WebAclLabelMatchScopeOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o WebAclLabelMatchScopeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclLabelMatchScopeOutput) ToWebAclLabelMatchScopeOutput added in v0.72.0

func (o WebAclLabelMatchScopeOutput) ToWebAclLabelMatchScopeOutput() WebAclLabelMatchScopeOutput

func (WebAclLabelMatchScopeOutput) ToWebAclLabelMatchScopeOutputWithContext added in v0.72.0

func (o WebAclLabelMatchScopeOutput) ToWebAclLabelMatchScopeOutputWithContext(ctx context.Context) WebAclLabelMatchScopeOutput

func (WebAclLabelMatchScopeOutput) ToWebAclLabelMatchScopePtrOutput added in v0.72.0

func (o WebAclLabelMatchScopeOutput) ToWebAclLabelMatchScopePtrOutput() WebAclLabelMatchScopePtrOutput

func (WebAclLabelMatchScopeOutput) ToWebAclLabelMatchScopePtrOutputWithContext added in v0.72.0

func (o WebAclLabelMatchScopeOutput) ToWebAclLabelMatchScopePtrOutputWithContext(ctx context.Context) WebAclLabelMatchScopePtrOutput

type WebAclLabelMatchScopePtrInput added in v0.72.0

type WebAclLabelMatchScopePtrInput interface {
	pulumi.Input

	ToWebAclLabelMatchScopePtrOutput() WebAclLabelMatchScopePtrOutput
	ToWebAclLabelMatchScopePtrOutputWithContext(context.Context) WebAclLabelMatchScopePtrOutput
}

func WebAclLabelMatchScopePtr added in v0.72.0

func WebAclLabelMatchScopePtr(v string) WebAclLabelMatchScopePtrInput

type WebAclLabelMatchScopePtrOutput added in v0.72.0

type WebAclLabelMatchScopePtrOutput struct{ *pulumi.OutputState }

func (WebAclLabelMatchScopePtrOutput) Elem added in v0.72.0

func (WebAclLabelMatchScopePtrOutput) ElementType added in v0.72.0

func (WebAclLabelMatchScopePtrOutput) ToStringPtrOutput added in v0.72.0

func (WebAclLabelMatchScopePtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o WebAclLabelMatchScopePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclLabelMatchScopePtrOutput) ToWebAclLabelMatchScopePtrOutput added in v0.72.0

func (o WebAclLabelMatchScopePtrOutput) ToWebAclLabelMatchScopePtrOutput() WebAclLabelMatchScopePtrOutput

func (WebAclLabelMatchScopePtrOutput) ToWebAclLabelMatchScopePtrOutputWithContext added in v0.72.0

func (o WebAclLabelMatchScopePtrOutput) ToWebAclLabelMatchScopePtrOutputWithContext(ctx context.Context) WebAclLabelMatchScopePtrOutput

type WebAclLabelMatchStatement added in v0.72.0

type WebAclLabelMatchStatement struct {
	// The string to match against. The setting you provide for this depends on the match statement's `Scope` setting:
	//
	// - If the `Scope` indicates `LABEL` , then this specification must include the name and can include any number of preceding namespace specifications and prefix up to providing the fully qualified label name.
	// - If the `Scope` indicates `NAMESPACE` , then this specification can include any number of contiguous namespace strings, and can include the entire label namespace prefix from the rule group or web ACL where the label originates.
	//
	// Labels are case sensitive and components of a label must be separated by colon, for example `NS1:NS2:name` .
	Key string `pulumi:"key"`
	// Specify whether you want to match using the label name or just the namespace.
	Scope WebAclLabelMatchScope `pulumi:"scope"`
}

type WebAclLabelMatchStatementArgs added in v0.72.0

type WebAclLabelMatchStatementArgs struct {
	// The string to match against. The setting you provide for this depends on the match statement's `Scope` setting:
	//
	// - If the `Scope` indicates `LABEL` , then this specification must include the name and can include any number of preceding namespace specifications and prefix up to providing the fully qualified label name.
	// - If the `Scope` indicates `NAMESPACE` , then this specification can include any number of contiguous namespace strings, and can include the entire label namespace prefix from the rule group or web ACL where the label originates.
	//
	// Labels are case sensitive and components of a label must be separated by colon, for example `NS1:NS2:name` .
	Key pulumi.StringInput `pulumi:"key"`
	// Specify whether you want to match using the label name or just the namespace.
	Scope WebAclLabelMatchScopeInput `pulumi:"scope"`
}

func (WebAclLabelMatchStatementArgs) ElementType added in v0.72.0

func (WebAclLabelMatchStatementArgs) ToWebAclLabelMatchStatementOutput added in v0.72.0

func (i WebAclLabelMatchStatementArgs) ToWebAclLabelMatchStatementOutput() WebAclLabelMatchStatementOutput

func (WebAclLabelMatchStatementArgs) ToWebAclLabelMatchStatementOutputWithContext added in v0.72.0

func (i WebAclLabelMatchStatementArgs) ToWebAclLabelMatchStatementOutputWithContext(ctx context.Context) WebAclLabelMatchStatementOutput

func (WebAclLabelMatchStatementArgs) ToWebAclLabelMatchStatementPtrOutput added in v0.72.0

func (i WebAclLabelMatchStatementArgs) ToWebAclLabelMatchStatementPtrOutput() WebAclLabelMatchStatementPtrOutput

func (WebAclLabelMatchStatementArgs) ToWebAclLabelMatchStatementPtrOutputWithContext added in v0.72.0

func (i WebAclLabelMatchStatementArgs) ToWebAclLabelMatchStatementPtrOutputWithContext(ctx context.Context) WebAclLabelMatchStatementPtrOutput

type WebAclLabelMatchStatementInput added in v0.72.0

type WebAclLabelMatchStatementInput interface {
	pulumi.Input

	ToWebAclLabelMatchStatementOutput() WebAclLabelMatchStatementOutput
	ToWebAclLabelMatchStatementOutputWithContext(context.Context) WebAclLabelMatchStatementOutput
}

WebAclLabelMatchStatementInput is an input type that accepts WebAclLabelMatchStatementArgs and WebAclLabelMatchStatementOutput values. You can construct a concrete instance of `WebAclLabelMatchStatementInput` via:

WebAclLabelMatchStatementArgs{...}

type WebAclLabelMatchStatementOutput added in v0.72.0

type WebAclLabelMatchStatementOutput struct{ *pulumi.OutputState }

func (WebAclLabelMatchStatementOutput) ElementType added in v0.72.0

func (WebAclLabelMatchStatementOutput) Key added in v0.72.0

The string to match against. The setting you provide for this depends on the match statement's `Scope` setting:

- If the `Scope` indicates `LABEL` , then this specification must include the name and can include any number of preceding namespace specifications and prefix up to providing the fully qualified label name. - If the `Scope` indicates `NAMESPACE` , then this specification can include any number of contiguous namespace strings, and can include the entire label namespace prefix from the rule group or web ACL where the label originates.

Labels are case sensitive and components of a label must be separated by colon, for example `NS1:NS2:name` .

func (WebAclLabelMatchStatementOutput) Scope added in v0.72.0

Specify whether you want to match using the label name or just the namespace.

func (WebAclLabelMatchStatementOutput) ToWebAclLabelMatchStatementOutput added in v0.72.0

func (o WebAclLabelMatchStatementOutput) ToWebAclLabelMatchStatementOutput() WebAclLabelMatchStatementOutput

func (WebAclLabelMatchStatementOutput) ToWebAclLabelMatchStatementOutputWithContext added in v0.72.0

func (o WebAclLabelMatchStatementOutput) ToWebAclLabelMatchStatementOutputWithContext(ctx context.Context) WebAclLabelMatchStatementOutput

func (WebAclLabelMatchStatementOutput) ToWebAclLabelMatchStatementPtrOutput added in v0.72.0

func (o WebAclLabelMatchStatementOutput) ToWebAclLabelMatchStatementPtrOutput() WebAclLabelMatchStatementPtrOutput

func (WebAclLabelMatchStatementOutput) ToWebAclLabelMatchStatementPtrOutputWithContext added in v0.72.0

func (o WebAclLabelMatchStatementOutput) ToWebAclLabelMatchStatementPtrOutputWithContext(ctx context.Context) WebAclLabelMatchStatementPtrOutput

type WebAclLabelMatchStatementPtrInput added in v0.72.0

type WebAclLabelMatchStatementPtrInput interface {
	pulumi.Input

	ToWebAclLabelMatchStatementPtrOutput() WebAclLabelMatchStatementPtrOutput
	ToWebAclLabelMatchStatementPtrOutputWithContext(context.Context) WebAclLabelMatchStatementPtrOutput
}

WebAclLabelMatchStatementPtrInput is an input type that accepts WebAclLabelMatchStatementArgs, WebAclLabelMatchStatementPtr and WebAclLabelMatchStatementPtrOutput values. You can construct a concrete instance of `WebAclLabelMatchStatementPtrInput` via:

        WebAclLabelMatchStatementArgs{...}

or:

        nil

func WebAclLabelMatchStatementPtr added in v0.72.0

type WebAclLabelMatchStatementPtrOutput added in v0.72.0

type WebAclLabelMatchStatementPtrOutput struct{ *pulumi.OutputState }

func (WebAclLabelMatchStatementPtrOutput) Elem added in v0.72.0

func (WebAclLabelMatchStatementPtrOutput) ElementType added in v0.72.0

func (WebAclLabelMatchStatementPtrOutput) Key added in v0.72.0

The string to match against. The setting you provide for this depends on the match statement's `Scope` setting:

- If the `Scope` indicates `LABEL` , then this specification must include the name and can include any number of preceding namespace specifications and prefix up to providing the fully qualified label name. - If the `Scope` indicates `NAMESPACE` , then this specification can include any number of contiguous namespace strings, and can include the entire label namespace prefix from the rule group or web ACL where the label originates.

Labels are case sensitive and components of a label must be separated by colon, for example `NS1:NS2:name` .

func (WebAclLabelMatchStatementPtrOutput) Scope added in v0.72.0

Specify whether you want to match using the label name or just the namespace.

func (WebAclLabelMatchStatementPtrOutput) ToWebAclLabelMatchStatementPtrOutput added in v0.72.0

func (o WebAclLabelMatchStatementPtrOutput) ToWebAclLabelMatchStatementPtrOutput() WebAclLabelMatchStatementPtrOutput

func (WebAclLabelMatchStatementPtrOutput) ToWebAclLabelMatchStatementPtrOutputWithContext added in v0.72.0

func (o WebAclLabelMatchStatementPtrOutput) ToWebAclLabelMatchStatementPtrOutputWithContext(ctx context.Context) WebAclLabelMatchStatementPtrOutput

type WebAclLabelOutput added in v0.72.0

type WebAclLabelOutput struct{ *pulumi.OutputState }

func (WebAclLabelOutput) ElementType added in v0.72.0

func (WebAclLabelOutput) ElementType() reflect.Type

func (WebAclLabelOutput) Name added in v0.72.0

The label string.

func (WebAclLabelOutput) ToWebAclLabelOutput added in v0.72.0

func (o WebAclLabelOutput) ToWebAclLabelOutput() WebAclLabelOutput

func (WebAclLabelOutput) ToWebAclLabelOutputWithContext added in v0.72.0

func (o WebAclLabelOutput) ToWebAclLabelOutputWithContext(ctx context.Context) WebAclLabelOutput

type WebAclManagedRuleGroupConfig added in v0.72.0

type WebAclManagedRuleGroupConfig struct {
	// Additional configuration for using the account creation fraud prevention (ACFP) managed rule group, `AWSManagedRulesACFPRuleSet` . Use this to provide account creation request information to the rule group. For web ACLs that protect CloudFront distributions, use this to also provide the information about how your distribution responds to account creation requests.
	//
	// For information about using the ACFP managed rule group, see [AWS WAF Fraud Control account creation fraud prevention (ACFP) rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-acfp.html) and [AWS WAF Fraud Control account creation fraud prevention (ACFP)](https://docs.aws.amazon.com/waf/latest/developerguide/waf-acfp.html) in the *AWS WAF Developer Guide* .
	AwsManagedRulesAcfpRuleSet *WebAclAwsManagedRulesAcfpRuleSet `pulumi:"awsManagedRulesAcfpRuleSet"`
	// Additional configuration for using the account takeover prevention (ATP) managed rule group, `AWSManagedRulesATPRuleSet` . Use this to provide login request information to the rule group. For web ACLs that protect CloudFront distributions, use this to also provide the information about how your distribution responds to login requests.
	//
	// This configuration replaces the individual configuration fields in `ManagedRuleGroupConfig` and provides additional feature configuration.
	//
	// For information about using the ATP managed rule group, see [AWS WAF Fraud Control account takeover prevention (ATP) rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-atp.html) and [AWS WAF Fraud Control account takeover prevention (ATP)](https://docs.aws.amazon.com/waf/latest/developerguide/waf-atp.html) in the *AWS WAF Developer Guide* .
	AwsManagedRulesAtpRuleSet *WebAclAwsManagedRulesAtpRuleSet `pulumi:"awsManagedRulesAtpRuleSet"`
	// Additional configuration for using the Bot Control managed rule group. Use this to specify the inspection level that you want to use. For information about using the Bot Control managed rule group, see [AWS WAF Bot Control rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html) and [AWS WAF Bot Control](https://docs.aws.amazon.com/waf/latest/developerguide/waf-bot-control.html) in the *AWS WAF Developer Guide* .
	AwsManagedRulesBotControlRuleSet *WebAclAwsManagedRulesBotControlRuleSet `pulumi:"awsManagedRulesBotControlRuleSet"`
	// > Instead of this setting, provide your configuration under `AWSManagedRulesATPRuleSet` .
	LoginPath *string `pulumi:"loginPath"`
	// > Instead of this setting, provide your configuration under the request inspection configuration for `AWSManagedRulesATPRuleSet` or `AWSManagedRulesACFPRuleSet` .
	PasswordField *WebAclFieldIdentifier `pulumi:"passwordField"`
	// > Instead of this setting, provide your configuration under the request inspection configuration for `AWSManagedRulesATPRuleSet` or `AWSManagedRulesACFPRuleSet` .
	PayloadType *WebAclManagedRuleGroupConfigPayloadType `pulumi:"payloadType"`
	// > Instead of this setting, provide your configuration under the request inspection configuration for `AWSManagedRulesATPRuleSet` or `AWSManagedRulesACFPRuleSet` .
	UsernameField *WebAclFieldIdentifier `pulumi:"usernameField"`
}

ManagedRuleGroupConfig.

type WebAclManagedRuleGroupConfigArgs added in v0.72.0

type WebAclManagedRuleGroupConfigArgs struct {
	// Additional configuration for using the account creation fraud prevention (ACFP) managed rule group, `AWSManagedRulesACFPRuleSet` . Use this to provide account creation request information to the rule group. For web ACLs that protect CloudFront distributions, use this to also provide the information about how your distribution responds to account creation requests.
	//
	// For information about using the ACFP managed rule group, see [AWS WAF Fraud Control account creation fraud prevention (ACFP) rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-acfp.html) and [AWS WAF Fraud Control account creation fraud prevention (ACFP)](https://docs.aws.amazon.com/waf/latest/developerguide/waf-acfp.html) in the *AWS WAF Developer Guide* .
	AwsManagedRulesAcfpRuleSet WebAclAwsManagedRulesAcfpRuleSetPtrInput `pulumi:"awsManagedRulesAcfpRuleSet"`
	// Additional configuration for using the account takeover prevention (ATP) managed rule group, `AWSManagedRulesATPRuleSet` . Use this to provide login request information to the rule group. For web ACLs that protect CloudFront distributions, use this to also provide the information about how your distribution responds to login requests.
	//
	// This configuration replaces the individual configuration fields in `ManagedRuleGroupConfig` and provides additional feature configuration.
	//
	// For information about using the ATP managed rule group, see [AWS WAF Fraud Control account takeover prevention (ATP) rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-atp.html) and [AWS WAF Fraud Control account takeover prevention (ATP)](https://docs.aws.amazon.com/waf/latest/developerguide/waf-atp.html) in the *AWS WAF Developer Guide* .
	AwsManagedRulesAtpRuleSet WebAclAwsManagedRulesAtpRuleSetPtrInput `pulumi:"awsManagedRulesAtpRuleSet"`
	// Additional configuration for using the Bot Control managed rule group. Use this to specify the inspection level that you want to use. For information about using the Bot Control managed rule group, see [AWS WAF Bot Control rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html) and [AWS WAF Bot Control](https://docs.aws.amazon.com/waf/latest/developerguide/waf-bot-control.html) in the *AWS WAF Developer Guide* .
	AwsManagedRulesBotControlRuleSet WebAclAwsManagedRulesBotControlRuleSetPtrInput `pulumi:"awsManagedRulesBotControlRuleSet"`
	// > Instead of this setting, provide your configuration under `AWSManagedRulesATPRuleSet` .
	LoginPath pulumi.StringPtrInput `pulumi:"loginPath"`
	// > Instead of this setting, provide your configuration under the request inspection configuration for `AWSManagedRulesATPRuleSet` or `AWSManagedRulesACFPRuleSet` .
	PasswordField WebAclFieldIdentifierPtrInput `pulumi:"passwordField"`
	// > Instead of this setting, provide your configuration under the request inspection configuration for `AWSManagedRulesATPRuleSet` or `AWSManagedRulesACFPRuleSet` .
	PayloadType WebAclManagedRuleGroupConfigPayloadTypePtrInput `pulumi:"payloadType"`
	// > Instead of this setting, provide your configuration under the request inspection configuration for `AWSManagedRulesATPRuleSet` or `AWSManagedRulesACFPRuleSet` .
	UsernameField WebAclFieldIdentifierPtrInput `pulumi:"usernameField"`
}

ManagedRuleGroupConfig.

func (WebAclManagedRuleGroupConfigArgs) ElementType added in v0.72.0

func (WebAclManagedRuleGroupConfigArgs) ToWebAclManagedRuleGroupConfigOutput added in v0.72.0

func (i WebAclManagedRuleGroupConfigArgs) ToWebAclManagedRuleGroupConfigOutput() WebAclManagedRuleGroupConfigOutput

func (WebAclManagedRuleGroupConfigArgs) ToWebAclManagedRuleGroupConfigOutputWithContext added in v0.72.0

func (i WebAclManagedRuleGroupConfigArgs) ToWebAclManagedRuleGroupConfigOutputWithContext(ctx context.Context) WebAclManagedRuleGroupConfigOutput

type WebAclManagedRuleGroupConfigArray added in v0.72.0

type WebAclManagedRuleGroupConfigArray []WebAclManagedRuleGroupConfigInput

func (WebAclManagedRuleGroupConfigArray) ElementType added in v0.72.0

func (WebAclManagedRuleGroupConfigArray) ToWebAclManagedRuleGroupConfigArrayOutput added in v0.72.0

func (i WebAclManagedRuleGroupConfigArray) ToWebAclManagedRuleGroupConfigArrayOutput() WebAclManagedRuleGroupConfigArrayOutput

func (WebAclManagedRuleGroupConfigArray) ToWebAclManagedRuleGroupConfigArrayOutputWithContext added in v0.72.0

func (i WebAclManagedRuleGroupConfigArray) ToWebAclManagedRuleGroupConfigArrayOutputWithContext(ctx context.Context) WebAclManagedRuleGroupConfigArrayOutput

type WebAclManagedRuleGroupConfigArrayInput added in v0.72.0

type WebAclManagedRuleGroupConfigArrayInput interface {
	pulumi.Input

	ToWebAclManagedRuleGroupConfigArrayOutput() WebAclManagedRuleGroupConfigArrayOutput
	ToWebAclManagedRuleGroupConfigArrayOutputWithContext(context.Context) WebAclManagedRuleGroupConfigArrayOutput
}

WebAclManagedRuleGroupConfigArrayInput is an input type that accepts WebAclManagedRuleGroupConfigArray and WebAclManagedRuleGroupConfigArrayOutput values. You can construct a concrete instance of `WebAclManagedRuleGroupConfigArrayInput` via:

WebAclManagedRuleGroupConfigArray{ WebAclManagedRuleGroupConfigArgs{...} }

type WebAclManagedRuleGroupConfigArrayOutput added in v0.72.0

type WebAclManagedRuleGroupConfigArrayOutput struct{ *pulumi.OutputState }

func (WebAclManagedRuleGroupConfigArrayOutput) ElementType added in v0.72.0

func (WebAclManagedRuleGroupConfigArrayOutput) Index added in v0.72.0

func (WebAclManagedRuleGroupConfigArrayOutput) ToWebAclManagedRuleGroupConfigArrayOutput added in v0.72.0

func (o WebAclManagedRuleGroupConfigArrayOutput) ToWebAclManagedRuleGroupConfigArrayOutput() WebAclManagedRuleGroupConfigArrayOutput

func (WebAclManagedRuleGroupConfigArrayOutput) ToWebAclManagedRuleGroupConfigArrayOutputWithContext added in v0.72.0

func (o WebAclManagedRuleGroupConfigArrayOutput) ToWebAclManagedRuleGroupConfigArrayOutputWithContext(ctx context.Context) WebAclManagedRuleGroupConfigArrayOutput

type WebAclManagedRuleGroupConfigInput added in v0.72.0

type WebAclManagedRuleGroupConfigInput interface {
	pulumi.Input

	ToWebAclManagedRuleGroupConfigOutput() WebAclManagedRuleGroupConfigOutput
	ToWebAclManagedRuleGroupConfigOutputWithContext(context.Context) WebAclManagedRuleGroupConfigOutput
}

WebAclManagedRuleGroupConfigInput is an input type that accepts WebAclManagedRuleGroupConfigArgs and WebAclManagedRuleGroupConfigOutput values. You can construct a concrete instance of `WebAclManagedRuleGroupConfigInput` via:

WebAclManagedRuleGroupConfigArgs{...}

type WebAclManagedRuleGroupConfigOutput added in v0.72.0

type WebAclManagedRuleGroupConfigOutput struct{ *pulumi.OutputState }

ManagedRuleGroupConfig.

func (WebAclManagedRuleGroupConfigOutput) AwsManagedRulesAcfpRuleSet added in v0.72.0

Additional configuration for using the account creation fraud prevention (ACFP) managed rule group, `AWSManagedRulesACFPRuleSet` . Use this to provide account creation request information to the rule group. For web ACLs that protect CloudFront distributions, use this to also provide the information about how your distribution responds to account creation requests.

For information about using the ACFP managed rule group, see [AWS WAF Fraud Control account creation fraud prevention (ACFP) rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-acfp.html) and [AWS WAF Fraud Control account creation fraud prevention (ACFP)](https://docs.aws.amazon.com/waf/latest/developerguide/waf-acfp.html) in the *AWS WAF Developer Guide* .

func (WebAclManagedRuleGroupConfigOutput) AwsManagedRulesAtpRuleSet added in v0.72.0

Additional configuration for using the account takeover prevention (ATP) managed rule group, `AWSManagedRulesATPRuleSet` . Use this to provide login request information to the rule group. For web ACLs that protect CloudFront distributions, use this to also provide the information about how your distribution responds to login requests.

This configuration replaces the individual configuration fields in `ManagedRuleGroupConfig` and provides additional feature configuration.

For information about using the ATP managed rule group, see [AWS WAF Fraud Control account takeover prevention (ATP) rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-atp.html) and [AWS WAF Fraud Control account takeover prevention (ATP)](https://docs.aws.amazon.com/waf/latest/developerguide/waf-atp.html) in the *AWS WAF Developer Guide* .

func (WebAclManagedRuleGroupConfigOutput) AwsManagedRulesBotControlRuleSet added in v0.72.0

Additional configuration for using the Bot Control managed rule group. Use this to specify the inspection level that you want to use. For information about using the Bot Control managed rule group, see [AWS WAF Bot Control rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html) and [AWS WAF Bot Control](https://docs.aws.amazon.com/waf/latest/developerguide/waf-bot-control.html) in the *AWS WAF Developer Guide* .

func (WebAclManagedRuleGroupConfigOutput) ElementType added in v0.72.0

func (WebAclManagedRuleGroupConfigOutput) LoginPath added in v0.72.0

> Instead of this setting, provide your configuration under `AWSManagedRulesATPRuleSet` .

func (WebAclManagedRuleGroupConfigOutput) PasswordField added in v0.72.0

> Instead of this setting, provide your configuration under the request inspection configuration for `AWSManagedRulesATPRuleSet` or `AWSManagedRulesACFPRuleSet` .

func (WebAclManagedRuleGroupConfigOutput) PayloadType added in v0.72.0

> Instead of this setting, provide your configuration under the request inspection configuration for `AWSManagedRulesATPRuleSet` or `AWSManagedRulesACFPRuleSet` .

func (WebAclManagedRuleGroupConfigOutput) ToWebAclManagedRuleGroupConfigOutput added in v0.72.0

func (o WebAclManagedRuleGroupConfigOutput) ToWebAclManagedRuleGroupConfigOutput() WebAclManagedRuleGroupConfigOutput

func (WebAclManagedRuleGroupConfigOutput) ToWebAclManagedRuleGroupConfigOutputWithContext added in v0.72.0

func (o WebAclManagedRuleGroupConfigOutput) ToWebAclManagedRuleGroupConfigOutputWithContext(ctx context.Context) WebAclManagedRuleGroupConfigOutput

func (WebAclManagedRuleGroupConfigOutput) UsernameField added in v0.72.0

> Instead of this setting, provide your configuration under the request inspection configuration for `AWSManagedRulesATPRuleSet` or `AWSManagedRulesACFPRuleSet` .

type WebAclManagedRuleGroupConfigPayloadType added in v0.72.0

type WebAclManagedRuleGroupConfigPayloadType string

> Instead of this setting, provide your configuration under the request inspection configuration for `AWSManagedRulesATPRuleSet` or `AWSManagedRulesACFPRuleSet` .

func (WebAclManagedRuleGroupConfigPayloadType) ElementType added in v0.72.0

func (WebAclManagedRuleGroupConfigPayloadType) ToStringOutput added in v0.72.0

func (WebAclManagedRuleGroupConfigPayloadType) ToStringOutputWithContext added in v0.72.0

func (WebAclManagedRuleGroupConfigPayloadType) ToStringPtrOutput added in v0.72.0

func (WebAclManagedRuleGroupConfigPayloadType) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclManagedRuleGroupConfigPayloadType) ToWebAclManagedRuleGroupConfigPayloadTypeOutput added in v0.72.0

func (e WebAclManagedRuleGroupConfigPayloadType) ToWebAclManagedRuleGroupConfigPayloadTypeOutput() WebAclManagedRuleGroupConfigPayloadTypeOutput

func (WebAclManagedRuleGroupConfigPayloadType) ToWebAclManagedRuleGroupConfigPayloadTypeOutputWithContext added in v0.72.0

func (e WebAclManagedRuleGroupConfigPayloadType) ToWebAclManagedRuleGroupConfigPayloadTypeOutputWithContext(ctx context.Context) WebAclManagedRuleGroupConfigPayloadTypeOutput

func (WebAclManagedRuleGroupConfigPayloadType) ToWebAclManagedRuleGroupConfigPayloadTypePtrOutput added in v0.72.0

func (e WebAclManagedRuleGroupConfigPayloadType) ToWebAclManagedRuleGroupConfigPayloadTypePtrOutput() WebAclManagedRuleGroupConfigPayloadTypePtrOutput

func (WebAclManagedRuleGroupConfigPayloadType) ToWebAclManagedRuleGroupConfigPayloadTypePtrOutputWithContext added in v0.72.0

func (e WebAclManagedRuleGroupConfigPayloadType) ToWebAclManagedRuleGroupConfigPayloadTypePtrOutputWithContext(ctx context.Context) WebAclManagedRuleGroupConfigPayloadTypePtrOutput

type WebAclManagedRuleGroupConfigPayloadTypeInput added in v0.72.0

type WebAclManagedRuleGroupConfigPayloadTypeInput interface {
	pulumi.Input

	ToWebAclManagedRuleGroupConfigPayloadTypeOutput() WebAclManagedRuleGroupConfigPayloadTypeOutput
	ToWebAclManagedRuleGroupConfigPayloadTypeOutputWithContext(context.Context) WebAclManagedRuleGroupConfigPayloadTypeOutput
}

WebAclManagedRuleGroupConfigPayloadTypeInput is an input type that accepts values of the WebAclManagedRuleGroupConfigPayloadType enum A concrete instance of `WebAclManagedRuleGroupConfigPayloadTypeInput` can be one of the following:

WebAclManagedRuleGroupConfigPayloadTypeJson
WebAclManagedRuleGroupConfigPayloadTypeFormEncoded

type WebAclManagedRuleGroupConfigPayloadTypeOutput added in v0.72.0

type WebAclManagedRuleGroupConfigPayloadTypeOutput struct{ *pulumi.OutputState }

func (WebAclManagedRuleGroupConfigPayloadTypeOutput) ElementType added in v0.72.0

func (WebAclManagedRuleGroupConfigPayloadTypeOutput) ToStringOutput added in v0.72.0

func (WebAclManagedRuleGroupConfigPayloadTypeOutput) ToStringOutputWithContext added in v0.72.0

func (WebAclManagedRuleGroupConfigPayloadTypeOutput) ToStringPtrOutput added in v0.72.0

func (WebAclManagedRuleGroupConfigPayloadTypeOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclManagedRuleGroupConfigPayloadTypeOutput) ToWebAclManagedRuleGroupConfigPayloadTypeOutput added in v0.72.0

func (o WebAclManagedRuleGroupConfigPayloadTypeOutput) ToWebAclManagedRuleGroupConfigPayloadTypeOutput() WebAclManagedRuleGroupConfigPayloadTypeOutput

func (WebAclManagedRuleGroupConfigPayloadTypeOutput) ToWebAclManagedRuleGroupConfigPayloadTypeOutputWithContext added in v0.72.0

func (o WebAclManagedRuleGroupConfigPayloadTypeOutput) ToWebAclManagedRuleGroupConfigPayloadTypeOutputWithContext(ctx context.Context) WebAclManagedRuleGroupConfigPayloadTypeOutput

func (WebAclManagedRuleGroupConfigPayloadTypeOutput) ToWebAclManagedRuleGroupConfigPayloadTypePtrOutput added in v0.72.0

func (o WebAclManagedRuleGroupConfigPayloadTypeOutput) ToWebAclManagedRuleGroupConfigPayloadTypePtrOutput() WebAclManagedRuleGroupConfigPayloadTypePtrOutput

func (WebAclManagedRuleGroupConfigPayloadTypeOutput) ToWebAclManagedRuleGroupConfigPayloadTypePtrOutputWithContext added in v0.72.0

func (o WebAclManagedRuleGroupConfigPayloadTypeOutput) ToWebAclManagedRuleGroupConfigPayloadTypePtrOutputWithContext(ctx context.Context) WebAclManagedRuleGroupConfigPayloadTypePtrOutput

type WebAclManagedRuleGroupConfigPayloadTypePtrInput added in v0.72.0

type WebAclManagedRuleGroupConfigPayloadTypePtrInput interface {
	pulumi.Input

	ToWebAclManagedRuleGroupConfigPayloadTypePtrOutput() WebAclManagedRuleGroupConfigPayloadTypePtrOutput
	ToWebAclManagedRuleGroupConfigPayloadTypePtrOutputWithContext(context.Context) WebAclManagedRuleGroupConfigPayloadTypePtrOutput
}

func WebAclManagedRuleGroupConfigPayloadTypePtr added in v0.72.0

func WebAclManagedRuleGroupConfigPayloadTypePtr(v string) WebAclManagedRuleGroupConfigPayloadTypePtrInput

type WebAclManagedRuleGroupConfigPayloadTypePtrOutput added in v0.72.0

type WebAclManagedRuleGroupConfigPayloadTypePtrOutput struct{ *pulumi.OutputState }

func (WebAclManagedRuleGroupConfigPayloadTypePtrOutput) Elem added in v0.72.0

func (WebAclManagedRuleGroupConfigPayloadTypePtrOutput) ElementType added in v0.72.0

func (WebAclManagedRuleGroupConfigPayloadTypePtrOutput) ToStringPtrOutput added in v0.72.0

func (WebAclManagedRuleGroupConfigPayloadTypePtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclManagedRuleGroupConfigPayloadTypePtrOutput) ToWebAclManagedRuleGroupConfigPayloadTypePtrOutput added in v0.72.0

func (o WebAclManagedRuleGroupConfigPayloadTypePtrOutput) ToWebAclManagedRuleGroupConfigPayloadTypePtrOutput() WebAclManagedRuleGroupConfigPayloadTypePtrOutput

func (WebAclManagedRuleGroupConfigPayloadTypePtrOutput) ToWebAclManagedRuleGroupConfigPayloadTypePtrOutputWithContext added in v0.72.0

func (o WebAclManagedRuleGroupConfigPayloadTypePtrOutput) ToWebAclManagedRuleGroupConfigPayloadTypePtrOutputWithContext(ctx context.Context) WebAclManagedRuleGroupConfigPayloadTypePtrOutput

type WebAclManagedRuleGroupStatement added in v0.72.0

type WebAclManagedRuleGroupStatement struct {
	// Rules in the referenced rule group whose actions are set to `Count` .
	//
	// > Instead of this option, use `RuleActionOverrides` . It accepts any valid action setting, including `Count` .
	ExcludedRules []WebAclExcludedRule `pulumi:"excludedRules"`
	// Collection of ManagedRuleGroupConfig.
	ManagedRuleGroupConfigs []WebAclManagedRuleGroupConfig `pulumi:"managedRuleGroupConfigs"`
	// The name of the managed rule group. You use this, along with the vendor name, to identify the rule group.
	Name string `pulumi:"name"`
	// Action overrides for rules in the rule group.
	RuleActionOverrides []WebAclRuleActionOverride `pulumi:"ruleActionOverrides"`
	// An optional nested statement that narrows the scope of the web requests that are evaluated by the managed rule group. Requests are only evaluated by the rule group if they match the scope-down statement. You can use any nestable `Statement` in the scope-down statement, and you can nest statements at any level, the same as you can for a rule statement.
	ScopeDownStatement *WebAclStatement `pulumi:"scopeDownStatement"`
	// The name of the managed rule group vendor. You use this, along with the rule group name, to identify a rule group.
	VendorName string `pulumi:"vendorName"`
	// The version of the managed rule group to use. If you specify this, the version setting is fixed until you change it. If you don't specify this, AWS WAF uses the vendor's default version, and then keeps the version at the vendor's default when the vendor updates the managed rule group settings.
	Version *string `pulumi:"version"`
}

type WebAclManagedRuleGroupStatementArgs added in v0.72.0

type WebAclManagedRuleGroupStatementArgs struct {
	// Rules in the referenced rule group whose actions are set to `Count` .
	//
	// > Instead of this option, use `RuleActionOverrides` . It accepts any valid action setting, including `Count` .
	ExcludedRules WebAclExcludedRuleArrayInput `pulumi:"excludedRules"`
	// Collection of ManagedRuleGroupConfig.
	ManagedRuleGroupConfigs WebAclManagedRuleGroupConfigArrayInput `pulumi:"managedRuleGroupConfigs"`
	// The name of the managed rule group. You use this, along with the vendor name, to identify the rule group.
	Name pulumi.StringInput `pulumi:"name"`
	// Action overrides for rules in the rule group.
	RuleActionOverrides WebAclRuleActionOverrideArrayInput `pulumi:"ruleActionOverrides"`
	// An optional nested statement that narrows the scope of the web requests that are evaluated by the managed rule group. Requests are only evaluated by the rule group if they match the scope-down statement. You can use any nestable `Statement` in the scope-down statement, and you can nest statements at any level, the same as you can for a rule statement.
	ScopeDownStatement WebAclStatementPtrInput `pulumi:"scopeDownStatement"`
	// The name of the managed rule group vendor. You use this, along with the rule group name, to identify a rule group.
	VendorName pulumi.StringInput `pulumi:"vendorName"`
	// The version of the managed rule group to use. If you specify this, the version setting is fixed until you change it. If you don't specify this, AWS WAF uses the vendor's default version, and then keeps the version at the vendor's default when the vendor updates the managed rule group settings.
	Version pulumi.StringPtrInput `pulumi:"version"`
}

func (WebAclManagedRuleGroupStatementArgs) ElementType added in v0.72.0

func (WebAclManagedRuleGroupStatementArgs) ToWebAclManagedRuleGroupStatementOutput added in v0.72.0

func (i WebAclManagedRuleGroupStatementArgs) ToWebAclManagedRuleGroupStatementOutput() WebAclManagedRuleGroupStatementOutput

func (WebAclManagedRuleGroupStatementArgs) ToWebAclManagedRuleGroupStatementOutputWithContext added in v0.72.0

func (i WebAclManagedRuleGroupStatementArgs) ToWebAclManagedRuleGroupStatementOutputWithContext(ctx context.Context) WebAclManagedRuleGroupStatementOutput

func (WebAclManagedRuleGroupStatementArgs) ToWebAclManagedRuleGroupStatementPtrOutput added in v0.72.0

func (i WebAclManagedRuleGroupStatementArgs) ToWebAclManagedRuleGroupStatementPtrOutput() WebAclManagedRuleGroupStatementPtrOutput

func (WebAclManagedRuleGroupStatementArgs) ToWebAclManagedRuleGroupStatementPtrOutputWithContext added in v0.72.0

func (i WebAclManagedRuleGroupStatementArgs) ToWebAclManagedRuleGroupStatementPtrOutputWithContext(ctx context.Context) WebAclManagedRuleGroupStatementPtrOutput

type WebAclManagedRuleGroupStatementInput added in v0.72.0

type WebAclManagedRuleGroupStatementInput interface {
	pulumi.Input

	ToWebAclManagedRuleGroupStatementOutput() WebAclManagedRuleGroupStatementOutput
	ToWebAclManagedRuleGroupStatementOutputWithContext(context.Context) WebAclManagedRuleGroupStatementOutput
}

WebAclManagedRuleGroupStatementInput is an input type that accepts WebAclManagedRuleGroupStatementArgs and WebAclManagedRuleGroupStatementOutput values. You can construct a concrete instance of `WebAclManagedRuleGroupStatementInput` via:

WebAclManagedRuleGroupStatementArgs{...}

type WebAclManagedRuleGroupStatementOutput added in v0.72.0

type WebAclManagedRuleGroupStatementOutput struct{ *pulumi.OutputState }

func (WebAclManagedRuleGroupStatementOutput) ElementType added in v0.72.0

func (WebAclManagedRuleGroupStatementOutput) ExcludedRules added in v0.72.0

Rules in the referenced rule group whose actions are set to `Count` .

> Instead of this option, use `RuleActionOverrides` . It accepts any valid action setting, including `Count` .

func (WebAclManagedRuleGroupStatementOutput) ManagedRuleGroupConfigs added in v0.72.0

Collection of ManagedRuleGroupConfig.

func (WebAclManagedRuleGroupStatementOutput) Name added in v0.72.0

The name of the managed rule group. You use this, along with the vendor name, to identify the rule group.

func (WebAclManagedRuleGroupStatementOutput) RuleActionOverrides added in v0.72.0

Action overrides for rules in the rule group.

func (WebAclManagedRuleGroupStatementOutput) ScopeDownStatement added in v0.72.0

An optional nested statement that narrows the scope of the web requests that are evaluated by the managed rule group. Requests are only evaluated by the rule group if they match the scope-down statement. You can use any nestable `Statement` in the scope-down statement, and you can nest statements at any level, the same as you can for a rule statement.

func (WebAclManagedRuleGroupStatementOutput) ToWebAclManagedRuleGroupStatementOutput added in v0.72.0

func (o WebAclManagedRuleGroupStatementOutput) ToWebAclManagedRuleGroupStatementOutput() WebAclManagedRuleGroupStatementOutput

func (WebAclManagedRuleGroupStatementOutput) ToWebAclManagedRuleGroupStatementOutputWithContext added in v0.72.0

func (o WebAclManagedRuleGroupStatementOutput) ToWebAclManagedRuleGroupStatementOutputWithContext(ctx context.Context) WebAclManagedRuleGroupStatementOutput

func (WebAclManagedRuleGroupStatementOutput) ToWebAclManagedRuleGroupStatementPtrOutput added in v0.72.0

func (o WebAclManagedRuleGroupStatementOutput) ToWebAclManagedRuleGroupStatementPtrOutput() WebAclManagedRuleGroupStatementPtrOutput

func (WebAclManagedRuleGroupStatementOutput) ToWebAclManagedRuleGroupStatementPtrOutputWithContext added in v0.72.0

func (o WebAclManagedRuleGroupStatementOutput) ToWebAclManagedRuleGroupStatementPtrOutputWithContext(ctx context.Context) WebAclManagedRuleGroupStatementPtrOutput

func (WebAclManagedRuleGroupStatementOutput) VendorName added in v0.72.0

The name of the managed rule group vendor. You use this, along with the rule group name, to identify a rule group.

func (WebAclManagedRuleGroupStatementOutput) Version added in v0.72.0

The version of the managed rule group to use. If you specify this, the version setting is fixed until you change it. If you don't specify this, AWS WAF uses the vendor's default version, and then keeps the version at the vendor's default when the vendor updates the managed rule group settings.

type WebAclManagedRuleGroupStatementPtrInput added in v0.72.0

type WebAclManagedRuleGroupStatementPtrInput interface {
	pulumi.Input

	ToWebAclManagedRuleGroupStatementPtrOutput() WebAclManagedRuleGroupStatementPtrOutput
	ToWebAclManagedRuleGroupStatementPtrOutputWithContext(context.Context) WebAclManagedRuleGroupStatementPtrOutput
}

WebAclManagedRuleGroupStatementPtrInput is an input type that accepts WebAclManagedRuleGroupStatementArgs, WebAclManagedRuleGroupStatementPtr and WebAclManagedRuleGroupStatementPtrOutput values. You can construct a concrete instance of `WebAclManagedRuleGroupStatementPtrInput` via:

        WebAclManagedRuleGroupStatementArgs{...}

or:

        nil

type WebAclManagedRuleGroupStatementPtrOutput added in v0.72.0

type WebAclManagedRuleGroupStatementPtrOutput struct{ *pulumi.OutputState }

func (WebAclManagedRuleGroupStatementPtrOutput) Elem added in v0.72.0

func (WebAclManagedRuleGroupStatementPtrOutput) ElementType added in v0.72.0

func (WebAclManagedRuleGroupStatementPtrOutput) ExcludedRules added in v0.72.0

Rules in the referenced rule group whose actions are set to `Count` .

> Instead of this option, use `RuleActionOverrides` . It accepts any valid action setting, including `Count` .

func (WebAclManagedRuleGroupStatementPtrOutput) ManagedRuleGroupConfigs added in v0.72.0

Collection of ManagedRuleGroupConfig.

func (WebAclManagedRuleGroupStatementPtrOutput) Name added in v0.72.0

The name of the managed rule group. You use this, along with the vendor name, to identify the rule group.

func (WebAclManagedRuleGroupStatementPtrOutput) RuleActionOverrides added in v0.72.0

Action overrides for rules in the rule group.

func (WebAclManagedRuleGroupStatementPtrOutput) ScopeDownStatement added in v0.72.0

An optional nested statement that narrows the scope of the web requests that are evaluated by the managed rule group. Requests are only evaluated by the rule group if they match the scope-down statement. You can use any nestable `Statement` in the scope-down statement, and you can nest statements at any level, the same as you can for a rule statement.

func (WebAclManagedRuleGroupStatementPtrOutput) ToWebAclManagedRuleGroupStatementPtrOutput added in v0.72.0

func (o WebAclManagedRuleGroupStatementPtrOutput) ToWebAclManagedRuleGroupStatementPtrOutput() WebAclManagedRuleGroupStatementPtrOutput

func (WebAclManagedRuleGroupStatementPtrOutput) ToWebAclManagedRuleGroupStatementPtrOutputWithContext added in v0.72.0

func (o WebAclManagedRuleGroupStatementPtrOutput) ToWebAclManagedRuleGroupStatementPtrOutputWithContext(ctx context.Context) WebAclManagedRuleGroupStatementPtrOutput

func (WebAclManagedRuleGroupStatementPtrOutput) VendorName added in v0.72.0

The name of the managed rule group vendor. You use this, along with the rule group name, to identify a rule group.

func (WebAclManagedRuleGroupStatementPtrOutput) Version added in v0.72.0

The version of the managed rule group to use. If you specify this, the version setting is fixed until you change it. If you don't specify this, AWS WAF uses the vendor's default version, and then keeps the version at the vendor's default when the vendor updates the managed rule group settings.

type WebAclMapMatchScope added in v0.72.0

type WebAclMapMatchScope string

The parts of the request to match against using the MatchPattern.

func (WebAclMapMatchScope) ElementType added in v0.72.0

func (WebAclMapMatchScope) ElementType() reflect.Type

func (WebAclMapMatchScope) ToStringOutput added in v0.72.0

func (e WebAclMapMatchScope) ToStringOutput() pulumi.StringOutput

func (WebAclMapMatchScope) ToStringOutputWithContext added in v0.72.0

func (e WebAclMapMatchScope) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclMapMatchScope) ToStringPtrOutput added in v0.72.0

func (e WebAclMapMatchScope) ToStringPtrOutput() pulumi.StringPtrOutput

func (WebAclMapMatchScope) ToStringPtrOutputWithContext added in v0.72.0

func (e WebAclMapMatchScope) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclMapMatchScope) ToWebAclMapMatchScopeOutput added in v0.72.0

func (e WebAclMapMatchScope) ToWebAclMapMatchScopeOutput() WebAclMapMatchScopeOutput

func (WebAclMapMatchScope) ToWebAclMapMatchScopeOutputWithContext added in v0.72.0

func (e WebAclMapMatchScope) ToWebAclMapMatchScopeOutputWithContext(ctx context.Context) WebAclMapMatchScopeOutput

func (WebAclMapMatchScope) ToWebAclMapMatchScopePtrOutput added in v0.72.0

func (e WebAclMapMatchScope) ToWebAclMapMatchScopePtrOutput() WebAclMapMatchScopePtrOutput

func (WebAclMapMatchScope) ToWebAclMapMatchScopePtrOutputWithContext added in v0.72.0

func (e WebAclMapMatchScope) ToWebAclMapMatchScopePtrOutputWithContext(ctx context.Context) WebAclMapMatchScopePtrOutput

type WebAclMapMatchScopeInput added in v0.72.0

type WebAclMapMatchScopeInput interface {
	pulumi.Input

	ToWebAclMapMatchScopeOutput() WebAclMapMatchScopeOutput
	ToWebAclMapMatchScopeOutputWithContext(context.Context) WebAclMapMatchScopeOutput
}

WebAclMapMatchScopeInput is an input type that accepts values of the WebAclMapMatchScope enum A concrete instance of `WebAclMapMatchScopeInput` can be one of the following:

WebAclMapMatchScopeAll
WebAclMapMatchScopeKey
WebAclMapMatchScopeValue

type WebAclMapMatchScopeOutput added in v0.72.0

type WebAclMapMatchScopeOutput struct{ *pulumi.OutputState }

func (WebAclMapMatchScopeOutput) ElementType added in v0.72.0

func (WebAclMapMatchScopeOutput) ElementType() reflect.Type

func (WebAclMapMatchScopeOutput) ToStringOutput added in v0.72.0

func (o WebAclMapMatchScopeOutput) ToStringOutput() pulumi.StringOutput

func (WebAclMapMatchScopeOutput) ToStringOutputWithContext added in v0.72.0

func (o WebAclMapMatchScopeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclMapMatchScopeOutput) ToStringPtrOutput added in v0.72.0

func (o WebAclMapMatchScopeOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (WebAclMapMatchScopeOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o WebAclMapMatchScopeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclMapMatchScopeOutput) ToWebAclMapMatchScopeOutput added in v0.72.0

func (o WebAclMapMatchScopeOutput) ToWebAclMapMatchScopeOutput() WebAclMapMatchScopeOutput

func (WebAclMapMatchScopeOutput) ToWebAclMapMatchScopeOutputWithContext added in v0.72.0

func (o WebAclMapMatchScopeOutput) ToWebAclMapMatchScopeOutputWithContext(ctx context.Context) WebAclMapMatchScopeOutput

func (WebAclMapMatchScopeOutput) ToWebAclMapMatchScopePtrOutput added in v0.72.0

func (o WebAclMapMatchScopeOutput) ToWebAclMapMatchScopePtrOutput() WebAclMapMatchScopePtrOutput

func (WebAclMapMatchScopeOutput) ToWebAclMapMatchScopePtrOutputWithContext added in v0.72.0

func (o WebAclMapMatchScopeOutput) ToWebAclMapMatchScopePtrOutputWithContext(ctx context.Context) WebAclMapMatchScopePtrOutput

type WebAclMapMatchScopePtrInput added in v0.72.0

type WebAclMapMatchScopePtrInput interface {
	pulumi.Input

	ToWebAclMapMatchScopePtrOutput() WebAclMapMatchScopePtrOutput
	ToWebAclMapMatchScopePtrOutputWithContext(context.Context) WebAclMapMatchScopePtrOutput
}

func WebAclMapMatchScopePtr added in v0.72.0

func WebAclMapMatchScopePtr(v string) WebAclMapMatchScopePtrInput

type WebAclMapMatchScopePtrOutput added in v0.72.0

type WebAclMapMatchScopePtrOutput struct{ *pulumi.OutputState }

func (WebAclMapMatchScopePtrOutput) Elem added in v0.72.0

func (WebAclMapMatchScopePtrOutput) ElementType added in v0.72.0

func (WebAclMapMatchScopePtrOutput) ToStringPtrOutput added in v0.72.0

func (o WebAclMapMatchScopePtrOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (WebAclMapMatchScopePtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o WebAclMapMatchScopePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclMapMatchScopePtrOutput) ToWebAclMapMatchScopePtrOutput added in v0.72.0

func (o WebAclMapMatchScopePtrOutput) ToWebAclMapMatchScopePtrOutput() WebAclMapMatchScopePtrOutput

func (WebAclMapMatchScopePtrOutput) ToWebAclMapMatchScopePtrOutputWithContext added in v0.72.0

func (o WebAclMapMatchScopePtrOutput) ToWebAclMapMatchScopePtrOutputWithContext(ctx context.Context) WebAclMapMatchScopePtrOutput

type WebAclNotStatement added in v0.72.0

type WebAclNotStatement struct {
	// The statement to negate. You can use any statement that can be nested.
	Statement WebAclStatement `pulumi:"statement"`
}

type WebAclNotStatementArgs added in v0.72.0

type WebAclNotStatementArgs struct {
	// The statement to negate. You can use any statement that can be nested.
	Statement WebAclStatementInput `pulumi:"statement"`
}

func (WebAclNotStatementArgs) ElementType added in v0.72.0

func (WebAclNotStatementArgs) ElementType() reflect.Type

func (WebAclNotStatementArgs) ToWebAclNotStatementOutput added in v0.72.0

func (i WebAclNotStatementArgs) ToWebAclNotStatementOutput() WebAclNotStatementOutput

func (WebAclNotStatementArgs) ToWebAclNotStatementOutputWithContext added in v0.72.0

func (i WebAclNotStatementArgs) ToWebAclNotStatementOutputWithContext(ctx context.Context) WebAclNotStatementOutput

func (WebAclNotStatementArgs) ToWebAclNotStatementPtrOutput added in v0.72.0

func (i WebAclNotStatementArgs) ToWebAclNotStatementPtrOutput() WebAclNotStatementPtrOutput

func (WebAclNotStatementArgs) ToWebAclNotStatementPtrOutputWithContext added in v0.72.0

func (i WebAclNotStatementArgs) ToWebAclNotStatementPtrOutputWithContext(ctx context.Context) WebAclNotStatementPtrOutput

type WebAclNotStatementInput added in v0.72.0

type WebAclNotStatementInput interface {
	pulumi.Input

	ToWebAclNotStatementOutput() WebAclNotStatementOutput
	ToWebAclNotStatementOutputWithContext(context.Context) WebAclNotStatementOutput
}

WebAclNotStatementInput is an input type that accepts WebAclNotStatementArgs and WebAclNotStatementOutput values. You can construct a concrete instance of `WebAclNotStatementInput` via:

WebAclNotStatementArgs{...}

type WebAclNotStatementOutput added in v0.72.0

type WebAclNotStatementOutput struct{ *pulumi.OutputState }

func (WebAclNotStatementOutput) ElementType added in v0.72.0

func (WebAclNotStatementOutput) ElementType() reflect.Type

func (WebAclNotStatementOutput) Statement added in v0.72.0

The statement to negate. You can use any statement that can be nested.

func (WebAclNotStatementOutput) ToWebAclNotStatementOutput added in v0.72.0

func (o WebAclNotStatementOutput) ToWebAclNotStatementOutput() WebAclNotStatementOutput

func (WebAclNotStatementOutput) ToWebAclNotStatementOutputWithContext added in v0.72.0

func (o WebAclNotStatementOutput) ToWebAclNotStatementOutputWithContext(ctx context.Context) WebAclNotStatementOutput

func (WebAclNotStatementOutput) ToWebAclNotStatementPtrOutput added in v0.72.0

func (o WebAclNotStatementOutput) ToWebAclNotStatementPtrOutput() WebAclNotStatementPtrOutput

func (WebAclNotStatementOutput) ToWebAclNotStatementPtrOutputWithContext added in v0.72.0

func (o WebAclNotStatementOutput) ToWebAclNotStatementPtrOutputWithContext(ctx context.Context) WebAclNotStatementPtrOutput

type WebAclNotStatementPtrInput added in v0.72.0

type WebAclNotStatementPtrInput interface {
	pulumi.Input

	ToWebAclNotStatementPtrOutput() WebAclNotStatementPtrOutput
	ToWebAclNotStatementPtrOutputWithContext(context.Context) WebAclNotStatementPtrOutput
}

WebAclNotStatementPtrInput is an input type that accepts WebAclNotStatementArgs, WebAclNotStatementPtr and WebAclNotStatementPtrOutput values. You can construct a concrete instance of `WebAclNotStatementPtrInput` via:

        WebAclNotStatementArgs{...}

or:

        nil

func WebAclNotStatementPtr added in v0.72.0

func WebAclNotStatementPtr(v *WebAclNotStatementArgs) WebAclNotStatementPtrInput

type WebAclNotStatementPtrOutput added in v0.72.0

type WebAclNotStatementPtrOutput struct{ *pulumi.OutputState }

func (WebAclNotStatementPtrOutput) Elem added in v0.72.0

func (WebAclNotStatementPtrOutput) ElementType added in v0.72.0

func (WebAclNotStatementPtrOutput) Statement added in v0.72.0

The statement to negate. You can use any statement that can be nested.

func (WebAclNotStatementPtrOutput) ToWebAclNotStatementPtrOutput added in v0.72.0

func (o WebAclNotStatementPtrOutput) ToWebAclNotStatementPtrOutput() WebAclNotStatementPtrOutput

func (WebAclNotStatementPtrOutput) ToWebAclNotStatementPtrOutputWithContext added in v0.72.0

func (o WebAclNotStatementPtrOutput) ToWebAclNotStatementPtrOutputWithContext(ctx context.Context) WebAclNotStatementPtrOutput

type WebAclOrStatement added in v0.72.0

type WebAclOrStatement struct {
	// The statements to combine with OR logic. You can use any statements that can be nested.
	Statements []WebAclStatement `pulumi:"statements"`
}

type WebAclOrStatementArgs added in v0.72.0

type WebAclOrStatementArgs struct {
	// The statements to combine with OR logic. You can use any statements that can be nested.
	Statements WebAclStatementArrayInput `pulumi:"statements"`
}

func (WebAclOrStatementArgs) ElementType added in v0.72.0

func (WebAclOrStatementArgs) ElementType() reflect.Type

func (WebAclOrStatementArgs) ToWebAclOrStatementOutput added in v0.72.0

func (i WebAclOrStatementArgs) ToWebAclOrStatementOutput() WebAclOrStatementOutput

func (WebAclOrStatementArgs) ToWebAclOrStatementOutputWithContext added in v0.72.0

func (i WebAclOrStatementArgs) ToWebAclOrStatementOutputWithContext(ctx context.Context) WebAclOrStatementOutput

func (WebAclOrStatementArgs) ToWebAclOrStatementPtrOutput added in v0.72.0

func (i WebAclOrStatementArgs) ToWebAclOrStatementPtrOutput() WebAclOrStatementPtrOutput

func (WebAclOrStatementArgs) ToWebAclOrStatementPtrOutputWithContext added in v0.72.0

func (i WebAclOrStatementArgs) ToWebAclOrStatementPtrOutputWithContext(ctx context.Context) WebAclOrStatementPtrOutput

type WebAclOrStatementInput added in v0.72.0

type WebAclOrStatementInput interface {
	pulumi.Input

	ToWebAclOrStatementOutput() WebAclOrStatementOutput
	ToWebAclOrStatementOutputWithContext(context.Context) WebAclOrStatementOutput
}

WebAclOrStatementInput is an input type that accepts WebAclOrStatementArgs and WebAclOrStatementOutput values. You can construct a concrete instance of `WebAclOrStatementInput` via:

WebAclOrStatementArgs{...}

type WebAclOrStatementOutput added in v0.72.0

type WebAclOrStatementOutput struct{ *pulumi.OutputState }

func (WebAclOrStatementOutput) ElementType added in v0.72.0

func (WebAclOrStatementOutput) ElementType() reflect.Type

func (WebAclOrStatementOutput) Statements added in v0.72.0

The statements to combine with OR logic. You can use any statements that can be nested.

func (WebAclOrStatementOutput) ToWebAclOrStatementOutput added in v0.72.0

func (o WebAclOrStatementOutput) ToWebAclOrStatementOutput() WebAclOrStatementOutput

func (WebAclOrStatementOutput) ToWebAclOrStatementOutputWithContext added in v0.72.0

func (o WebAclOrStatementOutput) ToWebAclOrStatementOutputWithContext(ctx context.Context) WebAclOrStatementOutput

func (WebAclOrStatementOutput) ToWebAclOrStatementPtrOutput added in v0.72.0

func (o WebAclOrStatementOutput) ToWebAclOrStatementPtrOutput() WebAclOrStatementPtrOutput

func (WebAclOrStatementOutput) ToWebAclOrStatementPtrOutputWithContext added in v0.72.0

func (o WebAclOrStatementOutput) ToWebAclOrStatementPtrOutputWithContext(ctx context.Context) WebAclOrStatementPtrOutput

type WebAclOrStatementPtrInput added in v0.72.0

type WebAclOrStatementPtrInput interface {
	pulumi.Input

	ToWebAclOrStatementPtrOutput() WebAclOrStatementPtrOutput
	ToWebAclOrStatementPtrOutputWithContext(context.Context) WebAclOrStatementPtrOutput
}

WebAclOrStatementPtrInput is an input type that accepts WebAclOrStatementArgs, WebAclOrStatementPtr and WebAclOrStatementPtrOutput values. You can construct a concrete instance of `WebAclOrStatementPtrInput` via:

        WebAclOrStatementArgs{...}

or:

        nil

func WebAclOrStatementPtr added in v0.72.0

func WebAclOrStatementPtr(v *WebAclOrStatementArgs) WebAclOrStatementPtrInput

type WebAclOrStatementPtrOutput added in v0.72.0

type WebAclOrStatementPtrOutput struct{ *pulumi.OutputState }

func (WebAclOrStatementPtrOutput) Elem added in v0.72.0

func (WebAclOrStatementPtrOutput) ElementType added in v0.72.0

func (WebAclOrStatementPtrOutput) ElementType() reflect.Type

func (WebAclOrStatementPtrOutput) Statements added in v0.72.0

The statements to combine with OR logic. You can use any statements that can be nested.

func (WebAclOrStatementPtrOutput) ToWebAclOrStatementPtrOutput added in v0.72.0

func (o WebAclOrStatementPtrOutput) ToWebAclOrStatementPtrOutput() WebAclOrStatementPtrOutput

func (WebAclOrStatementPtrOutput) ToWebAclOrStatementPtrOutputWithContext added in v0.72.0

func (o WebAclOrStatementPtrOutput) ToWebAclOrStatementPtrOutputWithContext(ctx context.Context) WebAclOrStatementPtrOutput

type WebAclOutput added in v0.72.0

type WebAclOutput struct{ *pulumi.OutputState }

func (WebAclOutput) Arn added in v0.72.0

The Amazon Resource Name (ARN) of the web ACL.

func (WebAclOutput) AssociationConfig added in v0.72.0

func (o WebAclOutput) AssociationConfig() WebAclAssociationConfigPtrOutput

Specifies custom configurations for the associations between the web ACL and protected resources.

Use this to customize the maximum size of the request body that your protected resources forward to AWS WAF for inspection. You can customize this setting for CloudFront, API Gateway, Amazon Cognito, App Runner, or Verified Access resources. The default setting is 16 KB (16,384 bytes).

> You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see [AWS WAF Pricing](https://docs.aws.amazon.com/waf/pricing/) .

For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).

func (WebAclOutput) AwsId added in v0.99.0

func (o WebAclOutput) AwsId() pulumi.StringOutput

The ID of the web ACL.

func (WebAclOutput) Capacity added in v0.72.0

func (o WebAclOutput) Capacity() pulumi.IntOutput

The web ACL capacity units (WCUs) currently being used by this web ACL.

AWS WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. AWS WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500.

func (WebAclOutput) CaptchaConfig added in v0.72.0

func (o WebAclOutput) CaptchaConfig() WebAclCaptchaConfigPtrOutput

Specifies how AWS WAF should handle `CAPTCHA` evaluations for rules that don't have their own `CaptchaConfig` settings. If you don't specify this, AWS WAF uses its default settings for `CaptchaConfig` .

func (WebAclOutput) ChallengeConfig added in v0.72.0

func (o WebAclOutput) ChallengeConfig() WebAclChallengeConfigPtrOutput

Specifies how AWS WAF should handle challenge evaluations for rules that don't have their own `ChallengeConfig` settings. If you don't specify this, AWS WAF uses its default settings for `ChallengeConfig` .

func (WebAclOutput) CustomResponseBodies added in v0.72.0

func (o WebAclOutput) CustomResponseBodies() WebAclCustomResponseBodyMapOutput

A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the web ACL, and then use them in the rules and default actions that you define in the web ACL.

For information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .

For information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* .

func (WebAclOutput) DefaultAction added in v0.72.0

func (o WebAclOutput) DefaultAction() WebAclDefaultActionOutput

The action to perform if none of the `Rules` contained in the `WebACL` match.

func (WebAclOutput) Description added in v0.72.0

func (o WebAclOutput) Description() pulumi.StringPtrOutput

A description of the web ACL that helps with identification.

func (WebAclOutput) ElementType added in v0.72.0

func (WebAclOutput) ElementType() reflect.Type

func (WebAclOutput) LabelNamespace added in v0.72.0

func (o WebAclOutput) LabelNamespace() pulumi.StringOutput

The label namespace prefix for this web ACL. All labels added by rules in this web ACL have this prefix.

The syntax for the label namespace prefix for a web ACL is the following: `awswaf:<account ID>:webacl:<web ACL name>:`

When a rule with a label matches a web request, AWS WAF adds the fully qualified label to the request. A fully qualified label is made up of the label namespace from the rule group or web ACL where the rule is defined and the label from the rule, separated by a colon.

func (WebAclOutput) Name added in v0.72.0

The name of the web ACL. You cannot change the name of a web ACL after you create it.

func (WebAclOutput) Rules added in v0.72.0

Collection of Rules.

func (WebAclOutput) Scope added in v0.72.0

func (o WebAclOutput) Scope() WebAclScopeOutput

Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .

> For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .

For information about how to define the association of the web ACL with your resource, see `WebACLAssociation` .

func (WebAclOutput) Tags added in v0.72.0

func (o WebAclOutput) Tags() aws.TagArrayOutput

Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.

> To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.

func (WebAclOutput) ToWebAclOutput added in v0.72.0

func (o WebAclOutput) ToWebAclOutput() WebAclOutput

func (WebAclOutput) ToWebAclOutputWithContext added in v0.72.0

func (o WebAclOutput) ToWebAclOutputWithContext(ctx context.Context) WebAclOutput

func (WebAclOutput) TokenDomains added in v0.72.0

func (o WebAclOutput) TokenDomains() pulumi.StringArrayOutput

Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.

func (WebAclOutput) VisibilityConfig added in v0.72.0

func (o WebAclOutput) VisibilityConfig() WebAclVisibilityConfigOutput

Defines and enables Amazon CloudWatch metrics and web request sample collection.

type WebAclOverrideAction added in v0.72.0

type WebAclOverrideAction struct {
	// Count traffic towards application.
	Count interface{} `pulumi:"count"`
	// Keep the RuleGroup or ManagedRuleGroup behavior as is.
	None interface{} `pulumi:"none"`
}

Override a RuleGroup or ManagedRuleGroup behavior. This can only be applied to Rule that has RuleGroupReferenceStatement or ManagedRuleGroupReferenceStatement.

type WebAclOverrideActionArgs added in v0.72.0

type WebAclOverrideActionArgs struct {
	// Count traffic towards application.
	Count pulumi.Input `pulumi:"count"`
	// Keep the RuleGroup or ManagedRuleGroup behavior as is.
	None pulumi.Input `pulumi:"none"`
}

Override a RuleGroup or ManagedRuleGroup behavior. This can only be applied to Rule that has RuleGroupReferenceStatement or ManagedRuleGroupReferenceStatement.

func (WebAclOverrideActionArgs) ElementType added in v0.72.0

func (WebAclOverrideActionArgs) ElementType() reflect.Type

func (WebAclOverrideActionArgs) ToWebAclOverrideActionOutput added in v0.72.0

func (i WebAclOverrideActionArgs) ToWebAclOverrideActionOutput() WebAclOverrideActionOutput

func (WebAclOverrideActionArgs) ToWebAclOverrideActionOutputWithContext added in v0.72.0

func (i WebAclOverrideActionArgs) ToWebAclOverrideActionOutputWithContext(ctx context.Context) WebAclOverrideActionOutput

func (WebAclOverrideActionArgs) ToWebAclOverrideActionPtrOutput added in v0.72.0

func (i WebAclOverrideActionArgs) ToWebAclOverrideActionPtrOutput() WebAclOverrideActionPtrOutput

func (WebAclOverrideActionArgs) ToWebAclOverrideActionPtrOutputWithContext added in v0.72.0

func (i WebAclOverrideActionArgs) ToWebAclOverrideActionPtrOutputWithContext(ctx context.Context) WebAclOverrideActionPtrOutput

type WebAclOverrideActionInput added in v0.72.0

type WebAclOverrideActionInput interface {
	pulumi.Input

	ToWebAclOverrideActionOutput() WebAclOverrideActionOutput
	ToWebAclOverrideActionOutputWithContext(context.Context) WebAclOverrideActionOutput
}

WebAclOverrideActionInput is an input type that accepts WebAclOverrideActionArgs and WebAclOverrideActionOutput values. You can construct a concrete instance of `WebAclOverrideActionInput` via:

WebAclOverrideActionArgs{...}

type WebAclOverrideActionOutput added in v0.72.0

type WebAclOverrideActionOutput struct{ *pulumi.OutputState }

Override a RuleGroup or ManagedRuleGroup behavior. This can only be applied to Rule that has RuleGroupReferenceStatement or ManagedRuleGroupReferenceStatement.

func (WebAclOverrideActionOutput) Count added in v0.72.0

Count traffic towards application.

func (WebAclOverrideActionOutput) ElementType added in v0.72.0

func (WebAclOverrideActionOutput) ElementType() reflect.Type

func (WebAclOverrideActionOutput) None added in v0.72.0

Keep the RuleGroup or ManagedRuleGroup behavior as is.

func (WebAclOverrideActionOutput) ToWebAclOverrideActionOutput added in v0.72.0

func (o WebAclOverrideActionOutput) ToWebAclOverrideActionOutput() WebAclOverrideActionOutput

func (WebAclOverrideActionOutput) ToWebAclOverrideActionOutputWithContext added in v0.72.0

func (o WebAclOverrideActionOutput) ToWebAclOverrideActionOutputWithContext(ctx context.Context) WebAclOverrideActionOutput

func (WebAclOverrideActionOutput) ToWebAclOverrideActionPtrOutput added in v0.72.0

func (o WebAclOverrideActionOutput) ToWebAclOverrideActionPtrOutput() WebAclOverrideActionPtrOutput

func (WebAclOverrideActionOutput) ToWebAclOverrideActionPtrOutputWithContext added in v0.72.0

func (o WebAclOverrideActionOutput) ToWebAclOverrideActionPtrOutputWithContext(ctx context.Context) WebAclOverrideActionPtrOutput

type WebAclOverrideActionPtrInput added in v0.72.0

type WebAclOverrideActionPtrInput interface {
	pulumi.Input

	ToWebAclOverrideActionPtrOutput() WebAclOverrideActionPtrOutput
	ToWebAclOverrideActionPtrOutputWithContext(context.Context) WebAclOverrideActionPtrOutput
}

WebAclOverrideActionPtrInput is an input type that accepts WebAclOverrideActionArgs, WebAclOverrideActionPtr and WebAclOverrideActionPtrOutput values. You can construct a concrete instance of `WebAclOverrideActionPtrInput` via:

        WebAclOverrideActionArgs{...}

or:

        nil

func WebAclOverrideActionPtr added in v0.72.0

func WebAclOverrideActionPtr(v *WebAclOverrideActionArgs) WebAclOverrideActionPtrInput

type WebAclOverrideActionPtrOutput added in v0.72.0

type WebAclOverrideActionPtrOutput struct{ *pulumi.OutputState }

func (WebAclOverrideActionPtrOutput) Count added in v0.72.0

Count traffic towards application.

func (WebAclOverrideActionPtrOutput) Elem added in v0.72.0

func (WebAclOverrideActionPtrOutput) ElementType added in v0.72.0

func (WebAclOverrideActionPtrOutput) None added in v0.72.0

Keep the RuleGroup or ManagedRuleGroup behavior as is.

func (WebAclOverrideActionPtrOutput) ToWebAclOverrideActionPtrOutput added in v0.72.0

func (o WebAclOverrideActionPtrOutput) ToWebAclOverrideActionPtrOutput() WebAclOverrideActionPtrOutput

func (WebAclOverrideActionPtrOutput) ToWebAclOverrideActionPtrOutputWithContext added in v0.72.0

func (o WebAclOverrideActionPtrOutput) ToWebAclOverrideActionPtrOutputWithContext(ctx context.Context) WebAclOverrideActionPtrOutput

type WebAclOversizeHandling added in v0.72.0

type WebAclOversizeHandling string

Handling of requests containing oversize fields

func (WebAclOversizeHandling) ElementType added in v0.72.0

func (WebAclOversizeHandling) ElementType() reflect.Type

func (WebAclOversizeHandling) ToStringOutput added in v0.72.0

func (e WebAclOversizeHandling) ToStringOutput() pulumi.StringOutput

func (WebAclOversizeHandling) ToStringOutputWithContext added in v0.72.0

func (e WebAclOversizeHandling) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclOversizeHandling) ToStringPtrOutput added in v0.72.0

func (e WebAclOversizeHandling) ToStringPtrOutput() pulumi.StringPtrOutput

func (WebAclOversizeHandling) ToStringPtrOutputWithContext added in v0.72.0

func (e WebAclOversizeHandling) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclOversizeHandling) ToWebAclOversizeHandlingOutput added in v0.72.0

func (e WebAclOversizeHandling) ToWebAclOversizeHandlingOutput() WebAclOversizeHandlingOutput

func (WebAclOversizeHandling) ToWebAclOversizeHandlingOutputWithContext added in v0.72.0

func (e WebAclOversizeHandling) ToWebAclOversizeHandlingOutputWithContext(ctx context.Context) WebAclOversizeHandlingOutput

func (WebAclOversizeHandling) ToWebAclOversizeHandlingPtrOutput added in v0.72.0

func (e WebAclOversizeHandling) ToWebAclOversizeHandlingPtrOutput() WebAclOversizeHandlingPtrOutput

func (WebAclOversizeHandling) ToWebAclOversizeHandlingPtrOutputWithContext added in v0.72.0

func (e WebAclOversizeHandling) ToWebAclOversizeHandlingPtrOutputWithContext(ctx context.Context) WebAclOversizeHandlingPtrOutput

type WebAclOversizeHandlingInput added in v0.72.0

type WebAclOversizeHandlingInput interface {
	pulumi.Input

	ToWebAclOversizeHandlingOutput() WebAclOversizeHandlingOutput
	ToWebAclOversizeHandlingOutputWithContext(context.Context) WebAclOversizeHandlingOutput
}

WebAclOversizeHandlingInput is an input type that accepts values of the WebAclOversizeHandling enum A concrete instance of `WebAclOversizeHandlingInput` can be one of the following:

WebAclOversizeHandlingContinue
WebAclOversizeHandlingMatch
WebAclOversizeHandlingNoMatch

type WebAclOversizeHandlingOutput added in v0.72.0

type WebAclOversizeHandlingOutput struct{ *pulumi.OutputState }

func (WebAclOversizeHandlingOutput) ElementType added in v0.72.0

func (WebAclOversizeHandlingOutput) ToStringOutput added in v0.72.0

func (WebAclOversizeHandlingOutput) ToStringOutputWithContext added in v0.72.0

func (o WebAclOversizeHandlingOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclOversizeHandlingOutput) ToStringPtrOutput added in v0.72.0

func (o WebAclOversizeHandlingOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (WebAclOversizeHandlingOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o WebAclOversizeHandlingOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclOversizeHandlingOutput) ToWebAclOversizeHandlingOutput added in v0.72.0

func (o WebAclOversizeHandlingOutput) ToWebAclOversizeHandlingOutput() WebAclOversizeHandlingOutput

func (WebAclOversizeHandlingOutput) ToWebAclOversizeHandlingOutputWithContext added in v0.72.0

func (o WebAclOversizeHandlingOutput) ToWebAclOversizeHandlingOutputWithContext(ctx context.Context) WebAclOversizeHandlingOutput

func (WebAclOversizeHandlingOutput) ToWebAclOversizeHandlingPtrOutput added in v0.72.0

func (o WebAclOversizeHandlingOutput) ToWebAclOversizeHandlingPtrOutput() WebAclOversizeHandlingPtrOutput

func (WebAclOversizeHandlingOutput) ToWebAclOversizeHandlingPtrOutputWithContext added in v0.72.0

func (o WebAclOversizeHandlingOutput) ToWebAclOversizeHandlingPtrOutputWithContext(ctx context.Context) WebAclOversizeHandlingPtrOutput

type WebAclOversizeHandlingPtrInput added in v0.72.0

type WebAclOversizeHandlingPtrInput interface {
	pulumi.Input

	ToWebAclOversizeHandlingPtrOutput() WebAclOversizeHandlingPtrOutput
	ToWebAclOversizeHandlingPtrOutputWithContext(context.Context) WebAclOversizeHandlingPtrOutput
}

func WebAclOversizeHandlingPtr added in v0.72.0

func WebAclOversizeHandlingPtr(v string) WebAclOversizeHandlingPtrInput

type WebAclOversizeHandlingPtrOutput added in v0.72.0

type WebAclOversizeHandlingPtrOutput struct{ *pulumi.OutputState }

func (WebAclOversizeHandlingPtrOutput) Elem added in v0.72.0

func (WebAclOversizeHandlingPtrOutput) ElementType added in v0.72.0

func (WebAclOversizeHandlingPtrOutput) ToStringPtrOutput added in v0.72.0

func (WebAclOversizeHandlingPtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o WebAclOversizeHandlingPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclOversizeHandlingPtrOutput) ToWebAclOversizeHandlingPtrOutput added in v0.72.0

func (o WebAclOversizeHandlingPtrOutput) ToWebAclOversizeHandlingPtrOutput() WebAclOversizeHandlingPtrOutput

func (WebAclOversizeHandlingPtrOutput) ToWebAclOversizeHandlingPtrOutputWithContext added in v0.72.0

func (o WebAclOversizeHandlingPtrOutput) ToWebAclOversizeHandlingPtrOutputWithContext(ctx context.Context) WebAclOversizeHandlingPtrOutput

type WebAclPositionalConstraint added in v0.72.0

type WebAclPositionalConstraint string

Position of the evaluation in the FieldToMatch of request.

func (WebAclPositionalConstraint) ElementType added in v0.72.0

func (WebAclPositionalConstraint) ElementType() reflect.Type

func (WebAclPositionalConstraint) ToStringOutput added in v0.72.0

func (e WebAclPositionalConstraint) ToStringOutput() pulumi.StringOutput

func (WebAclPositionalConstraint) ToStringOutputWithContext added in v0.72.0

func (e WebAclPositionalConstraint) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclPositionalConstraint) ToStringPtrOutput added in v0.72.0

func (e WebAclPositionalConstraint) ToStringPtrOutput() pulumi.StringPtrOutput

func (WebAclPositionalConstraint) ToStringPtrOutputWithContext added in v0.72.0

func (e WebAclPositionalConstraint) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclPositionalConstraint) ToWebAclPositionalConstraintOutput added in v0.72.0

func (e WebAclPositionalConstraint) ToWebAclPositionalConstraintOutput() WebAclPositionalConstraintOutput

func (WebAclPositionalConstraint) ToWebAclPositionalConstraintOutputWithContext added in v0.72.0

func (e WebAclPositionalConstraint) ToWebAclPositionalConstraintOutputWithContext(ctx context.Context) WebAclPositionalConstraintOutput

func (WebAclPositionalConstraint) ToWebAclPositionalConstraintPtrOutput added in v0.72.0

func (e WebAclPositionalConstraint) ToWebAclPositionalConstraintPtrOutput() WebAclPositionalConstraintPtrOutput

func (WebAclPositionalConstraint) ToWebAclPositionalConstraintPtrOutputWithContext added in v0.72.0

func (e WebAclPositionalConstraint) ToWebAclPositionalConstraintPtrOutputWithContext(ctx context.Context) WebAclPositionalConstraintPtrOutput

type WebAclPositionalConstraintInput added in v0.72.0

type WebAclPositionalConstraintInput interface {
	pulumi.Input

	ToWebAclPositionalConstraintOutput() WebAclPositionalConstraintOutput
	ToWebAclPositionalConstraintOutputWithContext(context.Context) WebAclPositionalConstraintOutput
}

WebAclPositionalConstraintInput is an input type that accepts values of the WebAclPositionalConstraint enum A concrete instance of `WebAclPositionalConstraintInput` can be one of the following:

WebAclPositionalConstraintExactly
WebAclPositionalConstraintStartsWith
WebAclPositionalConstraintEndsWith
WebAclPositionalConstraintContains
WebAclPositionalConstraintContainsWord

type WebAclPositionalConstraintOutput added in v0.72.0

type WebAclPositionalConstraintOutput struct{ *pulumi.OutputState }

func (WebAclPositionalConstraintOutput) ElementType added in v0.72.0

func (WebAclPositionalConstraintOutput) ToStringOutput added in v0.72.0

func (WebAclPositionalConstraintOutput) ToStringOutputWithContext added in v0.72.0

func (o WebAclPositionalConstraintOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclPositionalConstraintOutput) ToStringPtrOutput added in v0.72.0

func (WebAclPositionalConstraintOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o WebAclPositionalConstraintOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclPositionalConstraintOutput) ToWebAclPositionalConstraintOutput added in v0.72.0

func (o WebAclPositionalConstraintOutput) ToWebAclPositionalConstraintOutput() WebAclPositionalConstraintOutput

func (WebAclPositionalConstraintOutput) ToWebAclPositionalConstraintOutputWithContext added in v0.72.0

func (o WebAclPositionalConstraintOutput) ToWebAclPositionalConstraintOutputWithContext(ctx context.Context) WebAclPositionalConstraintOutput

func (WebAclPositionalConstraintOutput) ToWebAclPositionalConstraintPtrOutput added in v0.72.0

func (o WebAclPositionalConstraintOutput) ToWebAclPositionalConstraintPtrOutput() WebAclPositionalConstraintPtrOutput

func (WebAclPositionalConstraintOutput) ToWebAclPositionalConstraintPtrOutputWithContext added in v0.72.0

func (o WebAclPositionalConstraintOutput) ToWebAclPositionalConstraintPtrOutputWithContext(ctx context.Context) WebAclPositionalConstraintPtrOutput

type WebAclPositionalConstraintPtrInput added in v0.72.0

type WebAclPositionalConstraintPtrInput interface {
	pulumi.Input

	ToWebAclPositionalConstraintPtrOutput() WebAclPositionalConstraintPtrOutput
	ToWebAclPositionalConstraintPtrOutputWithContext(context.Context) WebAclPositionalConstraintPtrOutput
}

func WebAclPositionalConstraintPtr added in v0.72.0

func WebAclPositionalConstraintPtr(v string) WebAclPositionalConstraintPtrInput

type WebAclPositionalConstraintPtrOutput added in v0.72.0

type WebAclPositionalConstraintPtrOutput struct{ *pulumi.OutputState }

func (WebAclPositionalConstraintPtrOutput) Elem added in v0.72.0

func (WebAclPositionalConstraintPtrOutput) ElementType added in v0.72.0

func (WebAclPositionalConstraintPtrOutput) ToStringPtrOutput added in v0.72.0

func (WebAclPositionalConstraintPtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o WebAclPositionalConstraintPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclPositionalConstraintPtrOutput) ToWebAclPositionalConstraintPtrOutput added in v0.72.0

func (o WebAclPositionalConstraintPtrOutput) ToWebAclPositionalConstraintPtrOutput() WebAclPositionalConstraintPtrOutput

func (WebAclPositionalConstraintPtrOutput) ToWebAclPositionalConstraintPtrOutputWithContext added in v0.72.0

func (o WebAclPositionalConstraintPtrOutput) ToWebAclPositionalConstraintPtrOutputWithContext(ctx context.Context) WebAclPositionalConstraintPtrOutput

type WebAclRateBasedStatement added in v0.72.0

type WebAclRateBasedStatement struct {
	// Setting that indicates how to aggregate the request counts.
	//
	// > Web requests that are missing any of the components specified in the aggregation keys are omitted from the rate-based rule evaluation and handling.
	//
	// - `CONSTANT` - Count and limit the requests that match the rate-based rule's scope-down statement. With this option, the counted requests aren't further aggregated. The scope-down statement is the only specification used. When the count of all requests that satisfy the scope-down statement goes over the limit, AWS WAF applies the rule action to all requests that satisfy the scope-down statement.
	//
	// With this option, you must configure the `ScopeDownStatement` property.
	// - `CUSTOM_KEYS` - Aggregate the request counts using one or more web request components as the aggregate keys.
	//
	// With this option, you must specify the aggregate keys in the `CustomKeys` property.
	//
	// To aggregate on only the IP address or only the forwarded IP address, don't use custom keys. Instead, set the aggregate key type to `IP` or `FORWARDED_IP` .
	// - `FORWARDED_IP` - Aggregate the request counts on the first IP address in an HTTP header.
	//
	// With this option, you must specify the header to use in the `ForwardedIPConfig` property.
	//
	// To aggregate on a combination of the forwarded IP address with other aggregate keys, use `CUSTOM_KEYS` .
	// - `IP` - Aggregate the request counts on the IP address from the web request origin.
	//
	// To aggregate on a combination of the IP address with other aggregate keys, use `CUSTOM_KEYS` .
	AggregateKeyType WebAclRateBasedStatementAggregateKeyType `pulumi:"aggregateKeyType"`
	// Specifies the aggregate keys to use in a rate-base rule.
	CustomKeys []WebAclRateBasedStatementCustomKey `pulumi:"customKeys"`
	// The amount of time, in seconds, that AWS WAF should include in its request counts, looking back from the current time. For example, for a setting of 120, when AWS WAF checks the rate, it counts the requests for the 2 minutes immediately preceding the current time. Valid settings are 60, 120, 300, and 600.
	//
	// This setting doesn't determine how often AWS WAF checks the rate, but how far back it looks each time it checks. AWS WAF checks the rate about every 10 seconds.
	//
	// Default: `300` (5 minutes)
	EvaluationWindowSec *int `pulumi:"evaluationWindowSec"`
	// The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	//
	// This is required if you specify a forwarded IP in the rule's aggregate key settings.
	ForwardedIpConfig *WebAclForwardedIpConfiguration `pulumi:"forwardedIpConfig"`
	// The limit on requests per 5-minute period for a single aggregation instance for the rate-based rule. If the rate-based statement includes a `ScopeDownStatement` , this limit is applied only to the requests that match the statement.
	//
	// Examples:
	//
	// - If you aggregate on just the IP address, this is the limit on requests from any single IP address.
	// - If you aggregate on the HTTP method and the query argument name "city", then this is the limit on requests for any single method, city pair.
	Limit int `pulumi:"limit"`
	// An optional nested statement that narrows the scope of the web requests that are evaluated and managed by the rate-based statement. When you use a scope-down statement, the rate-based rule only tracks and rate limits requests that match the scope-down statement. You can use any nestable `Statement` in the scope-down statement, and you can nest statements at any level, the same as you can for a rule statement.
	ScopeDownStatement *WebAclStatement `pulumi:"scopeDownStatement"`
}

type WebAclRateBasedStatementAggregateKeyType added in v0.72.0

type WebAclRateBasedStatementAggregateKeyType string

Setting that indicates how to aggregate the request counts.

> Web requests that are missing any of the components specified in the aggregation keys are omitted from the rate-based rule evaluation and handling.

- `CONSTANT` - Count and limit the requests that match the rate-based rule's scope-down statement. With this option, the counted requests aren't further aggregated. The scope-down statement is the only specification used. When the count of all requests that satisfy the scope-down statement goes over the limit, AWS WAF applies the rule action to all requests that satisfy the scope-down statement.

With this option, you must configure the `ScopeDownStatement` property. - `CUSTOM_KEYS` - Aggregate the request counts using one or more web request components as the aggregate keys.

With this option, you must specify the aggregate keys in the `CustomKeys` property.

To aggregate on only the IP address or only the forwarded IP address, don't use custom keys. Instead, set the aggregate key type to `IP` or `FORWARDED_IP` . - `FORWARDED_IP` - Aggregate the request counts on the first IP address in an HTTP header.

With this option, you must specify the header to use in the `ForwardedIPConfig` property.

To aggregate on a combination of the forwarded IP address with other aggregate keys, use `CUSTOM_KEYS` . - `IP` - Aggregate the request counts on the IP address from the web request origin.

To aggregate on a combination of the IP address with other aggregate keys, use `CUSTOM_KEYS` .

func (WebAclRateBasedStatementAggregateKeyType) ElementType added in v0.72.0

func (WebAclRateBasedStatementAggregateKeyType) ToStringOutput added in v0.72.0

func (WebAclRateBasedStatementAggregateKeyType) ToStringOutputWithContext added in v0.72.0

func (WebAclRateBasedStatementAggregateKeyType) ToStringPtrOutput added in v0.72.0

func (WebAclRateBasedStatementAggregateKeyType) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclRateBasedStatementAggregateKeyType) ToWebAclRateBasedStatementAggregateKeyTypeOutput added in v0.72.0

func (e WebAclRateBasedStatementAggregateKeyType) ToWebAclRateBasedStatementAggregateKeyTypeOutput() WebAclRateBasedStatementAggregateKeyTypeOutput

func (WebAclRateBasedStatementAggregateKeyType) ToWebAclRateBasedStatementAggregateKeyTypeOutputWithContext added in v0.72.0

func (e WebAclRateBasedStatementAggregateKeyType) ToWebAclRateBasedStatementAggregateKeyTypeOutputWithContext(ctx context.Context) WebAclRateBasedStatementAggregateKeyTypeOutput

func (WebAclRateBasedStatementAggregateKeyType) ToWebAclRateBasedStatementAggregateKeyTypePtrOutput added in v0.72.0

func (e WebAclRateBasedStatementAggregateKeyType) ToWebAclRateBasedStatementAggregateKeyTypePtrOutput() WebAclRateBasedStatementAggregateKeyTypePtrOutput

func (WebAclRateBasedStatementAggregateKeyType) ToWebAclRateBasedStatementAggregateKeyTypePtrOutputWithContext added in v0.72.0

func (e WebAclRateBasedStatementAggregateKeyType) ToWebAclRateBasedStatementAggregateKeyTypePtrOutputWithContext(ctx context.Context) WebAclRateBasedStatementAggregateKeyTypePtrOutput

type WebAclRateBasedStatementAggregateKeyTypeInput added in v0.72.0

type WebAclRateBasedStatementAggregateKeyTypeInput interface {
	pulumi.Input

	ToWebAclRateBasedStatementAggregateKeyTypeOutput() WebAclRateBasedStatementAggregateKeyTypeOutput
	ToWebAclRateBasedStatementAggregateKeyTypeOutputWithContext(context.Context) WebAclRateBasedStatementAggregateKeyTypeOutput
}

WebAclRateBasedStatementAggregateKeyTypeInput is an input type that accepts values of the WebAclRateBasedStatementAggregateKeyType enum A concrete instance of `WebAclRateBasedStatementAggregateKeyTypeInput` can be one of the following:

WebAclRateBasedStatementAggregateKeyTypeConstant
WebAclRateBasedStatementAggregateKeyTypeIp
WebAclRateBasedStatementAggregateKeyTypeForwardedIp
WebAclRateBasedStatementAggregateKeyTypeCustomKeys

type WebAclRateBasedStatementAggregateKeyTypeOutput added in v0.72.0

type WebAclRateBasedStatementAggregateKeyTypeOutput struct{ *pulumi.OutputState }

func (WebAclRateBasedStatementAggregateKeyTypeOutput) ElementType added in v0.72.0

func (WebAclRateBasedStatementAggregateKeyTypeOutput) ToStringOutput added in v0.72.0

func (WebAclRateBasedStatementAggregateKeyTypeOutput) ToStringOutputWithContext added in v0.72.0

func (WebAclRateBasedStatementAggregateKeyTypeOutput) ToStringPtrOutput added in v0.72.0

func (WebAclRateBasedStatementAggregateKeyTypeOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclRateBasedStatementAggregateKeyTypeOutput) ToWebAclRateBasedStatementAggregateKeyTypeOutput added in v0.72.0

func (o WebAclRateBasedStatementAggregateKeyTypeOutput) ToWebAclRateBasedStatementAggregateKeyTypeOutput() WebAclRateBasedStatementAggregateKeyTypeOutput

func (WebAclRateBasedStatementAggregateKeyTypeOutput) ToWebAclRateBasedStatementAggregateKeyTypeOutputWithContext added in v0.72.0

func (o WebAclRateBasedStatementAggregateKeyTypeOutput) ToWebAclRateBasedStatementAggregateKeyTypeOutputWithContext(ctx context.Context) WebAclRateBasedStatementAggregateKeyTypeOutput

func (WebAclRateBasedStatementAggregateKeyTypeOutput) ToWebAclRateBasedStatementAggregateKeyTypePtrOutput added in v0.72.0

func (o WebAclRateBasedStatementAggregateKeyTypeOutput) ToWebAclRateBasedStatementAggregateKeyTypePtrOutput() WebAclRateBasedStatementAggregateKeyTypePtrOutput

func (WebAclRateBasedStatementAggregateKeyTypeOutput) ToWebAclRateBasedStatementAggregateKeyTypePtrOutputWithContext added in v0.72.0

func (o WebAclRateBasedStatementAggregateKeyTypeOutput) ToWebAclRateBasedStatementAggregateKeyTypePtrOutputWithContext(ctx context.Context) WebAclRateBasedStatementAggregateKeyTypePtrOutput

type WebAclRateBasedStatementAggregateKeyTypePtrInput added in v0.72.0

type WebAclRateBasedStatementAggregateKeyTypePtrInput interface {
	pulumi.Input

	ToWebAclRateBasedStatementAggregateKeyTypePtrOutput() WebAclRateBasedStatementAggregateKeyTypePtrOutput
	ToWebAclRateBasedStatementAggregateKeyTypePtrOutputWithContext(context.Context) WebAclRateBasedStatementAggregateKeyTypePtrOutput
}

func WebAclRateBasedStatementAggregateKeyTypePtr added in v0.72.0

func WebAclRateBasedStatementAggregateKeyTypePtr(v string) WebAclRateBasedStatementAggregateKeyTypePtrInput

type WebAclRateBasedStatementAggregateKeyTypePtrOutput added in v0.72.0

type WebAclRateBasedStatementAggregateKeyTypePtrOutput struct{ *pulumi.OutputState }

func (WebAclRateBasedStatementAggregateKeyTypePtrOutput) Elem added in v0.72.0

func (WebAclRateBasedStatementAggregateKeyTypePtrOutput) ElementType added in v0.72.0

func (WebAclRateBasedStatementAggregateKeyTypePtrOutput) ToStringPtrOutput added in v0.72.0

func (WebAclRateBasedStatementAggregateKeyTypePtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclRateBasedStatementAggregateKeyTypePtrOutput) ToWebAclRateBasedStatementAggregateKeyTypePtrOutput added in v0.72.0

func (o WebAclRateBasedStatementAggregateKeyTypePtrOutput) ToWebAclRateBasedStatementAggregateKeyTypePtrOutput() WebAclRateBasedStatementAggregateKeyTypePtrOutput

func (WebAclRateBasedStatementAggregateKeyTypePtrOutput) ToWebAclRateBasedStatementAggregateKeyTypePtrOutputWithContext added in v0.72.0

func (o WebAclRateBasedStatementAggregateKeyTypePtrOutput) ToWebAclRateBasedStatementAggregateKeyTypePtrOutputWithContext(ctx context.Context) WebAclRateBasedStatementAggregateKeyTypePtrOutput

type WebAclRateBasedStatementArgs added in v0.72.0

type WebAclRateBasedStatementArgs struct {
	// Setting that indicates how to aggregate the request counts.
	//
	// > Web requests that are missing any of the components specified in the aggregation keys are omitted from the rate-based rule evaluation and handling.
	//
	// - `CONSTANT` - Count and limit the requests that match the rate-based rule's scope-down statement. With this option, the counted requests aren't further aggregated. The scope-down statement is the only specification used. When the count of all requests that satisfy the scope-down statement goes over the limit, AWS WAF applies the rule action to all requests that satisfy the scope-down statement.
	//
	// With this option, you must configure the `ScopeDownStatement` property.
	// - `CUSTOM_KEYS` - Aggregate the request counts using one or more web request components as the aggregate keys.
	//
	// With this option, you must specify the aggregate keys in the `CustomKeys` property.
	//
	// To aggregate on only the IP address or only the forwarded IP address, don't use custom keys. Instead, set the aggregate key type to `IP` or `FORWARDED_IP` .
	// - `FORWARDED_IP` - Aggregate the request counts on the first IP address in an HTTP header.
	//
	// With this option, you must specify the header to use in the `ForwardedIPConfig` property.
	//
	// To aggregate on a combination of the forwarded IP address with other aggregate keys, use `CUSTOM_KEYS` .
	// - `IP` - Aggregate the request counts on the IP address from the web request origin.
	//
	// To aggregate on a combination of the IP address with other aggregate keys, use `CUSTOM_KEYS` .
	AggregateKeyType WebAclRateBasedStatementAggregateKeyTypeInput `pulumi:"aggregateKeyType"`
	// Specifies the aggregate keys to use in a rate-base rule.
	CustomKeys WebAclRateBasedStatementCustomKeyArrayInput `pulumi:"customKeys"`
	// The amount of time, in seconds, that AWS WAF should include in its request counts, looking back from the current time. For example, for a setting of 120, when AWS WAF checks the rate, it counts the requests for the 2 minutes immediately preceding the current time. Valid settings are 60, 120, 300, and 600.
	//
	// This setting doesn't determine how often AWS WAF checks the rate, but how far back it looks each time it checks. AWS WAF checks the rate about every 10 seconds.
	//
	// Default: `300` (5 minutes)
	EvaluationWindowSec pulumi.IntPtrInput `pulumi:"evaluationWindowSec"`
	// The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.
	//
	// > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
	//
	// This is required if you specify a forwarded IP in the rule's aggregate key settings.
	ForwardedIpConfig WebAclForwardedIpConfigurationPtrInput `pulumi:"forwardedIpConfig"`
	// The limit on requests per 5-minute period for a single aggregation instance for the rate-based rule. If the rate-based statement includes a `ScopeDownStatement` , this limit is applied only to the requests that match the statement.
	//
	// Examples:
	//
	// - If you aggregate on just the IP address, this is the limit on requests from any single IP address.
	// - If you aggregate on the HTTP method and the query argument name "city", then this is the limit on requests for any single method, city pair.
	Limit pulumi.IntInput `pulumi:"limit"`
	// An optional nested statement that narrows the scope of the web requests that are evaluated and managed by the rate-based statement. When you use a scope-down statement, the rate-based rule only tracks and rate limits requests that match the scope-down statement. You can use any nestable `Statement` in the scope-down statement, and you can nest statements at any level, the same as you can for a rule statement.
	ScopeDownStatement WebAclStatementPtrInput `pulumi:"scopeDownStatement"`
}

func (WebAclRateBasedStatementArgs) ElementType added in v0.72.0

func (WebAclRateBasedStatementArgs) ToWebAclRateBasedStatementOutput added in v0.72.0

func (i WebAclRateBasedStatementArgs) ToWebAclRateBasedStatementOutput() WebAclRateBasedStatementOutput

func (WebAclRateBasedStatementArgs) ToWebAclRateBasedStatementOutputWithContext added in v0.72.0

func (i WebAclRateBasedStatementArgs) ToWebAclRateBasedStatementOutputWithContext(ctx context.Context) WebAclRateBasedStatementOutput

func (WebAclRateBasedStatementArgs) ToWebAclRateBasedStatementPtrOutput added in v0.72.0

func (i WebAclRateBasedStatementArgs) ToWebAclRateBasedStatementPtrOutput() WebAclRateBasedStatementPtrOutput

func (WebAclRateBasedStatementArgs) ToWebAclRateBasedStatementPtrOutputWithContext added in v0.72.0

func (i WebAclRateBasedStatementArgs) ToWebAclRateBasedStatementPtrOutputWithContext(ctx context.Context) WebAclRateBasedStatementPtrOutput

type WebAclRateBasedStatementCustomKey added in v0.72.0

type WebAclRateBasedStatementCustomKey struct {
	// Use the value of a cookie in the request as an aggregate key. Each distinct value in the cookie contributes to the aggregation instance. If you use a single cookie as your custom key, then each value fully defines an aggregation instance.
	Cookie *WebAclRateLimitCookie `pulumi:"cookie"`
	// Use the first IP address in an HTTP header as an aggregate key. Each distinct forwarded IP address contributes to the aggregation instance.
	//
	// When you specify an IP or forwarded IP in the custom key settings, you must also specify at least one other key to use. You can aggregate on only the forwarded IP address by specifying `FORWARDED_IP` in your rate-based statement's `AggregateKeyType` .
	//
	// With this option, you must specify the header to use in the rate-based rule's `ForwardedIPConfig` property.
	ForwardedIp *WebAclRateLimitForwardedIp `pulumi:"forwardedIp"`
	// Use the value of a header in the request as an aggregate key. Each distinct value in the header contributes to the aggregation instance. If you use a single header as your custom key, then each value fully defines an aggregation instance.
	Header *WebAclRateLimitHeader `pulumi:"header"`
	// Use the request's HTTP method as an aggregate key. Each distinct HTTP method contributes to the aggregation instance. If you use just the HTTP method as your custom key, then each method fully defines an aggregation instance.
	HttpMethod *WebAclRateLimitHttpMethod `pulumi:"httpMethod"`
	// Use the request's originating IP address as an aggregate key. Each distinct IP address contributes to the aggregation instance.
	//
	// When you specify an IP or forwarded IP in the custom key settings, you must also specify at least one other key to use. You can aggregate on only the IP address by specifying `IP` in your rate-based statement's `AggregateKeyType` .
	Ip *WebAclRateLimitIp `pulumi:"ip"`
	// Use the specified label namespace as an aggregate key. Each distinct fully qualified label name that has the specified label namespace contributes to the aggregation instance. If you use just one label namespace as your custom key, then each label name fully defines an aggregation instance.
	//
	// This uses only labels that have been added to the request by rules that are evaluated before this rate-based rule in the web ACL.
	//
	// For information about label namespaces and names, see [Label syntax and naming requirements](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-label-requirements.html) in the *AWS WAF Developer Guide* .
	LabelNamespace *WebAclRateLimitLabelNamespace `pulumi:"labelNamespace"`
	// Use the specified query argument as an aggregate key. Each distinct value for the named query argument contributes to the aggregation instance. If you use a single query argument as your custom key, then each value fully defines an aggregation instance.
	QueryArgument *WebAclRateLimitQueryArgument `pulumi:"queryArgument"`
	// Use the request's query string as an aggregate key. Each distinct string contributes to the aggregation instance. If you use just the query string as your custom key, then each string fully defines an aggregation instance.
	QueryString *WebAclRateLimitQueryString `pulumi:"queryString"`
	// Use the request's URI path as an aggregate key. Each distinct URI path contributes to the aggregation instance. If you use just the URI path as your custom key, then each URI path fully defines an aggregation instance.
	UriPath *WebAclRateLimitUriPath `pulumi:"uriPath"`
}

Specifies a single custom aggregate key for a rate-base rule.

type WebAclRateBasedStatementCustomKeyArgs added in v0.72.0

type WebAclRateBasedStatementCustomKeyArgs struct {
	// Use the value of a cookie in the request as an aggregate key. Each distinct value in the cookie contributes to the aggregation instance. If you use a single cookie as your custom key, then each value fully defines an aggregation instance.
	Cookie WebAclRateLimitCookiePtrInput `pulumi:"cookie"`
	// Use the first IP address in an HTTP header as an aggregate key. Each distinct forwarded IP address contributes to the aggregation instance.
	//
	// When you specify an IP or forwarded IP in the custom key settings, you must also specify at least one other key to use. You can aggregate on only the forwarded IP address by specifying `FORWARDED_IP` in your rate-based statement's `AggregateKeyType` .
	//
	// With this option, you must specify the header to use in the rate-based rule's `ForwardedIPConfig` property.
	ForwardedIp WebAclRateLimitForwardedIpPtrInput `pulumi:"forwardedIp"`
	// Use the value of a header in the request as an aggregate key. Each distinct value in the header contributes to the aggregation instance. If you use a single header as your custom key, then each value fully defines an aggregation instance.
	Header WebAclRateLimitHeaderPtrInput `pulumi:"header"`
	// Use the request's HTTP method as an aggregate key. Each distinct HTTP method contributes to the aggregation instance. If you use just the HTTP method as your custom key, then each method fully defines an aggregation instance.
	HttpMethod WebAclRateLimitHttpMethodPtrInput `pulumi:"httpMethod"`
	// Use the request's originating IP address as an aggregate key. Each distinct IP address contributes to the aggregation instance.
	//
	// When you specify an IP or forwarded IP in the custom key settings, you must also specify at least one other key to use. You can aggregate on only the IP address by specifying `IP` in your rate-based statement's `AggregateKeyType` .
	Ip WebAclRateLimitIpPtrInput `pulumi:"ip"`
	// Use the specified label namespace as an aggregate key. Each distinct fully qualified label name that has the specified label namespace contributes to the aggregation instance. If you use just one label namespace as your custom key, then each label name fully defines an aggregation instance.
	//
	// This uses only labels that have been added to the request by rules that are evaluated before this rate-based rule in the web ACL.
	//
	// For information about label namespaces and names, see [Label syntax and naming requirements](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-label-requirements.html) in the *AWS WAF Developer Guide* .
	LabelNamespace WebAclRateLimitLabelNamespacePtrInput `pulumi:"labelNamespace"`
	// Use the specified query argument as an aggregate key. Each distinct value for the named query argument contributes to the aggregation instance. If you use a single query argument as your custom key, then each value fully defines an aggregation instance.
	QueryArgument WebAclRateLimitQueryArgumentPtrInput `pulumi:"queryArgument"`
	// Use the request's query string as an aggregate key. Each distinct string contributes to the aggregation instance. If you use just the query string as your custom key, then each string fully defines an aggregation instance.
	QueryString WebAclRateLimitQueryStringPtrInput `pulumi:"queryString"`
	// Use the request's URI path as an aggregate key. Each distinct URI path contributes to the aggregation instance. If you use just the URI path as your custom key, then each URI path fully defines an aggregation instance.
	UriPath WebAclRateLimitUriPathPtrInput `pulumi:"uriPath"`
}

Specifies a single custom aggregate key for a rate-base rule.

func (WebAclRateBasedStatementCustomKeyArgs) ElementType added in v0.72.0

func (WebAclRateBasedStatementCustomKeyArgs) ToWebAclRateBasedStatementCustomKeyOutput added in v0.72.0

func (i WebAclRateBasedStatementCustomKeyArgs) ToWebAclRateBasedStatementCustomKeyOutput() WebAclRateBasedStatementCustomKeyOutput

func (WebAclRateBasedStatementCustomKeyArgs) ToWebAclRateBasedStatementCustomKeyOutputWithContext added in v0.72.0

func (i WebAclRateBasedStatementCustomKeyArgs) ToWebAclRateBasedStatementCustomKeyOutputWithContext(ctx context.Context) WebAclRateBasedStatementCustomKeyOutput

type WebAclRateBasedStatementCustomKeyArray added in v0.72.0

type WebAclRateBasedStatementCustomKeyArray []WebAclRateBasedStatementCustomKeyInput

func (WebAclRateBasedStatementCustomKeyArray) ElementType added in v0.72.0

func (WebAclRateBasedStatementCustomKeyArray) ToWebAclRateBasedStatementCustomKeyArrayOutput added in v0.72.0

func (i WebAclRateBasedStatementCustomKeyArray) ToWebAclRateBasedStatementCustomKeyArrayOutput() WebAclRateBasedStatementCustomKeyArrayOutput

func (WebAclRateBasedStatementCustomKeyArray) ToWebAclRateBasedStatementCustomKeyArrayOutputWithContext added in v0.72.0

func (i WebAclRateBasedStatementCustomKeyArray) ToWebAclRateBasedStatementCustomKeyArrayOutputWithContext(ctx context.Context) WebAclRateBasedStatementCustomKeyArrayOutput

type WebAclRateBasedStatementCustomKeyArrayInput added in v0.72.0

type WebAclRateBasedStatementCustomKeyArrayInput interface {
	pulumi.Input

	ToWebAclRateBasedStatementCustomKeyArrayOutput() WebAclRateBasedStatementCustomKeyArrayOutput
	ToWebAclRateBasedStatementCustomKeyArrayOutputWithContext(context.Context) WebAclRateBasedStatementCustomKeyArrayOutput
}

WebAclRateBasedStatementCustomKeyArrayInput is an input type that accepts WebAclRateBasedStatementCustomKeyArray and WebAclRateBasedStatementCustomKeyArrayOutput values. You can construct a concrete instance of `WebAclRateBasedStatementCustomKeyArrayInput` via:

WebAclRateBasedStatementCustomKeyArray{ WebAclRateBasedStatementCustomKeyArgs{...} }

type WebAclRateBasedStatementCustomKeyArrayOutput added in v0.72.0

type WebAclRateBasedStatementCustomKeyArrayOutput struct{ *pulumi.OutputState }

func (WebAclRateBasedStatementCustomKeyArrayOutput) ElementType added in v0.72.0

func (WebAclRateBasedStatementCustomKeyArrayOutput) Index added in v0.72.0

func (WebAclRateBasedStatementCustomKeyArrayOutput) ToWebAclRateBasedStatementCustomKeyArrayOutput added in v0.72.0

func (o WebAclRateBasedStatementCustomKeyArrayOutput) ToWebAclRateBasedStatementCustomKeyArrayOutput() WebAclRateBasedStatementCustomKeyArrayOutput

func (WebAclRateBasedStatementCustomKeyArrayOutput) ToWebAclRateBasedStatementCustomKeyArrayOutputWithContext added in v0.72.0

func (o WebAclRateBasedStatementCustomKeyArrayOutput) ToWebAclRateBasedStatementCustomKeyArrayOutputWithContext(ctx context.Context) WebAclRateBasedStatementCustomKeyArrayOutput

type WebAclRateBasedStatementCustomKeyInput added in v0.72.0

type WebAclRateBasedStatementCustomKeyInput interface {
	pulumi.Input

	ToWebAclRateBasedStatementCustomKeyOutput() WebAclRateBasedStatementCustomKeyOutput
	ToWebAclRateBasedStatementCustomKeyOutputWithContext(context.Context) WebAclRateBasedStatementCustomKeyOutput
}

WebAclRateBasedStatementCustomKeyInput is an input type that accepts WebAclRateBasedStatementCustomKeyArgs and WebAclRateBasedStatementCustomKeyOutput values. You can construct a concrete instance of `WebAclRateBasedStatementCustomKeyInput` via:

WebAclRateBasedStatementCustomKeyArgs{...}

type WebAclRateBasedStatementCustomKeyOutput added in v0.72.0

type WebAclRateBasedStatementCustomKeyOutput struct{ *pulumi.OutputState }

Specifies a single custom aggregate key for a rate-base rule.

func (WebAclRateBasedStatementCustomKeyOutput) Cookie added in v0.72.0

Use the value of a cookie in the request as an aggregate key. Each distinct value in the cookie contributes to the aggregation instance. If you use a single cookie as your custom key, then each value fully defines an aggregation instance.

func (WebAclRateBasedStatementCustomKeyOutput) ElementType added in v0.72.0

func (WebAclRateBasedStatementCustomKeyOutput) ForwardedIp added in v0.72.0

Use the first IP address in an HTTP header as an aggregate key. Each distinct forwarded IP address contributes to the aggregation instance.

When you specify an IP or forwarded IP in the custom key settings, you must also specify at least one other key to use. You can aggregate on only the forwarded IP address by specifying `FORWARDED_IP` in your rate-based statement's `AggregateKeyType` .

With this option, you must specify the header to use in the rate-based rule's `ForwardedIPConfig` property.

func (WebAclRateBasedStatementCustomKeyOutput) Header added in v0.72.0

Use the value of a header in the request as an aggregate key. Each distinct value in the header contributes to the aggregation instance. If you use a single header as your custom key, then each value fully defines an aggregation instance.

func (WebAclRateBasedStatementCustomKeyOutput) HttpMethod added in v0.72.0

Use the request's HTTP method as an aggregate key. Each distinct HTTP method contributes to the aggregation instance. If you use just the HTTP method as your custom key, then each method fully defines an aggregation instance.

func (WebAclRateBasedStatementCustomKeyOutput) Ip added in v0.72.0

Use the request's originating IP address as an aggregate key. Each distinct IP address contributes to the aggregation instance.

When you specify an IP or forwarded IP in the custom key settings, you must also specify at least one other key to use. You can aggregate on only the IP address by specifying `IP` in your rate-based statement's `AggregateKeyType` .

func (WebAclRateBasedStatementCustomKeyOutput) LabelNamespace added in v0.72.0

Use the specified label namespace as an aggregate key. Each distinct fully qualified label name that has the specified label namespace contributes to the aggregation instance. If you use just one label namespace as your custom key, then each label name fully defines an aggregation instance.

This uses only labels that have been added to the request by rules that are evaluated before this rate-based rule in the web ACL.

For information about label namespaces and names, see [Label syntax and naming requirements](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-label-requirements.html) in the *AWS WAF Developer Guide* .

func (WebAclRateBasedStatementCustomKeyOutput) QueryArgument added in v0.72.0

Use the specified query argument as an aggregate key. Each distinct value for the named query argument contributes to the aggregation instance. If you use a single query argument as your custom key, then each value fully defines an aggregation instance.

func (WebAclRateBasedStatementCustomKeyOutput) QueryString added in v0.72.0

Use the request's query string as an aggregate key. Each distinct string contributes to the aggregation instance. If you use just the query string as your custom key, then each string fully defines an aggregation instance.

func (WebAclRateBasedStatementCustomKeyOutput) ToWebAclRateBasedStatementCustomKeyOutput added in v0.72.0

func (o WebAclRateBasedStatementCustomKeyOutput) ToWebAclRateBasedStatementCustomKeyOutput() WebAclRateBasedStatementCustomKeyOutput

func (WebAclRateBasedStatementCustomKeyOutput) ToWebAclRateBasedStatementCustomKeyOutputWithContext added in v0.72.0

func (o WebAclRateBasedStatementCustomKeyOutput) ToWebAclRateBasedStatementCustomKeyOutputWithContext(ctx context.Context) WebAclRateBasedStatementCustomKeyOutput

func (WebAclRateBasedStatementCustomKeyOutput) UriPath added in v0.72.0

Use the request's URI path as an aggregate key. Each distinct URI path contributes to the aggregation instance. If you use just the URI path as your custom key, then each URI path fully defines an aggregation instance.

type WebAclRateBasedStatementInput added in v0.72.0

type WebAclRateBasedStatementInput interface {
	pulumi.Input

	ToWebAclRateBasedStatementOutput() WebAclRateBasedStatementOutput
	ToWebAclRateBasedStatementOutputWithContext(context.Context) WebAclRateBasedStatementOutput
}

WebAclRateBasedStatementInput is an input type that accepts WebAclRateBasedStatementArgs and WebAclRateBasedStatementOutput values. You can construct a concrete instance of `WebAclRateBasedStatementInput` via:

WebAclRateBasedStatementArgs{...}

type WebAclRateBasedStatementOutput added in v0.72.0

type WebAclRateBasedStatementOutput struct{ *pulumi.OutputState }

func (WebAclRateBasedStatementOutput) AggregateKeyType added in v0.72.0

Setting that indicates how to aggregate the request counts.

> Web requests that are missing any of the components specified in the aggregation keys are omitted from the rate-based rule evaluation and handling.

- `CONSTANT` - Count and limit the requests that match the rate-based rule's scope-down statement. With this option, the counted requests aren't further aggregated. The scope-down statement is the only specification used. When the count of all requests that satisfy the scope-down statement goes over the limit, AWS WAF applies the rule action to all requests that satisfy the scope-down statement.

With this option, you must configure the `ScopeDownStatement` property. - `CUSTOM_KEYS` - Aggregate the request counts using one or more web request components as the aggregate keys.

With this option, you must specify the aggregate keys in the `CustomKeys` property.

To aggregate on only the IP address or only the forwarded IP address, don't use custom keys. Instead, set the aggregate key type to `IP` or `FORWARDED_IP` . - `FORWARDED_IP` - Aggregate the request counts on the first IP address in an HTTP header.

With this option, you must specify the header to use in the `ForwardedIPConfig` property.

To aggregate on a combination of the forwarded IP address with other aggregate keys, use `CUSTOM_KEYS` . - `IP` - Aggregate the request counts on the IP address from the web request origin.

To aggregate on a combination of the IP address with other aggregate keys, use `CUSTOM_KEYS` .

func (WebAclRateBasedStatementOutput) CustomKeys added in v0.72.0

Specifies the aggregate keys to use in a rate-base rule.

func (WebAclRateBasedStatementOutput) ElementType added in v0.72.0

func (WebAclRateBasedStatementOutput) EvaluationWindowSec added in v0.99.0

func (o WebAclRateBasedStatementOutput) EvaluationWindowSec() pulumi.IntPtrOutput

The amount of time, in seconds, that AWS WAF should include in its request counts, looking back from the current time. For example, for a setting of 120, when AWS WAF checks the rate, it counts the requests for the 2 minutes immediately preceding the current time. Valid settings are 60, 120, 300, and 600.

This setting doesn't determine how often AWS WAF checks the rate, but how far back it looks each time it checks. AWS WAF checks the rate about every 10 seconds.

Default: `300` (5 minutes)

func (WebAclRateBasedStatementOutput) ForwardedIpConfig added in v0.72.0

The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

This is required if you specify a forwarded IP in the rule's aggregate key settings.

func (WebAclRateBasedStatementOutput) Limit added in v0.72.0

The limit on requests per 5-minute period for a single aggregation instance for the rate-based rule. If the rate-based statement includes a `ScopeDownStatement` , this limit is applied only to the requests that match the statement.

Examples:

- If you aggregate on just the IP address, this is the limit on requests from any single IP address. - If you aggregate on the HTTP method and the query argument name "city", then this is the limit on requests for any single method, city pair.

func (WebAclRateBasedStatementOutput) ScopeDownStatement added in v0.72.0

An optional nested statement that narrows the scope of the web requests that are evaluated and managed by the rate-based statement. When you use a scope-down statement, the rate-based rule only tracks and rate limits requests that match the scope-down statement. You can use any nestable `Statement` in the scope-down statement, and you can nest statements at any level, the same as you can for a rule statement.

func (WebAclRateBasedStatementOutput) ToWebAclRateBasedStatementOutput added in v0.72.0

func (o WebAclRateBasedStatementOutput) ToWebAclRateBasedStatementOutput() WebAclRateBasedStatementOutput

func (WebAclRateBasedStatementOutput) ToWebAclRateBasedStatementOutputWithContext added in v0.72.0

func (o WebAclRateBasedStatementOutput) ToWebAclRateBasedStatementOutputWithContext(ctx context.Context) WebAclRateBasedStatementOutput

func (WebAclRateBasedStatementOutput) ToWebAclRateBasedStatementPtrOutput added in v0.72.0

func (o WebAclRateBasedStatementOutput) ToWebAclRateBasedStatementPtrOutput() WebAclRateBasedStatementPtrOutput

func (WebAclRateBasedStatementOutput) ToWebAclRateBasedStatementPtrOutputWithContext added in v0.72.0

func (o WebAclRateBasedStatementOutput) ToWebAclRateBasedStatementPtrOutputWithContext(ctx context.Context) WebAclRateBasedStatementPtrOutput

type WebAclRateBasedStatementPtrInput added in v0.72.0

type WebAclRateBasedStatementPtrInput interface {
	pulumi.Input

	ToWebAclRateBasedStatementPtrOutput() WebAclRateBasedStatementPtrOutput
	ToWebAclRateBasedStatementPtrOutputWithContext(context.Context) WebAclRateBasedStatementPtrOutput
}

WebAclRateBasedStatementPtrInput is an input type that accepts WebAclRateBasedStatementArgs, WebAclRateBasedStatementPtr and WebAclRateBasedStatementPtrOutput values. You can construct a concrete instance of `WebAclRateBasedStatementPtrInput` via:

        WebAclRateBasedStatementArgs{...}

or:

        nil

func WebAclRateBasedStatementPtr added in v0.72.0

func WebAclRateBasedStatementPtr(v *WebAclRateBasedStatementArgs) WebAclRateBasedStatementPtrInput

type WebAclRateBasedStatementPtrOutput added in v0.72.0

type WebAclRateBasedStatementPtrOutput struct{ *pulumi.OutputState }

func (WebAclRateBasedStatementPtrOutput) AggregateKeyType added in v0.72.0

Setting that indicates how to aggregate the request counts.

> Web requests that are missing any of the components specified in the aggregation keys are omitted from the rate-based rule evaluation and handling.

- `CONSTANT` - Count and limit the requests that match the rate-based rule's scope-down statement. With this option, the counted requests aren't further aggregated. The scope-down statement is the only specification used. When the count of all requests that satisfy the scope-down statement goes over the limit, AWS WAF applies the rule action to all requests that satisfy the scope-down statement.

With this option, you must configure the `ScopeDownStatement` property. - `CUSTOM_KEYS` - Aggregate the request counts using one or more web request components as the aggregate keys.

With this option, you must specify the aggregate keys in the `CustomKeys` property.

To aggregate on only the IP address or only the forwarded IP address, don't use custom keys. Instead, set the aggregate key type to `IP` or `FORWARDED_IP` . - `FORWARDED_IP` - Aggregate the request counts on the first IP address in an HTTP header.

With this option, you must specify the header to use in the `ForwardedIPConfig` property.

To aggregate on a combination of the forwarded IP address with other aggregate keys, use `CUSTOM_KEYS` . - `IP` - Aggregate the request counts on the IP address from the web request origin.

To aggregate on a combination of the IP address with other aggregate keys, use `CUSTOM_KEYS` .

func (WebAclRateBasedStatementPtrOutput) CustomKeys added in v0.72.0

Specifies the aggregate keys to use in a rate-base rule.

func (WebAclRateBasedStatementPtrOutput) Elem added in v0.72.0

func (WebAclRateBasedStatementPtrOutput) ElementType added in v0.72.0

func (WebAclRateBasedStatementPtrOutput) EvaluationWindowSec added in v0.99.0

func (o WebAclRateBasedStatementPtrOutput) EvaluationWindowSec() pulumi.IntPtrOutput

The amount of time, in seconds, that AWS WAF should include in its request counts, looking back from the current time. For example, for a setting of 120, when AWS WAF checks the rate, it counts the requests for the 2 minutes immediately preceding the current time. Valid settings are 60, 120, 300, and 600.

This setting doesn't determine how often AWS WAF checks the rate, but how far back it looks each time it checks. AWS WAF checks the rate about every 10 seconds.

Default: `300` (5 minutes)

func (WebAclRateBasedStatementPtrOutput) ForwardedIpConfig added in v0.72.0

The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.

> If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.

This is required if you specify a forwarded IP in the rule's aggregate key settings.

func (WebAclRateBasedStatementPtrOutput) Limit added in v0.72.0

The limit on requests per 5-minute period for a single aggregation instance for the rate-based rule. If the rate-based statement includes a `ScopeDownStatement` , this limit is applied only to the requests that match the statement.

Examples:

- If you aggregate on just the IP address, this is the limit on requests from any single IP address. - If you aggregate on the HTTP method and the query argument name "city", then this is the limit on requests for any single method, city pair.

func (WebAclRateBasedStatementPtrOutput) ScopeDownStatement added in v0.72.0

An optional nested statement that narrows the scope of the web requests that are evaluated and managed by the rate-based statement. When you use a scope-down statement, the rate-based rule only tracks and rate limits requests that match the scope-down statement. You can use any nestable `Statement` in the scope-down statement, and you can nest statements at any level, the same as you can for a rule statement.

func (WebAclRateBasedStatementPtrOutput) ToWebAclRateBasedStatementPtrOutput added in v0.72.0

func (o WebAclRateBasedStatementPtrOutput) ToWebAclRateBasedStatementPtrOutput() WebAclRateBasedStatementPtrOutput

func (WebAclRateBasedStatementPtrOutput) ToWebAclRateBasedStatementPtrOutputWithContext added in v0.72.0

func (o WebAclRateBasedStatementPtrOutput) ToWebAclRateBasedStatementPtrOutputWithContext(ctx context.Context) WebAclRateBasedStatementPtrOutput

type WebAclRateLimitCookie added in v0.72.0

type WebAclRateLimitCookie struct {
	// The name of the cookie to use.
	Name string `pulumi:"name"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations []WebAclTextTransformation `pulumi:"textTransformations"`
}

Specifies a cookie as an aggregate key for a rate-based rule.

type WebAclRateLimitCookieArgs added in v0.72.0

type WebAclRateLimitCookieArgs struct {
	// The name of the cookie to use.
	Name pulumi.StringInput `pulumi:"name"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations WebAclTextTransformationArrayInput `pulumi:"textTransformations"`
}

Specifies a cookie as an aggregate key for a rate-based rule.

func (WebAclRateLimitCookieArgs) ElementType added in v0.72.0

func (WebAclRateLimitCookieArgs) ElementType() reflect.Type

func (WebAclRateLimitCookieArgs) ToWebAclRateLimitCookieOutput added in v0.72.0

func (i WebAclRateLimitCookieArgs) ToWebAclRateLimitCookieOutput() WebAclRateLimitCookieOutput

func (WebAclRateLimitCookieArgs) ToWebAclRateLimitCookieOutputWithContext added in v0.72.0

func (i WebAclRateLimitCookieArgs) ToWebAclRateLimitCookieOutputWithContext(ctx context.Context) WebAclRateLimitCookieOutput

func (WebAclRateLimitCookieArgs) ToWebAclRateLimitCookiePtrOutput added in v0.72.0

func (i WebAclRateLimitCookieArgs) ToWebAclRateLimitCookiePtrOutput() WebAclRateLimitCookiePtrOutput

func (WebAclRateLimitCookieArgs) ToWebAclRateLimitCookiePtrOutputWithContext added in v0.72.0

func (i WebAclRateLimitCookieArgs) ToWebAclRateLimitCookiePtrOutputWithContext(ctx context.Context) WebAclRateLimitCookiePtrOutput

type WebAclRateLimitCookieInput added in v0.72.0

type WebAclRateLimitCookieInput interface {
	pulumi.Input

	ToWebAclRateLimitCookieOutput() WebAclRateLimitCookieOutput
	ToWebAclRateLimitCookieOutputWithContext(context.Context) WebAclRateLimitCookieOutput
}

WebAclRateLimitCookieInput is an input type that accepts WebAclRateLimitCookieArgs and WebAclRateLimitCookieOutput values. You can construct a concrete instance of `WebAclRateLimitCookieInput` via:

WebAclRateLimitCookieArgs{...}

type WebAclRateLimitCookieOutput added in v0.72.0

type WebAclRateLimitCookieOutput struct{ *pulumi.OutputState }

Specifies a cookie as an aggregate key for a rate-based rule.

func (WebAclRateLimitCookieOutput) ElementType added in v0.72.0

func (WebAclRateLimitCookieOutput) Name added in v0.72.0

The name of the cookie to use.

func (WebAclRateLimitCookieOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (WebAclRateLimitCookieOutput) ToWebAclRateLimitCookieOutput added in v0.72.0

func (o WebAclRateLimitCookieOutput) ToWebAclRateLimitCookieOutput() WebAclRateLimitCookieOutput

func (WebAclRateLimitCookieOutput) ToWebAclRateLimitCookieOutputWithContext added in v0.72.0

func (o WebAclRateLimitCookieOutput) ToWebAclRateLimitCookieOutputWithContext(ctx context.Context) WebAclRateLimitCookieOutput

func (WebAclRateLimitCookieOutput) ToWebAclRateLimitCookiePtrOutput added in v0.72.0

func (o WebAclRateLimitCookieOutput) ToWebAclRateLimitCookiePtrOutput() WebAclRateLimitCookiePtrOutput

func (WebAclRateLimitCookieOutput) ToWebAclRateLimitCookiePtrOutputWithContext added in v0.72.0

func (o WebAclRateLimitCookieOutput) ToWebAclRateLimitCookiePtrOutputWithContext(ctx context.Context) WebAclRateLimitCookiePtrOutput

type WebAclRateLimitCookiePtrInput added in v0.72.0

type WebAclRateLimitCookiePtrInput interface {
	pulumi.Input

	ToWebAclRateLimitCookiePtrOutput() WebAclRateLimitCookiePtrOutput
	ToWebAclRateLimitCookiePtrOutputWithContext(context.Context) WebAclRateLimitCookiePtrOutput
}

WebAclRateLimitCookiePtrInput is an input type that accepts WebAclRateLimitCookieArgs, WebAclRateLimitCookiePtr and WebAclRateLimitCookiePtrOutput values. You can construct a concrete instance of `WebAclRateLimitCookiePtrInput` via:

        WebAclRateLimitCookieArgs{...}

or:

        nil

func WebAclRateLimitCookiePtr added in v0.72.0

func WebAclRateLimitCookiePtr(v *WebAclRateLimitCookieArgs) WebAclRateLimitCookiePtrInput

type WebAclRateLimitCookiePtrOutput added in v0.72.0

type WebAclRateLimitCookiePtrOutput struct{ *pulumi.OutputState }

func (WebAclRateLimitCookiePtrOutput) Elem added in v0.72.0

func (WebAclRateLimitCookiePtrOutput) ElementType added in v0.72.0

func (WebAclRateLimitCookiePtrOutput) Name added in v0.72.0

The name of the cookie to use.

func (WebAclRateLimitCookiePtrOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (WebAclRateLimitCookiePtrOutput) ToWebAclRateLimitCookiePtrOutput added in v0.72.0

func (o WebAclRateLimitCookiePtrOutput) ToWebAclRateLimitCookiePtrOutput() WebAclRateLimitCookiePtrOutput

func (WebAclRateLimitCookiePtrOutput) ToWebAclRateLimitCookiePtrOutputWithContext added in v0.72.0

func (o WebAclRateLimitCookiePtrOutput) ToWebAclRateLimitCookiePtrOutputWithContext(ctx context.Context) WebAclRateLimitCookiePtrOutput

type WebAclRateLimitForwardedIp added in v0.72.0

type WebAclRateLimitForwardedIp struct {
}

Specifies the first IP address in an HTTP header as an aggregate key for a rate-based rule.

type WebAclRateLimitForwardedIpArgs added in v0.72.0

type WebAclRateLimitForwardedIpArgs struct {
}

Specifies the first IP address in an HTTP header as an aggregate key for a rate-based rule.

func (WebAclRateLimitForwardedIpArgs) ElementType added in v0.72.0

func (WebAclRateLimitForwardedIpArgs) ToWebAclRateLimitForwardedIpOutput added in v0.72.0

func (i WebAclRateLimitForwardedIpArgs) ToWebAclRateLimitForwardedIpOutput() WebAclRateLimitForwardedIpOutput

func (WebAclRateLimitForwardedIpArgs) ToWebAclRateLimitForwardedIpOutputWithContext added in v0.72.0

func (i WebAclRateLimitForwardedIpArgs) ToWebAclRateLimitForwardedIpOutputWithContext(ctx context.Context) WebAclRateLimitForwardedIpOutput

func (WebAclRateLimitForwardedIpArgs) ToWebAclRateLimitForwardedIpPtrOutput added in v0.72.0

func (i WebAclRateLimitForwardedIpArgs) ToWebAclRateLimitForwardedIpPtrOutput() WebAclRateLimitForwardedIpPtrOutput

func (WebAclRateLimitForwardedIpArgs) ToWebAclRateLimitForwardedIpPtrOutputWithContext added in v0.72.0

func (i WebAclRateLimitForwardedIpArgs) ToWebAclRateLimitForwardedIpPtrOutputWithContext(ctx context.Context) WebAclRateLimitForwardedIpPtrOutput

type WebAclRateLimitForwardedIpInput added in v0.72.0

type WebAclRateLimitForwardedIpInput interface {
	pulumi.Input

	ToWebAclRateLimitForwardedIpOutput() WebAclRateLimitForwardedIpOutput
	ToWebAclRateLimitForwardedIpOutputWithContext(context.Context) WebAclRateLimitForwardedIpOutput
}

WebAclRateLimitForwardedIpInput is an input type that accepts WebAclRateLimitForwardedIpArgs and WebAclRateLimitForwardedIpOutput values. You can construct a concrete instance of `WebAclRateLimitForwardedIpInput` via:

WebAclRateLimitForwardedIpArgs{...}

type WebAclRateLimitForwardedIpOutput added in v0.72.0

type WebAclRateLimitForwardedIpOutput struct{ *pulumi.OutputState }

Specifies the first IP address in an HTTP header as an aggregate key for a rate-based rule.

func (WebAclRateLimitForwardedIpOutput) ElementType added in v0.72.0

func (WebAclRateLimitForwardedIpOutput) ToWebAclRateLimitForwardedIpOutput added in v0.72.0

func (o WebAclRateLimitForwardedIpOutput) ToWebAclRateLimitForwardedIpOutput() WebAclRateLimitForwardedIpOutput

func (WebAclRateLimitForwardedIpOutput) ToWebAclRateLimitForwardedIpOutputWithContext added in v0.72.0

func (o WebAclRateLimitForwardedIpOutput) ToWebAclRateLimitForwardedIpOutputWithContext(ctx context.Context) WebAclRateLimitForwardedIpOutput

func (WebAclRateLimitForwardedIpOutput) ToWebAclRateLimitForwardedIpPtrOutput added in v0.72.0

func (o WebAclRateLimitForwardedIpOutput) ToWebAclRateLimitForwardedIpPtrOutput() WebAclRateLimitForwardedIpPtrOutput

func (WebAclRateLimitForwardedIpOutput) ToWebAclRateLimitForwardedIpPtrOutputWithContext added in v0.72.0

func (o WebAclRateLimitForwardedIpOutput) ToWebAclRateLimitForwardedIpPtrOutputWithContext(ctx context.Context) WebAclRateLimitForwardedIpPtrOutput

type WebAclRateLimitForwardedIpPtrInput added in v0.72.0

type WebAclRateLimitForwardedIpPtrInput interface {
	pulumi.Input

	ToWebAclRateLimitForwardedIpPtrOutput() WebAclRateLimitForwardedIpPtrOutput
	ToWebAclRateLimitForwardedIpPtrOutputWithContext(context.Context) WebAclRateLimitForwardedIpPtrOutput
}

WebAclRateLimitForwardedIpPtrInput is an input type that accepts WebAclRateLimitForwardedIpArgs, WebAclRateLimitForwardedIpPtr and WebAclRateLimitForwardedIpPtrOutput values. You can construct a concrete instance of `WebAclRateLimitForwardedIpPtrInput` via:

        WebAclRateLimitForwardedIpArgs{...}

or:

        nil

func WebAclRateLimitForwardedIpPtr added in v0.72.0

type WebAclRateLimitForwardedIpPtrOutput added in v0.72.0

type WebAclRateLimitForwardedIpPtrOutput struct{ *pulumi.OutputState }

func (WebAclRateLimitForwardedIpPtrOutput) Elem added in v0.72.0

func (WebAclRateLimitForwardedIpPtrOutput) ElementType added in v0.72.0

func (WebAclRateLimitForwardedIpPtrOutput) ToWebAclRateLimitForwardedIpPtrOutput added in v0.72.0

func (o WebAclRateLimitForwardedIpPtrOutput) ToWebAclRateLimitForwardedIpPtrOutput() WebAclRateLimitForwardedIpPtrOutput

func (WebAclRateLimitForwardedIpPtrOutput) ToWebAclRateLimitForwardedIpPtrOutputWithContext added in v0.72.0

func (o WebAclRateLimitForwardedIpPtrOutput) ToWebAclRateLimitForwardedIpPtrOutputWithContext(ctx context.Context) WebAclRateLimitForwardedIpPtrOutput

type WebAclRateLimitHeader added in v0.72.0

type WebAclRateLimitHeader struct {
	// The name of the header to use.
	Name string `pulumi:"name"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations []WebAclTextTransformation `pulumi:"textTransformations"`
}

Specifies a header as an aggregate key for a rate-based rule.

type WebAclRateLimitHeaderArgs added in v0.72.0

type WebAclRateLimitHeaderArgs struct {
	// The name of the header to use.
	Name pulumi.StringInput `pulumi:"name"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations WebAclTextTransformationArrayInput `pulumi:"textTransformations"`
}

Specifies a header as an aggregate key for a rate-based rule.

func (WebAclRateLimitHeaderArgs) ElementType added in v0.72.0

func (WebAclRateLimitHeaderArgs) ElementType() reflect.Type

func (WebAclRateLimitHeaderArgs) ToWebAclRateLimitHeaderOutput added in v0.72.0

func (i WebAclRateLimitHeaderArgs) ToWebAclRateLimitHeaderOutput() WebAclRateLimitHeaderOutput

func (WebAclRateLimitHeaderArgs) ToWebAclRateLimitHeaderOutputWithContext added in v0.72.0

func (i WebAclRateLimitHeaderArgs) ToWebAclRateLimitHeaderOutputWithContext(ctx context.Context) WebAclRateLimitHeaderOutput

func (WebAclRateLimitHeaderArgs) ToWebAclRateLimitHeaderPtrOutput added in v0.72.0

func (i WebAclRateLimitHeaderArgs) ToWebAclRateLimitHeaderPtrOutput() WebAclRateLimitHeaderPtrOutput

func (WebAclRateLimitHeaderArgs) ToWebAclRateLimitHeaderPtrOutputWithContext added in v0.72.0

func (i WebAclRateLimitHeaderArgs) ToWebAclRateLimitHeaderPtrOutputWithContext(ctx context.Context) WebAclRateLimitHeaderPtrOutput

type WebAclRateLimitHeaderInput added in v0.72.0

type WebAclRateLimitHeaderInput interface {
	pulumi.Input

	ToWebAclRateLimitHeaderOutput() WebAclRateLimitHeaderOutput
	ToWebAclRateLimitHeaderOutputWithContext(context.Context) WebAclRateLimitHeaderOutput
}

WebAclRateLimitHeaderInput is an input type that accepts WebAclRateLimitHeaderArgs and WebAclRateLimitHeaderOutput values. You can construct a concrete instance of `WebAclRateLimitHeaderInput` via:

WebAclRateLimitHeaderArgs{...}

type WebAclRateLimitHeaderOutput added in v0.72.0

type WebAclRateLimitHeaderOutput struct{ *pulumi.OutputState }

Specifies a header as an aggregate key for a rate-based rule.

func (WebAclRateLimitHeaderOutput) ElementType added in v0.72.0

func (WebAclRateLimitHeaderOutput) Name added in v0.72.0

The name of the header to use.

func (WebAclRateLimitHeaderOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (WebAclRateLimitHeaderOutput) ToWebAclRateLimitHeaderOutput added in v0.72.0

func (o WebAclRateLimitHeaderOutput) ToWebAclRateLimitHeaderOutput() WebAclRateLimitHeaderOutput

func (WebAclRateLimitHeaderOutput) ToWebAclRateLimitHeaderOutputWithContext added in v0.72.0

func (o WebAclRateLimitHeaderOutput) ToWebAclRateLimitHeaderOutputWithContext(ctx context.Context) WebAclRateLimitHeaderOutput

func (WebAclRateLimitHeaderOutput) ToWebAclRateLimitHeaderPtrOutput added in v0.72.0

func (o WebAclRateLimitHeaderOutput) ToWebAclRateLimitHeaderPtrOutput() WebAclRateLimitHeaderPtrOutput

func (WebAclRateLimitHeaderOutput) ToWebAclRateLimitHeaderPtrOutputWithContext added in v0.72.0

func (o WebAclRateLimitHeaderOutput) ToWebAclRateLimitHeaderPtrOutputWithContext(ctx context.Context) WebAclRateLimitHeaderPtrOutput

type WebAclRateLimitHeaderPtrInput added in v0.72.0

type WebAclRateLimitHeaderPtrInput interface {
	pulumi.Input

	ToWebAclRateLimitHeaderPtrOutput() WebAclRateLimitHeaderPtrOutput
	ToWebAclRateLimitHeaderPtrOutputWithContext(context.Context) WebAclRateLimitHeaderPtrOutput
}

WebAclRateLimitHeaderPtrInput is an input type that accepts WebAclRateLimitHeaderArgs, WebAclRateLimitHeaderPtr and WebAclRateLimitHeaderPtrOutput values. You can construct a concrete instance of `WebAclRateLimitHeaderPtrInput` via:

        WebAclRateLimitHeaderArgs{...}

or:

        nil

func WebAclRateLimitHeaderPtr added in v0.72.0

func WebAclRateLimitHeaderPtr(v *WebAclRateLimitHeaderArgs) WebAclRateLimitHeaderPtrInput

type WebAclRateLimitHeaderPtrOutput added in v0.72.0

type WebAclRateLimitHeaderPtrOutput struct{ *pulumi.OutputState }

func (WebAclRateLimitHeaderPtrOutput) Elem added in v0.72.0

func (WebAclRateLimitHeaderPtrOutput) ElementType added in v0.72.0

func (WebAclRateLimitHeaderPtrOutput) Name added in v0.72.0

The name of the header to use.

func (WebAclRateLimitHeaderPtrOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (WebAclRateLimitHeaderPtrOutput) ToWebAclRateLimitHeaderPtrOutput added in v0.72.0

func (o WebAclRateLimitHeaderPtrOutput) ToWebAclRateLimitHeaderPtrOutput() WebAclRateLimitHeaderPtrOutput

func (WebAclRateLimitHeaderPtrOutput) ToWebAclRateLimitHeaderPtrOutputWithContext added in v0.72.0

func (o WebAclRateLimitHeaderPtrOutput) ToWebAclRateLimitHeaderPtrOutputWithContext(ctx context.Context) WebAclRateLimitHeaderPtrOutput

type WebAclRateLimitHttpMethod added in v0.72.0

type WebAclRateLimitHttpMethod struct {
}

Specifies the request's HTTP method as an aggregate key for a rate-based rule.

type WebAclRateLimitHttpMethodArgs added in v0.72.0

type WebAclRateLimitHttpMethodArgs struct {
}

Specifies the request's HTTP method as an aggregate key for a rate-based rule.

func (WebAclRateLimitHttpMethodArgs) ElementType added in v0.72.0

func (WebAclRateLimitHttpMethodArgs) ToWebAclRateLimitHttpMethodOutput added in v0.72.0

func (i WebAclRateLimitHttpMethodArgs) ToWebAclRateLimitHttpMethodOutput() WebAclRateLimitHttpMethodOutput

func (WebAclRateLimitHttpMethodArgs) ToWebAclRateLimitHttpMethodOutputWithContext added in v0.72.0

func (i WebAclRateLimitHttpMethodArgs) ToWebAclRateLimitHttpMethodOutputWithContext(ctx context.Context) WebAclRateLimitHttpMethodOutput

func (WebAclRateLimitHttpMethodArgs) ToWebAclRateLimitHttpMethodPtrOutput added in v0.72.0

func (i WebAclRateLimitHttpMethodArgs) ToWebAclRateLimitHttpMethodPtrOutput() WebAclRateLimitHttpMethodPtrOutput

func (WebAclRateLimitHttpMethodArgs) ToWebAclRateLimitHttpMethodPtrOutputWithContext added in v0.72.0

func (i WebAclRateLimitHttpMethodArgs) ToWebAclRateLimitHttpMethodPtrOutputWithContext(ctx context.Context) WebAclRateLimitHttpMethodPtrOutput

type WebAclRateLimitHttpMethodInput added in v0.72.0

type WebAclRateLimitHttpMethodInput interface {
	pulumi.Input

	ToWebAclRateLimitHttpMethodOutput() WebAclRateLimitHttpMethodOutput
	ToWebAclRateLimitHttpMethodOutputWithContext(context.Context) WebAclRateLimitHttpMethodOutput
}

WebAclRateLimitHttpMethodInput is an input type that accepts WebAclRateLimitHttpMethodArgs and WebAclRateLimitHttpMethodOutput values. You can construct a concrete instance of `WebAclRateLimitHttpMethodInput` via:

WebAclRateLimitHttpMethodArgs{...}

type WebAclRateLimitHttpMethodOutput added in v0.72.0

type WebAclRateLimitHttpMethodOutput struct{ *pulumi.OutputState }

Specifies the request's HTTP method as an aggregate key for a rate-based rule.

func (WebAclRateLimitHttpMethodOutput) ElementType added in v0.72.0

func (WebAclRateLimitHttpMethodOutput) ToWebAclRateLimitHttpMethodOutput added in v0.72.0

func (o WebAclRateLimitHttpMethodOutput) ToWebAclRateLimitHttpMethodOutput() WebAclRateLimitHttpMethodOutput

func (WebAclRateLimitHttpMethodOutput) ToWebAclRateLimitHttpMethodOutputWithContext added in v0.72.0

func (o WebAclRateLimitHttpMethodOutput) ToWebAclRateLimitHttpMethodOutputWithContext(ctx context.Context) WebAclRateLimitHttpMethodOutput

func (WebAclRateLimitHttpMethodOutput) ToWebAclRateLimitHttpMethodPtrOutput added in v0.72.0

func (o WebAclRateLimitHttpMethodOutput) ToWebAclRateLimitHttpMethodPtrOutput() WebAclRateLimitHttpMethodPtrOutput

func (WebAclRateLimitHttpMethodOutput) ToWebAclRateLimitHttpMethodPtrOutputWithContext added in v0.72.0

func (o WebAclRateLimitHttpMethodOutput) ToWebAclRateLimitHttpMethodPtrOutputWithContext(ctx context.Context) WebAclRateLimitHttpMethodPtrOutput

type WebAclRateLimitHttpMethodPtrInput added in v0.72.0

type WebAclRateLimitHttpMethodPtrInput interface {
	pulumi.Input

	ToWebAclRateLimitHttpMethodPtrOutput() WebAclRateLimitHttpMethodPtrOutput
	ToWebAclRateLimitHttpMethodPtrOutputWithContext(context.Context) WebAclRateLimitHttpMethodPtrOutput
}

WebAclRateLimitHttpMethodPtrInput is an input type that accepts WebAclRateLimitHttpMethodArgs, WebAclRateLimitHttpMethodPtr and WebAclRateLimitHttpMethodPtrOutput values. You can construct a concrete instance of `WebAclRateLimitHttpMethodPtrInput` via:

        WebAclRateLimitHttpMethodArgs{...}

or:

        nil

func WebAclRateLimitHttpMethodPtr added in v0.72.0

type WebAclRateLimitHttpMethodPtrOutput added in v0.72.0

type WebAclRateLimitHttpMethodPtrOutput struct{ *pulumi.OutputState }

func (WebAclRateLimitHttpMethodPtrOutput) Elem added in v0.72.0

func (WebAclRateLimitHttpMethodPtrOutput) ElementType added in v0.72.0

func (WebAclRateLimitHttpMethodPtrOutput) ToWebAclRateLimitHttpMethodPtrOutput added in v0.72.0

func (o WebAclRateLimitHttpMethodPtrOutput) ToWebAclRateLimitHttpMethodPtrOutput() WebAclRateLimitHttpMethodPtrOutput

func (WebAclRateLimitHttpMethodPtrOutput) ToWebAclRateLimitHttpMethodPtrOutputWithContext added in v0.72.0

func (o WebAclRateLimitHttpMethodPtrOutput) ToWebAclRateLimitHttpMethodPtrOutputWithContext(ctx context.Context) WebAclRateLimitHttpMethodPtrOutput

type WebAclRateLimitIp added in v0.72.0

type WebAclRateLimitIp struct {
}

Specifies the IP address in the web request as an aggregate key for a rate-based rule.

type WebAclRateLimitIpArgs added in v0.72.0

type WebAclRateLimitIpArgs struct {
}

Specifies the IP address in the web request as an aggregate key for a rate-based rule.

func (WebAclRateLimitIpArgs) ElementType added in v0.72.0

func (WebAclRateLimitIpArgs) ElementType() reflect.Type

func (WebAclRateLimitIpArgs) ToWebAclRateLimitIpOutput added in v0.72.0

func (i WebAclRateLimitIpArgs) ToWebAclRateLimitIpOutput() WebAclRateLimitIpOutput

func (WebAclRateLimitIpArgs) ToWebAclRateLimitIpOutputWithContext added in v0.72.0

func (i WebAclRateLimitIpArgs) ToWebAclRateLimitIpOutputWithContext(ctx context.Context) WebAclRateLimitIpOutput

func (WebAclRateLimitIpArgs) ToWebAclRateLimitIpPtrOutput added in v0.72.0

func (i WebAclRateLimitIpArgs) ToWebAclRateLimitIpPtrOutput() WebAclRateLimitIpPtrOutput

func (WebAclRateLimitIpArgs) ToWebAclRateLimitIpPtrOutputWithContext added in v0.72.0

func (i WebAclRateLimitIpArgs) ToWebAclRateLimitIpPtrOutputWithContext(ctx context.Context) WebAclRateLimitIpPtrOutput

type WebAclRateLimitIpInput added in v0.72.0

type WebAclRateLimitIpInput interface {
	pulumi.Input

	ToWebAclRateLimitIpOutput() WebAclRateLimitIpOutput
	ToWebAclRateLimitIpOutputWithContext(context.Context) WebAclRateLimitIpOutput
}

WebAclRateLimitIpInput is an input type that accepts WebAclRateLimitIpArgs and WebAclRateLimitIpOutput values. You can construct a concrete instance of `WebAclRateLimitIpInput` via:

WebAclRateLimitIpArgs{...}

type WebAclRateLimitIpOutput added in v0.72.0

type WebAclRateLimitIpOutput struct{ *pulumi.OutputState }

Specifies the IP address in the web request as an aggregate key for a rate-based rule.

func (WebAclRateLimitIpOutput) ElementType added in v0.72.0

func (WebAclRateLimitIpOutput) ElementType() reflect.Type

func (WebAclRateLimitIpOutput) ToWebAclRateLimitIpOutput added in v0.72.0

func (o WebAclRateLimitIpOutput) ToWebAclRateLimitIpOutput() WebAclRateLimitIpOutput

func (WebAclRateLimitIpOutput) ToWebAclRateLimitIpOutputWithContext added in v0.72.0

func (o WebAclRateLimitIpOutput) ToWebAclRateLimitIpOutputWithContext(ctx context.Context) WebAclRateLimitIpOutput

func (WebAclRateLimitIpOutput) ToWebAclRateLimitIpPtrOutput added in v0.72.0

func (o WebAclRateLimitIpOutput) ToWebAclRateLimitIpPtrOutput() WebAclRateLimitIpPtrOutput

func (WebAclRateLimitIpOutput) ToWebAclRateLimitIpPtrOutputWithContext added in v0.72.0

func (o WebAclRateLimitIpOutput) ToWebAclRateLimitIpPtrOutputWithContext(ctx context.Context) WebAclRateLimitIpPtrOutput

type WebAclRateLimitIpPtrInput added in v0.72.0

type WebAclRateLimitIpPtrInput interface {
	pulumi.Input

	ToWebAclRateLimitIpPtrOutput() WebAclRateLimitIpPtrOutput
	ToWebAclRateLimitIpPtrOutputWithContext(context.Context) WebAclRateLimitIpPtrOutput
}

WebAclRateLimitIpPtrInput is an input type that accepts WebAclRateLimitIpArgs, WebAclRateLimitIpPtr and WebAclRateLimitIpPtrOutput values. You can construct a concrete instance of `WebAclRateLimitIpPtrInput` via:

        WebAclRateLimitIpArgs{...}

or:

        nil

func WebAclRateLimitIpPtr added in v0.72.0

func WebAclRateLimitIpPtr(v *WebAclRateLimitIpArgs) WebAclRateLimitIpPtrInput

type WebAclRateLimitIpPtrOutput added in v0.72.0

type WebAclRateLimitIpPtrOutput struct{ *pulumi.OutputState }

func (WebAclRateLimitIpPtrOutput) Elem added in v0.72.0

func (WebAclRateLimitIpPtrOutput) ElementType added in v0.72.0

func (WebAclRateLimitIpPtrOutput) ElementType() reflect.Type

func (WebAclRateLimitIpPtrOutput) ToWebAclRateLimitIpPtrOutput added in v0.72.0

func (o WebAclRateLimitIpPtrOutput) ToWebAclRateLimitIpPtrOutput() WebAclRateLimitIpPtrOutput

func (WebAclRateLimitIpPtrOutput) ToWebAclRateLimitIpPtrOutputWithContext added in v0.72.0

func (o WebAclRateLimitIpPtrOutput) ToWebAclRateLimitIpPtrOutputWithContext(ctx context.Context) WebAclRateLimitIpPtrOutput

type WebAclRateLimitLabelNamespace added in v0.72.0

type WebAclRateLimitLabelNamespace struct {
	// The namespace to use for aggregation.
	Namespace string `pulumi:"namespace"`
}

Specifies a label namespace to use as an aggregate key for a rate-based rule.

type WebAclRateLimitLabelNamespaceArgs added in v0.72.0

type WebAclRateLimitLabelNamespaceArgs struct {
	// The namespace to use for aggregation.
	Namespace pulumi.StringInput `pulumi:"namespace"`
}

Specifies a label namespace to use as an aggregate key for a rate-based rule.

func (WebAclRateLimitLabelNamespaceArgs) ElementType added in v0.72.0

func (WebAclRateLimitLabelNamespaceArgs) ToWebAclRateLimitLabelNamespaceOutput added in v0.72.0

func (i WebAclRateLimitLabelNamespaceArgs) ToWebAclRateLimitLabelNamespaceOutput() WebAclRateLimitLabelNamespaceOutput

func (WebAclRateLimitLabelNamespaceArgs) ToWebAclRateLimitLabelNamespaceOutputWithContext added in v0.72.0

func (i WebAclRateLimitLabelNamespaceArgs) ToWebAclRateLimitLabelNamespaceOutputWithContext(ctx context.Context) WebAclRateLimitLabelNamespaceOutput

func (WebAclRateLimitLabelNamespaceArgs) ToWebAclRateLimitLabelNamespacePtrOutput added in v0.72.0

func (i WebAclRateLimitLabelNamespaceArgs) ToWebAclRateLimitLabelNamespacePtrOutput() WebAclRateLimitLabelNamespacePtrOutput

func (WebAclRateLimitLabelNamespaceArgs) ToWebAclRateLimitLabelNamespacePtrOutputWithContext added in v0.72.0

func (i WebAclRateLimitLabelNamespaceArgs) ToWebAclRateLimitLabelNamespacePtrOutputWithContext(ctx context.Context) WebAclRateLimitLabelNamespacePtrOutput

type WebAclRateLimitLabelNamespaceInput added in v0.72.0

type WebAclRateLimitLabelNamespaceInput interface {
	pulumi.Input

	ToWebAclRateLimitLabelNamespaceOutput() WebAclRateLimitLabelNamespaceOutput
	ToWebAclRateLimitLabelNamespaceOutputWithContext(context.Context) WebAclRateLimitLabelNamespaceOutput
}

WebAclRateLimitLabelNamespaceInput is an input type that accepts WebAclRateLimitLabelNamespaceArgs and WebAclRateLimitLabelNamespaceOutput values. You can construct a concrete instance of `WebAclRateLimitLabelNamespaceInput` via:

WebAclRateLimitLabelNamespaceArgs{...}

type WebAclRateLimitLabelNamespaceOutput added in v0.72.0

type WebAclRateLimitLabelNamespaceOutput struct{ *pulumi.OutputState }

Specifies a label namespace to use as an aggregate key for a rate-based rule.

func (WebAclRateLimitLabelNamespaceOutput) ElementType added in v0.72.0

func (WebAclRateLimitLabelNamespaceOutput) Namespace added in v0.72.0

The namespace to use for aggregation.

func (WebAclRateLimitLabelNamespaceOutput) ToWebAclRateLimitLabelNamespaceOutput added in v0.72.0

func (o WebAclRateLimitLabelNamespaceOutput) ToWebAclRateLimitLabelNamespaceOutput() WebAclRateLimitLabelNamespaceOutput

func (WebAclRateLimitLabelNamespaceOutput) ToWebAclRateLimitLabelNamespaceOutputWithContext added in v0.72.0

func (o WebAclRateLimitLabelNamespaceOutput) ToWebAclRateLimitLabelNamespaceOutputWithContext(ctx context.Context) WebAclRateLimitLabelNamespaceOutput

func (WebAclRateLimitLabelNamespaceOutput) ToWebAclRateLimitLabelNamespacePtrOutput added in v0.72.0

func (o WebAclRateLimitLabelNamespaceOutput) ToWebAclRateLimitLabelNamespacePtrOutput() WebAclRateLimitLabelNamespacePtrOutput

func (WebAclRateLimitLabelNamespaceOutput) ToWebAclRateLimitLabelNamespacePtrOutputWithContext added in v0.72.0

func (o WebAclRateLimitLabelNamespaceOutput) ToWebAclRateLimitLabelNamespacePtrOutputWithContext(ctx context.Context) WebAclRateLimitLabelNamespacePtrOutput

type WebAclRateLimitLabelNamespacePtrInput added in v0.72.0

type WebAclRateLimitLabelNamespacePtrInput interface {
	pulumi.Input

	ToWebAclRateLimitLabelNamespacePtrOutput() WebAclRateLimitLabelNamespacePtrOutput
	ToWebAclRateLimitLabelNamespacePtrOutputWithContext(context.Context) WebAclRateLimitLabelNamespacePtrOutput
}

WebAclRateLimitLabelNamespacePtrInput is an input type that accepts WebAclRateLimitLabelNamespaceArgs, WebAclRateLimitLabelNamespacePtr and WebAclRateLimitLabelNamespacePtrOutput values. You can construct a concrete instance of `WebAclRateLimitLabelNamespacePtrInput` via:

        WebAclRateLimitLabelNamespaceArgs{...}

or:

        nil

type WebAclRateLimitLabelNamespacePtrOutput added in v0.72.0

type WebAclRateLimitLabelNamespacePtrOutput struct{ *pulumi.OutputState }

func (WebAclRateLimitLabelNamespacePtrOutput) Elem added in v0.72.0

func (WebAclRateLimitLabelNamespacePtrOutput) ElementType added in v0.72.0

func (WebAclRateLimitLabelNamespacePtrOutput) Namespace added in v0.72.0

The namespace to use for aggregation.

func (WebAclRateLimitLabelNamespacePtrOutput) ToWebAclRateLimitLabelNamespacePtrOutput added in v0.72.0

func (o WebAclRateLimitLabelNamespacePtrOutput) ToWebAclRateLimitLabelNamespacePtrOutput() WebAclRateLimitLabelNamespacePtrOutput

func (WebAclRateLimitLabelNamespacePtrOutput) ToWebAclRateLimitLabelNamespacePtrOutputWithContext added in v0.72.0

func (o WebAclRateLimitLabelNamespacePtrOutput) ToWebAclRateLimitLabelNamespacePtrOutputWithContext(ctx context.Context) WebAclRateLimitLabelNamespacePtrOutput

type WebAclRateLimitQueryArgument added in v0.72.0

type WebAclRateLimitQueryArgument struct {
	// The name of the query argument to use.
	Name string `pulumi:"name"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations []WebAclTextTransformation `pulumi:"textTransformations"`
}

Specifies a query argument in the request as an aggregate key for a rate-based rule.

type WebAclRateLimitQueryArgumentArgs added in v0.72.0

type WebAclRateLimitQueryArgumentArgs struct {
	// The name of the query argument to use.
	Name pulumi.StringInput `pulumi:"name"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations WebAclTextTransformationArrayInput `pulumi:"textTransformations"`
}

Specifies a query argument in the request as an aggregate key for a rate-based rule.

func (WebAclRateLimitQueryArgumentArgs) ElementType added in v0.72.0

func (WebAclRateLimitQueryArgumentArgs) ToWebAclRateLimitQueryArgumentOutput added in v0.72.0

func (i WebAclRateLimitQueryArgumentArgs) ToWebAclRateLimitQueryArgumentOutput() WebAclRateLimitQueryArgumentOutput

func (WebAclRateLimitQueryArgumentArgs) ToWebAclRateLimitQueryArgumentOutputWithContext added in v0.72.0

func (i WebAclRateLimitQueryArgumentArgs) ToWebAclRateLimitQueryArgumentOutputWithContext(ctx context.Context) WebAclRateLimitQueryArgumentOutput

func (WebAclRateLimitQueryArgumentArgs) ToWebAclRateLimitQueryArgumentPtrOutput added in v0.72.0

func (i WebAclRateLimitQueryArgumentArgs) ToWebAclRateLimitQueryArgumentPtrOutput() WebAclRateLimitQueryArgumentPtrOutput

func (WebAclRateLimitQueryArgumentArgs) ToWebAclRateLimitQueryArgumentPtrOutputWithContext added in v0.72.0

func (i WebAclRateLimitQueryArgumentArgs) ToWebAclRateLimitQueryArgumentPtrOutputWithContext(ctx context.Context) WebAclRateLimitQueryArgumentPtrOutput

type WebAclRateLimitQueryArgumentInput added in v0.72.0

type WebAclRateLimitQueryArgumentInput interface {
	pulumi.Input

	ToWebAclRateLimitQueryArgumentOutput() WebAclRateLimitQueryArgumentOutput
	ToWebAclRateLimitQueryArgumentOutputWithContext(context.Context) WebAclRateLimitQueryArgumentOutput
}

WebAclRateLimitQueryArgumentInput is an input type that accepts WebAclRateLimitQueryArgumentArgs and WebAclRateLimitQueryArgumentOutput values. You can construct a concrete instance of `WebAclRateLimitQueryArgumentInput` via:

WebAclRateLimitQueryArgumentArgs{...}

type WebAclRateLimitQueryArgumentOutput added in v0.72.0

type WebAclRateLimitQueryArgumentOutput struct{ *pulumi.OutputState }

Specifies a query argument in the request as an aggregate key for a rate-based rule.

func (WebAclRateLimitQueryArgumentOutput) ElementType added in v0.72.0

func (WebAclRateLimitQueryArgumentOutput) Name added in v0.72.0

The name of the query argument to use.

func (WebAclRateLimitQueryArgumentOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (WebAclRateLimitQueryArgumentOutput) ToWebAclRateLimitQueryArgumentOutput added in v0.72.0

func (o WebAclRateLimitQueryArgumentOutput) ToWebAclRateLimitQueryArgumentOutput() WebAclRateLimitQueryArgumentOutput

func (WebAclRateLimitQueryArgumentOutput) ToWebAclRateLimitQueryArgumentOutputWithContext added in v0.72.0

func (o WebAclRateLimitQueryArgumentOutput) ToWebAclRateLimitQueryArgumentOutputWithContext(ctx context.Context) WebAclRateLimitQueryArgumentOutput

func (WebAclRateLimitQueryArgumentOutput) ToWebAclRateLimitQueryArgumentPtrOutput added in v0.72.0

func (o WebAclRateLimitQueryArgumentOutput) ToWebAclRateLimitQueryArgumentPtrOutput() WebAclRateLimitQueryArgumentPtrOutput

func (WebAclRateLimitQueryArgumentOutput) ToWebAclRateLimitQueryArgumentPtrOutputWithContext added in v0.72.0

func (o WebAclRateLimitQueryArgumentOutput) ToWebAclRateLimitQueryArgumentPtrOutputWithContext(ctx context.Context) WebAclRateLimitQueryArgumentPtrOutput

type WebAclRateLimitQueryArgumentPtrInput added in v0.72.0

type WebAclRateLimitQueryArgumentPtrInput interface {
	pulumi.Input

	ToWebAclRateLimitQueryArgumentPtrOutput() WebAclRateLimitQueryArgumentPtrOutput
	ToWebAclRateLimitQueryArgumentPtrOutputWithContext(context.Context) WebAclRateLimitQueryArgumentPtrOutput
}

WebAclRateLimitQueryArgumentPtrInput is an input type that accepts WebAclRateLimitQueryArgumentArgs, WebAclRateLimitQueryArgumentPtr and WebAclRateLimitQueryArgumentPtrOutput values. You can construct a concrete instance of `WebAclRateLimitQueryArgumentPtrInput` via:

        WebAclRateLimitQueryArgumentArgs{...}

or:

        nil

func WebAclRateLimitQueryArgumentPtr added in v0.72.0

type WebAclRateLimitQueryArgumentPtrOutput added in v0.72.0

type WebAclRateLimitQueryArgumentPtrOutput struct{ *pulumi.OutputState }

func (WebAclRateLimitQueryArgumentPtrOutput) Elem added in v0.72.0

func (WebAclRateLimitQueryArgumentPtrOutput) ElementType added in v0.72.0

func (WebAclRateLimitQueryArgumentPtrOutput) Name added in v0.72.0

The name of the query argument to use.

func (WebAclRateLimitQueryArgumentPtrOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (WebAclRateLimitQueryArgumentPtrOutput) ToWebAclRateLimitQueryArgumentPtrOutput added in v0.72.0

func (o WebAclRateLimitQueryArgumentPtrOutput) ToWebAclRateLimitQueryArgumentPtrOutput() WebAclRateLimitQueryArgumentPtrOutput

func (WebAclRateLimitQueryArgumentPtrOutput) ToWebAclRateLimitQueryArgumentPtrOutputWithContext added in v0.72.0

func (o WebAclRateLimitQueryArgumentPtrOutput) ToWebAclRateLimitQueryArgumentPtrOutputWithContext(ctx context.Context) WebAclRateLimitQueryArgumentPtrOutput

type WebAclRateLimitQueryString added in v0.72.0

type WebAclRateLimitQueryString struct {
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations []WebAclTextTransformation `pulumi:"textTransformations"`
}

Specifies the request's query string as an aggregate key for a rate-based rule.

type WebAclRateLimitQueryStringArgs added in v0.72.0

type WebAclRateLimitQueryStringArgs struct {
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations WebAclTextTransformationArrayInput `pulumi:"textTransformations"`
}

Specifies the request's query string as an aggregate key for a rate-based rule.

func (WebAclRateLimitQueryStringArgs) ElementType added in v0.72.0

func (WebAclRateLimitQueryStringArgs) ToWebAclRateLimitQueryStringOutput added in v0.72.0

func (i WebAclRateLimitQueryStringArgs) ToWebAclRateLimitQueryStringOutput() WebAclRateLimitQueryStringOutput

func (WebAclRateLimitQueryStringArgs) ToWebAclRateLimitQueryStringOutputWithContext added in v0.72.0

func (i WebAclRateLimitQueryStringArgs) ToWebAclRateLimitQueryStringOutputWithContext(ctx context.Context) WebAclRateLimitQueryStringOutput

func (WebAclRateLimitQueryStringArgs) ToWebAclRateLimitQueryStringPtrOutput added in v0.72.0

func (i WebAclRateLimitQueryStringArgs) ToWebAclRateLimitQueryStringPtrOutput() WebAclRateLimitQueryStringPtrOutput

func (WebAclRateLimitQueryStringArgs) ToWebAclRateLimitQueryStringPtrOutputWithContext added in v0.72.0

func (i WebAclRateLimitQueryStringArgs) ToWebAclRateLimitQueryStringPtrOutputWithContext(ctx context.Context) WebAclRateLimitQueryStringPtrOutput

type WebAclRateLimitQueryStringInput added in v0.72.0

type WebAclRateLimitQueryStringInput interface {
	pulumi.Input

	ToWebAclRateLimitQueryStringOutput() WebAclRateLimitQueryStringOutput
	ToWebAclRateLimitQueryStringOutputWithContext(context.Context) WebAclRateLimitQueryStringOutput
}

WebAclRateLimitQueryStringInput is an input type that accepts WebAclRateLimitQueryStringArgs and WebAclRateLimitQueryStringOutput values. You can construct a concrete instance of `WebAclRateLimitQueryStringInput` via:

WebAclRateLimitQueryStringArgs{...}

type WebAclRateLimitQueryStringOutput added in v0.72.0

type WebAclRateLimitQueryStringOutput struct{ *pulumi.OutputState }

Specifies the request's query string as an aggregate key for a rate-based rule.

func (WebAclRateLimitQueryStringOutput) ElementType added in v0.72.0

func (WebAclRateLimitQueryStringOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (WebAclRateLimitQueryStringOutput) ToWebAclRateLimitQueryStringOutput added in v0.72.0

func (o WebAclRateLimitQueryStringOutput) ToWebAclRateLimitQueryStringOutput() WebAclRateLimitQueryStringOutput

func (WebAclRateLimitQueryStringOutput) ToWebAclRateLimitQueryStringOutputWithContext added in v0.72.0

func (o WebAclRateLimitQueryStringOutput) ToWebAclRateLimitQueryStringOutputWithContext(ctx context.Context) WebAclRateLimitQueryStringOutput

func (WebAclRateLimitQueryStringOutput) ToWebAclRateLimitQueryStringPtrOutput added in v0.72.0

func (o WebAclRateLimitQueryStringOutput) ToWebAclRateLimitQueryStringPtrOutput() WebAclRateLimitQueryStringPtrOutput

func (WebAclRateLimitQueryStringOutput) ToWebAclRateLimitQueryStringPtrOutputWithContext added in v0.72.0

func (o WebAclRateLimitQueryStringOutput) ToWebAclRateLimitQueryStringPtrOutputWithContext(ctx context.Context) WebAclRateLimitQueryStringPtrOutput

type WebAclRateLimitQueryStringPtrInput added in v0.72.0

type WebAclRateLimitQueryStringPtrInput interface {
	pulumi.Input

	ToWebAclRateLimitQueryStringPtrOutput() WebAclRateLimitQueryStringPtrOutput
	ToWebAclRateLimitQueryStringPtrOutputWithContext(context.Context) WebAclRateLimitQueryStringPtrOutput
}

WebAclRateLimitQueryStringPtrInput is an input type that accepts WebAclRateLimitQueryStringArgs, WebAclRateLimitQueryStringPtr and WebAclRateLimitQueryStringPtrOutput values. You can construct a concrete instance of `WebAclRateLimitQueryStringPtrInput` via:

        WebAclRateLimitQueryStringArgs{...}

or:

        nil

func WebAclRateLimitQueryStringPtr added in v0.72.0

type WebAclRateLimitQueryStringPtrOutput added in v0.72.0

type WebAclRateLimitQueryStringPtrOutput struct{ *pulumi.OutputState }

func (WebAclRateLimitQueryStringPtrOutput) Elem added in v0.72.0

func (WebAclRateLimitQueryStringPtrOutput) ElementType added in v0.72.0

func (WebAclRateLimitQueryStringPtrOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (WebAclRateLimitQueryStringPtrOutput) ToWebAclRateLimitQueryStringPtrOutput added in v0.72.0

func (o WebAclRateLimitQueryStringPtrOutput) ToWebAclRateLimitQueryStringPtrOutput() WebAclRateLimitQueryStringPtrOutput

func (WebAclRateLimitQueryStringPtrOutput) ToWebAclRateLimitQueryStringPtrOutputWithContext added in v0.72.0

func (o WebAclRateLimitQueryStringPtrOutput) ToWebAclRateLimitQueryStringPtrOutputWithContext(ctx context.Context) WebAclRateLimitQueryStringPtrOutput

type WebAclRateLimitUriPath added in v0.72.0

type WebAclRateLimitUriPath struct {
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations []WebAclTextTransformation `pulumi:"textTransformations"`
}

Specifies the request's URI Path as an aggregate key for a rate-based rule.

type WebAclRateLimitUriPathArgs added in v0.72.0

type WebAclRateLimitUriPathArgs struct {
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.
	TextTransformations WebAclTextTransformationArrayInput `pulumi:"textTransformations"`
}

Specifies the request's URI Path as an aggregate key for a rate-based rule.

func (WebAclRateLimitUriPathArgs) ElementType added in v0.72.0

func (WebAclRateLimitUriPathArgs) ElementType() reflect.Type

func (WebAclRateLimitUriPathArgs) ToWebAclRateLimitUriPathOutput added in v0.72.0

func (i WebAclRateLimitUriPathArgs) ToWebAclRateLimitUriPathOutput() WebAclRateLimitUriPathOutput

func (WebAclRateLimitUriPathArgs) ToWebAclRateLimitUriPathOutputWithContext added in v0.72.0

func (i WebAclRateLimitUriPathArgs) ToWebAclRateLimitUriPathOutputWithContext(ctx context.Context) WebAclRateLimitUriPathOutput

func (WebAclRateLimitUriPathArgs) ToWebAclRateLimitUriPathPtrOutput added in v0.72.0

func (i WebAclRateLimitUriPathArgs) ToWebAclRateLimitUriPathPtrOutput() WebAclRateLimitUriPathPtrOutput

func (WebAclRateLimitUriPathArgs) ToWebAclRateLimitUriPathPtrOutputWithContext added in v0.72.0

func (i WebAclRateLimitUriPathArgs) ToWebAclRateLimitUriPathPtrOutputWithContext(ctx context.Context) WebAclRateLimitUriPathPtrOutput

type WebAclRateLimitUriPathInput added in v0.72.0

type WebAclRateLimitUriPathInput interface {
	pulumi.Input

	ToWebAclRateLimitUriPathOutput() WebAclRateLimitUriPathOutput
	ToWebAclRateLimitUriPathOutputWithContext(context.Context) WebAclRateLimitUriPathOutput
}

WebAclRateLimitUriPathInput is an input type that accepts WebAclRateLimitUriPathArgs and WebAclRateLimitUriPathOutput values. You can construct a concrete instance of `WebAclRateLimitUriPathInput` via:

WebAclRateLimitUriPathArgs{...}

type WebAclRateLimitUriPathOutput added in v0.72.0

type WebAclRateLimitUriPathOutput struct{ *pulumi.OutputState }

Specifies the request's URI Path as an aggregate key for a rate-based rule.

func (WebAclRateLimitUriPathOutput) ElementType added in v0.72.0

func (WebAclRateLimitUriPathOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (WebAclRateLimitUriPathOutput) ToWebAclRateLimitUriPathOutput added in v0.72.0

func (o WebAclRateLimitUriPathOutput) ToWebAclRateLimitUriPathOutput() WebAclRateLimitUriPathOutput

func (WebAclRateLimitUriPathOutput) ToWebAclRateLimitUriPathOutputWithContext added in v0.72.0

func (o WebAclRateLimitUriPathOutput) ToWebAclRateLimitUriPathOutputWithContext(ctx context.Context) WebAclRateLimitUriPathOutput

func (WebAclRateLimitUriPathOutput) ToWebAclRateLimitUriPathPtrOutput added in v0.72.0

func (o WebAclRateLimitUriPathOutput) ToWebAclRateLimitUriPathPtrOutput() WebAclRateLimitUriPathPtrOutput

func (WebAclRateLimitUriPathOutput) ToWebAclRateLimitUriPathPtrOutputWithContext added in v0.72.0

func (o WebAclRateLimitUriPathOutput) ToWebAclRateLimitUriPathPtrOutputWithContext(ctx context.Context) WebAclRateLimitUriPathPtrOutput

type WebAclRateLimitUriPathPtrInput added in v0.72.0

type WebAclRateLimitUriPathPtrInput interface {
	pulumi.Input

	ToWebAclRateLimitUriPathPtrOutput() WebAclRateLimitUriPathPtrOutput
	ToWebAclRateLimitUriPathPtrOutputWithContext(context.Context) WebAclRateLimitUriPathPtrOutput
}

WebAclRateLimitUriPathPtrInput is an input type that accepts WebAclRateLimitUriPathArgs, WebAclRateLimitUriPathPtr and WebAclRateLimitUriPathPtrOutput values. You can construct a concrete instance of `WebAclRateLimitUriPathPtrInput` via:

        WebAclRateLimitUriPathArgs{...}

or:

        nil

func WebAclRateLimitUriPathPtr added in v0.72.0

func WebAclRateLimitUriPathPtr(v *WebAclRateLimitUriPathArgs) WebAclRateLimitUriPathPtrInput

type WebAclRateLimitUriPathPtrOutput added in v0.72.0

type WebAclRateLimitUriPathPtrOutput struct{ *pulumi.OutputState }

func (WebAclRateLimitUriPathPtrOutput) Elem added in v0.72.0

func (WebAclRateLimitUriPathPtrOutput) ElementType added in v0.72.0

func (WebAclRateLimitUriPathPtrOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

func (WebAclRateLimitUriPathPtrOutput) ToWebAclRateLimitUriPathPtrOutput added in v0.72.0

func (o WebAclRateLimitUriPathPtrOutput) ToWebAclRateLimitUriPathPtrOutput() WebAclRateLimitUriPathPtrOutput

func (WebAclRateLimitUriPathPtrOutput) ToWebAclRateLimitUriPathPtrOutputWithContext added in v0.72.0

func (o WebAclRateLimitUriPathPtrOutput) ToWebAclRateLimitUriPathPtrOutputWithContext(ctx context.Context) WebAclRateLimitUriPathPtrOutput

type WebAclRegexMatchStatement added in v0.72.0

type WebAclRegexMatchStatement struct {
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch WebAclFieldToMatch `pulumi:"fieldToMatch"`
	// The string representing the regular expression.
	RegexString string `pulumi:"regexString"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations []WebAclTextTransformation `pulumi:"textTransformations"`
}

type WebAclRegexMatchStatementArgs added in v0.72.0

type WebAclRegexMatchStatementArgs struct {
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch WebAclFieldToMatchInput `pulumi:"fieldToMatch"`
	// The string representing the regular expression.
	RegexString pulumi.StringInput `pulumi:"regexString"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations WebAclTextTransformationArrayInput `pulumi:"textTransformations"`
}

func (WebAclRegexMatchStatementArgs) ElementType added in v0.72.0

func (WebAclRegexMatchStatementArgs) ToWebAclRegexMatchStatementOutput added in v0.72.0

func (i WebAclRegexMatchStatementArgs) ToWebAclRegexMatchStatementOutput() WebAclRegexMatchStatementOutput

func (WebAclRegexMatchStatementArgs) ToWebAclRegexMatchStatementOutputWithContext added in v0.72.0

func (i WebAclRegexMatchStatementArgs) ToWebAclRegexMatchStatementOutputWithContext(ctx context.Context) WebAclRegexMatchStatementOutput

func (WebAclRegexMatchStatementArgs) ToWebAclRegexMatchStatementPtrOutput added in v0.72.0

func (i WebAclRegexMatchStatementArgs) ToWebAclRegexMatchStatementPtrOutput() WebAclRegexMatchStatementPtrOutput

func (WebAclRegexMatchStatementArgs) ToWebAclRegexMatchStatementPtrOutputWithContext added in v0.72.0

func (i WebAclRegexMatchStatementArgs) ToWebAclRegexMatchStatementPtrOutputWithContext(ctx context.Context) WebAclRegexMatchStatementPtrOutput

type WebAclRegexMatchStatementInput added in v0.72.0

type WebAclRegexMatchStatementInput interface {
	pulumi.Input

	ToWebAclRegexMatchStatementOutput() WebAclRegexMatchStatementOutput
	ToWebAclRegexMatchStatementOutputWithContext(context.Context) WebAclRegexMatchStatementOutput
}

WebAclRegexMatchStatementInput is an input type that accepts WebAclRegexMatchStatementArgs and WebAclRegexMatchStatementOutput values. You can construct a concrete instance of `WebAclRegexMatchStatementInput` via:

WebAclRegexMatchStatementArgs{...}

type WebAclRegexMatchStatementOutput added in v0.72.0

type WebAclRegexMatchStatementOutput struct{ *pulumi.OutputState }

func (WebAclRegexMatchStatementOutput) ElementType added in v0.72.0

func (WebAclRegexMatchStatementOutput) FieldToMatch added in v0.72.0

The part of the web request that you want AWS WAF to inspect.

func (WebAclRegexMatchStatementOutput) RegexString added in v0.72.0

The string representing the regular expression.

func (WebAclRegexMatchStatementOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (WebAclRegexMatchStatementOutput) ToWebAclRegexMatchStatementOutput added in v0.72.0

func (o WebAclRegexMatchStatementOutput) ToWebAclRegexMatchStatementOutput() WebAclRegexMatchStatementOutput

func (WebAclRegexMatchStatementOutput) ToWebAclRegexMatchStatementOutputWithContext added in v0.72.0

func (o WebAclRegexMatchStatementOutput) ToWebAclRegexMatchStatementOutputWithContext(ctx context.Context) WebAclRegexMatchStatementOutput

func (WebAclRegexMatchStatementOutput) ToWebAclRegexMatchStatementPtrOutput added in v0.72.0

func (o WebAclRegexMatchStatementOutput) ToWebAclRegexMatchStatementPtrOutput() WebAclRegexMatchStatementPtrOutput

func (WebAclRegexMatchStatementOutput) ToWebAclRegexMatchStatementPtrOutputWithContext added in v0.72.0

func (o WebAclRegexMatchStatementOutput) ToWebAclRegexMatchStatementPtrOutputWithContext(ctx context.Context) WebAclRegexMatchStatementPtrOutput

type WebAclRegexMatchStatementPtrInput added in v0.72.0

type WebAclRegexMatchStatementPtrInput interface {
	pulumi.Input

	ToWebAclRegexMatchStatementPtrOutput() WebAclRegexMatchStatementPtrOutput
	ToWebAclRegexMatchStatementPtrOutputWithContext(context.Context) WebAclRegexMatchStatementPtrOutput
}

WebAclRegexMatchStatementPtrInput is an input type that accepts WebAclRegexMatchStatementArgs, WebAclRegexMatchStatementPtr and WebAclRegexMatchStatementPtrOutput values. You can construct a concrete instance of `WebAclRegexMatchStatementPtrInput` via:

        WebAclRegexMatchStatementArgs{...}

or:

        nil

func WebAclRegexMatchStatementPtr added in v0.72.0

type WebAclRegexMatchStatementPtrOutput added in v0.72.0

type WebAclRegexMatchStatementPtrOutput struct{ *pulumi.OutputState }

func (WebAclRegexMatchStatementPtrOutput) Elem added in v0.72.0

func (WebAclRegexMatchStatementPtrOutput) ElementType added in v0.72.0

func (WebAclRegexMatchStatementPtrOutput) FieldToMatch added in v0.72.0

The part of the web request that you want AWS WAF to inspect.

func (WebAclRegexMatchStatementPtrOutput) RegexString added in v0.72.0

The string representing the regular expression.

func (WebAclRegexMatchStatementPtrOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (WebAclRegexMatchStatementPtrOutput) ToWebAclRegexMatchStatementPtrOutput added in v0.72.0

func (o WebAclRegexMatchStatementPtrOutput) ToWebAclRegexMatchStatementPtrOutput() WebAclRegexMatchStatementPtrOutput

func (WebAclRegexMatchStatementPtrOutput) ToWebAclRegexMatchStatementPtrOutputWithContext added in v0.72.0

func (o WebAclRegexMatchStatementPtrOutput) ToWebAclRegexMatchStatementPtrOutputWithContext(ctx context.Context) WebAclRegexMatchStatementPtrOutput

type WebAclRegexPatternSetReferenceStatement added in v0.72.0

type WebAclRegexPatternSetReferenceStatement struct {
	// The Amazon Resource Name (ARN) of the `RegexPatternSet` that this statement references.
	Arn string `pulumi:"arn"`
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch WebAclFieldToMatch `pulumi:"fieldToMatch"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations []WebAclTextTransformation `pulumi:"textTransformations"`
}

type WebAclRegexPatternSetReferenceStatementArgs added in v0.72.0

type WebAclRegexPatternSetReferenceStatementArgs struct {
	// The Amazon Resource Name (ARN) of the `RegexPatternSet` that this statement references.
	Arn pulumi.StringInput `pulumi:"arn"`
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch WebAclFieldToMatchInput `pulumi:"fieldToMatch"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations WebAclTextTransformationArrayInput `pulumi:"textTransformations"`
}

func (WebAclRegexPatternSetReferenceStatementArgs) ElementType added in v0.72.0

func (WebAclRegexPatternSetReferenceStatementArgs) ToWebAclRegexPatternSetReferenceStatementOutput added in v0.72.0

func (i WebAclRegexPatternSetReferenceStatementArgs) ToWebAclRegexPatternSetReferenceStatementOutput() WebAclRegexPatternSetReferenceStatementOutput

func (WebAclRegexPatternSetReferenceStatementArgs) ToWebAclRegexPatternSetReferenceStatementOutputWithContext added in v0.72.0

func (i WebAclRegexPatternSetReferenceStatementArgs) ToWebAclRegexPatternSetReferenceStatementOutputWithContext(ctx context.Context) WebAclRegexPatternSetReferenceStatementOutput

func (WebAclRegexPatternSetReferenceStatementArgs) ToWebAclRegexPatternSetReferenceStatementPtrOutput added in v0.72.0

func (i WebAclRegexPatternSetReferenceStatementArgs) ToWebAclRegexPatternSetReferenceStatementPtrOutput() WebAclRegexPatternSetReferenceStatementPtrOutput

func (WebAclRegexPatternSetReferenceStatementArgs) ToWebAclRegexPatternSetReferenceStatementPtrOutputWithContext added in v0.72.0

func (i WebAclRegexPatternSetReferenceStatementArgs) ToWebAclRegexPatternSetReferenceStatementPtrOutputWithContext(ctx context.Context) WebAclRegexPatternSetReferenceStatementPtrOutput

type WebAclRegexPatternSetReferenceStatementInput added in v0.72.0

type WebAclRegexPatternSetReferenceStatementInput interface {
	pulumi.Input

	ToWebAclRegexPatternSetReferenceStatementOutput() WebAclRegexPatternSetReferenceStatementOutput
	ToWebAclRegexPatternSetReferenceStatementOutputWithContext(context.Context) WebAclRegexPatternSetReferenceStatementOutput
}

WebAclRegexPatternSetReferenceStatementInput is an input type that accepts WebAclRegexPatternSetReferenceStatementArgs and WebAclRegexPatternSetReferenceStatementOutput values. You can construct a concrete instance of `WebAclRegexPatternSetReferenceStatementInput` via:

WebAclRegexPatternSetReferenceStatementArgs{...}

type WebAclRegexPatternSetReferenceStatementOutput added in v0.72.0

type WebAclRegexPatternSetReferenceStatementOutput struct{ *pulumi.OutputState }

func (WebAclRegexPatternSetReferenceStatementOutput) Arn added in v0.72.0

The Amazon Resource Name (ARN) of the `RegexPatternSet` that this statement references.

func (WebAclRegexPatternSetReferenceStatementOutput) ElementType added in v0.72.0

func (WebAclRegexPatternSetReferenceStatementOutput) FieldToMatch added in v0.72.0

The part of the web request that you want AWS WAF to inspect.

func (WebAclRegexPatternSetReferenceStatementOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (WebAclRegexPatternSetReferenceStatementOutput) ToWebAclRegexPatternSetReferenceStatementOutput added in v0.72.0

func (o WebAclRegexPatternSetReferenceStatementOutput) ToWebAclRegexPatternSetReferenceStatementOutput() WebAclRegexPatternSetReferenceStatementOutput

func (WebAclRegexPatternSetReferenceStatementOutput) ToWebAclRegexPatternSetReferenceStatementOutputWithContext added in v0.72.0

func (o WebAclRegexPatternSetReferenceStatementOutput) ToWebAclRegexPatternSetReferenceStatementOutputWithContext(ctx context.Context) WebAclRegexPatternSetReferenceStatementOutput

func (WebAclRegexPatternSetReferenceStatementOutput) ToWebAclRegexPatternSetReferenceStatementPtrOutput added in v0.72.0

func (o WebAclRegexPatternSetReferenceStatementOutput) ToWebAclRegexPatternSetReferenceStatementPtrOutput() WebAclRegexPatternSetReferenceStatementPtrOutput

func (WebAclRegexPatternSetReferenceStatementOutput) ToWebAclRegexPatternSetReferenceStatementPtrOutputWithContext added in v0.72.0

func (o WebAclRegexPatternSetReferenceStatementOutput) ToWebAclRegexPatternSetReferenceStatementPtrOutputWithContext(ctx context.Context) WebAclRegexPatternSetReferenceStatementPtrOutput

type WebAclRegexPatternSetReferenceStatementPtrInput added in v0.72.0

type WebAclRegexPatternSetReferenceStatementPtrInput interface {
	pulumi.Input

	ToWebAclRegexPatternSetReferenceStatementPtrOutput() WebAclRegexPatternSetReferenceStatementPtrOutput
	ToWebAclRegexPatternSetReferenceStatementPtrOutputWithContext(context.Context) WebAclRegexPatternSetReferenceStatementPtrOutput
}

WebAclRegexPatternSetReferenceStatementPtrInput is an input type that accepts WebAclRegexPatternSetReferenceStatementArgs, WebAclRegexPatternSetReferenceStatementPtr and WebAclRegexPatternSetReferenceStatementPtrOutput values. You can construct a concrete instance of `WebAclRegexPatternSetReferenceStatementPtrInput` via:

        WebAclRegexPatternSetReferenceStatementArgs{...}

or:

        nil

type WebAclRegexPatternSetReferenceStatementPtrOutput added in v0.72.0

type WebAclRegexPatternSetReferenceStatementPtrOutput struct{ *pulumi.OutputState }

func (WebAclRegexPatternSetReferenceStatementPtrOutput) Arn added in v0.72.0

The Amazon Resource Name (ARN) of the `RegexPatternSet` that this statement references.

func (WebAclRegexPatternSetReferenceStatementPtrOutput) Elem added in v0.72.0

func (WebAclRegexPatternSetReferenceStatementPtrOutput) ElementType added in v0.72.0

func (WebAclRegexPatternSetReferenceStatementPtrOutput) FieldToMatch added in v0.72.0

The part of the web request that you want AWS WAF to inspect.

func (WebAclRegexPatternSetReferenceStatementPtrOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (WebAclRegexPatternSetReferenceStatementPtrOutput) ToWebAclRegexPatternSetReferenceStatementPtrOutput added in v0.72.0

func (o WebAclRegexPatternSetReferenceStatementPtrOutput) ToWebAclRegexPatternSetReferenceStatementPtrOutput() WebAclRegexPatternSetReferenceStatementPtrOutput

func (WebAclRegexPatternSetReferenceStatementPtrOutput) ToWebAclRegexPatternSetReferenceStatementPtrOutputWithContext added in v0.72.0

func (o WebAclRegexPatternSetReferenceStatementPtrOutput) ToWebAclRegexPatternSetReferenceStatementPtrOutputWithContext(ctx context.Context) WebAclRegexPatternSetReferenceStatementPtrOutput

type WebAclRequestBodyAssociatedResourceTypeConfig added in v0.98.0

type WebAclRequestBodyAssociatedResourceTypeConfig struct {
	// Specifies the maximum size of the web request body component that an associated CloudFront, API Gateway, Amazon Cognito, App Runner, or Verified Access resource should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body.
	//
	// Default: `16 KB (16,384 bytes)`
	DefaultSizeInspectionLimit WebAclSizeInspectionLimit `pulumi:"defaultSizeInspectionLimit"`
}

Configures the inspection size in the request body.

type WebAclRequestBodyAssociatedResourceTypeConfigArgs added in v0.98.0

type WebAclRequestBodyAssociatedResourceTypeConfigArgs struct {
	// Specifies the maximum size of the web request body component that an associated CloudFront, API Gateway, Amazon Cognito, App Runner, or Verified Access resource should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body.
	//
	// Default: `16 KB (16,384 bytes)`
	DefaultSizeInspectionLimit WebAclSizeInspectionLimitInput `pulumi:"defaultSizeInspectionLimit"`
}

Configures the inspection size in the request body.

func (WebAclRequestBodyAssociatedResourceTypeConfigArgs) ElementType added in v0.98.0

func (WebAclRequestBodyAssociatedResourceTypeConfigArgs) ToWebAclRequestBodyAssociatedResourceTypeConfigOutput added in v0.98.0

func (i WebAclRequestBodyAssociatedResourceTypeConfigArgs) ToWebAclRequestBodyAssociatedResourceTypeConfigOutput() WebAclRequestBodyAssociatedResourceTypeConfigOutput

func (WebAclRequestBodyAssociatedResourceTypeConfigArgs) ToWebAclRequestBodyAssociatedResourceTypeConfigOutputWithContext added in v0.98.0

func (i WebAclRequestBodyAssociatedResourceTypeConfigArgs) ToWebAclRequestBodyAssociatedResourceTypeConfigOutputWithContext(ctx context.Context) WebAclRequestBodyAssociatedResourceTypeConfigOutput

type WebAclRequestBodyAssociatedResourceTypeConfigInput added in v0.98.0

type WebAclRequestBodyAssociatedResourceTypeConfigInput interface {
	pulumi.Input

	ToWebAclRequestBodyAssociatedResourceTypeConfigOutput() WebAclRequestBodyAssociatedResourceTypeConfigOutput
	ToWebAclRequestBodyAssociatedResourceTypeConfigOutputWithContext(context.Context) WebAclRequestBodyAssociatedResourceTypeConfigOutput
}

WebAclRequestBodyAssociatedResourceTypeConfigInput is an input type that accepts WebAclRequestBodyAssociatedResourceTypeConfigArgs and WebAclRequestBodyAssociatedResourceTypeConfigOutput values. You can construct a concrete instance of `WebAclRequestBodyAssociatedResourceTypeConfigInput` via:

WebAclRequestBodyAssociatedResourceTypeConfigArgs{...}

type WebAclRequestBodyAssociatedResourceTypeConfigMap added in v0.98.0

type WebAclRequestBodyAssociatedResourceTypeConfigMap map[string]WebAclRequestBodyAssociatedResourceTypeConfigInput

func (WebAclRequestBodyAssociatedResourceTypeConfigMap) ElementType added in v0.98.0

func (WebAclRequestBodyAssociatedResourceTypeConfigMap) ToWebAclRequestBodyAssociatedResourceTypeConfigMapOutput added in v0.98.0

func (i WebAclRequestBodyAssociatedResourceTypeConfigMap) ToWebAclRequestBodyAssociatedResourceTypeConfigMapOutput() WebAclRequestBodyAssociatedResourceTypeConfigMapOutput

func (WebAclRequestBodyAssociatedResourceTypeConfigMap) ToWebAclRequestBodyAssociatedResourceTypeConfigMapOutputWithContext added in v0.98.0

func (i WebAclRequestBodyAssociatedResourceTypeConfigMap) ToWebAclRequestBodyAssociatedResourceTypeConfigMapOutputWithContext(ctx context.Context) WebAclRequestBodyAssociatedResourceTypeConfigMapOutput

type WebAclRequestBodyAssociatedResourceTypeConfigMapInput added in v0.98.0

type WebAclRequestBodyAssociatedResourceTypeConfigMapInput interface {
	pulumi.Input

	ToWebAclRequestBodyAssociatedResourceTypeConfigMapOutput() WebAclRequestBodyAssociatedResourceTypeConfigMapOutput
	ToWebAclRequestBodyAssociatedResourceTypeConfigMapOutputWithContext(context.Context) WebAclRequestBodyAssociatedResourceTypeConfigMapOutput
}

WebAclRequestBodyAssociatedResourceTypeConfigMapInput is an input type that accepts WebAclRequestBodyAssociatedResourceTypeConfigMap and WebAclRequestBodyAssociatedResourceTypeConfigMapOutput values. You can construct a concrete instance of `WebAclRequestBodyAssociatedResourceTypeConfigMapInput` via:

WebAclRequestBodyAssociatedResourceTypeConfigMap{ "key": WebAclRequestBodyAssociatedResourceTypeConfigArgs{...} }

type WebAclRequestBodyAssociatedResourceTypeConfigMapOutput added in v0.98.0

type WebAclRequestBodyAssociatedResourceTypeConfigMapOutput struct{ *pulumi.OutputState }

func (WebAclRequestBodyAssociatedResourceTypeConfigMapOutput) ElementType added in v0.98.0

func (WebAclRequestBodyAssociatedResourceTypeConfigMapOutput) MapIndex added in v0.98.0

func (WebAclRequestBodyAssociatedResourceTypeConfigMapOutput) ToWebAclRequestBodyAssociatedResourceTypeConfigMapOutput added in v0.98.0

func (WebAclRequestBodyAssociatedResourceTypeConfigMapOutput) ToWebAclRequestBodyAssociatedResourceTypeConfigMapOutputWithContext added in v0.98.0

func (o WebAclRequestBodyAssociatedResourceTypeConfigMapOutput) ToWebAclRequestBodyAssociatedResourceTypeConfigMapOutputWithContext(ctx context.Context) WebAclRequestBodyAssociatedResourceTypeConfigMapOutput

type WebAclRequestBodyAssociatedResourceTypeConfigOutput added in v0.98.0

type WebAclRequestBodyAssociatedResourceTypeConfigOutput struct{ *pulumi.OutputState }

Configures the inspection size in the request body.

func (WebAclRequestBodyAssociatedResourceTypeConfigOutput) DefaultSizeInspectionLimit added in v0.98.0

Specifies the maximum size of the web request body component that an associated CloudFront, API Gateway, Amazon Cognito, App Runner, or Verified Access resource should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body.

Default: `16 KB (16,384 bytes)`

func (WebAclRequestBodyAssociatedResourceTypeConfigOutput) ElementType added in v0.98.0

func (WebAclRequestBodyAssociatedResourceTypeConfigOutput) ToWebAclRequestBodyAssociatedResourceTypeConfigOutput added in v0.98.0

func (o WebAclRequestBodyAssociatedResourceTypeConfigOutput) ToWebAclRequestBodyAssociatedResourceTypeConfigOutput() WebAclRequestBodyAssociatedResourceTypeConfigOutput

func (WebAclRequestBodyAssociatedResourceTypeConfigOutput) ToWebAclRequestBodyAssociatedResourceTypeConfigOutputWithContext added in v0.98.0

func (o WebAclRequestBodyAssociatedResourceTypeConfigOutput) ToWebAclRequestBodyAssociatedResourceTypeConfigOutputWithContext(ctx context.Context) WebAclRequestBodyAssociatedResourceTypeConfigOutput

type WebAclRequestInspection added in v0.72.0

type WebAclRequestInspection struct {
	// The name of the field in the request payload that contains your customer's password.
	//
	// How you specify this depends on the request inspection payload type.
	//
	// - For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// For example, for the JSON payload `{ "form": { "password": "THE_PASSWORD" } }` , the password field specification is `/form/password` .
	// - For form encoded payload types, use the HTML form names.
	//
	// For example, for an HTML form with the input element named `password1` , the password field specification is `password1` .
	PasswordField WebAclFieldIdentifier `pulumi:"passwordField"`
	// The payload type for your login endpoint, either JSON or form encoded.
	PayloadType WebAclRequestInspectionPayloadType `pulumi:"payloadType"`
	// The name of the field in the request payload that contains your customer's username.
	//
	// How you specify this depends on the request inspection payload type.
	//
	// - For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// For example, for the JSON payload `{ "form": { "username": "THE_USERNAME" } }` , the username field specification is `/form/username` .
	// - For form encoded payload types, use the HTML form names.
	//
	// For example, for an HTML form with the input element named `username1` , the username field specification is `username1`
	UsernameField WebAclFieldIdentifier `pulumi:"usernameField"`
}

Configures the inspection of login requests

type WebAclRequestInspectionAcfp added in v0.72.0

type WebAclRequestInspectionAcfp struct {
	// The names of the fields in the request payload that contain your customer's primary physical address.
	//
	// Order the address fields in the array exactly as they are ordered in the request payload.
	//
	// How you specify the address fields depends on the request inspection payload type.
	//
	// - For JSON payloads, specify the field identifiers in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// For example, for the JSON payload `{ "form": { "primaryaddressline1": "THE_ADDRESS1", "primaryaddressline2": "THE_ADDRESS2", "primaryaddressline3": "THE_ADDRESS3" } }` , the address field idenfiers are `/form/primaryaddressline1` , `/form/primaryaddressline2` , and `/form/primaryaddressline3` .
	// - For form encoded payload types, use the HTML form names.
	//
	// For example, for an HTML form with input elements named `primaryaddressline1` , `primaryaddressline2` , and `primaryaddressline3` , the address fields identifiers are `primaryaddressline1` , `primaryaddressline2` , and `primaryaddressline3` .
	AddressFields []WebAclFieldIdentifier `pulumi:"addressFields"`
	// The name of the field in the request payload that contains your customer's email.
	//
	// How you specify this depends on the request inspection payload type.
	//
	// - For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// For example, for the JSON payload `{ "form": { "email": "THE_EMAIL" } }` , the email field specification is `/form/email` .
	// - For form encoded payload types, use the HTML form names.
	//
	// For example, for an HTML form with the input element named `email1` , the email field specification is `email1` .
	EmailField *WebAclFieldIdentifier `pulumi:"emailField"`
	// The name of the field in the request payload that contains your customer's password.
	//
	// How you specify this depends on the request inspection payload type.
	//
	// - For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// For example, for the JSON payload `{ "form": { "password": "THE_PASSWORD" } }` , the password field specification is `/form/password` .
	// - For form encoded payload types, use the HTML form names.
	//
	// For example, for an HTML form with the input element named `password1` , the password field specification is `password1` .
	PasswordField *WebAclFieldIdentifier `pulumi:"passwordField"`
	// The payload type for your account creation endpoint, either JSON or form encoded.
	PayloadType WebAclRequestInspectionAcfpPayloadType `pulumi:"payloadType"`
	// The names of the fields in the request payload that contain your customer's primary phone number.
	//
	// Order the phone number fields in the array exactly as they are ordered in the request payload.
	//
	// How you specify the phone number fields depends on the request inspection payload type.
	//
	// - For JSON payloads, specify the field identifiers in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// For example, for the JSON payload `{ "form": { "primaryphoneline1": "THE_PHONE1", "primaryphoneline2": "THE_PHONE2", "primaryphoneline3": "THE_PHONE3" } }` , the phone number field identifiers are `/form/primaryphoneline1` , `/form/primaryphoneline2` , and `/form/primaryphoneline3` .
	// - For form encoded payload types, use the HTML form names.
	//
	// For example, for an HTML form with input elements named `primaryphoneline1` , `primaryphoneline2` , and `primaryphoneline3` , the phone number field identifiers are `primaryphoneline1` , `primaryphoneline2` , and `primaryphoneline3` .
	PhoneNumberFields []WebAclFieldIdentifier `pulumi:"phoneNumberFields"`
	// The name of the field in the request payload that contains your customer's username.
	//
	// How you specify this depends on the request inspection payload type.
	//
	// - For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// For example, for the JSON payload `{ "form": { "username": "THE_USERNAME" } }` , the username field specification is `/form/username` .
	// - For form encoded payload types, use the HTML form names.
	//
	// For example, for an HTML form with the input element named `username1` , the username field specification is `username1`
	UsernameField *WebAclFieldIdentifier `pulumi:"usernameField"`
}

Configures the inspection of sign-up requests

type WebAclRequestInspectionAcfpArgs added in v0.72.0

type WebAclRequestInspectionAcfpArgs struct {
	// The names of the fields in the request payload that contain your customer's primary physical address.
	//
	// Order the address fields in the array exactly as they are ordered in the request payload.
	//
	// How you specify the address fields depends on the request inspection payload type.
	//
	// - For JSON payloads, specify the field identifiers in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// For example, for the JSON payload `{ "form": { "primaryaddressline1": "THE_ADDRESS1", "primaryaddressline2": "THE_ADDRESS2", "primaryaddressline3": "THE_ADDRESS3" } }` , the address field idenfiers are `/form/primaryaddressline1` , `/form/primaryaddressline2` , and `/form/primaryaddressline3` .
	// - For form encoded payload types, use the HTML form names.
	//
	// For example, for an HTML form with input elements named `primaryaddressline1` , `primaryaddressline2` , and `primaryaddressline3` , the address fields identifiers are `primaryaddressline1` , `primaryaddressline2` , and `primaryaddressline3` .
	AddressFields WebAclFieldIdentifierArrayInput `pulumi:"addressFields"`
	// The name of the field in the request payload that contains your customer's email.
	//
	// How you specify this depends on the request inspection payload type.
	//
	// - For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// For example, for the JSON payload `{ "form": { "email": "THE_EMAIL" } }` , the email field specification is `/form/email` .
	// - For form encoded payload types, use the HTML form names.
	//
	// For example, for an HTML form with the input element named `email1` , the email field specification is `email1` .
	EmailField WebAclFieldIdentifierPtrInput `pulumi:"emailField"`
	// The name of the field in the request payload that contains your customer's password.
	//
	// How you specify this depends on the request inspection payload type.
	//
	// - For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// For example, for the JSON payload `{ "form": { "password": "THE_PASSWORD" } }` , the password field specification is `/form/password` .
	// - For form encoded payload types, use the HTML form names.
	//
	// For example, for an HTML form with the input element named `password1` , the password field specification is `password1` .
	PasswordField WebAclFieldIdentifierPtrInput `pulumi:"passwordField"`
	// The payload type for your account creation endpoint, either JSON or form encoded.
	PayloadType WebAclRequestInspectionAcfpPayloadTypeInput `pulumi:"payloadType"`
	// The names of the fields in the request payload that contain your customer's primary phone number.
	//
	// Order the phone number fields in the array exactly as they are ordered in the request payload.
	//
	// How you specify the phone number fields depends on the request inspection payload type.
	//
	// - For JSON payloads, specify the field identifiers in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// For example, for the JSON payload `{ "form": { "primaryphoneline1": "THE_PHONE1", "primaryphoneline2": "THE_PHONE2", "primaryphoneline3": "THE_PHONE3" } }` , the phone number field identifiers are `/form/primaryphoneline1` , `/form/primaryphoneline2` , and `/form/primaryphoneline3` .
	// - For form encoded payload types, use the HTML form names.
	//
	// For example, for an HTML form with input elements named `primaryphoneline1` , `primaryphoneline2` , and `primaryphoneline3` , the phone number field identifiers are `primaryphoneline1` , `primaryphoneline2` , and `primaryphoneline3` .
	PhoneNumberFields WebAclFieldIdentifierArrayInput `pulumi:"phoneNumberFields"`
	// The name of the field in the request payload that contains your customer's username.
	//
	// How you specify this depends on the request inspection payload type.
	//
	// - For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// For example, for the JSON payload `{ "form": { "username": "THE_USERNAME" } }` , the username field specification is `/form/username` .
	// - For form encoded payload types, use the HTML form names.
	//
	// For example, for an HTML form with the input element named `username1` , the username field specification is `username1`
	UsernameField WebAclFieldIdentifierPtrInput `pulumi:"usernameField"`
}

Configures the inspection of sign-up requests

func (WebAclRequestInspectionAcfpArgs) ElementType added in v0.72.0

func (WebAclRequestInspectionAcfpArgs) ToWebAclRequestInspectionAcfpOutput added in v0.72.0

func (i WebAclRequestInspectionAcfpArgs) ToWebAclRequestInspectionAcfpOutput() WebAclRequestInspectionAcfpOutput

func (WebAclRequestInspectionAcfpArgs) ToWebAclRequestInspectionAcfpOutputWithContext added in v0.72.0

func (i WebAclRequestInspectionAcfpArgs) ToWebAclRequestInspectionAcfpOutputWithContext(ctx context.Context) WebAclRequestInspectionAcfpOutput

func (WebAclRequestInspectionAcfpArgs) ToWebAclRequestInspectionAcfpPtrOutput added in v0.72.0

func (i WebAclRequestInspectionAcfpArgs) ToWebAclRequestInspectionAcfpPtrOutput() WebAclRequestInspectionAcfpPtrOutput

func (WebAclRequestInspectionAcfpArgs) ToWebAclRequestInspectionAcfpPtrOutputWithContext added in v0.72.0

func (i WebAclRequestInspectionAcfpArgs) ToWebAclRequestInspectionAcfpPtrOutputWithContext(ctx context.Context) WebAclRequestInspectionAcfpPtrOutput

type WebAclRequestInspectionAcfpInput added in v0.72.0

type WebAclRequestInspectionAcfpInput interface {
	pulumi.Input

	ToWebAclRequestInspectionAcfpOutput() WebAclRequestInspectionAcfpOutput
	ToWebAclRequestInspectionAcfpOutputWithContext(context.Context) WebAclRequestInspectionAcfpOutput
}

WebAclRequestInspectionAcfpInput is an input type that accepts WebAclRequestInspectionAcfpArgs and WebAclRequestInspectionAcfpOutput values. You can construct a concrete instance of `WebAclRequestInspectionAcfpInput` via:

WebAclRequestInspectionAcfpArgs{...}

type WebAclRequestInspectionAcfpOutput added in v0.72.0

type WebAclRequestInspectionAcfpOutput struct{ *pulumi.OutputState }

Configures the inspection of sign-up requests

func (WebAclRequestInspectionAcfpOutput) AddressFields added in v0.72.0

The names of the fields in the request payload that contain your customer's primary physical address.

Order the address fields in the array exactly as they are ordered in the request payload.

How you specify the address fields depends on the request inspection payload type.

- For JSON payloads, specify the field identifiers in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

For example, for the JSON payload `{ "form": { "primaryaddressline1": "THE_ADDRESS1", "primaryaddressline2": "THE_ADDRESS2", "primaryaddressline3": "THE_ADDRESS3" } }` , the address field idenfiers are `/form/primaryaddressline1` , `/form/primaryaddressline2` , and `/form/primaryaddressline3` . - For form encoded payload types, use the HTML form names.

For example, for an HTML form with input elements named `primaryaddressline1` , `primaryaddressline2` , and `primaryaddressline3` , the address fields identifiers are `primaryaddressline1` , `primaryaddressline2` , and `primaryaddressline3` .

func (WebAclRequestInspectionAcfpOutput) ElementType added in v0.72.0

func (WebAclRequestInspectionAcfpOutput) EmailField added in v0.72.0

The name of the field in the request payload that contains your customer's email.

How you specify this depends on the request inspection payload type.

- For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

For example, for the JSON payload `{ "form": { "email": "THE_EMAIL" } }` , the email field specification is `/form/email` . - For form encoded payload types, use the HTML form names.

For example, for an HTML form with the input element named `email1` , the email field specification is `email1` .

func (WebAclRequestInspectionAcfpOutput) PasswordField added in v0.72.0

The name of the field in the request payload that contains your customer's password.

How you specify this depends on the request inspection payload type.

- For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

For example, for the JSON payload `{ "form": { "password": "THE_PASSWORD" } }` , the password field specification is `/form/password` . - For form encoded payload types, use the HTML form names.

For example, for an HTML form with the input element named `password1` , the password field specification is `password1` .

func (WebAclRequestInspectionAcfpOutput) PayloadType added in v0.72.0

The payload type for your account creation endpoint, either JSON or form encoded.

func (WebAclRequestInspectionAcfpOutput) PhoneNumberFields added in v0.72.0

The names of the fields in the request payload that contain your customer's primary phone number.

Order the phone number fields in the array exactly as they are ordered in the request payload.

How you specify the phone number fields depends on the request inspection payload type.

- For JSON payloads, specify the field identifiers in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

For example, for the JSON payload `{ "form": { "primaryphoneline1": "THE_PHONE1", "primaryphoneline2": "THE_PHONE2", "primaryphoneline3": "THE_PHONE3" } }` , the phone number field identifiers are `/form/primaryphoneline1` , `/form/primaryphoneline2` , and `/form/primaryphoneline3` . - For form encoded payload types, use the HTML form names.

For example, for an HTML form with input elements named `primaryphoneline1` , `primaryphoneline2` , and `primaryphoneline3` , the phone number field identifiers are `primaryphoneline1` , `primaryphoneline2` , and `primaryphoneline3` .

func (WebAclRequestInspectionAcfpOutput) ToWebAclRequestInspectionAcfpOutput added in v0.72.0

func (o WebAclRequestInspectionAcfpOutput) ToWebAclRequestInspectionAcfpOutput() WebAclRequestInspectionAcfpOutput

func (WebAclRequestInspectionAcfpOutput) ToWebAclRequestInspectionAcfpOutputWithContext added in v0.72.0

func (o WebAclRequestInspectionAcfpOutput) ToWebAclRequestInspectionAcfpOutputWithContext(ctx context.Context) WebAclRequestInspectionAcfpOutput

func (WebAclRequestInspectionAcfpOutput) ToWebAclRequestInspectionAcfpPtrOutput added in v0.72.0

func (o WebAclRequestInspectionAcfpOutput) ToWebAclRequestInspectionAcfpPtrOutput() WebAclRequestInspectionAcfpPtrOutput

func (WebAclRequestInspectionAcfpOutput) ToWebAclRequestInspectionAcfpPtrOutputWithContext added in v0.72.0

func (o WebAclRequestInspectionAcfpOutput) ToWebAclRequestInspectionAcfpPtrOutputWithContext(ctx context.Context) WebAclRequestInspectionAcfpPtrOutput

func (WebAclRequestInspectionAcfpOutput) UsernameField added in v0.72.0

The name of the field in the request payload that contains your customer's username.

How you specify this depends on the request inspection payload type.

- For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

For example, for the JSON payload `{ "form": { "username": "THE_USERNAME" } }` , the username field specification is `/form/username` . - For form encoded payload types, use the HTML form names.

For example, for an HTML form with the input element named `username1` , the username field specification is `username1`

type WebAclRequestInspectionAcfpPayloadType added in v0.72.0

type WebAclRequestInspectionAcfpPayloadType string

The payload type for your account creation endpoint, either JSON or form encoded.

func (WebAclRequestInspectionAcfpPayloadType) ElementType added in v0.72.0

func (WebAclRequestInspectionAcfpPayloadType) ToStringOutput added in v0.72.0

func (WebAclRequestInspectionAcfpPayloadType) ToStringOutputWithContext added in v0.72.0

func (WebAclRequestInspectionAcfpPayloadType) ToStringPtrOutput added in v0.72.0

func (WebAclRequestInspectionAcfpPayloadType) ToStringPtrOutputWithContext added in v0.72.0

func (e WebAclRequestInspectionAcfpPayloadType) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclRequestInspectionAcfpPayloadType) ToWebAclRequestInspectionAcfpPayloadTypeOutput added in v0.72.0

func (e WebAclRequestInspectionAcfpPayloadType) ToWebAclRequestInspectionAcfpPayloadTypeOutput() WebAclRequestInspectionAcfpPayloadTypeOutput

func (WebAclRequestInspectionAcfpPayloadType) ToWebAclRequestInspectionAcfpPayloadTypeOutputWithContext added in v0.72.0

func (e WebAclRequestInspectionAcfpPayloadType) ToWebAclRequestInspectionAcfpPayloadTypeOutputWithContext(ctx context.Context) WebAclRequestInspectionAcfpPayloadTypeOutput

func (WebAclRequestInspectionAcfpPayloadType) ToWebAclRequestInspectionAcfpPayloadTypePtrOutput added in v0.72.0

func (e WebAclRequestInspectionAcfpPayloadType) ToWebAclRequestInspectionAcfpPayloadTypePtrOutput() WebAclRequestInspectionAcfpPayloadTypePtrOutput

func (WebAclRequestInspectionAcfpPayloadType) ToWebAclRequestInspectionAcfpPayloadTypePtrOutputWithContext added in v0.72.0

func (e WebAclRequestInspectionAcfpPayloadType) ToWebAclRequestInspectionAcfpPayloadTypePtrOutputWithContext(ctx context.Context) WebAclRequestInspectionAcfpPayloadTypePtrOutput

type WebAclRequestInspectionAcfpPayloadTypeInput added in v0.72.0

type WebAclRequestInspectionAcfpPayloadTypeInput interface {
	pulumi.Input

	ToWebAclRequestInspectionAcfpPayloadTypeOutput() WebAclRequestInspectionAcfpPayloadTypeOutput
	ToWebAclRequestInspectionAcfpPayloadTypeOutputWithContext(context.Context) WebAclRequestInspectionAcfpPayloadTypeOutput
}

WebAclRequestInspectionAcfpPayloadTypeInput is an input type that accepts values of the WebAclRequestInspectionAcfpPayloadType enum A concrete instance of `WebAclRequestInspectionAcfpPayloadTypeInput` can be one of the following:

WebAclRequestInspectionAcfpPayloadTypeJson
WebAclRequestInspectionAcfpPayloadTypeFormEncoded

type WebAclRequestInspectionAcfpPayloadTypeOutput added in v0.72.0

type WebAclRequestInspectionAcfpPayloadTypeOutput struct{ *pulumi.OutputState }

func (WebAclRequestInspectionAcfpPayloadTypeOutput) ElementType added in v0.72.0

func (WebAclRequestInspectionAcfpPayloadTypeOutput) ToStringOutput added in v0.72.0

func (WebAclRequestInspectionAcfpPayloadTypeOutput) ToStringOutputWithContext added in v0.72.0

func (WebAclRequestInspectionAcfpPayloadTypeOutput) ToStringPtrOutput added in v0.72.0

func (WebAclRequestInspectionAcfpPayloadTypeOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclRequestInspectionAcfpPayloadTypeOutput) ToWebAclRequestInspectionAcfpPayloadTypeOutput added in v0.72.0

func (o WebAclRequestInspectionAcfpPayloadTypeOutput) ToWebAclRequestInspectionAcfpPayloadTypeOutput() WebAclRequestInspectionAcfpPayloadTypeOutput

func (WebAclRequestInspectionAcfpPayloadTypeOutput) ToWebAclRequestInspectionAcfpPayloadTypeOutputWithContext added in v0.72.0

func (o WebAclRequestInspectionAcfpPayloadTypeOutput) ToWebAclRequestInspectionAcfpPayloadTypeOutputWithContext(ctx context.Context) WebAclRequestInspectionAcfpPayloadTypeOutput

func (WebAclRequestInspectionAcfpPayloadTypeOutput) ToWebAclRequestInspectionAcfpPayloadTypePtrOutput added in v0.72.0

func (o WebAclRequestInspectionAcfpPayloadTypeOutput) ToWebAclRequestInspectionAcfpPayloadTypePtrOutput() WebAclRequestInspectionAcfpPayloadTypePtrOutput

func (WebAclRequestInspectionAcfpPayloadTypeOutput) ToWebAclRequestInspectionAcfpPayloadTypePtrOutputWithContext added in v0.72.0

func (o WebAclRequestInspectionAcfpPayloadTypeOutput) ToWebAclRequestInspectionAcfpPayloadTypePtrOutputWithContext(ctx context.Context) WebAclRequestInspectionAcfpPayloadTypePtrOutput

type WebAclRequestInspectionAcfpPayloadTypePtrInput added in v0.72.0

type WebAclRequestInspectionAcfpPayloadTypePtrInput interface {
	pulumi.Input

	ToWebAclRequestInspectionAcfpPayloadTypePtrOutput() WebAclRequestInspectionAcfpPayloadTypePtrOutput
	ToWebAclRequestInspectionAcfpPayloadTypePtrOutputWithContext(context.Context) WebAclRequestInspectionAcfpPayloadTypePtrOutput
}

func WebAclRequestInspectionAcfpPayloadTypePtr added in v0.72.0

func WebAclRequestInspectionAcfpPayloadTypePtr(v string) WebAclRequestInspectionAcfpPayloadTypePtrInput

type WebAclRequestInspectionAcfpPayloadTypePtrOutput added in v0.72.0

type WebAclRequestInspectionAcfpPayloadTypePtrOutput struct{ *pulumi.OutputState }

func (WebAclRequestInspectionAcfpPayloadTypePtrOutput) Elem added in v0.72.0

func (WebAclRequestInspectionAcfpPayloadTypePtrOutput) ElementType added in v0.72.0

func (WebAclRequestInspectionAcfpPayloadTypePtrOutput) ToStringPtrOutput added in v0.72.0

func (WebAclRequestInspectionAcfpPayloadTypePtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclRequestInspectionAcfpPayloadTypePtrOutput) ToWebAclRequestInspectionAcfpPayloadTypePtrOutput added in v0.72.0

func (o WebAclRequestInspectionAcfpPayloadTypePtrOutput) ToWebAclRequestInspectionAcfpPayloadTypePtrOutput() WebAclRequestInspectionAcfpPayloadTypePtrOutput

func (WebAclRequestInspectionAcfpPayloadTypePtrOutput) ToWebAclRequestInspectionAcfpPayloadTypePtrOutputWithContext added in v0.72.0

func (o WebAclRequestInspectionAcfpPayloadTypePtrOutput) ToWebAclRequestInspectionAcfpPayloadTypePtrOutputWithContext(ctx context.Context) WebAclRequestInspectionAcfpPayloadTypePtrOutput

type WebAclRequestInspectionAcfpPtrInput added in v0.72.0

type WebAclRequestInspectionAcfpPtrInput interface {
	pulumi.Input

	ToWebAclRequestInspectionAcfpPtrOutput() WebAclRequestInspectionAcfpPtrOutput
	ToWebAclRequestInspectionAcfpPtrOutputWithContext(context.Context) WebAclRequestInspectionAcfpPtrOutput
}

WebAclRequestInspectionAcfpPtrInput is an input type that accepts WebAclRequestInspectionAcfpArgs, WebAclRequestInspectionAcfpPtr and WebAclRequestInspectionAcfpPtrOutput values. You can construct a concrete instance of `WebAclRequestInspectionAcfpPtrInput` via:

        WebAclRequestInspectionAcfpArgs{...}

or:

        nil

func WebAclRequestInspectionAcfpPtr added in v0.72.0

type WebAclRequestInspectionAcfpPtrOutput added in v0.72.0

type WebAclRequestInspectionAcfpPtrOutput struct{ *pulumi.OutputState }

func (WebAclRequestInspectionAcfpPtrOutput) AddressFields added in v0.72.0

The names of the fields in the request payload that contain your customer's primary physical address.

Order the address fields in the array exactly as they are ordered in the request payload.

How you specify the address fields depends on the request inspection payload type.

- For JSON payloads, specify the field identifiers in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

For example, for the JSON payload `{ "form": { "primaryaddressline1": "THE_ADDRESS1", "primaryaddressline2": "THE_ADDRESS2", "primaryaddressline3": "THE_ADDRESS3" } }` , the address field idenfiers are `/form/primaryaddressline1` , `/form/primaryaddressline2` , and `/form/primaryaddressline3` . - For form encoded payload types, use the HTML form names.

For example, for an HTML form with input elements named `primaryaddressline1` , `primaryaddressline2` , and `primaryaddressline3` , the address fields identifiers are `primaryaddressline1` , `primaryaddressline2` , and `primaryaddressline3` .

func (WebAclRequestInspectionAcfpPtrOutput) Elem added in v0.72.0

func (WebAclRequestInspectionAcfpPtrOutput) ElementType added in v0.72.0

func (WebAclRequestInspectionAcfpPtrOutput) EmailField added in v0.72.0

The name of the field in the request payload that contains your customer's email.

How you specify this depends on the request inspection payload type.

- For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

For example, for the JSON payload `{ "form": { "email": "THE_EMAIL" } }` , the email field specification is `/form/email` . - For form encoded payload types, use the HTML form names.

For example, for an HTML form with the input element named `email1` , the email field specification is `email1` .

func (WebAclRequestInspectionAcfpPtrOutput) PasswordField added in v0.72.0

The name of the field in the request payload that contains your customer's password.

How you specify this depends on the request inspection payload type.

- For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

For example, for the JSON payload `{ "form": { "password": "THE_PASSWORD" } }` , the password field specification is `/form/password` . - For form encoded payload types, use the HTML form names.

For example, for an HTML form with the input element named `password1` , the password field specification is `password1` .

func (WebAclRequestInspectionAcfpPtrOutput) PayloadType added in v0.72.0

The payload type for your account creation endpoint, either JSON or form encoded.

func (WebAclRequestInspectionAcfpPtrOutput) PhoneNumberFields added in v0.72.0

The names of the fields in the request payload that contain your customer's primary phone number.

Order the phone number fields in the array exactly as they are ordered in the request payload.

How you specify the phone number fields depends on the request inspection payload type.

- For JSON payloads, specify the field identifiers in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

For example, for the JSON payload `{ "form": { "primaryphoneline1": "THE_PHONE1", "primaryphoneline2": "THE_PHONE2", "primaryphoneline3": "THE_PHONE3" } }` , the phone number field identifiers are `/form/primaryphoneline1` , `/form/primaryphoneline2` , and `/form/primaryphoneline3` . - For form encoded payload types, use the HTML form names.

For example, for an HTML form with input elements named `primaryphoneline1` , `primaryphoneline2` , and `primaryphoneline3` , the phone number field identifiers are `primaryphoneline1` , `primaryphoneline2` , and `primaryphoneline3` .

func (WebAclRequestInspectionAcfpPtrOutput) ToWebAclRequestInspectionAcfpPtrOutput added in v0.72.0

func (o WebAclRequestInspectionAcfpPtrOutput) ToWebAclRequestInspectionAcfpPtrOutput() WebAclRequestInspectionAcfpPtrOutput

func (WebAclRequestInspectionAcfpPtrOutput) ToWebAclRequestInspectionAcfpPtrOutputWithContext added in v0.72.0

func (o WebAclRequestInspectionAcfpPtrOutput) ToWebAclRequestInspectionAcfpPtrOutputWithContext(ctx context.Context) WebAclRequestInspectionAcfpPtrOutput

func (WebAclRequestInspectionAcfpPtrOutput) UsernameField added in v0.72.0

The name of the field in the request payload that contains your customer's username.

How you specify this depends on the request inspection payload type.

- For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

For example, for the JSON payload `{ "form": { "username": "THE_USERNAME" } }` , the username field specification is `/form/username` . - For form encoded payload types, use the HTML form names.

For example, for an HTML form with the input element named `username1` , the username field specification is `username1`

type WebAclRequestInspectionArgs added in v0.72.0

type WebAclRequestInspectionArgs struct {
	// The name of the field in the request payload that contains your customer's password.
	//
	// How you specify this depends on the request inspection payload type.
	//
	// - For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// For example, for the JSON payload `{ "form": { "password": "THE_PASSWORD" } }` , the password field specification is `/form/password` .
	// - For form encoded payload types, use the HTML form names.
	//
	// For example, for an HTML form with the input element named `password1` , the password field specification is `password1` .
	PasswordField WebAclFieldIdentifierInput `pulumi:"passwordField"`
	// The payload type for your login endpoint, either JSON or form encoded.
	PayloadType WebAclRequestInspectionPayloadTypeInput `pulumi:"payloadType"`
	// The name of the field in the request payload that contains your customer's username.
	//
	// How you specify this depends on the request inspection payload type.
	//
	// - For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .
	//
	// For example, for the JSON payload `{ "form": { "username": "THE_USERNAME" } }` , the username field specification is `/form/username` .
	// - For form encoded payload types, use the HTML form names.
	//
	// For example, for an HTML form with the input element named `username1` , the username field specification is `username1`
	UsernameField WebAclFieldIdentifierInput `pulumi:"usernameField"`
}

Configures the inspection of login requests

func (WebAclRequestInspectionArgs) ElementType added in v0.72.0

func (WebAclRequestInspectionArgs) ToWebAclRequestInspectionOutput added in v0.72.0

func (i WebAclRequestInspectionArgs) ToWebAclRequestInspectionOutput() WebAclRequestInspectionOutput

func (WebAclRequestInspectionArgs) ToWebAclRequestInspectionOutputWithContext added in v0.72.0

func (i WebAclRequestInspectionArgs) ToWebAclRequestInspectionOutputWithContext(ctx context.Context) WebAclRequestInspectionOutput

func (WebAclRequestInspectionArgs) ToWebAclRequestInspectionPtrOutput added in v0.72.0

func (i WebAclRequestInspectionArgs) ToWebAclRequestInspectionPtrOutput() WebAclRequestInspectionPtrOutput

func (WebAclRequestInspectionArgs) ToWebAclRequestInspectionPtrOutputWithContext added in v0.72.0

func (i WebAclRequestInspectionArgs) ToWebAclRequestInspectionPtrOutputWithContext(ctx context.Context) WebAclRequestInspectionPtrOutput

type WebAclRequestInspectionInput added in v0.72.0

type WebAclRequestInspectionInput interface {
	pulumi.Input

	ToWebAclRequestInspectionOutput() WebAclRequestInspectionOutput
	ToWebAclRequestInspectionOutputWithContext(context.Context) WebAclRequestInspectionOutput
}

WebAclRequestInspectionInput is an input type that accepts WebAclRequestInspectionArgs and WebAclRequestInspectionOutput values. You can construct a concrete instance of `WebAclRequestInspectionInput` via:

WebAclRequestInspectionArgs{...}

type WebAclRequestInspectionOutput added in v0.72.0

type WebAclRequestInspectionOutput struct{ *pulumi.OutputState }

Configures the inspection of login requests

func (WebAclRequestInspectionOutput) ElementType added in v0.72.0

func (WebAclRequestInspectionOutput) PasswordField added in v0.72.0

The name of the field in the request payload that contains your customer's password.

How you specify this depends on the request inspection payload type.

- For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

For example, for the JSON payload `{ "form": { "password": "THE_PASSWORD" } }` , the password field specification is `/form/password` . - For form encoded payload types, use the HTML form names.

For example, for an HTML form with the input element named `password1` , the password field specification is `password1` .

func (WebAclRequestInspectionOutput) PayloadType added in v0.72.0

The payload type for your login endpoint, either JSON or form encoded.

func (WebAclRequestInspectionOutput) ToWebAclRequestInspectionOutput added in v0.72.0

func (o WebAclRequestInspectionOutput) ToWebAclRequestInspectionOutput() WebAclRequestInspectionOutput

func (WebAclRequestInspectionOutput) ToWebAclRequestInspectionOutputWithContext added in v0.72.0

func (o WebAclRequestInspectionOutput) ToWebAclRequestInspectionOutputWithContext(ctx context.Context) WebAclRequestInspectionOutput

func (WebAclRequestInspectionOutput) ToWebAclRequestInspectionPtrOutput added in v0.72.0

func (o WebAclRequestInspectionOutput) ToWebAclRequestInspectionPtrOutput() WebAclRequestInspectionPtrOutput

func (WebAclRequestInspectionOutput) ToWebAclRequestInspectionPtrOutputWithContext added in v0.72.0

func (o WebAclRequestInspectionOutput) ToWebAclRequestInspectionPtrOutputWithContext(ctx context.Context) WebAclRequestInspectionPtrOutput

func (WebAclRequestInspectionOutput) UsernameField added in v0.72.0

The name of the field in the request payload that contains your customer's username.

How you specify this depends on the request inspection payload type.

- For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

For example, for the JSON payload `{ "form": { "username": "THE_USERNAME" } }` , the username field specification is `/form/username` . - For form encoded payload types, use the HTML form names.

For example, for an HTML form with the input element named `username1` , the username field specification is `username1`

type WebAclRequestInspectionPayloadType added in v0.72.0

type WebAclRequestInspectionPayloadType string

The payload type for your login endpoint, either JSON or form encoded.

func (WebAclRequestInspectionPayloadType) ElementType added in v0.72.0

func (WebAclRequestInspectionPayloadType) ToStringOutput added in v0.72.0

func (WebAclRequestInspectionPayloadType) ToStringOutputWithContext added in v0.72.0

func (e WebAclRequestInspectionPayloadType) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclRequestInspectionPayloadType) ToStringPtrOutput added in v0.72.0

func (WebAclRequestInspectionPayloadType) ToStringPtrOutputWithContext added in v0.72.0

func (e WebAclRequestInspectionPayloadType) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclRequestInspectionPayloadType) ToWebAclRequestInspectionPayloadTypeOutput added in v0.72.0

func (e WebAclRequestInspectionPayloadType) ToWebAclRequestInspectionPayloadTypeOutput() WebAclRequestInspectionPayloadTypeOutput

func (WebAclRequestInspectionPayloadType) ToWebAclRequestInspectionPayloadTypeOutputWithContext added in v0.72.0

func (e WebAclRequestInspectionPayloadType) ToWebAclRequestInspectionPayloadTypeOutputWithContext(ctx context.Context) WebAclRequestInspectionPayloadTypeOutput

func (WebAclRequestInspectionPayloadType) ToWebAclRequestInspectionPayloadTypePtrOutput added in v0.72.0

func (e WebAclRequestInspectionPayloadType) ToWebAclRequestInspectionPayloadTypePtrOutput() WebAclRequestInspectionPayloadTypePtrOutput

func (WebAclRequestInspectionPayloadType) ToWebAclRequestInspectionPayloadTypePtrOutputWithContext added in v0.72.0

func (e WebAclRequestInspectionPayloadType) ToWebAclRequestInspectionPayloadTypePtrOutputWithContext(ctx context.Context) WebAclRequestInspectionPayloadTypePtrOutput

type WebAclRequestInspectionPayloadTypeInput added in v0.72.0

type WebAclRequestInspectionPayloadTypeInput interface {
	pulumi.Input

	ToWebAclRequestInspectionPayloadTypeOutput() WebAclRequestInspectionPayloadTypeOutput
	ToWebAclRequestInspectionPayloadTypeOutputWithContext(context.Context) WebAclRequestInspectionPayloadTypeOutput
}

WebAclRequestInspectionPayloadTypeInput is an input type that accepts values of the WebAclRequestInspectionPayloadType enum A concrete instance of `WebAclRequestInspectionPayloadTypeInput` can be one of the following:

WebAclRequestInspectionPayloadTypeJson
WebAclRequestInspectionPayloadTypeFormEncoded

type WebAclRequestInspectionPayloadTypeOutput added in v0.72.0

type WebAclRequestInspectionPayloadTypeOutput struct{ *pulumi.OutputState }

func (WebAclRequestInspectionPayloadTypeOutput) ElementType added in v0.72.0

func (WebAclRequestInspectionPayloadTypeOutput) ToStringOutput added in v0.72.0

func (WebAclRequestInspectionPayloadTypeOutput) ToStringOutputWithContext added in v0.72.0

func (WebAclRequestInspectionPayloadTypeOutput) ToStringPtrOutput added in v0.72.0

func (WebAclRequestInspectionPayloadTypeOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclRequestInspectionPayloadTypeOutput) ToWebAclRequestInspectionPayloadTypeOutput added in v0.72.0

func (o WebAclRequestInspectionPayloadTypeOutput) ToWebAclRequestInspectionPayloadTypeOutput() WebAclRequestInspectionPayloadTypeOutput

func (WebAclRequestInspectionPayloadTypeOutput) ToWebAclRequestInspectionPayloadTypeOutputWithContext added in v0.72.0

func (o WebAclRequestInspectionPayloadTypeOutput) ToWebAclRequestInspectionPayloadTypeOutputWithContext(ctx context.Context) WebAclRequestInspectionPayloadTypeOutput

func (WebAclRequestInspectionPayloadTypeOutput) ToWebAclRequestInspectionPayloadTypePtrOutput added in v0.72.0

func (o WebAclRequestInspectionPayloadTypeOutput) ToWebAclRequestInspectionPayloadTypePtrOutput() WebAclRequestInspectionPayloadTypePtrOutput

func (WebAclRequestInspectionPayloadTypeOutput) ToWebAclRequestInspectionPayloadTypePtrOutputWithContext added in v0.72.0

func (o WebAclRequestInspectionPayloadTypeOutput) ToWebAclRequestInspectionPayloadTypePtrOutputWithContext(ctx context.Context) WebAclRequestInspectionPayloadTypePtrOutput

type WebAclRequestInspectionPayloadTypePtrInput added in v0.72.0

type WebAclRequestInspectionPayloadTypePtrInput interface {
	pulumi.Input

	ToWebAclRequestInspectionPayloadTypePtrOutput() WebAclRequestInspectionPayloadTypePtrOutput
	ToWebAclRequestInspectionPayloadTypePtrOutputWithContext(context.Context) WebAclRequestInspectionPayloadTypePtrOutput
}

func WebAclRequestInspectionPayloadTypePtr added in v0.72.0

func WebAclRequestInspectionPayloadTypePtr(v string) WebAclRequestInspectionPayloadTypePtrInput

type WebAclRequestInspectionPayloadTypePtrOutput added in v0.72.0

type WebAclRequestInspectionPayloadTypePtrOutput struct{ *pulumi.OutputState }

func (WebAclRequestInspectionPayloadTypePtrOutput) Elem added in v0.72.0

func (WebAclRequestInspectionPayloadTypePtrOutput) ElementType added in v0.72.0

func (WebAclRequestInspectionPayloadTypePtrOutput) ToStringPtrOutput added in v0.72.0

func (WebAclRequestInspectionPayloadTypePtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclRequestInspectionPayloadTypePtrOutput) ToWebAclRequestInspectionPayloadTypePtrOutput added in v0.72.0

func (o WebAclRequestInspectionPayloadTypePtrOutput) ToWebAclRequestInspectionPayloadTypePtrOutput() WebAclRequestInspectionPayloadTypePtrOutput

func (WebAclRequestInspectionPayloadTypePtrOutput) ToWebAclRequestInspectionPayloadTypePtrOutputWithContext added in v0.72.0

func (o WebAclRequestInspectionPayloadTypePtrOutput) ToWebAclRequestInspectionPayloadTypePtrOutputWithContext(ctx context.Context) WebAclRequestInspectionPayloadTypePtrOutput

type WebAclRequestInspectionPtrInput added in v0.72.0

type WebAclRequestInspectionPtrInput interface {
	pulumi.Input

	ToWebAclRequestInspectionPtrOutput() WebAclRequestInspectionPtrOutput
	ToWebAclRequestInspectionPtrOutputWithContext(context.Context) WebAclRequestInspectionPtrOutput
}

WebAclRequestInspectionPtrInput is an input type that accepts WebAclRequestInspectionArgs, WebAclRequestInspectionPtr and WebAclRequestInspectionPtrOutput values. You can construct a concrete instance of `WebAclRequestInspectionPtrInput` via:

        WebAclRequestInspectionArgs{...}

or:

        nil

func WebAclRequestInspectionPtr added in v0.72.0

func WebAclRequestInspectionPtr(v *WebAclRequestInspectionArgs) WebAclRequestInspectionPtrInput

type WebAclRequestInspectionPtrOutput added in v0.72.0

type WebAclRequestInspectionPtrOutput struct{ *pulumi.OutputState }

func (WebAclRequestInspectionPtrOutput) Elem added in v0.72.0

func (WebAclRequestInspectionPtrOutput) ElementType added in v0.72.0

func (WebAclRequestInspectionPtrOutput) PasswordField added in v0.72.0

The name of the field in the request payload that contains your customer's password.

How you specify this depends on the request inspection payload type.

- For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

For example, for the JSON payload `{ "form": { "password": "THE_PASSWORD" } }` , the password field specification is `/form/password` . - For form encoded payload types, use the HTML form names.

For example, for an HTML form with the input element named `password1` , the password field specification is `password1` .

func (WebAclRequestInspectionPtrOutput) PayloadType added in v0.72.0

The payload type for your login endpoint, either JSON or form encoded.

func (WebAclRequestInspectionPtrOutput) ToWebAclRequestInspectionPtrOutput added in v0.72.0

func (o WebAclRequestInspectionPtrOutput) ToWebAclRequestInspectionPtrOutput() WebAclRequestInspectionPtrOutput

func (WebAclRequestInspectionPtrOutput) ToWebAclRequestInspectionPtrOutputWithContext added in v0.72.0

func (o WebAclRequestInspectionPtrOutput) ToWebAclRequestInspectionPtrOutputWithContext(ctx context.Context) WebAclRequestInspectionPtrOutput

func (WebAclRequestInspectionPtrOutput) UsernameField added in v0.72.0

The name of the field in the request payload that contains your customer's username.

How you specify this depends on the request inspection payload type.

- For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .

For example, for the JSON payload `{ "form": { "username": "THE_USERNAME" } }` , the username field specification is `/form/username` . - For form encoded payload types, use the HTML form names.

For example, for an HTML form with the input element named `username1` , the username field specification is `username1`

type WebAclResponseContentType added in v0.98.0

type WebAclResponseContentType string

Valid values are TEXT_PLAIN, TEXT_HTML, and APPLICATION_JSON.

func (WebAclResponseContentType) ElementType added in v0.98.0

func (WebAclResponseContentType) ElementType() reflect.Type

func (WebAclResponseContentType) ToStringOutput added in v0.98.0

func (e WebAclResponseContentType) ToStringOutput() pulumi.StringOutput

func (WebAclResponseContentType) ToStringOutputWithContext added in v0.98.0

func (e WebAclResponseContentType) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclResponseContentType) ToStringPtrOutput added in v0.98.0

func (e WebAclResponseContentType) ToStringPtrOutput() pulumi.StringPtrOutput

func (WebAclResponseContentType) ToStringPtrOutputWithContext added in v0.98.0

func (e WebAclResponseContentType) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclResponseContentType) ToWebAclResponseContentTypeOutput added in v0.98.0

func (e WebAclResponseContentType) ToWebAclResponseContentTypeOutput() WebAclResponseContentTypeOutput

func (WebAclResponseContentType) ToWebAclResponseContentTypeOutputWithContext added in v0.98.0

func (e WebAclResponseContentType) ToWebAclResponseContentTypeOutputWithContext(ctx context.Context) WebAclResponseContentTypeOutput

func (WebAclResponseContentType) ToWebAclResponseContentTypePtrOutput added in v0.98.0

func (e WebAclResponseContentType) ToWebAclResponseContentTypePtrOutput() WebAclResponseContentTypePtrOutput

func (WebAclResponseContentType) ToWebAclResponseContentTypePtrOutputWithContext added in v0.98.0

func (e WebAclResponseContentType) ToWebAclResponseContentTypePtrOutputWithContext(ctx context.Context) WebAclResponseContentTypePtrOutput

type WebAclResponseContentTypeInput added in v0.98.0

type WebAclResponseContentTypeInput interface {
	pulumi.Input

	ToWebAclResponseContentTypeOutput() WebAclResponseContentTypeOutput
	ToWebAclResponseContentTypeOutputWithContext(context.Context) WebAclResponseContentTypeOutput
}

WebAclResponseContentTypeInput is an input type that accepts values of the WebAclResponseContentType enum A concrete instance of `WebAclResponseContentTypeInput` can be one of the following:

WebAclResponseContentTypeTextPlain
WebAclResponseContentTypeTextHtml
WebAclResponseContentTypeApplicationJson

type WebAclResponseContentTypeOutput added in v0.98.0

type WebAclResponseContentTypeOutput struct{ *pulumi.OutputState }

func (WebAclResponseContentTypeOutput) ElementType added in v0.98.0

func (WebAclResponseContentTypeOutput) ToStringOutput added in v0.98.0

func (WebAclResponseContentTypeOutput) ToStringOutputWithContext added in v0.98.0

func (o WebAclResponseContentTypeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclResponseContentTypeOutput) ToStringPtrOutput added in v0.98.0

func (WebAclResponseContentTypeOutput) ToStringPtrOutputWithContext added in v0.98.0

func (o WebAclResponseContentTypeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclResponseContentTypeOutput) ToWebAclResponseContentTypeOutput added in v0.98.0

func (o WebAclResponseContentTypeOutput) ToWebAclResponseContentTypeOutput() WebAclResponseContentTypeOutput

func (WebAclResponseContentTypeOutput) ToWebAclResponseContentTypeOutputWithContext added in v0.98.0

func (o WebAclResponseContentTypeOutput) ToWebAclResponseContentTypeOutputWithContext(ctx context.Context) WebAclResponseContentTypeOutput

func (WebAclResponseContentTypeOutput) ToWebAclResponseContentTypePtrOutput added in v0.98.0

func (o WebAclResponseContentTypeOutput) ToWebAclResponseContentTypePtrOutput() WebAclResponseContentTypePtrOutput

func (WebAclResponseContentTypeOutput) ToWebAclResponseContentTypePtrOutputWithContext added in v0.98.0

func (o WebAclResponseContentTypeOutput) ToWebAclResponseContentTypePtrOutputWithContext(ctx context.Context) WebAclResponseContentTypePtrOutput

type WebAclResponseContentTypePtrInput added in v0.98.0

type WebAclResponseContentTypePtrInput interface {
	pulumi.Input

	ToWebAclResponseContentTypePtrOutput() WebAclResponseContentTypePtrOutput
	ToWebAclResponseContentTypePtrOutputWithContext(context.Context) WebAclResponseContentTypePtrOutput
}

func WebAclResponseContentTypePtr added in v0.98.0

func WebAclResponseContentTypePtr(v string) WebAclResponseContentTypePtrInput

type WebAclResponseContentTypePtrOutput added in v0.98.0

type WebAclResponseContentTypePtrOutput struct{ *pulumi.OutputState }

func (WebAclResponseContentTypePtrOutput) Elem added in v0.98.0

func (WebAclResponseContentTypePtrOutput) ElementType added in v0.98.0

func (WebAclResponseContentTypePtrOutput) ToStringPtrOutput added in v0.98.0

func (WebAclResponseContentTypePtrOutput) ToStringPtrOutputWithContext added in v0.98.0

func (o WebAclResponseContentTypePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclResponseContentTypePtrOutput) ToWebAclResponseContentTypePtrOutput added in v0.98.0

func (o WebAclResponseContentTypePtrOutput) ToWebAclResponseContentTypePtrOutput() WebAclResponseContentTypePtrOutput

func (WebAclResponseContentTypePtrOutput) ToWebAclResponseContentTypePtrOutputWithContext added in v0.98.0

func (o WebAclResponseContentTypePtrOutput) ToWebAclResponseContentTypePtrOutputWithContext(ctx context.Context) WebAclResponseContentTypePtrOutput

type WebAclResponseInspection added in v0.72.0

type WebAclResponseInspection struct {
	// Configures inspection of the response body for success and failure indicators. AWS WAF can inspect the first 65,536 bytes (64 KB) of the response body.
	BodyContains *WebAclResponseInspectionBodyContains `pulumi:"bodyContains"`
	// Configures inspection of the response header for success and failure indicators.
	Header *WebAclResponseInspectionHeader `pulumi:"header"`
	// Configures inspection of the response JSON for success and failure indicators. AWS WAF can inspect the first 65,536 bytes (64 KB) of the response JSON.
	Json *WebAclResponseInspectionJson `pulumi:"json"`
	// Configures inspection of the response status code for success and failure indicators.
	StatusCode *WebAclResponseInspectionStatusCode `pulumi:"statusCode"`
}

Configures the inspection of login responses

type WebAclResponseInspectionArgs added in v0.72.0

type WebAclResponseInspectionArgs struct {
	// Configures inspection of the response body for success and failure indicators. AWS WAF can inspect the first 65,536 bytes (64 KB) of the response body.
	BodyContains WebAclResponseInspectionBodyContainsPtrInput `pulumi:"bodyContains"`
	// Configures inspection of the response header for success and failure indicators.
	Header WebAclResponseInspectionHeaderPtrInput `pulumi:"header"`
	// Configures inspection of the response JSON for success and failure indicators. AWS WAF can inspect the first 65,536 bytes (64 KB) of the response JSON.
	Json WebAclResponseInspectionJsonPtrInput `pulumi:"json"`
	// Configures inspection of the response status code for success and failure indicators.
	StatusCode WebAclResponseInspectionStatusCodePtrInput `pulumi:"statusCode"`
}

Configures the inspection of login responses

func (WebAclResponseInspectionArgs) ElementType added in v0.72.0

func (WebAclResponseInspectionArgs) ToWebAclResponseInspectionOutput added in v0.72.0

func (i WebAclResponseInspectionArgs) ToWebAclResponseInspectionOutput() WebAclResponseInspectionOutput

func (WebAclResponseInspectionArgs) ToWebAclResponseInspectionOutputWithContext added in v0.72.0

func (i WebAclResponseInspectionArgs) ToWebAclResponseInspectionOutputWithContext(ctx context.Context) WebAclResponseInspectionOutput

func (WebAclResponseInspectionArgs) ToWebAclResponseInspectionPtrOutput added in v0.72.0

func (i WebAclResponseInspectionArgs) ToWebAclResponseInspectionPtrOutput() WebAclResponseInspectionPtrOutput

func (WebAclResponseInspectionArgs) ToWebAclResponseInspectionPtrOutputWithContext added in v0.72.0

func (i WebAclResponseInspectionArgs) ToWebAclResponseInspectionPtrOutputWithContext(ctx context.Context) WebAclResponseInspectionPtrOutput

type WebAclResponseInspectionBodyContains added in v0.72.0

type WebAclResponseInspectionBodyContains struct {
	// Strings in the body of the response that indicate a failed login or account creation attempt. To be counted as a failure, the string can be anywhere in the body and must be an exact match, including case. Each string must be unique among the success and failure strings.
	//
	// JSON example: `"FailureStrings": [ "Request failed" ]`
	FailureStrings []string `pulumi:"failureStrings"`
	// Strings in the body of the response that indicate a successful login or account creation attempt. To be counted as a success, the string can be anywhere in the body and must be an exact match, including case. Each string must be unique among the success and failure strings.
	//
	// JSON examples: `"SuccessStrings": [ "Login successful" ]` and `"SuccessStrings": [ "Account creation successful", "Welcome to our site!" ]`
	SuccessStrings []string `pulumi:"successStrings"`
}

Response body contents that indicate success or failure of a login request

type WebAclResponseInspectionBodyContainsArgs added in v0.72.0

type WebAclResponseInspectionBodyContainsArgs struct {
	// Strings in the body of the response that indicate a failed login or account creation attempt. To be counted as a failure, the string can be anywhere in the body and must be an exact match, including case. Each string must be unique among the success and failure strings.
	//
	// JSON example: `"FailureStrings": [ "Request failed" ]`
	FailureStrings pulumi.StringArrayInput `pulumi:"failureStrings"`
	// Strings in the body of the response that indicate a successful login or account creation attempt. To be counted as a success, the string can be anywhere in the body and must be an exact match, including case. Each string must be unique among the success and failure strings.
	//
	// JSON examples: `"SuccessStrings": [ "Login successful" ]` and `"SuccessStrings": [ "Account creation successful", "Welcome to our site!" ]`
	SuccessStrings pulumi.StringArrayInput `pulumi:"successStrings"`
}

Response body contents that indicate success or failure of a login request

func (WebAclResponseInspectionBodyContainsArgs) ElementType added in v0.72.0

func (WebAclResponseInspectionBodyContainsArgs) ToWebAclResponseInspectionBodyContainsOutput added in v0.72.0

func (i WebAclResponseInspectionBodyContainsArgs) ToWebAclResponseInspectionBodyContainsOutput() WebAclResponseInspectionBodyContainsOutput

func (WebAclResponseInspectionBodyContainsArgs) ToWebAclResponseInspectionBodyContainsOutputWithContext added in v0.72.0

func (i WebAclResponseInspectionBodyContainsArgs) ToWebAclResponseInspectionBodyContainsOutputWithContext(ctx context.Context) WebAclResponseInspectionBodyContainsOutput

func (WebAclResponseInspectionBodyContainsArgs) ToWebAclResponseInspectionBodyContainsPtrOutput added in v0.72.0

func (i WebAclResponseInspectionBodyContainsArgs) ToWebAclResponseInspectionBodyContainsPtrOutput() WebAclResponseInspectionBodyContainsPtrOutput

func (WebAclResponseInspectionBodyContainsArgs) ToWebAclResponseInspectionBodyContainsPtrOutputWithContext added in v0.72.0

func (i WebAclResponseInspectionBodyContainsArgs) ToWebAclResponseInspectionBodyContainsPtrOutputWithContext(ctx context.Context) WebAclResponseInspectionBodyContainsPtrOutput

type WebAclResponseInspectionBodyContainsInput added in v0.72.0

type WebAclResponseInspectionBodyContainsInput interface {
	pulumi.Input

	ToWebAclResponseInspectionBodyContainsOutput() WebAclResponseInspectionBodyContainsOutput
	ToWebAclResponseInspectionBodyContainsOutputWithContext(context.Context) WebAclResponseInspectionBodyContainsOutput
}

WebAclResponseInspectionBodyContainsInput is an input type that accepts WebAclResponseInspectionBodyContainsArgs and WebAclResponseInspectionBodyContainsOutput values. You can construct a concrete instance of `WebAclResponseInspectionBodyContainsInput` via:

WebAclResponseInspectionBodyContainsArgs{...}

type WebAclResponseInspectionBodyContainsOutput added in v0.72.0

type WebAclResponseInspectionBodyContainsOutput struct{ *pulumi.OutputState }

Response body contents that indicate success or failure of a login request

func (WebAclResponseInspectionBodyContainsOutput) ElementType added in v0.72.0

func (WebAclResponseInspectionBodyContainsOutput) FailureStrings added in v0.72.0

Strings in the body of the response that indicate a failed login or account creation attempt. To be counted as a failure, the string can be anywhere in the body and must be an exact match, including case. Each string must be unique among the success and failure strings.

JSON example: `"FailureStrings": [ "Request failed" ]`

func (WebAclResponseInspectionBodyContainsOutput) SuccessStrings added in v0.72.0

Strings in the body of the response that indicate a successful login or account creation attempt. To be counted as a success, the string can be anywhere in the body and must be an exact match, including case. Each string must be unique among the success and failure strings.

JSON examples: `"SuccessStrings": [ "Login successful" ]` and `"SuccessStrings": [ "Account creation successful", "Welcome to our site!" ]`

func (WebAclResponseInspectionBodyContainsOutput) ToWebAclResponseInspectionBodyContainsOutput added in v0.72.0

func (o WebAclResponseInspectionBodyContainsOutput) ToWebAclResponseInspectionBodyContainsOutput() WebAclResponseInspectionBodyContainsOutput

func (WebAclResponseInspectionBodyContainsOutput) ToWebAclResponseInspectionBodyContainsOutputWithContext added in v0.72.0

func (o WebAclResponseInspectionBodyContainsOutput) ToWebAclResponseInspectionBodyContainsOutputWithContext(ctx context.Context) WebAclResponseInspectionBodyContainsOutput

func (WebAclResponseInspectionBodyContainsOutput) ToWebAclResponseInspectionBodyContainsPtrOutput added in v0.72.0

func (o WebAclResponseInspectionBodyContainsOutput) ToWebAclResponseInspectionBodyContainsPtrOutput() WebAclResponseInspectionBodyContainsPtrOutput

func (WebAclResponseInspectionBodyContainsOutput) ToWebAclResponseInspectionBodyContainsPtrOutputWithContext added in v0.72.0

func (o WebAclResponseInspectionBodyContainsOutput) ToWebAclResponseInspectionBodyContainsPtrOutputWithContext(ctx context.Context) WebAclResponseInspectionBodyContainsPtrOutput

type WebAclResponseInspectionBodyContainsPtrInput added in v0.72.0

type WebAclResponseInspectionBodyContainsPtrInput interface {
	pulumi.Input

	ToWebAclResponseInspectionBodyContainsPtrOutput() WebAclResponseInspectionBodyContainsPtrOutput
	ToWebAclResponseInspectionBodyContainsPtrOutputWithContext(context.Context) WebAclResponseInspectionBodyContainsPtrOutput
}

WebAclResponseInspectionBodyContainsPtrInput is an input type that accepts WebAclResponseInspectionBodyContainsArgs, WebAclResponseInspectionBodyContainsPtr and WebAclResponseInspectionBodyContainsPtrOutput values. You can construct a concrete instance of `WebAclResponseInspectionBodyContainsPtrInput` via:

        WebAclResponseInspectionBodyContainsArgs{...}

or:

        nil

type WebAclResponseInspectionBodyContainsPtrOutput added in v0.72.0

type WebAclResponseInspectionBodyContainsPtrOutput struct{ *pulumi.OutputState }

func (WebAclResponseInspectionBodyContainsPtrOutput) Elem added in v0.72.0

func (WebAclResponseInspectionBodyContainsPtrOutput) ElementType added in v0.72.0

func (WebAclResponseInspectionBodyContainsPtrOutput) FailureStrings added in v0.72.0

Strings in the body of the response that indicate a failed login or account creation attempt. To be counted as a failure, the string can be anywhere in the body and must be an exact match, including case. Each string must be unique among the success and failure strings.

JSON example: `"FailureStrings": [ "Request failed" ]`

func (WebAclResponseInspectionBodyContainsPtrOutput) SuccessStrings added in v0.72.0

Strings in the body of the response that indicate a successful login or account creation attempt. To be counted as a success, the string can be anywhere in the body and must be an exact match, including case. Each string must be unique among the success and failure strings.

JSON examples: `"SuccessStrings": [ "Login successful" ]` and `"SuccessStrings": [ "Account creation successful", "Welcome to our site!" ]`

func (WebAclResponseInspectionBodyContainsPtrOutput) ToWebAclResponseInspectionBodyContainsPtrOutput added in v0.72.0

func (o WebAclResponseInspectionBodyContainsPtrOutput) ToWebAclResponseInspectionBodyContainsPtrOutput() WebAclResponseInspectionBodyContainsPtrOutput

func (WebAclResponseInspectionBodyContainsPtrOutput) ToWebAclResponseInspectionBodyContainsPtrOutputWithContext added in v0.72.0

func (o WebAclResponseInspectionBodyContainsPtrOutput) ToWebAclResponseInspectionBodyContainsPtrOutputWithContext(ctx context.Context) WebAclResponseInspectionBodyContainsPtrOutput

type WebAclResponseInspectionHeader added in v0.72.0

type WebAclResponseInspectionHeader struct {
	// Values in the response header with the specified name that indicate a failed login or account creation attempt. To be counted as a failure, the value must be an exact match, including case. Each value must be unique among the success and failure values.
	//
	// JSON examples: `"FailureValues": [ "LoginFailed", "Failed login" ]` and `"FailureValues": [ "AccountCreationFailed" ]`
	FailureValues []string `pulumi:"failureValues"`
	// The name of the header to match against. The name must be an exact match, including case.
	//
	// JSON example: `"Name": [ "RequestResult" ]`
	Name string `pulumi:"name"`
	// Values in the response header with the specified name that indicate a successful login or account creation attempt. To be counted as a success, the value must be an exact match, including case. Each value must be unique among the success and failure values.
	//
	// JSON examples: `"SuccessValues": [ "LoginPassed", "Successful login" ]` and `"SuccessValues": [ "AccountCreated", "Successful account creation" ]`
	SuccessValues []string `pulumi:"successValues"`
}

Response headers that indicate success or failure of a login request

type WebAclResponseInspectionHeaderArgs added in v0.72.0

type WebAclResponseInspectionHeaderArgs struct {
	// Values in the response header with the specified name that indicate a failed login or account creation attempt. To be counted as a failure, the value must be an exact match, including case. Each value must be unique among the success and failure values.
	//
	// JSON examples: `"FailureValues": [ "LoginFailed", "Failed login" ]` and `"FailureValues": [ "AccountCreationFailed" ]`
	FailureValues pulumi.StringArrayInput `pulumi:"failureValues"`
	// The name of the header to match against. The name must be an exact match, including case.
	//
	// JSON example: `"Name": [ "RequestResult" ]`
	Name pulumi.StringInput `pulumi:"name"`
	// Values in the response header with the specified name that indicate a successful login or account creation attempt. To be counted as a success, the value must be an exact match, including case. Each value must be unique among the success and failure values.
	//
	// JSON examples: `"SuccessValues": [ "LoginPassed", "Successful login" ]` and `"SuccessValues": [ "AccountCreated", "Successful account creation" ]`
	SuccessValues pulumi.StringArrayInput `pulumi:"successValues"`
}

Response headers that indicate success or failure of a login request

func (WebAclResponseInspectionHeaderArgs) ElementType added in v0.72.0

func (WebAclResponseInspectionHeaderArgs) ToWebAclResponseInspectionHeaderOutput added in v0.72.0

func (i WebAclResponseInspectionHeaderArgs) ToWebAclResponseInspectionHeaderOutput() WebAclResponseInspectionHeaderOutput

func (WebAclResponseInspectionHeaderArgs) ToWebAclResponseInspectionHeaderOutputWithContext added in v0.72.0

func (i WebAclResponseInspectionHeaderArgs) ToWebAclResponseInspectionHeaderOutputWithContext(ctx context.Context) WebAclResponseInspectionHeaderOutput

func (WebAclResponseInspectionHeaderArgs) ToWebAclResponseInspectionHeaderPtrOutput added in v0.72.0

func (i WebAclResponseInspectionHeaderArgs) ToWebAclResponseInspectionHeaderPtrOutput() WebAclResponseInspectionHeaderPtrOutput

func (WebAclResponseInspectionHeaderArgs) ToWebAclResponseInspectionHeaderPtrOutputWithContext added in v0.72.0

func (i WebAclResponseInspectionHeaderArgs) ToWebAclResponseInspectionHeaderPtrOutputWithContext(ctx context.Context) WebAclResponseInspectionHeaderPtrOutput

type WebAclResponseInspectionHeaderInput added in v0.72.0

type WebAclResponseInspectionHeaderInput interface {
	pulumi.Input

	ToWebAclResponseInspectionHeaderOutput() WebAclResponseInspectionHeaderOutput
	ToWebAclResponseInspectionHeaderOutputWithContext(context.Context) WebAclResponseInspectionHeaderOutput
}

WebAclResponseInspectionHeaderInput is an input type that accepts WebAclResponseInspectionHeaderArgs and WebAclResponseInspectionHeaderOutput values. You can construct a concrete instance of `WebAclResponseInspectionHeaderInput` via:

WebAclResponseInspectionHeaderArgs{...}

type WebAclResponseInspectionHeaderOutput added in v0.72.0

type WebAclResponseInspectionHeaderOutput struct{ *pulumi.OutputState }

Response headers that indicate success or failure of a login request

func (WebAclResponseInspectionHeaderOutput) ElementType added in v0.72.0

func (WebAclResponseInspectionHeaderOutput) FailureValues added in v0.72.0

Values in the response header with the specified name that indicate a failed login or account creation attempt. To be counted as a failure, the value must be an exact match, including case. Each value must be unique among the success and failure values.

JSON examples: `"FailureValues": [ "LoginFailed", "Failed login" ]` and `"FailureValues": [ "AccountCreationFailed" ]`

func (WebAclResponseInspectionHeaderOutput) Name added in v0.72.0

The name of the header to match against. The name must be an exact match, including case.

JSON example: `"Name": [ "RequestResult" ]`

func (WebAclResponseInspectionHeaderOutput) SuccessValues added in v0.72.0

Values in the response header with the specified name that indicate a successful login or account creation attempt. To be counted as a success, the value must be an exact match, including case. Each value must be unique among the success and failure values.

JSON examples: `"SuccessValues": [ "LoginPassed", "Successful login" ]` and `"SuccessValues": [ "AccountCreated", "Successful account creation" ]`

func (WebAclResponseInspectionHeaderOutput) ToWebAclResponseInspectionHeaderOutput added in v0.72.0

func (o WebAclResponseInspectionHeaderOutput) ToWebAclResponseInspectionHeaderOutput() WebAclResponseInspectionHeaderOutput

func (WebAclResponseInspectionHeaderOutput) ToWebAclResponseInspectionHeaderOutputWithContext added in v0.72.0

func (o WebAclResponseInspectionHeaderOutput) ToWebAclResponseInspectionHeaderOutputWithContext(ctx context.Context) WebAclResponseInspectionHeaderOutput

func (WebAclResponseInspectionHeaderOutput) ToWebAclResponseInspectionHeaderPtrOutput added in v0.72.0

func (o WebAclResponseInspectionHeaderOutput) ToWebAclResponseInspectionHeaderPtrOutput() WebAclResponseInspectionHeaderPtrOutput

func (WebAclResponseInspectionHeaderOutput) ToWebAclResponseInspectionHeaderPtrOutputWithContext added in v0.72.0

func (o WebAclResponseInspectionHeaderOutput) ToWebAclResponseInspectionHeaderPtrOutputWithContext(ctx context.Context) WebAclResponseInspectionHeaderPtrOutput

type WebAclResponseInspectionHeaderPtrInput added in v0.72.0

type WebAclResponseInspectionHeaderPtrInput interface {
	pulumi.Input

	ToWebAclResponseInspectionHeaderPtrOutput() WebAclResponseInspectionHeaderPtrOutput
	ToWebAclResponseInspectionHeaderPtrOutputWithContext(context.Context) WebAclResponseInspectionHeaderPtrOutput
}

WebAclResponseInspectionHeaderPtrInput is an input type that accepts WebAclResponseInspectionHeaderArgs, WebAclResponseInspectionHeaderPtr and WebAclResponseInspectionHeaderPtrOutput values. You can construct a concrete instance of `WebAclResponseInspectionHeaderPtrInput` via:

        WebAclResponseInspectionHeaderArgs{...}

or:

        nil

type WebAclResponseInspectionHeaderPtrOutput added in v0.72.0

type WebAclResponseInspectionHeaderPtrOutput struct{ *pulumi.OutputState }

func (WebAclResponseInspectionHeaderPtrOutput) Elem added in v0.72.0

func (WebAclResponseInspectionHeaderPtrOutput) ElementType added in v0.72.0

func (WebAclResponseInspectionHeaderPtrOutput) FailureValues added in v0.72.0

Values in the response header with the specified name that indicate a failed login or account creation attempt. To be counted as a failure, the value must be an exact match, including case. Each value must be unique among the success and failure values.

JSON examples: `"FailureValues": [ "LoginFailed", "Failed login" ]` and `"FailureValues": [ "AccountCreationFailed" ]`

func (WebAclResponseInspectionHeaderPtrOutput) Name added in v0.72.0

The name of the header to match against. The name must be an exact match, including case.

JSON example: `"Name": [ "RequestResult" ]`

func (WebAclResponseInspectionHeaderPtrOutput) SuccessValues added in v0.72.0

Values in the response header with the specified name that indicate a successful login or account creation attempt. To be counted as a success, the value must be an exact match, including case. Each value must be unique among the success and failure values.

JSON examples: `"SuccessValues": [ "LoginPassed", "Successful login" ]` and `"SuccessValues": [ "AccountCreated", "Successful account creation" ]`

func (WebAclResponseInspectionHeaderPtrOutput) ToWebAclResponseInspectionHeaderPtrOutput added in v0.72.0

func (o WebAclResponseInspectionHeaderPtrOutput) ToWebAclResponseInspectionHeaderPtrOutput() WebAclResponseInspectionHeaderPtrOutput

func (WebAclResponseInspectionHeaderPtrOutput) ToWebAclResponseInspectionHeaderPtrOutputWithContext added in v0.72.0

func (o WebAclResponseInspectionHeaderPtrOutput) ToWebAclResponseInspectionHeaderPtrOutputWithContext(ctx context.Context) WebAclResponseInspectionHeaderPtrOutput

type WebAclResponseInspectionInput added in v0.72.0

type WebAclResponseInspectionInput interface {
	pulumi.Input

	ToWebAclResponseInspectionOutput() WebAclResponseInspectionOutput
	ToWebAclResponseInspectionOutputWithContext(context.Context) WebAclResponseInspectionOutput
}

WebAclResponseInspectionInput is an input type that accepts WebAclResponseInspectionArgs and WebAclResponseInspectionOutput values. You can construct a concrete instance of `WebAclResponseInspectionInput` via:

WebAclResponseInspectionArgs{...}

type WebAclResponseInspectionJson added in v0.72.0

type WebAclResponseInspectionJson struct {
	// Values for the specified identifier in the response JSON that indicate a failed login or account creation attempt. To be counted as a failure, the value must be an exact match, including case. Each value must be unique among the success and failure values.
	//
	// JSON example: `"FailureValues": [ "False", "Failed" ]`
	FailureValues []string `pulumi:"failureValues"`
	// The identifier for the value to match against in the JSON. The identifier must be an exact match, including case.
	//
	// JSON examples: `"Identifier": [ "/login/success" ]` and `"Identifier": [ "/sign-up/success" ]`
	Identifier string `pulumi:"identifier"`
	// Values for the specified identifier in the response JSON that indicate a successful login or account creation attempt. To be counted as a success, the value must be an exact match, including case. Each value must be unique among the success and failure values.
	//
	// JSON example: `"SuccessValues": [ "True", "Succeeded" ]`
	SuccessValues []string `pulumi:"successValues"`
}

Response JSON that indicate success or failure of a login request

type WebAclResponseInspectionJsonArgs added in v0.72.0

type WebAclResponseInspectionJsonArgs struct {
	// Values for the specified identifier in the response JSON that indicate a failed login or account creation attempt. To be counted as a failure, the value must be an exact match, including case. Each value must be unique among the success and failure values.
	//
	// JSON example: `"FailureValues": [ "False", "Failed" ]`
	FailureValues pulumi.StringArrayInput `pulumi:"failureValues"`
	// The identifier for the value to match against in the JSON. The identifier must be an exact match, including case.
	//
	// JSON examples: `"Identifier": [ "/login/success" ]` and `"Identifier": [ "/sign-up/success" ]`
	Identifier pulumi.StringInput `pulumi:"identifier"`
	// Values for the specified identifier in the response JSON that indicate a successful login or account creation attempt. To be counted as a success, the value must be an exact match, including case. Each value must be unique among the success and failure values.
	//
	// JSON example: `"SuccessValues": [ "True", "Succeeded" ]`
	SuccessValues pulumi.StringArrayInput `pulumi:"successValues"`
}

Response JSON that indicate success or failure of a login request

func (WebAclResponseInspectionJsonArgs) ElementType added in v0.72.0

func (WebAclResponseInspectionJsonArgs) ToWebAclResponseInspectionJsonOutput added in v0.72.0

func (i WebAclResponseInspectionJsonArgs) ToWebAclResponseInspectionJsonOutput() WebAclResponseInspectionJsonOutput

func (WebAclResponseInspectionJsonArgs) ToWebAclResponseInspectionJsonOutputWithContext added in v0.72.0

func (i WebAclResponseInspectionJsonArgs) ToWebAclResponseInspectionJsonOutputWithContext(ctx context.Context) WebAclResponseInspectionJsonOutput

func (WebAclResponseInspectionJsonArgs) ToWebAclResponseInspectionJsonPtrOutput added in v0.72.0

func (i WebAclResponseInspectionJsonArgs) ToWebAclResponseInspectionJsonPtrOutput() WebAclResponseInspectionJsonPtrOutput

func (WebAclResponseInspectionJsonArgs) ToWebAclResponseInspectionJsonPtrOutputWithContext added in v0.72.0

func (i WebAclResponseInspectionJsonArgs) ToWebAclResponseInspectionJsonPtrOutputWithContext(ctx context.Context) WebAclResponseInspectionJsonPtrOutput

type WebAclResponseInspectionJsonInput added in v0.72.0

type WebAclResponseInspectionJsonInput interface {
	pulumi.Input

	ToWebAclResponseInspectionJsonOutput() WebAclResponseInspectionJsonOutput
	ToWebAclResponseInspectionJsonOutputWithContext(context.Context) WebAclResponseInspectionJsonOutput
}

WebAclResponseInspectionJsonInput is an input type that accepts WebAclResponseInspectionJsonArgs and WebAclResponseInspectionJsonOutput values. You can construct a concrete instance of `WebAclResponseInspectionJsonInput` via:

WebAclResponseInspectionJsonArgs{...}

type WebAclResponseInspectionJsonOutput added in v0.72.0

type WebAclResponseInspectionJsonOutput struct{ *pulumi.OutputState }

Response JSON that indicate success or failure of a login request

func (WebAclResponseInspectionJsonOutput) ElementType added in v0.72.0

func (WebAclResponseInspectionJsonOutput) FailureValues added in v0.72.0

Values for the specified identifier in the response JSON that indicate a failed login or account creation attempt. To be counted as a failure, the value must be an exact match, including case. Each value must be unique among the success and failure values.

JSON example: `"FailureValues": [ "False", "Failed" ]`

func (WebAclResponseInspectionJsonOutput) Identifier added in v0.72.0

The identifier for the value to match against in the JSON. The identifier must be an exact match, including case.

JSON examples: `"Identifier": [ "/login/success" ]` and `"Identifier": [ "/sign-up/success" ]`

func (WebAclResponseInspectionJsonOutput) SuccessValues added in v0.72.0

Values for the specified identifier in the response JSON that indicate a successful login or account creation attempt. To be counted as a success, the value must be an exact match, including case. Each value must be unique among the success and failure values.

JSON example: `"SuccessValues": [ "True", "Succeeded" ]`

func (WebAclResponseInspectionJsonOutput) ToWebAclResponseInspectionJsonOutput added in v0.72.0

func (o WebAclResponseInspectionJsonOutput) ToWebAclResponseInspectionJsonOutput() WebAclResponseInspectionJsonOutput

func (WebAclResponseInspectionJsonOutput) ToWebAclResponseInspectionJsonOutputWithContext added in v0.72.0

func (o WebAclResponseInspectionJsonOutput) ToWebAclResponseInspectionJsonOutputWithContext(ctx context.Context) WebAclResponseInspectionJsonOutput

func (WebAclResponseInspectionJsonOutput) ToWebAclResponseInspectionJsonPtrOutput added in v0.72.0

func (o WebAclResponseInspectionJsonOutput) ToWebAclResponseInspectionJsonPtrOutput() WebAclResponseInspectionJsonPtrOutput

func (WebAclResponseInspectionJsonOutput) ToWebAclResponseInspectionJsonPtrOutputWithContext added in v0.72.0

func (o WebAclResponseInspectionJsonOutput) ToWebAclResponseInspectionJsonPtrOutputWithContext(ctx context.Context) WebAclResponseInspectionJsonPtrOutput

type WebAclResponseInspectionJsonPtrInput added in v0.72.0

type WebAclResponseInspectionJsonPtrInput interface {
	pulumi.Input

	ToWebAclResponseInspectionJsonPtrOutput() WebAclResponseInspectionJsonPtrOutput
	ToWebAclResponseInspectionJsonPtrOutputWithContext(context.Context) WebAclResponseInspectionJsonPtrOutput
}

WebAclResponseInspectionJsonPtrInput is an input type that accepts WebAclResponseInspectionJsonArgs, WebAclResponseInspectionJsonPtr and WebAclResponseInspectionJsonPtrOutput values. You can construct a concrete instance of `WebAclResponseInspectionJsonPtrInput` via:

        WebAclResponseInspectionJsonArgs{...}

or:

        nil

func WebAclResponseInspectionJsonPtr added in v0.72.0

type WebAclResponseInspectionJsonPtrOutput added in v0.72.0

type WebAclResponseInspectionJsonPtrOutput struct{ *pulumi.OutputState }

func (WebAclResponseInspectionJsonPtrOutput) Elem added in v0.72.0

func (WebAclResponseInspectionJsonPtrOutput) ElementType added in v0.72.0

func (WebAclResponseInspectionJsonPtrOutput) FailureValues added in v0.72.0

Values for the specified identifier in the response JSON that indicate a failed login or account creation attempt. To be counted as a failure, the value must be an exact match, including case. Each value must be unique among the success and failure values.

JSON example: `"FailureValues": [ "False", "Failed" ]`

func (WebAclResponseInspectionJsonPtrOutput) Identifier added in v0.72.0

The identifier for the value to match against in the JSON. The identifier must be an exact match, including case.

JSON examples: `"Identifier": [ "/login/success" ]` and `"Identifier": [ "/sign-up/success" ]`

func (WebAclResponseInspectionJsonPtrOutput) SuccessValues added in v0.72.0

Values for the specified identifier in the response JSON that indicate a successful login or account creation attempt. To be counted as a success, the value must be an exact match, including case. Each value must be unique among the success and failure values.

JSON example: `"SuccessValues": [ "True", "Succeeded" ]`

func (WebAclResponseInspectionJsonPtrOutput) ToWebAclResponseInspectionJsonPtrOutput added in v0.72.0

func (o WebAclResponseInspectionJsonPtrOutput) ToWebAclResponseInspectionJsonPtrOutput() WebAclResponseInspectionJsonPtrOutput

func (WebAclResponseInspectionJsonPtrOutput) ToWebAclResponseInspectionJsonPtrOutputWithContext added in v0.72.0

func (o WebAclResponseInspectionJsonPtrOutput) ToWebAclResponseInspectionJsonPtrOutputWithContext(ctx context.Context) WebAclResponseInspectionJsonPtrOutput

type WebAclResponseInspectionOutput added in v0.72.0

type WebAclResponseInspectionOutput struct{ *pulumi.OutputState }

Configures the inspection of login responses

func (WebAclResponseInspectionOutput) BodyContains added in v0.72.0

Configures inspection of the response body for success and failure indicators. AWS WAF can inspect the first 65,536 bytes (64 KB) of the response body.

func (WebAclResponseInspectionOutput) ElementType added in v0.72.0

func (WebAclResponseInspectionOutput) Header added in v0.72.0

Configures inspection of the response header for success and failure indicators.

func (WebAclResponseInspectionOutput) Json added in v0.72.0

Configures inspection of the response JSON for success and failure indicators. AWS WAF can inspect the first 65,536 bytes (64 KB) of the response JSON.

func (WebAclResponseInspectionOutput) StatusCode added in v0.72.0

Configures inspection of the response status code for success and failure indicators.

func (WebAclResponseInspectionOutput) ToWebAclResponseInspectionOutput added in v0.72.0

func (o WebAclResponseInspectionOutput) ToWebAclResponseInspectionOutput() WebAclResponseInspectionOutput

func (WebAclResponseInspectionOutput) ToWebAclResponseInspectionOutputWithContext added in v0.72.0

func (o WebAclResponseInspectionOutput) ToWebAclResponseInspectionOutputWithContext(ctx context.Context) WebAclResponseInspectionOutput

func (WebAclResponseInspectionOutput) ToWebAclResponseInspectionPtrOutput added in v0.72.0

func (o WebAclResponseInspectionOutput) ToWebAclResponseInspectionPtrOutput() WebAclResponseInspectionPtrOutput

func (WebAclResponseInspectionOutput) ToWebAclResponseInspectionPtrOutputWithContext added in v0.72.0

func (o WebAclResponseInspectionOutput) ToWebAclResponseInspectionPtrOutputWithContext(ctx context.Context) WebAclResponseInspectionPtrOutput

type WebAclResponseInspectionPtrInput added in v0.72.0

type WebAclResponseInspectionPtrInput interface {
	pulumi.Input

	ToWebAclResponseInspectionPtrOutput() WebAclResponseInspectionPtrOutput
	ToWebAclResponseInspectionPtrOutputWithContext(context.Context) WebAclResponseInspectionPtrOutput
}

WebAclResponseInspectionPtrInput is an input type that accepts WebAclResponseInspectionArgs, WebAclResponseInspectionPtr and WebAclResponseInspectionPtrOutput values. You can construct a concrete instance of `WebAclResponseInspectionPtrInput` via:

        WebAclResponseInspectionArgs{...}

or:

        nil

func WebAclResponseInspectionPtr added in v0.72.0

func WebAclResponseInspectionPtr(v *WebAclResponseInspectionArgs) WebAclResponseInspectionPtrInput

type WebAclResponseInspectionPtrOutput added in v0.72.0

type WebAclResponseInspectionPtrOutput struct{ *pulumi.OutputState }

func (WebAclResponseInspectionPtrOutput) BodyContains added in v0.72.0

Configures inspection of the response body for success and failure indicators. AWS WAF can inspect the first 65,536 bytes (64 KB) of the response body.

func (WebAclResponseInspectionPtrOutput) Elem added in v0.72.0

func (WebAclResponseInspectionPtrOutput) ElementType added in v0.72.0

func (WebAclResponseInspectionPtrOutput) Header added in v0.72.0

Configures inspection of the response header for success and failure indicators.

func (WebAclResponseInspectionPtrOutput) Json added in v0.72.0

Configures inspection of the response JSON for success and failure indicators. AWS WAF can inspect the first 65,536 bytes (64 KB) of the response JSON.

func (WebAclResponseInspectionPtrOutput) StatusCode added in v0.72.0

Configures inspection of the response status code for success and failure indicators.

func (WebAclResponseInspectionPtrOutput) ToWebAclResponseInspectionPtrOutput added in v0.72.0

func (o WebAclResponseInspectionPtrOutput) ToWebAclResponseInspectionPtrOutput() WebAclResponseInspectionPtrOutput

func (WebAclResponseInspectionPtrOutput) ToWebAclResponseInspectionPtrOutputWithContext added in v0.72.0

func (o WebAclResponseInspectionPtrOutput) ToWebAclResponseInspectionPtrOutputWithContext(ctx context.Context) WebAclResponseInspectionPtrOutput

type WebAclResponseInspectionStatusCode added in v0.72.0

type WebAclResponseInspectionStatusCode struct {
	// Status codes in the response that indicate a failed login or account creation attempt. To be counted as a failure, the response status code must match one of these. Each code must be unique among the success and failure status codes.
	//
	// JSON example: `"FailureCodes": [ 400, 404 ]`
	FailureCodes []int `pulumi:"failureCodes"`
	// Status codes in the response that indicate a successful login or account creation attempt. To be counted as a success, the response status code must match one of these. Each code must be unique among the success and failure status codes.
	//
	// JSON example: `"SuccessCodes": [ 200, 201 ]`
	SuccessCodes []int `pulumi:"successCodes"`
}

Response status codes that indicate success or failure of a login request

type WebAclResponseInspectionStatusCodeArgs added in v0.72.0

type WebAclResponseInspectionStatusCodeArgs struct {
	// Status codes in the response that indicate a failed login or account creation attempt. To be counted as a failure, the response status code must match one of these. Each code must be unique among the success and failure status codes.
	//
	// JSON example: `"FailureCodes": [ 400, 404 ]`
	FailureCodes pulumi.IntArrayInput `pulumi:"failureCodes"`
	// Status codes in the response that indicate a successful login or account creation attempt. To be counted as a success, the response status code must match one of these. Each code must be unique among the success and failure status codes.
	//
	// JSON example: `"SuccessCodes": [ 200, 201 ]`
	SuccessCodes pulumi.IntArrayInput `pulumi:"successCodes"`
}

Response status codes that indicate success or failure of a login request

func (WebAclResponseInspectionStatusCodeArgs) ElementType added in v0.72.0

func (WebAclResponseInspectionStatusCodeArgs) ToWebAclResponseInspectionStatusCodeOutput added in v0.72.0

func (i WebAclResponseInspectionStatusCodeArgs) ToWebAclResponseInspectionStatusCodeOutput() WebAclResponseInspectionStatusCodeOutput

func (WebAclResponseInspectionStatusCodeArgs) ToWebAclResponseInspectionStatusCodeOutputWithContext added in v0.72.0

func (i WebAclResponseInspectionStatusCodeArgs) ToWebAclResponseInspectionStatusCodeOutputWithContext(ctx context.Context) WebAclResponseInspectionStatusCodeOutput

func (WebAclResponseInspectionStatusCodeArgs) ToWebAclResponseInspectionStatusCodePtrOutput added in v0.72.0

func (i WebAclResponseInspectionStatusCodeArgs) ToWebAclResponseInspectionStatusCodePtrOutput() WebAclResponseInspectionStatusCodePtrOutput

func (WebAclResponseInspectionStatusCodeArgs) ToWebAclResponseInspectionStatusCodePtrOutputWithContext added in v0.72.0

func (i WebAclResponseInspectionStatusCodeArgs) ToWebAclResponseInspectionStatusCodePtrOutputWithContext(ctx context.Context) WebAclResponseInspectionStatusCodePtrOutput

type WebAclResponseInspectionStatusCodeInput added in v0.72.0

type WebAclResponseInspectionStatusCodeInput interface {
	pulumi.Input

	ToWebAclResponseInspectionStatusCodeOutput() WebAclResponseInspectionStatusCodeOutput
	ToWebAclResponseInspectionStatusCodeOutputWithContext(context.Context) WebAclResponseInspectionStatusCodeOutput
}

WebAclResponseInspectionStatusCodeInput is an input type that accepts WebAclResponseInspectionStatusCodeArgs and WebAclResponseInspectionStatusCodeOutput values. You can construct a concrete instance of `WebAclResponseInspectionStatusCodeInput` via:

WebAclResponseInspectionStatusCodeArgs{...}

type WebAclResponseInspectionStatusCodeOutput added in v0.72.0

type WebAclResponseInspectionStatusCodeOutput struct{ *pulumi.OutputState }

Response status codes that indicate success or failure of a login request

func (WebAclResponseInspectionStatusCodeOutput) ElementType added in v0.72.0

func (WebAclResponseInspectionStatusCodeOutput) FailureCodes added in v0.72.0

Status codes in the response that indicate a failed login or account creation attempt. To be counted as a failure, the response status code must match one of these. Each code must be unique among the success and failure status codes.

JSON example: `"FailureCodes": [ 400, 404 ]`

func (WebAclResponseInspectionStatusCodeOutput) SuccessCodes added in v0.72.0

Status codes in the response that indicate a successful login or account creation attempt. To be counted as a success, the response status code must match one of these. Each code must be unique among the success and failure status codes.

JSON example: `"SuccessCodes": [ 200, 201 ]`

func (WebAclResponseInspectionStatusCodeOutput) ToWebAclResponseInspectionStatusCodeOutput added in v0.72.0

func (o WebAclResponseInspectionStatusCodeOutput) ToWebAclResponseInspectionStatusCodeOutput() WebAclResponseInspectionStatusCodeOutput

func (WebAclResponseInspectionStatusCodeOutput) ToWebAclResponseInspectionStatusCodeOutputWithContext added in v0.72.0

func (o WebAclResponseInspectionStatusCodeOutput) ToWebAclResponseInspectionStatusCodeOutputWithContext(ctx context.Context) WebAclResponseInspectionStatusCodeOutput

func (WebAclResponseInspectionStatusCodeOutput) ToWebAclResponseInspectionStatusCodePtrOutput added in v0.72.0

func (o WebAclResponseInspectionStatusCodeOutput) ToWebAclResponseInspectionStatusCodePtrOutput() WebAclResponseInspectionStatusCodePtrOutput

func (WebAclResponseInspectionStatusCodeOutput) ToWebAclResponseInspectionStatusCodePtrOutputWithContext added in v0.72.0

func (o WebAclResponseInspectionStatusCodeOutput) ToWebAclResponseInspectionStatusCodePtrOutputWithContext(ctx context.Context) WebAclResponseInspectionStatusCodePtrOutput

type WebAclResponseInspectionStatusCodePtrInput added in v0.72.0

type WebAclResponseInspectionStatusCodePtrInput interface {
	pulumi.Input

	ToWebAclResponseInspectionStatusCodePtrOutput() WebAclResponseInspectionStatusCodePtrOutput
	ToWebAclResponseInspectionStatusCodePtrOutputWithContext(context.Context) WebAclResponseInspectionStatusCodePtrOutput
}

WebAclResponseInspectionStatusCodePtrInput is an input type that accepts WebAclResponseInspectionStatusCodeArgs, WebAclResponseInspectionStatusCodePtr and WebAclResponseInspectionStatusCodePtrOutput values. You can construct a concrete instance of `WebAclResponseInspectionStatusCodePtrInput` via:

        WebAclResponseInspectionStatusCodeArgs{...}

or:

        nil

type WebAclResponseInspectionStatusCodePtrOutput added in v0.72.0

type WebAclResponseInspectionStatusCodePtrOutput struct{ *pulumi.OutputState }

func (WebAclResponseInspectionStatusCodePtrOutput) Elem added in v0.72.0

func (WebAclResponseInspectionStatusCodePtrOutput) ElementType added in v0.72.0

func (WebAclResponseInspectionStatusCodePtrOutput) FailureCodes added in v0.72.0

Status codes in the response that indicate a failed login or account creation attempt. To be counted as a failure, the response status code must match one of these. Each code must be unique among the success and failure status codes.

JSON example: `"FailureCodes": [ 400, 404 ]`

func (WebAclResponseInspectionStatusCodePtrOutput) SuccessCodes added in v0.72.0

Status codes in the response that indicate a successful login or account creation attempt. To be counted as a success, the response status code must match one of these. Each code must be unique among the success and failure status codes.

JSON example: `"SuccessCodes": [ 200, 201 ]`

func (WebAclResponseInspectionStatusCodePtrOutput) ToWebAclResponseInspectionStatusCodePtrOutput added in v0.72.0

func (o WebAclResponseInspectionStatusCodePtrOutput) ToWebAclResponseInspectionStatusCodePtrOutput() WebAclResponseInspectionStatusCodePtrOutput

func (WebAclResponseInspectionStatusCodePtrOutput) ToWebAclResponseInspectionStatusCodePtrOutputWithContext added in v0.72.0

func (o WebAclResponseInspectionStatusCodePtrOutput) ToWebAclResponseInspectionStatusCodePtrOutputWithContext(ctx context.Context) WebAclResponseInspectionStatusCodePtrOutput

type WebAclRule added in v0.72.0

type WebAclRule struct {
	// The action that AWS WAF should take on a web request when it matches the rule's statement. Settings at the web ACL level can override the rule action setting.
	//
	// This is used only for rules whose statements don't reference a rule group. Rule statements that reference a rule group are `RuleGroupReferenceStatement` and `ManagedRuleGroupStatement` .
	//
	// You must set either this `Action` setting or the rule's `OverrideAction` , but not both:
	//
	// - If the rule statement doesn't reference a rule group, you must set this rule action setting and you must not set the rule's override action setting.
	// - If the rule statement references a rule group, you must not set this action setting, because the actions are already set on the rules inside the rule group. You must set the rule's override action setting to indicate specifically whether to override the actions that are set on the rules in the rule group.
	Action *WebAclRuleAction `pulumi:"action"`
	// Specifies how AWS WAF should handle `CAPTCHA` evaluations. If you don't specify this, AWS WAF uses the `CAPTCHA` configuration that's defined for the web ACL.
	CaptchaConfig *WebAclCaptchaConfig `pulumi:"captchaConfig"`
	// Specifies how AWS WAF should handle `Challenge` evaluations. If you don't specify this, AWS WAF uses the challenge configuration that's defined for the web ACL.
	ChallengeConfig *WebAclChallengeConfig `pulumi:"challengeConfig"`
	// The name of the rule.
	//
	// If you change the name of a `Rule` after you create it and you want the rule's metric name to reflect the change, update the metric name in the rule's `VisibilityConfig` settings. AWS WAF doesn't automatically update the metric name when you update the rule name.
	Name string `pulumi:"name"`
	// The override action to apply to the rules in a rule group, instead of the individual rule action settings. This is used only for rules whose statements reference a rule group. Rule statements that reference a rule group are `RuleGroupReferenceStatement` and `ManagedRuleGroupStatement` .
	//
	// Set the override action to none to leave the rule group rule actions in effect. Set it to count to only count matches, regardless of the rule action settings.
	//
	// You must set either this `OverrideAction` setting or the `Action` setting, but not both:
	//
	// - If the rule statement references a rule group, you must set this override action setting and you must not set the rule's action setting.
	// - If the rule statement doesn't reference a rule group, you must set the rule action setting and you must not set the rule's override action setting.
	OverrideAction *WebAclOverrideAction `pulumi:"overrideAction"`
	// If you define more than one `Rule` in a `WebACL` , AWS WAF evaluates each request against the `Rules` in order based on the value of `Priority` . AWS WAF processes rules with lower priority first. The priorities don't need to be consecutive, but they must all be different.
	Priority int `pulumi:"priority"`
	// Collection of Rule Labels.
	RuleLabels []WebAclLabel `pulumi:"ruleLabels"`
	// The AWS WAF processing statement for the rule, for example `ByteMatchStatement` or `SizeConstraintStatement` .
	Statement WebAclStatement `pulumi:"statement"`
	// Defines and enables Amazon CloudWatch metrics and web request sample collection.
	//
	// If you change the name of a `Rule` after you create it and you want the rule's metric name to reflect the change, update the metric name as well. AWS WAF doesn't automatically update the metric name.
	VisibilityConfig WebAclVisibilityConfig `pulumi:"visibilityConfig"`
}

Rule of WebACL that contains condition and action.

type WebAclRuleAction added in v0.72.0

type WebAclRuleAction struct {
	// Instructs AWS WAF to allow the web request.
	Allow *WebAclAllowAction `pulumi:"allow"`
	// Instructs AWS WAF to block the web request.
	Block *WebAclBlockAction `pulumi:"block"`
	// Specifies that AWS WAF should run a `CAPTCHA` check against the request:
	//
	// - If the request includes a valid, unexpired `CAPTCHA` token, AWS WAF allows the web request inspection to proceed to the next rule, similar to a `CountAction` .
	// - If the request doesn't include a valid, unexpired `CAPTCHA` token, AWS WAF discontinues the web ACL evaluation of the request and blocks it from going to its intended destination.
	//
	// AWS WAF generates a response that it sends back to the client, which includes the following:
	//
	// - The header `x-amzn-waf-action` with a value of `captcha` .
	// - The HTTP status code `405 Method Not Allowed` .
	// - If the request contains an `Accept` header with a value of `text/html` , the response includes a `CAPTCHA` challenge.
	//
	// You can configure the expiration time in the `CaptchaConfig` `ImmunityTimeProperty` setting at the rule and web ACL level. The rule setting overrides the web ACL setting.
	//
	// This action option is available for rules. It isn't available for web ACL default actions.
	Captcha *WebAclCaptchaAction `pulumi:"captcha"`
	// Instructs AWS WAF to run a `Challenge` check against the web request.
	Challenge *WebAclChallengeAction `pulumi:"challenge"`
	// Instructs AWS WAF to count the web request and then continue evaluating the request using the remaining rules in the web ACL.
	Count *WebAclCountAction `pulumi:"count"`
}

Action taken when Rule matches its condition.

type WebAclRuleActionArgs added in v0.72.0

type WebAclRuleActionArgs struct {
	// Instructs AWS WAF to allow the web request.
	Allow WebAclAllowActionPtrInput `pulumi:"allow"`
	// Instructs AWS WAF to block the web request.
	Block WebAclBlockActionPtrInput `pulumi:"block"`
	// Specifies that AWS WAF should run a `CAPTCHA` check against the request:
	//
	// - If the request includes a valid, unexpired `CAPTCHA` token, AWS WAF allows the web request inspection to proceed to the next rule, similar to a `CountAction` .
	// - If the request doesn't include a valid, unexpired `CAPTCHA` token, AWS WAF discontinues the web ACL evaluation of the request and blocks it from going to its intended destination.
	//
	// AWS WAF generates a response that it sends back to the client, which includes the following:
	//
	// - The header `x-amzn-waf-action` with a value of `captcha` .
	// - The HTTP status code `405 Method Not Allowed` .
	// - If the request contains an `Accept` header with a value of `text/html` , the response includes a `CAPTCHA` challenge.
	//
	// You can configure the expiration time in the `CaptchaConfig` `ImmunityTimeProperty` setting at the rule and web ACL level. The rule setting overrides the web ACL setting.
	//
	// This action option is available for rules. It isn't available for web ACL default actions.
	Captcha WebAclCaptchaActionPtrInput `pulumi:"captcha"`
	// Instructs AWS WAF to run a `Challenge` check against the web request.
	Challenge WebAclChallengeActionPtrInput `pulumi:"challenge"`
	// Instructs AWS WAF to count the web request and then continue evaluating the request using the remaining rules in the web ACL.
	Count WebAclCountActionPtrInput `pulumi:"count"`
}

Action taken when Rule matches its condition.

func (WebAclRuleActionArgs) ElementType added in v0.72.0

func (WebAclRuleActionArgs) ElementType() reflect.Type

func (WebAclRuleActionArgs) ToWebAclRuleActionOutput added in v0.72.0

func (i WebAclRuleActionArgs) ToWebAclRuleActionOutput() WebAclRuleActionOutput

func (WebAclRuleActionArgs) ToWebAclRuleActionOutputWithContext added in v0.72.0

func (i WebAclRuleActionArgs) ToWebAclRuleActionOutputWithContext(ctx context.Context) WebAclRuleActionOutput

func (WebAclRuleActionArgs) ToWebAclRuleActionPtrOutput added in v0.72.0

func (i WebAclRuleActionArgs) ToWebAclRuleActionPtrOutput() WebAclRuleActionPtrOutput

func (WebAclRuleActionArgs) ToWebAclRuleActionPtrOutputWithContext added in v0.72.0

func (i WebAclRuleActionArgs) ToWebAclRuleActionPtrOutputWithContext(ctx context.Context) WebAclRuleActionPtrOutput

type WebAclRuleActionInput added in v0.72.0

type WebAclRuleActionInput interface {
	pulumi.Input

	ToWebAclRuleActionOutput() WebAclRuleActionOutput
	ToWebAclRuleActionOutputWithContext(context.Context) WebAclRuleActionOutput
}

WebAclRuleActionInput is an input type that accepts WebAclRuleActionArgs and WebAclRuleActionOutput values. You can construct a concrete instance of `WebAclRuleActionInput` via:

WebAclRuleActionArgs{...}

type WebAclRuleActionOutput added in v0.72.0

type WebAclRuleActionOutput struct{ *pulumi.OutputState }

Action taken when Rule matches its condition.

func (WebAclRuleActionOutput) Allow added in v0.72.0

Instructs AWS WAF to allow the web request.

func (WebAclRuleActionOutput) Block added in v0.72.0

Instructs AWS WAF to block the web request.

func (WebAclRuleActionOutput) Captcha added in v0.72.0

Specifies that AWS WAF should run a `CAPTCHA` check against the request:

- If the request includes a valid, unexpired `CAPTCHA` token, AWS WAF allows the web request inspection to proceed to the next rule, similar to a `CountAction` . - If the request doesn't include a valid, unexpired `CAPTCHA` token, AWS WAF discontinues the web ACL evaluation of the request and blocks it from going to its intended destination.

AWS WAF generates a response that it sends back to the client, which includes the following:

- The header `x-amzn-waf-action` with a value of `captcha` . - The HTTP status code `405 Method Not Allowed` . - If the request contains an `Accept` header with a value of `text/html` , the response includes a `CAPTCHA` challenge.

You can configure the expiration time in the `CaptchaConfig` `ImmunityTimeProperty` setting at the rule and web ACL level. The rule setting overrides the web ACL setting.

This action option is available for rules. It isn't available for web ACL default actions.

func (WebAclRuleActionOutput) Challenge added in v0.72.0

Instructs AWS WAF to run a `Challenge` check against the web request.

func (WebAclRuleActionOutput) Count added in v0.72.0

Instructs AWS WAF to count the web request and then continue evaluating the request using the remaining rules in the web ACL.

func (WebAclRuleActionOutput) ElementType added in v0.72.0

func (WebAclRuleActionOutput) ElementType() reflect.Type

func (WebAclRuleActionOutput) ToWebAclRuleActionOutput added in v0.72.0

func (o WebAclRuleActionOutput) ToWebAclRuleActionOutput() WebAclRuleActionOutput

func (WebAclRuleActionOutput) ToWebAclRuleActionOutputWithContext added in v0.72.0

func (o WebAclRuleActionOutput) ToWebAclRuleActionOutputWithContext(ctx context.Context) WebAclRuleActionOutput

func (WebAclRuleActionOutput) ToWebAclRuleActionPtrOutput added in v0.72.0

func (o WebAclRuleActionOutput) ToWebAclRuleActionPtrOutput() WebAclRuleActionPtrOutput

func (WebAclRuleActionOutput) ToWebAclRuleActionPtrOutputWithContext added in v0.72.0

func (o WebAclRuleActionOutput) ToWebAclRuleActionPtrOutputWithContext(ctx context.Context) WebAclRuleActionPtrOutput

type WebAclRuleActionOverride added in v0.72.0

type WebAclRuleActionOverride struct {
	// The override action to use, in place of the configured action of the rule in the rule group.
	ActionToUse WebAclRuleAction `pulumi:"actionToUse"`
	// The name of the rule to override.
	Name string `pulumi:"name"`
}

Action override for rules in the rule group.

type WebAclRuleActionOverrideArgs added in v0.72.0

type WebAclRuleActionOverrideArgs struct {
	// The override action to use, in place of the configured action of the rule in the rule group.
	ActionToUse WebAclRuleActionInput `pulumi:"actionToUse"`
	// The name of the rule to override.
	Name pulumi.StringInput `pulumi:"name"`
}

Action override for rules in the rule group.

func (WebAclRuleActionOverrideArgs) ElementType added in v0.72.0

func (WebAclRuleActionOverrideArgs) ToWebAclRuleActionOverrideOutput added in v0.72.0

func (i WebAclRuleActionOverrideArgs) ToWebAclRuleActionOverrideOutput() WebAclRuleActionOverrideOutput

func (WebAclRuleActionOverrideArgs) ToWebAclRuleActionOverrideOutputWithContext added in v0.72.0

func (i WebAclRuleActionOverrideArgs) ToWebAclRuleActionOverrideOutputWithContext(ctx context.Context) WebAclRuleActionOverrideOutput

type WebAclRuleActionOverrideArray added in v0.72.0

type WebAclRuleActionOverrideArray []WebAclRuleActionOverrideInput

func (WebAclRuleActionOverrideArray) ElementType added in v0.72.0

func (WebAclRuleActionOverrideArray) ToWebAclRuleActionOverrideArrayOutput added in v0.72.0

func (i WebAclRuleActionOverrideArray) ToWebAclRuleActionOverrideArrayOutput() WebAclRuleActionOverrideArrayOutput

func (WebAclRuleActionOverrideArray) ToWebAclRuleActionOverrideArrayOutputWithContext added in v0.72.0

func (i WebAclRuleActionOverrideArray) ToWebAclRuleActionOverrideArrayOutputWithContext(ctx context.Context) WebAclRuleActionOverrideArrayOutput

type WebAclRuleActionOverrideArrayInput added in v0.72.0

type WebAclRuleActionOverrideArrayInput interface {
	pulumi.Input

	ToWebAclRuleActionOverrideArrayOutput() WebAclRuleActionOverrideArrayOutput
	ToWebAclRuleActionOverrideArrayOutputWithContext(context.Context) WebAclRuleActionOverrideArrayOutput
}

WebAclRuleActionOverrideArrayInput is an input type that accepts WebAclRuleActionOverrideArray and WebAclRuleActionOverrideArrayOutput values. You can construct a concrete instance of `WebAclRuleActionOverrideArrayInput` via:

WebAclRuleActionOverrideArray{ WebAclRuleActionOverrideArgs{...} }

type WebAclRuleActionOverrideArrayOutput added in v0.72.0

type WebAclRuleActionOverrideArrayOutput struct{ *pulumi.OutputState }

func (WebAclRuleActionOverrideArrayOutput) ElementType added in v0.72.0

func (WebAclRuleActionOverrideArrayOutput) Index added in v0.72.0

func (WebAclRuleActionOverrideArrayOutput) ToWebAclRuleActionOverrideArrayOutput added in v0.72.0

func (o WebAclRuleActionOverrideArrayOutput) ToWebAclRuleActionOverrideArrayOutput() WebAclRuleActionOverrideArrayOutput

func (WebAclRuleActionOverrideArrayOutput) ToWebAclRuleActionOverrideArrayOutputWithContext added in v0.72.0

func (o WebAclRuleActionOverrideArrayOutput) ToWebAclRuleActionOverrideArrayOutputWithContext(ctx context.Context) WebAclRuleActionOverrideArrayOutput

type WebAclRuleActionOverrideInput added in v0.72.0

type WebAclRuleActionOverrideInput interface {
	pulumi.Input

	ToWebAclRuleActionOverrideOutput() WebAclRuleActionOverrideOutput
	ToWebAclRuleActionOverrideOutputWithContext(context.Context) WebAclRuleActionOverrideOutput
}

WebAclRuleActionOverrideInput is an input type that accepts WebAclRuleActionOverrideArgs and WebAclRuleActionOverrideOutput values. You can construct a concrete instance of `WebAclRuleActionOverrideInput` via:

WebAclRuleActionOverrideArgs{...}

type WebAclRuleActionOverrideOutput added in v0.72.0

type WebAclRuleActionOverrideOutput struct{ *pulumi.OutputState }

Action override for rules in the rule group.

func (WebAclRuleActionOverrideOutput) ActionToUse added in v0.72.0

The override action to use, in place of the configured action of the rule in the rule group.

func (WebAclRuleActionOverrideOutput) ElementType added in v0.72.0

func (WebAclRuleActionOverrideOutput) Name added in v0.72.0

The name of the rule to override.

func (WebAclRuleActionOverrideOutput) ToWebAclRuleActionOverrideOutput added in v0.72.0

func (o WebAclRuleActionOverrideOutput) ToWebAclRuleActionOverrideOutput() WebAclRuleActionOverrideOutput

func (WebAclRuleActionOverrideOutput) ToWebAclRuleActionOverrideOutputWithContext added in v0.72.0

func (o WebAclRuleActionOverrideOutput) ToWebAclRuleActionOverrideOutputWithContext(ctx context.Context) WebAclRuleActionOverrideOutput

type WebAclRuleActionPtrInput added in v0.72.0

type WebAclRuleActionPtrInput interface {
	pulumi.Input

	ToWebAclRuleActionPtrOutput() WebAclRuleActionPtrOutput
	ToWebAclRuleActionPtrOutputWithContext(context.Context) WebAclRuleActionPtrOutput
}

WebAclRuleActionPtrInput is an input type that accepts WebAclRuleActionArgs, WebAclRuleActionPtr and WebAclRuleActionPtrOutput values. You can construct a concrete instance of `WebAclRuleActionPtrInput` via:

        WebAclRuleActionArgs{...}

or:

        nil

func WebAclRuleActionPtr added in v0.72.0

func WebAclRuleActionPtr(v *WebAclRuleActionArgs) WebAclRuleActionPtrInput

type WebAclRuleActionPtrOutput added in v0.72.0

type WebAclRuleActionPtrOutput struct{ *pulumi.OutputState }

func (WebAclRuleActionPtrOutput) Allow added in v0.72.0

Instructs AWS WAF to allow the web request.

func (WebAclRuleActionPtrOutput) Block added in v0.72.0

Instructs AWS WAF to block the web request.

func (WebAclRuleActionPtrOutput) Captcha added in v0.72.0

Specifies that AWS WAF should run a `CAPTCHA` check against the request:

- If the request includes a valid, unexpired `CAPTCHA` token, AWS WAF allows the web request inspection to proceed to the next rule, similar to a `CountAction` . - If the request doesn't include a valid, unexpired `CAPTCHA` token, AWS WAF discontinues the web ACL evaluation of the request and blocks it from going to its intended destination.

AWS WAF generates a response that it sends back to the client, which includes the following:

- The header `x-amzn-waf-action` with a value of `captcha` . - The HTTP status code `405 Method Not Allowed` . - If the request contains an `Accept` header with a value of `text/html` , the response includes a `CAPTCHA` challenge.

You can configure the expiration time in the `CaptchaConfig` `ImmunityTimeProperty` setting at the rule and web ACL level. The rule setting overrides the web ACL setting.

This action option is available for rules. It isn't available for web ACL default actions.

func (WebAclRuleActionPtrOutput) Challenge added in v0.72.0

Instructs AWS WAF to run a `Challenge` check against the web request.

func (WebAclRuleActionPtrOutput) Count added in v0.72.0

Instructs AWS WAF to count the web request and then continue evaluating the request using the remaining rules in the web ACL.

func (WebAclRuleActionPtrOutput) Elem added in v0.72.0

func (WebAclRuleActionPtrOutput) ElementType added in v0.72.0

func (WebAclRuleActionPtrOutput) ElementType() reflect.Type

func (WebAclRuleActionPtrOutput) ToWebAclRuleActionPtrOutput added in v0.72.0

func (o WebAclRuleActionPtrOutput) ToWebAclRuleActionPtrOutput() WebAclRuleActionPtrOutput

func (WebAclRuleActionPtrOutput) ToWebAclRuleActionPtrOutputWithContext added in v0.72.0

func (o WebAclRuleActionPtrOutput) ToWebAclRuleActionPtrOutputWithContext(ctx context.Context) WebAclRuleActionPtrOutput

type WebAclRuleArgs added in v0.72.0

type WebAclRuleArgs struct {
	// The action that AWS WAF should take on a web request when it matches the rule's statement. Settings at the web ACL level can override the rule action setting.
	//
	// This is used only for rules whose statements don't reference a rule group. Rule statements that reference a rule group are `RuleGroupReferenceStatement` and `ManagedRuleGroupStatement` .
	//
	// You must set either this `Action` setting or the rule's `OverrideAction` , but not both:
	//
	// - If the rule statement doesn't reference a rule group, you must set this rule action setting and you must not set the rule's override action setting.
	// - If the rule statement references a rule group, you must not set this action setting, because the actions are already set on the rules inside the rule group. You must set the rule's override action setting to indicate specifically whether to override the actions that are set on the rules in the rule group.
	Action WebAclRuleActionPtrInput `pulumi:"action"`
	// Specifies how AWS WAF should handle `CAPTCHA` evaluations. If you don't specify this, AWS WAF uses the `CAPTCHA` configuration that's defined for the web ACL.
	CaptchaConfig WebAclCaptchaConfigPtrInput `pulumi:"captchaConfig"`
	// Specifies how AWS WAF should handle `Challenge` evaluations. If you don't specify this, AWS WAF uses the challenge configuration that's defined for the web ACL.
	ChallengeConfig WebAclChallengeConfigPtrInput `pulumi:"challengeConfig"`
	// The name of the rule.
	//
	// If you change the name of a `Rule` after you create it and you want the rule's metric name to reflect the change, update the metric name in the rule's `VisibilityConfig` settings. AWS WAF doesn't automatically update the metric name when you update the rule name.
	Name pulumi.StringInput `pulumi:"name"`
	// The override action to apply to the rules in a rule group, instead of the individual rule action settings. This is used only for rules whose statements reference a rule group. Rule statements that reference a rule group are `RuleGroupReferenceStatement` and `ManagedRuleGroupStatement` .
	//
	// Set the override action to none to leave the rule group rule actions in effect. Set it to count to only count matches, regardless of the rule action settings.
	//
	// You must set either this `OverrideAction` setting or the `Action` setting, but not both:
	//
	// - If the rule statement references a rule group, you must set this override action setting and you must not set the rule's action setting.
	// - If the rule statement doesn't reference a rule group, you must set the rule action setting and you must not set the rule's override action setting.
	OverrideAction WebAclOverrideActionPtrInput `pulumi:"overrideAction"`
	// If you define more than one `Rule` in a `WebACL` , AWS WAF evaluates each request against the `Rules` in order based on the value of `Priority` . AWS WAF processes rules with lower priority first. The priorities don't need to be consecutive, but they must all be different.
	Priority pulumi.IntInput `pulumi:"priority"`
	// Collection of Rule Labels.
	RuleLabels WebAclLabelArrayInput `pulumi:"ruleLabels"`
	// The AWS WAF processing statement for the rule, for example `ByteMatchStatement` or `SizeConstraintStatement` .
	Statement WebAclStatementInput `pulumi:"statement"`
	// Defines and enables Amazon CloudWatch metrics and web request sample collection.
	//
	// If you change the name of a `Rule` after you create it and you want the rule's metric name to reflect the change, update the metric name as well. AWS WAF doesn't automatically update the metric name.
	VisibilityConfig WebAclVisibilityConfigInput `pulumi:"visibilityConfig"`
}

Rule of WebACL that contains condition and action.

func (WebAclRuleArgs) ElementType added in v0.72.0

func (WebAclRuleArgs) ElementType() reflect.Type

func (WebAclRuleArgs) ToWebAclRuleOutput added in v0.72.0

func (i WebAclRuleArgs) ToWebAclRuleOutput() WebAclRuleOutput

func (WebAclRuleArgs) ToWebAclRuleOutputWithContext added in v0.72.0

func (i WebAclRuleArgs) ToWebAclRuleOutputWithContext(ctx context.Context) WebAclRuleOutput

type WebAclRuleArray added in v0.72.0

type WebAclRuleArray []WebAclRuleInput

func (WebAclRuleArray) ElementType added in v0.72.0

func (WebAclRuleArray) ElementType() reflect.Type

func (WebAclRuleArray) ToWebAclRuleArrayOutput added in v0.72.0

func (i WebAclRuleArray) ToWebAclRuleArrayOutput() WebAclRuleArrayOutput

func (WebAclRuleArray) ToWebAclRuleArrayOutputWithContext added in v0.72.0

func (i WebAclRuleArray) ToWebAclRuleArrayOutputWithContext(ctx context.Context) WebAclRuleArrayOutput

type WebAclRuleArrayInput added in v0.72.0

type WebAclRuleArrayInput interface {
	pulumi.Input

	ToWebAclRuleArrayOutput() WebAclRuleArrayOutput
	ToWebAclRuleArrayOutputWithContext(context.Context) WebAclRuleArrayOutput
}

WebAclRuleArrayInput is an input type that accepts WebAclRuleArray and WebAclRuleArrayOutput values. You can construct a concrete instance of `WebAclRuleArrayInput` via:

WebAclRuleArray{ WebAclRuleArgs{...} }

type WebAclRuleArrayOutput added in v0.72.0

type WebAclRuleArrayOutput struct{ *pulumi.OutputState }

func (WebAclRuleArrayOutput) ElementType added in v0.72.0

func (WebAclRuleArrayOutput) ElementType() reflect.Type

func (WebAclRuleArrayOutput) Index added in v0.72.0

func (WebAclRuleArrayOutput) ToWebAclRuleArrayOutput added in v0.72.0

func (o WebAclRuleArrayOutput) ToWebAclRuleArrayOutput() WebAclRuleArrayOutput

func (WebAclRuleArrayOutput) ToWebAclRuleArrayOutputWithContext added in v0.72.0

func (o WebAclRuleArrayOutput) ToWebAclRuleArrayOutputWithContext(ctx context.Context) WebAclRuleArrayOutput

type WebAclRuleGroupReferenceStatement added in v0.72.0

type WebAclRuleGroupReferenceStatement struct {
	// The Amazon Resource Name (ARN) of the entity.
	Arn string `pulumi:"arn"`
	// Rules in the referenced rule group whose actions are set to `Count` .
	//
	// > Instead of this option, use `RuleActionOverrides` . It accepts any valid action setting, including `Count` .
	ExcludedRules []WebAclExcludedRule `pulumi:"excludedRules"`
	// Action overrides for rules in the rule group.
	RuleActionOverrides []WebAclRuleActionOverride `pulumi:"ruleActionOverrides"`
}

type WebAclRuleGroupReferenceStatementArgs added in v0.72.0

type WebAclRuleGroupReferenceStatementArgs struct {
	// The Amazon Resource Name (ARN) of the entity.
	Arn pulumi.StringInput `pulumi:"arn"`
	// Rules in the referenced rule group whose actions are set to `Count` .
	//
	// > Instead of this option, use `RuleActionOverrides` . It accepts any valid action setting, including `Count` .
	ExcludedRules WebAclExcludedRuleArrayInput `pulumi:"excludedRules"`
	// Action overrides for rules in the rule group.
	RuleActionOverrides WebAclRuleActionOverrideArrayInput `pulumi:"ruleActionOverrides"`
}

func (WebAclRuleGroupReferenceStatementArgs) ElementType added in v0.72.0

func (WebAclRuleGroupReferenceStatementArgs) ToWebAclRuleGroupReferenceStatementOutput added in v0.72.0

func (i WebAclRuleGroupReferenceStatementArgs) ToWebAclRuleGroupReferenceStatementOutput() WebAclRuleGroupReferenceStatementOutput

func (WebAclRuleGroupReferenceStatementArgs) ToWebAclRuleGroupReferenceStatementOutputWithContext added in v0.72.0

func (i WebAclRuleGroupReferenceStatementArgs) ToWebAclRuleGroupReferenceStatementOutputWithContext(ctx context.Context) WebAclRuleGroupReferenceStatementOutput

func (WebAclRuleGroupReferenceStatementArgs) ToWebAclRuleGroupReferenceStatementPtrOutput added in v0.72.0

func (i WebAclRuleGroupReferenceStatementArgs) ToWebAclRuleGroupReferenceStatementPtrOutput() WebAclRuleGroupReferenceStatementPtrOutput

func (WebAclRuleGroupReferenceStatementArgs) ToWebAclRuleGroupReferenceStatementPtrOutputWithContext added in v0.72.0

func (i WebAclRuleGroupReferenceStatementArgs) ToWebAclRuleGroupReferenceStatementPtrOutputWithContext(ctx context.Context) WebAclRuleGroupReferenceStatementPtrOutput

type WebAclRuleGroupReferenceStatementInput added in v0.72.0

type WebAclRuleGroupReferenceStatementInput interface {
	pulumi.Input

	ToWebAclRuleGroupReferenceStatementOutput() WebAclRuleGroupReferenceStatementOutput
	ToWebAclRuleGroupReferenceStatementOutputWithContext(context.Context) WebAclRuleGroupReferenceStatementOutput
}

WebAclRuleGroupReferenceStatementInput is an input type that accepts WebAclRuleGroupReferenceStatementArgs and WebAclRuleGroupReferenceStatementOutput values. You can construct a concrete instance of `WebAclRuleGroupReferenceStatementInput` via:

WebAclRuleGroupReferenceStatementArgs{...}

type WebAclRuleGroupReferenceStatementOutput added in v0.72.0

type WebAclRuleGroupReferenceStatementOutput struct{ *pulumi.OutputState }

func (WebAclRuleGroupReferenceStatementOutput) Arn added in v0.72.0

The Amazon Resource Name (ARN) of the entity.

func (WebAclRuleGroupReferenceStatementOutput) ElementType added in v0.72.0

func (WebAclRuleGroupReferenceStatementOutput) ExcludedRules added in v0.72.0

Rules in the referenced rule group whose actions are set to `Count` .

> Instead of this option, use `RuleActionOverrides` . It accepts any valid action setting, including `Count` .

func (WebAclRuleGroupReferenceStatementOutput) RuleActionOverrides added in v0.72.0

Action overrides for rules in the rule group.

func (WebAclRuleGroupReferenceStatementOutput) ToWebAclRuleGroupReferenceStatementOutput added in v0.72.0

func (o WebAclRuleGroupReferenceStatementOutput) ToWebAclRuleGroupReferenceStatementOutput() WebAclRuleGroupReferenceStatementOutput

func (WebAclRuleGroupReferenceStatementOutput) ToWebAclRuleGroupReferenceStatementOutputWithContext added in v0.72.0

func (o WebAclRuleGroupReferenceStatementOutput) ToWebAclRuleGroupReferenceStatementOutputWithContext(ctx context.Context) WebAclRuleGroupReferenceStatementOutput

func (WebAclRuleGroupReferenceStatementOutput) ToWebAclRuleGroupReferenceStatementPtrOutput added in v0.72.0

func (o WebAclRuleGroupReferenceStatementOutput) ToWebAclRuleGroupReferenceStatementPtrOutput() WebAclRuleGroupReferenceStatementPtrOutput

func (WebAclRuleGroupReferenceStatementOutput) ToWebAclRuleGroupReferenceStatementPtrOutputWithContext added in v0.72.0

func (o WebAclRuleGroupReferenceStatementOutput) ToWebAclRuleGroupReferenceStatementPtrOutputWithContext(ctx context.Context) WebAclRuleGroupReferenceStatementPtrOutput

type WebAclRuleGroupReferenceStatementPtrInput added in v0.72.0

type WebAclRuleGroupReferenceStatementPtrInput interface {
	pulumi.Input

	ToWebAclRuleGroupReferenceStatementPtrOutput() WebAclRuleGroupReferenceStatementPtrOutput
	ToWebAclRuleGroupReferenceStatementPtrOutputWithContext(context.Context) WebAclRuleGroupReferenceStatementPtrOutput
}

WebAclRuleGroupReferenceStatementPtrInput is an input type that accepts WebAclRuleGroupReferenceStatementArgs, WebAclRuleGroupReferenceStatementPtr and WebAclRuleGroupReferenceStatementPtrOutput values. You can construct a concrete instance of `WebAclRuleGroupReferenceStatementPtrInput` via:

        WebAclRuleGroupReferenceStatementArgs{...}

or:

        nil

type WebAclRuleGroupReferenceStatementPtrOutput added in v0.72.0

type WebAclRuleGroupReferenceStatementPtrOutput struct{ *pulumi.OutputState }

func (WebAclRuleGroupReferenceStatementPtrOutput) Arn added in v0.72.0

The Amazon Resource Name (ARN) of the entity.

func (WebAclRuleGroupReferenceStatementPtrOutput) Elem added in v0.72.0

func (WebAclRuleGroupReferenceStatementPtrOutput) ElementType added in v0.72.0

func (WebAclRuleGroupReferenceStatementPtrOutput) ExcludedRules added in v0.72.0

Rules in the referenced rule group whose actions are set to `Count` .

> Instead of this option, use `RuleActionOverrides` . It accepts any valid action setting, including `Count` .

func (WebAclRuleGroupReferenceStatementPtrOutput) RuleActionOverrides added in v0.72.0

Action overrides for rules in the rule group.

func (WebAclRuleGroupReferenceStatementPtrOutput) ToWebAclRuleGroupReferenceStatementPtrOutput added in v0.72.0

func (o WebAclRuleGroupReferenceStatementPtrOutput) ToWebAclRuleGroupReferenceStatementPtrOutput() WebAclRuleGroupReferenceStatementPtrOutput

func (WebAclRuleGroupReferenceStatementPtrOutput) ToWebAclRuleGroupReferenceStatementPtrOutputWithContext added in v0.72.0

func (o WebAclRuleGroupReferenceStatementPtrOutput) ToWebAclRuleGroupReferenceStatementPtrOutputWithContext(ctx context.Context) WebAclRuleGroupReferenceStatementPtrOutput

type WebAclRuleInput added in v0.72.0

type WebAclRuleInput interface {
	pulumi.Input

	ToWebAclRuleOutput() WebAclRuleOutput
	ToWebAclRuleOutputWithContext(context.Context) WebAclRuleOutput
}

WebAclRuleInput is an input type that accepts WebAclRuleArgs and WebAclRuleOutput values. You can construct a concrete instance of `WebAclRuleInput` via:

WebAclRuleArgs{...}

type WebAclRuleOutput added in v0.72.0

type WebAclRuleOutput struct{ *pulumi.OutputState }

Rule of WebACL that contains condition and action.

func (WebAclRuleOutput) Action added in v0.72.0

The action that AWS WAF should take on a web request when it matches the rule's statement. Settings at the web ACL level can override the rule action setting.

This is used only for rules whose statements don't reference a rule group. Rule statements that reference a rule group are `RuleGroupReferenceStatement` and `ManagedRuleGroupStatement` .

You must set either this `Action` setting or the rule's `OverrideAction` , but not both:

- If the rule statement doesn't reference a rule group, you must set this rule action setting and you must not set the rule's override action setting. - If the rule statement references a rule group, you must not set this action setting, because the actions are already set on the rules inside the rule group. You must set the rule's override action setting to indicate specifically whether to override the actions that are set on the rules in the rule group.

func (WebAclRuleOutput) CaptchaConfig added in v0.72.0

Specifies how AWS WAF should handle `CAPTCHA` evaluations. If you don't specify this, AWS WAF uses the `CAPTCHA` configuration that's defined for the web ACL.

func (WebAclRuleOutput) ChallengeConfig added in v0.72.0

Specifies how AWS WAF should handle `Challenge` evaluations. If you don't specify this, AWS WAF uses the challenge configuration that's defined for the web ACL.

func (WebAclRuleOutput) ElementType added in v0.72.0

func (WebAclRuleOutput) ElementType() reflect.Type

func (WebAclRuleOutput) Name added in v0.72.0

The name of the rule.

If you change the name of a `Rule` after you create it and you want the rule's metric name to reflect the change, update the metric name in the rule's `VisibilityConfig` settings. AWS WAF doesn't automatically update the metric name when you update the rule name.

func (WebAclRuleOutput) OverrideAction added in v0.72.0

The override action to apply to the rules in a rule group, instead of the individual rule action settings. This is used only for rules whose statements reference a rule group. Rule statements that reference a rule group are `RuleGroupReferenceStatement` and `ManagedRuleGroupStatement` .

Set the override action to none to leave the rule group rule actions in effect. Set it to count to only count matches, regardless of the rule action settings.

You must set either this `OverrideAction` setting or the `Action` setting, but not both:

- If the rule statement references a rule group, you must set this override action setting and you must not set the rule's action setting. - If the rule statement doesn't reference a rule group, you must set the rule action setting and you must not set the rule's override action setting.

func (WebAclRuleOutput) Priority added in v0.72.0

func (o WebAclRuleOutput) Priority() pulumi.IntOutput

If you define more than one `Rule` in a `WebACL` , AWS WAF evaluates each request against the `Rules` in order based on the value of `Priority` . AWS WAF processes rules with lower priority first. The priorities don't need to be consecutive, but they must all be different.

func (WebAclRuleOutput) RuleLabels added in v0.72.0

Collection of Rule Labels.

func (WebAclRuleOutput) Statement added in v0.72.0

The AWS WAF processing statement for the rule, for example `ByteMatchStatement` or `SizeConstraintStatement` .

func (WebAclRuleOutput) ToWebAclRuleOutput added in v0.72.0

func (o WebAclRuleOutput) ToWebAclRuleOutput() WebAclRuleOutput

func (WebAclRuleOutput) ToWebAclRuleOutputWithContext added in v0.72.0

func (o WebAclRuleOutput) ToWebAclRuleOutputWithContext(ctx context.Context) WebAclRuleOutput

func (WebAclRuleOutput) VisibilityConfig added in v0.72.0

func (o WebAclRuleOutput) VisibilityConfig() WebAclVisibilityConfigOutput

Defines and enables Amazon CloudWatch metrics and web request sample collection.

If you change the name of a `Rule` after you create it and you want the rule's metric name to reflect the change, update the metric name as well. AWS WAF doesn't automatically update the metric name.

type WebAclScope added in v0.72.0

type WebAclScope string

Use CLOUDFRONT for CloudFront WebACL, use REGIONAL for Application Load Balancer and API Gateway.

func (WebAclScope) ElementType added in v0.72.0

func (WebAclScope) ElementType() reflect.Type

func (WebAclScope) ToStringOutput added in v0.72.0

func (e WebAclScope) ToStringOutput() pulumi.StringOutput

func (WebAclScope) ToStringOutputWithContext added in v0.72.0

func (e WebAclScope) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclScope) ToStringPtrOutput added in v0.72.0

func (e WebAclScope) ToStringPtrOutput() pulumi.StringPtrOutput

func (WebAclScope) ToStringPtrOutputWithContext added in v0.72.0

func (e WebAclScope) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclScope) ToWebAclScopeOutput added in v0.72.0

func (e WebAclScope) ToWebAclScopeOutput() WebAclScopeOutput

func (WebAclScope) ToWebAclScopeOutputWithContext added in v0.72.0

func (e WebAclScope) ToWebAclScopeOutputWithContext(ctx context.Context) WebAclScopeOutput

func (WebAclScope) ToWebAclScopePtrOutput added in v0.72.0

func (e WebAclScope) ToWebAclScopePtrOutput() WebAclScopePtrOutput

func (WebAclScope) ToWebAclScopePtrOutputWithContext added in v0.72.0

func (e WebAclScope) ToWebAclScopePtrOutputWithContext(ctx context.Context) WebAclScopePtrOutput

type WebAclScopeInput added in v0.72.0

type WebAclScopeInput interface {
	pulumi.Input

	ToWebAclScopeOutput() WebAclScopeOutput
	ToWebAclScopeOutputWithContext(context.Context) WebAclScopeOutput
}

WebAclScopeInput is an input type that accepts values of the WebAclScope enum A concrete instance of `WebAclScopeInput` can be one of the following:

WebAclScopeCloudfront
WebAclScopeRegional

type WebAclScopeOutput added in v0.72.0

type WebAclScopeOutput struct{ *pulumi.OutputState }

func (WebAclScopeOutput) ElementType added in v0.72.0

func (WebAclScopeOutput) ElementType() reflect.Type

func (WebAclScopeOutput) ToStringOutput added in v0.72.0

func (o WebAclScopeOutput) ToStringOutput() pulumi.StringOutput

func (WebAclScopeOutput) ToStringOutputWithContext added in v0.72.0

func (o WebAclScopeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclScopeOutput) ToStringPtrOutput added in v0.72.0

func (o WebAclScopeOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (WebAclScopeOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o WebAclScopeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclScopeOutput) ToWebAclScopeOutput added in v0.72.0

func (o WebAclScopeOutput) ToWebAclScopeOutput() WebAclScopeOutput

func (WebAclScopeOutput) ToWebAclScopeOutputWithContext added in v0.72.0

func (o WebAclScopeOutput) ToWebAclScopeOutputWithContext(ctx context.Context) WebAclScopeOutput

func (WebAclScopeOutput) ToWebAclScopePtrOutput added in v0.72.0

func (o WebAclScopeOutput) ToWebAclScopePtrOutput() WebAclScopePtrOutput

func (WebAclScopeOutput) ToWebAclScopePtrOutputWithContext added in v0.72.0

func (o WebAclScopeOutput) ToWebAclScopePtrOutputWithContext(ctx context.Context) WebAclScopePtrOutput

type WebAclScopePtrInput added in v0.72.0

type WebAclScopePtrInput interface {
	pulumi.Input

	ToWebAclScopePtrOutput() WebAclScopePtrOutput
	ToWebAclScopePtrOutputWithContext(context.Context) WebAclScopePtrOutput
}

func WebAclScopePtr added in v0.72.0

func WebAclScopePtr(v string) WebAclScopePtrInput

type WebAclScopePtrOutput added in v0.72.0

type WebAclScopePtrOutput struct{ *pulumi.OutputState }

func (WebAclScopePtrOutput) Elem added in v0.72.0

func (WebAclScopePtrOutput) ElementType added in v0.72.0

func (WebAclScopePtrOutput) ElementType() reflect.Type

func (WebAclScopePtrOutput) ToStringPtrOutput added in v0.72.0

func (o WebAclScopePtrOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (WebAclScopePtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o WebAclScopePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclScopePtrOutput) ToWebAclScopePtrOutput added in v0.72.0

func (o WebAclScopePtrOutput) ToWebAclScopePtrOutput() WebAclScopePtrOutput

func (WebAclScopePtrOutput) ToWebAclScopePtrOutputWithContext added in v0.72.0

func (o WebAclScopePtrOutput) ToWebAclScopePtrOutputWithContext(ctx context.Context) WebAclScopePtrOutput

type WebAclSensitivityLevel added in v0.72.0

type WebAclSensitivityLevel string

Sensitivity Level current only used for sqli match statements.

func (WebAclSensitivityLevel) ElementType added in v0.72.0

func (WebAclSensitivityLevel) ElementType() reflect.Type

func (WebAclSensitivityLevel) ToStringOutput added in v0.72.0

func (e WebAclSensitivityLevel) ToStringOutput() pulumi.StringOutput

func (WebAclSensitivityLevel) ToStringOutputWithContext added in v0.72.0

func (e WebAclSensitivityLevel) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclSensitivityLevel) ToStringPtrOutput added in v0.72.0

func (e WebAclSensitivityLevel) ToStringPtrOutput() pulumi.StringPtrOutput

func (WebAclSensitivityLevel) ToStringPtrOutputWithContext added in v0.72.0

func (e WebAclSensitivityLevel) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclSensitivityLevel) ToWebAclSensitivityLevelOutput added in v0.72.0

func (e WebAclSensitivityLevel) ToWebAclSensitivityLevelOutput() WebAclSensitivityLevelOutput

func (WebAclSensitivityLevel) ToWebAclSensitivityLevelOutputWithContext added in v0.72.0

func (e WebAclSensitivityLevel) ToWebAclSensitivityLevelOutputWithContext(ctx context.Context) WebAclSensitivityLevelOutput

func (WebAclSensitivityLevel) ToWebAclSensitivityLevelPtrOutput added in v0.72.0

func (e WebAclSensitivityLevel) ToWebAclSensitivityLevelPtrOutput() WebAclSensitivityLevelPtrOutput

func (WebAclSensitivityLevel) ToWebAclSensitivityLevelPtrOutputWithContext added in v0.72.0

func (e WebAclSensitivityLevel) ToWebAclSensitivityLevelPtrOutputWithContext(ctx context.Context) WebAclSensitivityLevelPtrOutput

type WebAclSensitivityLevelInput added in v0.72.0

type WebAclSensitivityLevelInput interface {
	pulumi.Input

	ToWebAclSensitivityLevelOutput() WebAclSensitivityLevelOutput
	ToWebAclSensitivityLevelOutputWithContext(context.Context) WebAclSensitivityLevelOutput
}

WebAclSensitivityLevelInput is an input type that accepts values of the WebAclSensitivityLevel enum A concrete instance of `WebAclSensitivityLevelInput` can be one of the following:

WebAclSensitivityLevelLow
WebAclSensitivityLevelHigh

type WebAclSensitivityLevelOutput added in v0.72.0

type WebAclSensitivityLevelOutput struct{ *pulumi.OutputState }

func (WebAclSensitivityLevelOutput) ElementType added in v0.72.0

func (WebAclSensitivityLevelOutput) ToStringOutput added in v0.72.0

func (WebAclSensitivityLevelOutput) ToStringOutputWithContext added in v0.72.0

func (o WebAclSensitivityLevelOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclSensitivityLevelOutput) ToStringPtrOutput added in v0.72.0

func (o WebAclSensitivityLevelOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (WebAclSensitivityLevelOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o WebAclSensitivityLevelOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclSensitivityLevelOutput) ToWebAclSensitivityLevelOutput added in v0.72.0

func (o WebAclSensitivityLevelOutput) ToWebAclSensitivityLevelOutput() WebAclSensitivityLevelOutput

func (WebAclSensitivityLevelOutput) ToWebAclSensitivityLevelOutputWithContext added in v0.72.0

func (o WebAclSensitivityLevelOutput) ToWebAclSensitivityLevelOutputWithContext(ctx context.Context) WebAclSensitivityLevelOutput

func (WebAclSensitivityLevelOutput) ToWebAclSensitivityLevelPtrOutput added in v0.72.0

func (o WebAclSensitivityLevelOutput) ToWebAclSensitivityLevelPtrOutput() WebAclSensitivityLevelPtrOutput

func (WebAclSensitivityLevelOutput) ToWebAclSensitivityLevelPtrOutputWithContext added in v0.72.0

func (o WebAclSensitivityLevelOutput) ToWebAclSensitivityLevelPtrOutputWithContext(ctx context.Context) WebAclSensitivityLevelPtrOutput

type WebAclSensitivityLevelPtrInput added in v0.72.0

type WebAclSensitivityLevelPtrInput interface {
	pulumi.Input

	ToWebAclSensitivityLevelPtrOutput() WebAclSensitivityLevelPtrOutput
	ToWebAclSensitivityLevelPtrOutputWithContext(context.Context) WebAclSensitivityLevelPtrOutput
}

func WebAclSensitivityLevelPtr added in v0.72.0

func WebAclSensitivityLevelPtr(v string) WebAclSensitivityLevelPtrInput

type WebAclSensitivityLevelPtrOutput added in v0.72.0

type WebAclSensitivityLevelPtrOutput struct{ *pulumi.OutputState }

func (WebAclSensitivityLevelPtrOutput) Elem added in v0.72.0

func (WebAclSensitivityLevelPtrOutput) ElementType added in v0.72.0

func (WebAclSensitivityLevelPtrOutput) ToStringPtrOutput added in v0.72.0

func (WebAclSensitivityLevelPtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o WebAclSensitivityLevelPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclSensitivityLevelPtrOutput) ToWebAclSensitivityLevelPtrOutput added in v0.72.0

func (o WebAclSensitivityLevelPtrOutput) ToWebAclSensitivityLevelPtrOutput() WebAclSensitivityLevelPtrOutput

func (WebAclSensitivityLevelPtrOutput) ToWebAclSensitivityLevelPtrOutputWithContext added in v0.72.0

func (o WebAclSensitivityLevelPtrOutput) ToWebAclSensitivityLevelPtrOutputWithContext(ctx context.Context) WebAclSensitivityLevelPtrOutput

type WebAclSizeConstraintStatement added in v0.72.0

type WebAclSizeConstraintStatement struct {
	// The operator to use to compare the request part to the size setting.
	ComparisonOperator WebAclSizeConstraintStatementComparisonOperator `pulumi:"comparisonOperator"`
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch WebAclFieldToMatch `pulumi:"fieldToMatch"`
	// The size, in byte, to compare to the request part, after any transformations.
	Size float64 `pulumi:"size"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations []WebAclTextTransformation `pulumi:"textTransformations"`
}

Size Constraint statement.

type WebAclSizeConstraintStatementArgs added in v0.72.0

type WebAclSizeConstraintStatementArgs struct {
	// The operator to use to compare the request part to the size setting.
	ComparisonOperator WebAclSizeConstraintStatementComparisonOperatorInput `pulumi:"comparisonOperator"`
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch WebAclFieldToMatchInput `pulumi:"fieldToMatch"`
	// The size, in byte, to compare to the request part, after any transformations.
	Size pulumi.Float64Input `pulumi:"size"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations WebAclTextTransformationArrayInput `pulumi:"textTransformations"`
}

Size Constraint statement.

func (WebAclSizeConstraintStatementArgs) ElementType added in v0.72.0

func (WebAclSizeConstraintStatementArgs) ToWebAclSizeConstraintStatementOutput added in v0.72.0

func (i WebAclSizeConstraintStatementArgs) ToWebAclSizeConstraintStatementOutput() WebAclSizeConstraintStatementOutput

func (WebAclSizeConstraintStatementArgs) ToWebAclSizeConstraintStatementOutputWithContext added in v0.72.0

func (i WebAclSizeConstraintStatementArgs) ToWebAclSizeConstraintStatementOutputWithContext(ctx context.Context) WebAclSizeConstraintStatementOutput

func (WebAclSizeConstraintStatementArgs) ToWebAclSizeConstraintStatementPtrOutput added in v0.72.0

func (i WebAclSizeConstraintStatementArgs) ToWebAclSizeConstraintStatementPtrOutput() WebAclSizeConstraintStatementPtrOutput

func (WebAclSizeConstraintStatementArgs) ToWebAclSizeConstraintStatementPtrOutputWithContext added in v0.72.0

func (i WebAclSizeConstraintStatementArgs) ToWebAclSizeConstraintStatementPtrOutputWithContext(ctx context.Context) WebAclSizeConstraintStatementPtrOutput

type WebAclSizeConstraintStatementComparisonOperator added in v0.72.0

type WebAclSizeConstraintStatementComparisonOperator string

The operator to use to compare the request part to the size setting.

func (WebAclSizeConstraintStatementComparisonOperator) ElementType added in v0.72.0

func (WebAclSizeConstraintStatementComparisonOperator) ToStringOutput added in v0.72.0

func (WebAclSizeConstraintStatementComparisonOperator) ToStringOutputWithContext added in v0.72.0

func (WebAclSizeConstraintStatementComparisonOperator) ToStringPtrOutput added in v0.72.0

func (WebAclSizeConstraintStatementComparisonOperator) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclSizeConstraintStatementComparisonOperator) ToWebAclSizeConstraintStatementComparisonOperatorOutput added in v0.72.0

func (e WebAclSizeConstraintStatementComparisonOperator) ToWebAclSizeConstraintStatementComparisonOperatorOutput() WebAclSizeConstraintStatementComparisonOperatorOutput

func (WebAclSizeConstraintStatementComparisonOperator) ToWebAclSizeConstraintStatementComparisonOperatorOutputWithContext added in v0.72.0

func (e WebAclSizeConstraintStatementComparisonOperator) ToWebAclSizeConstraintStatementComparisonOperatorOutputWithContext(ctx context.Context) WebAclSizeConstraintStatementComparisonOperatorOutput

func (WebAclSizeConstraintStatementComparisonOperator) ToWebAclSizeConstraintStatementComparisonOperatorPtrOutput added in v0.72.0

func (e WebAclSizeConstraintStatementComparisonOperator) ToWebAclSizeConstraintStatementComparisonOperatorPtrOutput() WebAclSizeConstraintStatementComparisonOperatorPtrOutput

func (WebAclSizeConstraintStatementComparisonOperator) ToWebAclSizeConstraintStatementComparisonOperatorPtrOutputWithContext added in v0.72.0

func (e WebAclSizeConstraintStatementComparisonOperator) ToWebAclSizeConstraintStatementComparisonOperatorPtrOutputWithContext(ctx context.Context) WebAclSizeConstraintStatementComparisonOperatorPtrOutput

type WebAclSizeConstraintStatementComparisonOperatorInput added in v0.72.0

type WebAclSizeConstraintStatementComparisonOperatorInput interface {
	pulumi.Input

	ToWebAclSizeConstraintStatementComparisonOperatorOutput() WebAclSizeConstraintStatementComparisonOperatorOutput
	ToWebAclSizeConstraintStatementComparisonOperatorOutputWithContext(context.Context) WebAclSizeConstraintStatementComparisonOperatorOutput
}

WebAclSizeConstraintStatementComparisonOperatorInput is an input type that accepts values of the WebAclSizeConstraintStatementComparisonOperator enum A concrete instance of `WebAclSizeConstraintStatementComparisonOperatorInput` can be one of the following:

WebAclSizeConstraintStatementComparisonOperatorEq
WebAclSizeConstraintStatementComparisonOperatorNe
WebAclSizeConstraintStatementComparisonOperatorLe
WebAclSizeConstraintStatementComparisonOperatorLt
WebAclSizeConstraintStatementComparisonOperatorGe
WebAclSizeConstraintStatementComparisonOperatorGt

type WebAclSizeConstraintStatementComparisonOperatorOutput added in v0.72.0

type WebAclSizeConstraintStatementComparisonOperatorOutput struct{ *pulumi.OutputState }

func (WebAclSizeConstraintStatementComparisonOperatorOutput) ElementType added in v0.72.0

func (WebAclSizeConstraintStatementComparisonOperatorOutput) ToStringOutput added in v0.72.0

func (WebAclSizeConstraintStatementComparisonOperatorOutput) ToStringOutputWithContext added in v0.72.0

func (WebAclSizeConstraintStatementComparisonOperatorOutput) ToStringPtrOutput added in v0.72.0

func (WebAclSizeConstraintStatementComparisonOperatorOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclSizeConstraintStatementComparisonOperatorOutput) ToWebAclSizeConstraintStatementComparisonOperatorOutput added in v0.72.0

func (WebAclSizeConstraintStatementComparisonOperatorOutput) ToWebAclSizeConstraintStatementComparisonOperatorOutputWithContext added in v0.72.0

func (o WebAclSizeConstraintStatementComparisonOperatorOutput) ToWebAclSizeConstraintStatementComparisonOperatorOutputWithContext(ctx context.Context) WebAclSizeConstraintStatementComparisonOperatorOutput

func (WebAclSizeConstraintStatementComparisonOperatorOutput) ToWebAclSizeConstraintStatementComparisonOperatorPtrOutput added in v0.72.0

func (o WebAclSizeConstraintStatementComparisonOperatorOutput) ToWebAclSizeConstraintStatementComparisonOperatorPtrOutput() WebAclSizeConstraintStatementComparisonOperatorPtrOutput

func (WebAclSizeConstraintStatementComparisonOperatorOutput) ToWebAclSizeConstraintStatementComparisonOperatorPtrOutputWithContext added in v0.72.0

func (o WebAclSizeConstraintStatementComparisonOperatorOutput) ToWebAclSizeConstraintStatementComparisonOperatorPtrOutputWithContext(ctx context.Context) WebAclSizeConstraintStatementComparisonOperatorPtrOutput

type WebAclSizeConstraintStatementComparisonOperatorPtrInput added in v0.72.0

type WebAclSizeConstraintStatementComparisonOperatorPtrInput interface {
	pulumi.Input

	ToWebAclSizeConstraintStatementComparisonOperatorPtrOutput() WebAclSizeConstraintStatementComparisonOperatorPtrOutput
	ToWebAclSizeConstraintStatementComparisonOperatorPtrOutputWithContext(context.Context) WebAclSizeConstraintStatementComparisonOperatorPtrOutput
}

func WebAclSizeConstraintStatementComparisonOperatorPtr added in v0.72.0

func WebAclSizeConstraintStatementComparisonOperatorPtr(v string) WebAclSizeConstraintStatementComparisonOperatorPtrInput

type WebAclSizeConstraintStatementComparisonOperatorPtrOutput added in v0.72.0

type WebAclSizeConstraintStatementComparisonOperatorPtrOutput struct{ *pulumi.OutputState }

func (WebAclSizeConstraintStatementComparisonOperatorPtrOutput) Elem added in v0.72.0

func (WebAclSizeConstraintStatementComparisonOperatorPtrOutput) ElementType added in v0.72.0

func (WebAclSizeConstraintStatementComparisonOperatorPtrOutput) ToStringPtrOutput added in v0.72.0

func (WebAclSizeConstraintStatementComparisonOperatorPtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (WebAclSizeConstraintStatementComparisonOperatorPtrOutput) ToWebAclSizeConstraintStatementComparisonOperatorPtrOutput added in v0.72.0

func (WebAclSizeConstraintStatementComparisonOperatorPtrOutput) ToWebAclSizeConstraintStatementComparisonOperatorPtrOutputWithContext added in v0.72.0

func (o WebAclSizeConstraintStatementComparisonOperatorPtrOutput) ToWebAclSizeConstraintStatementComparisonOperatorPtrOutputWithContext(ctx context.Context) WebAclSizeConstraintStatementComparisonOperatorPtrOutput

type WebAclSizeConstraintStatementInput added in v0.72.0

type WebAclSizeConstraintStatementInput interface {
	pulumi.Input

	ToWebAclSizeConstraintStatementOutput() WebAclSizeConstraintStatementOutput
	ToWebAclSizeConstraintStatementOutputWithContext(context.Context) WebAclSizeConstraintStatementOutput
}

WebAclSizeConstraintStatementInput is an input type that accepts WebAclSizeConstraintStatementArgs and WebAclSizeConstraintStatementOutput values. You can construct a concrete instance of `WebAclSizeConstraintStatementInput` via:

WebAclSizeConstraintStatementArgs{...}

type WebAclSizeConstraintStatementOutput added in v0.72.0

type WebAclSizeConstraintStatementOutput struct{ *pulumi.OutputState }

Size Constraint statement.

func (WebAclSizeConstraintStatementOutput) ComparisonOperator added in v0.72.0

The operator to use to compare the request part to the size setting.

func (WebAclSizeConstraintStatementOutput) ElementType added in v0.72.0

func (WebAclSizeConstraintStatementOutput) FieldToMatch added in v0.72.0

The part of the web request that you want AWS WAF to inspect.

func (WebAclSizeConstraintStatementOutput) Size added in v0.72.0

The size, in byte, to compare to the request part, after any transformations.

func (WebAclSizeConstraintStatementOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (WebAclSizeConstraintStatementOutput) ToWebAclSizeConstraintStatementOutput added in v0.72.0

func (o WebAclSizeConstraintStatementOutput) ToWebAclSizeConstraintStatementOutput() WebAclSizeConstraintStatementOutput

func (WebAclSizeConstraintStatementOutput) ToWebAclSizeConstraintStatementOutputWithContext added in v0.72.0

func (o WebAclSizeConstraintStatementOutput) ToWebAclSizeConstraintStatementOutputWithContext(ctx context.Context) WebAclSizeConstraintStatementOutput

func (WebAclSizeConstraintStatementOutput) ToWebAclSizeConstraintStatementPtrOutput added in v0.72.0

func (o WebAclSizeConstraintStatementOutput) ToWebAclSizeConstraintStatementPtrOutput() WebAclSizeConstraintStatementPtrOutput

func (WebAclSizeConstraintStatementOutput) ToWebAclSizeConstraintStatementPtrOutputWithContext added in v0.72.0

func (o WebAclSizeConstraintStatementOutput) ToWebAclSizeConstraintStatementPtrOutputWithContext(ctx context.Context) WebAclSizeConstraintStatementPtrOutput

type WebAclSizeConstraintStatementPtrInput added in v0.72.0

type WebAclSizeConstraintStatementPtrInput interface {
	pulumi.Input

	ToWebAclSizeConstraintStatementPtrOutput() WebAclSizeConstraintStatementPtrOutput
	ToWebAclSizeConstraintStatementPtrOutputWithContext(context.Context) WebAclSizeConstraintStatementPtrOutput
}

WebAclSizeConstraintStatementPtrInput is an input type that accepts WebAclSizeConstraintStatementArgs, WebAclSizeConstraintStatementPtr and WebAclSizeConstraintStatementPtrOutput values. You can construct a concrete instance of `WebAclSizeConstraintStatementPtrInput` via:

        WebAclSizeConstraintStatementArgs{...}

or:

        nil

type WebAclSizeConstraintStatementPtrOutput added in v0.72.0

type WebAclSizeConstraintStatementPtrOutput struct{ *pulumi.OutputState }

func (WebAclSizeConstraintStatementPtrOutput) ComparisonOperator added in v0.72.0

The operator to use to compare the request part to the size setting.

func (WebAclSizeConstraintStatementPtrOutput) Elem added in v0.72.0

func (WebAclSizeConstraintStatementPtrOutput) ElementType added in v0.72.0

func (WebAclSizeConstraintStatementPtrOutput) FieldToMatch added in v0.72.0

The part of the web request that you want AWS WAF to inspect.

func (WebAclSizeConstraintStatementPtrOutput) Size added in v0.72.0

The size, in byte, to compare to the request part, after any transformations.

func (WebAclSizeConstraintStatementPtrOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (WebAclSizeConstraintStatementPtrOutput) ToWebAclSizeConstraintStatementPtrOutput added in v0.72.0

func (o WebAclSizeConstraintStatementPtrOutput) ToWebAclSizeConstraintStatementPtrOutput() WebAclSizeConstraintStatementPtrOutput

func (WebAclSizeConstraintStatementPtrOutput) ToWebAclSizeConstraintStatementPtrOutputWithContext added in v0.72.0

func (o WebAclSizeConstraintStatementPtrOutput) ToWebAclSizeConstraintStatementPtrOutputWithContext(ctx context.Context) WebAclSizeConstraintStatementPtrOutput

type WebAclSizeInspectionLimit added in v0.98.0

type WebAclSizeInspectionLimit string

func (WebAclSizeInspectionLimit) ElementType added in v0.98.0

func (WebAclSizeInspectionLimit) ElementType() reflect.Type

func (WebAclSizeInspectionLimit) ToStringOutput added in v0.98.0

func (e WebAclSizeInspectionLimit) ToStringOutput() pulumi.StringOutput

func (WebAclSizeInspectionLimit) ToStringOutputWithContext added in v0.98.0

func (e WebAclSizeInspectionLimit) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclSizeInspectionLimit) ToStringPtrOutput added in v0.98.0

func (e WebAclSizeInspectionLimit) ToStringPtrOutput() pulumi.StringPtrOutput

func (WebAclSizeInspectionLimit) ToStringPtrOutputWithContext added in v0.98.0

func (e WebAclSizeInspectionLimit) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclSizeInspectionLimit) ToWebAclSizeInspectionLimitOutput added in v0.98.0

func (e WebAclSizeInspectionLimit) ToWebAclSizeInspectionLimitOutput() WebAclSizeInspectionLimitOutput

func (WebAclSizeInspectionLimit) ToWebAclSizeInspectionLimitOutputWithContext added in v0.98.0

func (e WebAclSizeInspectionLimit) ToWebAclSizeInspectionLimitOutputWithContext(ctx context.Context) WebAclSizeInspectionLimitOutput

func (WebAclSizeInspectionLimit) ToWebAclSizeInspectionLimitPtrOutput added in v0.98.0

func (e WebAclSizeInspectionLimit) ToWebAclSizeInspectionLimitPtrOutput() WebAclSizeInspectionLimitPtrOutput

func (WebAclSizeInspectionLimit) ToWebAclSizeInspectionLimitPtrOutputWithContext added in v0.98.0

func (e WebAclSizeInspectionLimit) ToWebAclSizeInspectionLimitPtrOutputWithContext(ctx context.Context) WebAclSizeInspectionLimitPtrOutput

type WebAclSizeInspectionLimitInput added in v0.98.0

type WebAclSizeInspectionLimitInput interface {
	pulumi.Input

	ToWebAclSizeInspectionLimitOutput() WebAclSizeInspectionLimitOutput
	ToWebAclSizeInspectionLimitOutputWithContext(context.Context) WebAclSizeInspectionLimitOutput
}

WebAclSizeInspectionLimitInput is an input type that accepts values of the WebAclSizeInspectionLimit enum A concrete instance of `WebAclSizeInspectionLimitInput` can be one of the following:

WebAclSizeInspectionLimitKb16
WebAclSizeInspectionLimitKb32
WebAclSizeInspectionLimitKb48
WebAclSizeInspectionLimitKb64

type WebAclSizeInspectionLimitOutput added in v0.98.0

type WebAclSizeInspectionLimitOutput struct{ *pulumi.OutputState }

func (WebAclSizeInspectionLimitOutput) ElementType added in v0.98.0

func (WebAclSizeInspectionLimitOutput) ToStringOutput added in v0.98.0

func (WebAclSizeInspectionLimitOutput) ToStringOutputWithContext added in v0.98.0

func (o WebAclSizeInspectionLimitOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclSizeInspectionLimitOutput) ToStringPtrOutput added in v0.98.0

func (WebAclSizeInspectionLimitOutput) ToStringPtrOutputWithContext added in v0.98.0

func (o WebAclSizeInspectionLimitOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclSizeInspectionLimitOutput) ToWebAclSizeInspectionLimitOutput added in v0.98.0

func (o WebAclSizeInspectionLimitOutput) ToWebAclSizeInspectionLimitOutput() WebAclSizeInspectionLimitOutput

func (WebAclSizeInspectionLimitOutput) ToWebAclSizeInspectionLimitOutputWithContext added in v0.98.0

func (o WebAclSizeInspectionLimitOutput) ToWebAclSizeInspectionLimitOutputWithContext(ctx context.Context) WebAclSizeInspectionLimitOutput

func (WebAclSizeInspectionLimitOutput) ToWebAclSizeInspectionLimitPtrOutput added in v0.98.0

func (o WebAclSizeInspectionLimitOutput) ToWebAclSizeInspectionLimitPtrOutput() WebAclSizeInspectionLimitPtrOutput

func (WebAclSizeInspectionLimitOutput) ToWebAclSizeInspectionLimitPtrOutputWithContext added in v0.98.0

func (o WebAclSizeInspectionLimitOutput) ToWebAclSizeInspectionLimitPtrOutputWithContext(ctx context.Context) WebAclSizeInspectionLimitPtrOutput

type WebAclSizeInspectionLimitPtrInput added in v0.98.0

type WebAclSizeInspectionLimitPtrInput interface {
	pulumi.Input

	ToWebAclSizeInspectionLimitPtrOutput() WebAclSizeInspectionLimitPtrOutput
	ToWebAclSizeInspectionLimitPtrOutputWithContext(context.Context) WebAclSizeInspectionLimitPtrOutput
}

func WebAclSizeInspectionLimitPtr added in v0.98.0

func WebAclSizeInspectionLimitPtr(v string) WebAclSizeInspectionLimitPtrInput

type WebAclSizeInspectionLimitPtrOutput added in v0.98.0

type WebAclSizeInspectionLimitPtrOutput struct{ *pulumi.OutputState }

func (WebAclSizeInspectionLimitPtrOutput) Elem added in v0.98.0

func (WebAclSizeInspectionLimitPtrOutput) ElementType added in v0.98.0

func (WebAclSizeInspectionLimitPtrOutput) ToStringPtrOutput added in v0.98.0

func (WebAclSizeInspectionLimitPtrOutput) ToStringPtrOutputWithContext added in v0.98.0

func (o WebAclSizeInspectionLimitPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclSizeInspectionLimitPtrOutput) ToWebAclSizeInspectionLimitPtrOutput added in v0.98.0

func (o WebAclSizeInspectionLimitPtrOutput) ToWebAclSizeInspectionLimitPtrOutput() WebAclSizeInspectionLimitPtrOutput

func (WebAclSizeInspectionLimitPtrOutput) ToWebAclSizeInspectionLimitPtrOutputWithContext added in v0.98.0

func (o WebAclSizeInspectionLimitPtrOutput) ToWebAclSizeInspectionLimitPtrOutputWithContext(ctx context.Context) WebAclSizeInspectionLimitPtrOutput

type WebAclSqliMatchStatement added in v0.72.0

type WebAclSqliMatchStatement struct {
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch WebAclFieldToMatch `pulumi:"fieldToMatch"`
	// The sensitivity that you want AWS WAF to use to inspect for SQL injection attacks.
	//
	// `HIGH` detects more attacks, but might generate more false positives, especially if your web requests frequently contain unusual strings. For information about identifying and mitigating false positives, see [Testing and tuning](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-testing.html) in the *AWS WAF Developer Guide* .
	//
	// `LOW` is generally a better choice for resources that already have other protections against SQL injection attacks or that have a low tolerance for false positives.
	//
	// Default: `LOW`
	SensitivityLevel *WebAclSensitivityLevel `pulumi:"sensitivityLevel"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations []WebAclTextTransformation `pulumi:"textTransformations"`
}

Sqli Match Statement.

type WebAclSqliMatchStatementArgs added in v0.72.0

type WebAclSqliMatchStatementArgs struct {
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch WebAclFieldToMatchInput `pulumi:"fieldToMatch"`
	// The sensitivity that you want AWS WAF to use to inspect for SQL injection attacks.
	//
	// `HIGH` detects more attacks, but might generate more false positives, especially if your web requests frequently contain unusual strings. For information about identifying and mitigating false positives, see [Testing and tuning](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-testing.html) in the *AWS WAF Developer Guide* .
	//
	// `LOW` is generally a better choice for resources that already have other protections against SQL injection attacks or that have a low tolerance for false positives.
	//
	// Default: `LOW`
	SensitivityLevel WebAclSensitivityLevelPtrInput `pulumi:"sensitivityLevel"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations WebAclTextTransformationArrayInput `pulumi:"textTransformations"`
}

Sqli Match Statement.

func (WebAclSqliMatchStatementArgs) ElementType added in v0.72.0

func (WebAclSqliMatchStatementArgs) ToWebAclSqliMatchStatementOutput added in v0.72.0

func (i WebAclSqliMatchStatementArgs) ToWebAclSqliMatchStatementOutput() WebAclSqliMatchStatementOutput

func (WebAclSqliMatchStatementArgs) ToWebAclSqliMatchStatementOutputWithContext added in v0.72.0

func (i WebAclSqliMatchStatementArgs) ToWebAclSqliMatchStatementOutputWithContext(ctx context.Context) WebAclSqliMatchStatementOutput

func (WebAclSqliMatchStatementArgs) ToWebAclSqliMatchStatementPtrOutput added in v0.72.0

func (i WebAclSqliMatchStatementArgs) ToWebAclSqliMatchStatementPtrOutput() WebAclSqliMatchStatementPtrOutput

func (WebAclSqliMatchStatementArgs) ToWebAclSqliMatchStatementPtrOutputWithContext added in v0.72.0

func (i WebAclSqliMatchStatementArgs) ToWebAclSqliMatchStatementPtrOutputWithContext(ctx context.Context) WebAclSqliMatchStatementPtrOutput

type WebAclSqliMatchStatementInput added in v0.72.0

type WebAclSqliMatchStatementInput interface {
	pulumi.Input

	ToWebAclSqliMatchStatementOutput() WebAclSqliMatchStatementOutput
	ToWebAclSqliMatchStatementOutputWithContext(context.Context) WebAclSqliMatchStatementOutput
}

WebAclSqliMatchStatementInput is an input type that accepts WebAclSqliMatchStatementArgs and WebAclSqliMatchStatementOutput values. You can construct a concrete instance of `WebAclSqliMatchStatementInput` via:

WebAclSqliMatchStatementArgs{...}

type WebAclSqliMatchStatementOutput added in v0.72.0

type WebAclSqliMatchStatementOutput struct{ *pulumi.OutputState }

Sqli Match Statement.

func (WebAclSqliMatchStatementOutput) ElementType added in v0.72.0

func (WebAclSqliMatchStatementOutput) FieldToMatch added in v0.72.0

The part of the web request that you want AWS WAF to inspect.

func (WebAclSqliMatchStatementOutput) SensitivityLevel added in v0.72.0

The sensitivity that you want AWS WAF to use to inspect for SQL injection attacks.

`HIGH` detects more attacks, but might generate more false positives, especially if your web requests frequently contain unusual strings. For information about identifying and mitigating false positives, see [Testing and tuning](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-testing.html) in the *AWS WAF Developer Guide* .

`LOW` is generally a better choice for resources that already have other protections against SQL injection attacks or that have a low tolerance for false positives.

Default: `LOW`

func (WebAclSqliMatchStatementOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (WebAclSqliMatchStatementOutput) ToWebAclSqliMatchStatementOutput added in v0.72.0

func (o WebAclSqliMatchStatementOutput) ToWebAclSqliMatchStatementOutput() WebAclSqliMatchStatementOutput

func (WebAclSqliMatchStatementOutput) ToWebAclSqliMatchStatementOutputWithContext added in v0.72.0

func (o WebAclSqliMatchStatementOutput) ToWebAclSqliMatchStatementOutputWithContext(ctx context.Context) WebAclSqliMatchStatementOutput

func (WebAclSqliMatchStatementOutput) ToWebAclSqliMatchStatementPtrOutput added in v0.72.0

func (o WebAclSqliMatchStatementOutput) ToWebAclSqliMatchStatementPtrOutput() WebAclSqliMatchStatementPtrOutput

func (WebAclSqliMatchStatementOutput) ToWebAclSqliMatchStatementPtrOutputWithContext added in v0.72.0

func (o WebAclSqliMatchStatementOutput) ToWebAclSqliMatchStatementPtrOutputWithContext(ctx context.Context) WebAclSqliMatchStatementPtrOutput

type WebAclSqliMatchStatementPtrInput added in v0.72.0

type WebAclSqliMatchStatementPtrInput interface {
	pulumi.Input

	ToWebAclSqliMatchStatementPtrOutput() WebAclSqliMatchStatementPtrOutput
	ToWebAclSqliMatchStatementPtrOutputWithContext(context.Context) WebAclSqliMatchStatementPtrOutput
}

WebAclSqliMatchStatementPtrInput is an input type that accepts WebAclSqliMatchStatementArgs, WebAclSqliMatchStatementPtr and WebAclSqliMatchStatementPtrOutput values. You can construct a concrete instance of `WebAclSqliMatchStatementPtrInput` via:

        WebAclSqliMatchStatementArgs{...}

or:

        nil

func WebAclSqliMatchStatementPtr added in v0.72.0

func WebAclSqliMatchStatementPtr(v *WebAclSqliMatchStatementArgs) WebAclSqliMatchStatementPtrInput

type WebAclSqliMatchStatementPtrOutput added in v0.72.0

type WebAclSqliMatchStatementPtrOutput struct{ *pulumi.OutputState }

func (WebAclSqliMatchStatementPtrOutput) Elem added in v0.72.0

func (WebAclSqliMatchStatementPtrOutput) ElementType added in v0.72.0

func (WebAclSqliMatchStatementPtrOutput) FieldToMatch added in v0.72.0

The part of the web request that you want AWS WAF to inspect.

func (WebAclSqliMatchStatementPtrOutput) SensitivityLevel added in v0.72.0

The sensitivity that you want AWS WAF to use to inspect for SQL injection attacks.

`HIGH` detects more attacks, but might generate more false positives, especially if your web requests frequently contain unusual strings. For information about identifying and mitigating false positives, see [Testing and tuning](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-testing.html) in the *AWS WAF Developer Guide* .

`LOW` is generally a better choice for resources that already have other protections against SQL injection attacks or that have a low tolerance for false positives.

Default: `LOW`

func (WebAclSqliMatchStatementPtrOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (WebAclSqliMatchStatementPtrOutput) ToWebAclSqliMatchStatementPtrOutput added in v0.72.0

func (o WebAclSqliMatchStatementPtrOutput) ToWebAclSqliMatchStatementPtrOutput() WebAclSqliMatchStatementPtrOutput

func (WebAclSqliMatchStatementPtrOutput) ToWebAclSqliMatchStatementPtrOutputWithContext added in v0.72.0

func (o WebAclSqliMatchStatementPtrOutput) ToWebAclSqliMatchStatementPtrOutputWithContext(ctx context.Context) WebAclSqliMatchStatementPtrOutput

type WebAclState added in v0.72.0

type WebAclState struct {
}

func (WebAclState) ElementType added in v0.72.0

func (WebAclState) ElementType() reflect.Type

type WebAclStatement added in v0.72.0

type WebAclStatement struct {
	// A logical rule statement used to combine other rule statements with AND logic. You provide more than one `Statement` within the `AndStatement` .
	AndStatement *WebAclAndStatement `pulumi:"andStatement"`
	// A rule statement that defines a string match search for AWS WAF to apply to web requests. The byte match statement provides the bytes to search for, the location in requests that you want AWS WAF to search, and other settings. The bytes to search for are typically a string that corresponds with ASCII characters. In the AWS WAF console and the developer guide, this is called a string match statement.
	ByteMatchStatement *WebAclByteMatchStatement `pulumi:"byteMatchStatement"`
	// A rule statement that labels web requests by country and region and that matches against web requests based on country code. A geo match rule labels every request that it inspects regardless of whether it finds a match.
	//
	// - To manage requests only by country, you can use this statement by itself and specify the countries that you want to match against in the `CountryCodes` array.
	// - Otherwise, configure your geo match rule with Count action so that it only labels requests. Then, add one or more label match rules to run after the geo match rule and configure them to match against the geographic labels and handle the requests as needed.
	//
	// AWS WAF labels requests using the alpha-2 country and region codes from the International Organization for Standardization (ISO) 3166 standard. AWS WAF determines the codes using either the IP address in the web request origin or, if you specify it, the address in the geo match `ForwardedIPConfig` .
	//
	// If you use the web request origin, the label formats are `awswaf:clientip:geo:region:<ISO country code>-<ISO region code>` and `awswaf:clientip:geo:country:<ISO country code>` .
	//
	// If you use a forwarded IP address, the label formats are `awswaf:forwardedip:geo:region:<ISO country code>-<ISO region code>` and `awswaf:forwardedip:geo:country:<ISO country code>` .
	//
	// For additional details, see [Geographic match rule statement](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-geo-match.html) in the [AWS WAF Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .
	GeoMatchStatement *WebAclGeoMatchStatement `pulumi:"geoMatchStatement"`
	// A rule statement used to detect web requests coming from particular IP addresses or address ranges. To use this, create an `IPSet` that specifies the addresses you want to detect, then use the ARN of that set in this statement.
	//
	// Each IP set rule statement references an IP set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it.
	IpSetReferenceStatement *WebAclIpSetReferenceStatement `pulumi:"ipSetReferenceStatement"`
	// A rule statement to match against labels that have been added to the web request by rules that have already run in the web ACL.
	//
	// The label match statement provides the label or namespace string to search for. The label string can represent a part or all of the fully qualified label name that had been added to the web request. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label. If you do not provide the fully qualified name in your label match string, AWS WAF performs the search for labels that were added in the same context as the label match statement.
	LabelMatchStatement *WebAclLabelMatchStatement `pulumi:"labelMatchStatement"`
	// A rule statement used to run the rules that are defined in a managed rule group. To use this, provide the vendor name and the name of the rule group in this statement. You can retrieve the required names through the API call `ListAvailableManagedRuleGroups` .
	//
	// You cannot nest a `ManagedRuleGroupStatement` , for example for use inside a `NotStatement` or `OrStatement` . It can only be referenced as a top-level statement within a rule.
	//
	// > You are charged additional fees when you use the AWS WAF Bot Control managed rule group `AWSManagedRulesBotControlRuleSet` , the AWS WAF Fraud Control account takeover prevention (ATP) managed rule group `AWSManagedRulesATPRuleSet` , or the AWS WAF Fraud Control account creation fraud prevention (ACFP) managed rule group `AWSManagedRulesACFPRuleSet` . For more information, see [AWS WAF Pricing](https://docs.aws.amazon.com/waf/pricing/) .
	ManagedRuleGroupStatement *WebAclManagedRuleGroupStatement `pulumi:"managedRuleGroupStatement"`
	// A logical rule statement used to negate the results of another rule statement. You provide one `Statement` within the `NotStatement` .
	NotStatement *WebAclNotStatement `pulumi:"notStatement"`
	// A logical rule statement used to combine other rule statements with OR logic. You provide more than one `Statement` within the `OrStatement` .
	OrStatement *WebAclOrStatement `pulumi:"orStatement"`
	// A rate-based rule counts incoming requests and rate limits requests when they are coming at too fast a rate. The rule categorizes requests according to your aggregation criteria, collects them into aggregation instances, and counts and rate limits the requests for each instance.
	//
	// > If you change any of these settings in a rule that's currently in use, the change resets the rule's rate limiting counts. This can pause the rule's rate limiting activities for up to a minute.
	//
	// You can specify individual aggregation keys, like IP address or HTTP method. You can also specify aggregation key combinations, like IP address and HTTP method, or HTTP method, query argument, and cookie.
	//
	// Each unique set of values for the aggregation keys that you specify is a separate aggregation instance, with the value from each key contributing to the aggregation instance definition.
	//
	// For example, assume the rule evaluates web requests with the following IP address and HTTP method values:
	//
	// - IP address 10.1.1.1, HTTP method POST
	// - IP address 10.1.1.1, HTTP method GET
	// - IP address 127.0.0.0, HTTP method POST
	// - IP address 10.1.1.1, HTTP method GET
	//
	// The rule would create different aggregation instances according to your aggregation criteria, for example:
	//
	// - If the aggregation criteria is just the IP address, then each individual address is an aggregation instance, and AWS WAF counts requests separately for each. The aggregation instances and request counts for our example would be the following:
	//
	// - IP address 10.1.1.1: count 3
	// - IP address 127.0.0.0: count 1
	// - If the aggregation criteria is HTTP method, then each individual HTTP method is an aggregation instance. The aggregation instances and request counts for our example would be the following:
	//
	// - HTTP method POST: count 2
	// - HTTP method GET: count 2
	// - If the aggregation criteria is IP address and HTTP method, then each IP address and each HTTP method would contribute to the combined aggregation instance. The aggregation instances and request counts for our example would be the following:
	//
	// - IP address 10.1.1.1, HTTP method POST: count 1
	// - IP address 10.1.1.1, HTTP method GET: count 2
	// - IP address 127.0.0.0, HTTP method POST: count 1
	//
	// For any n-tuple of aggregation keys, each unique combination of values for the keys defines a separate aggregation instance, which AWS WAF counts and rate-limits individually.
	//
	// You can optionally nest another statement inside the rate-based statement, to narrow the scope of the rule so that it only counts and rate limits requests that match the nested statement. You can use this nested scope-down statement in conjunction with your aggregation key specifications or you can just count and rate limit all requests that match the scope-down statement, without additional aggregation. When you choose to just manage all requests that match a scope-down statement, the aggregation instance is singular for the rule.
	//
	// You cannot nest a `RateBasedStatement` inside another statement, for example inside a `NotStatement` or `OrStatement` . You can define a `RateBasedStatement` inside a web ACL and inside a rule group.
	//
	// For additional information about the options, see [Rate limiting web requests using rate-based rules](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rate-based-rules.html) in the *AWS WAF Developer Guide* .
	//
	// If you only aggregate on the individual IP address or forwarded IP address, you can retrieve the list of IP addresses that AWS WAF is currently rate limiting for a rule through the API call `GetRateBasedStatementManagedKeys` . This option is not available for other aggregation configurations.
	//
	// AWS WAF tracks and manages web requests separately for each instance of a rate-based rule that you use. For example, if you provide the same rate-based rule settings in two web ACLs, each of the two rule statements represents a separate instance of the rate-based rule and gets its own tracking and management by AWS WAF . If you define a rate-based rule inside a rule group, and then use that rule group in multiple places, each use creates a separate instance of the rate-based rule that gets its own tracking and management by AWS WAF .
	RateBasedStatement *WebAclRateBasedStatement `pulumi:"rateBasedStatement"`
	// A rule statement used to search web request components for a match against a single regular expression.
	RegexMatchStatement *WebAclRegexMatchStatement `pulumi:"regexMatchStatement"`
	// A rule statement used to search web request components for matches with regular expressions. To use this, create a `RegexPatternSet` that specifies the expressions that you want to detect, then use the ARN of that set in this statement. A web request matches the pattern set rule statement if the request component matches any of the patterns in the set.
	//
	// Each regex pattern set rule statement references a regex pattern set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it.
	RegexPatternSetReferenceStatement *WebAclRegexPatternSetReferenceStatement `pulumi:"regexPatternSetReferenceStatement"`
	// A rule statement used to run the rules that are defined in a `RuleGroup` . To use this, create a rule group with your rules, then provide the ARN of the rule group in this statement.
	//
	// You cannot nest a `RuleGroupReferenceStatement` , for example for use inside a `NotStatement` or `OrStatement` . You cannot use a rule group reference statement inside another rule group. You can only reference a rule group as a top-level statement within a rule that you define in a web ACL.
	RuleGroupReferenceStatement *WebAclRuleGroupReferenceStatement `pulumi:"ruleGroupReferenceStatement"`
	// A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes.
	//
	// If you configure AWS WAF to inspect the request body, AWS WAF inspects only the number of bytes in the body up to the limit for the web ACL and protected resource type. If you know that the request body for your web requests should never exceed the inspection limit, you can use a size constraint statement to block requests that have a larger request body size. For more information about the inspection limits, see `Body` and `JsonBody` settings for the `FieldToMatch` data type.
	//
	// If you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI `/logo.jpg` is nine characters long.
	SizeConstraintStatement *WebAclSizeConstraintStatement `pulumi:"sizeConstraintStatement"`
	// A rule statement that inspects for malicious SQL code. Attackers insert malicious SQL code into web requests to do things like modify your database or extract data from it.
	SqliMatchStatement *WebAclSqliMatchStatement `pulumi:"sqliMatchStatement"`
	// A rule statement that inspects for cross-site scripting (XSS) attacks. In XSS attacks, the attacker uses vulnerabilities in a benign website as a vehicle to inject malicious client-site scripts into other legitimate web browsers.
	XssMatchStatement *WebAclXssMatchStatement `pulumi:"xssMatchStatement"`
}

First level statement that contains conditions, such as ByteMatch, SizeConstraint, etc

type WebAclStatementArgs added in v0.72.0

type WebAclStatementArgs struct {
	// A logical rule statement used to combine other rule statements with AND logic. You provide more than one `Statement` within the `AndStatement` .
	AndStatement WebAclAndStatementPtrInput `pulumi:"andStatement"`
	// A rule statement that defines a string match search for AWS WAF to apply to web requests. The byte match statement provides the bytes to search for, the location in requests that you want AWS WAF to search, and other settings. The bytes to search for are typically a string that corresponds with ASCII characters. In the AWS WAF console and the developer guide, this is called a string match statement.
	ByteMatchStatement WebAclByteMatchStatementPtrInput `pulumi:"byteMatchStatement"`
	// A rule statement that labels web requests by country and region and that matches against web requests based on country code. A geo match rule labels every request that it inspects regardless of whether it finds a match.
	//
	// - To manage requests only by country, you can use this statement by itself and specify the countries that you want to match against in the `CountryCodes` array.
	// - Otherwise, configure your geo match rule with Count action so that it only labels requests. Then, add one or more label match rules to run after the geo match rule and configure them to match against the geographic labels and handle the requests as needed.
	//
	// AWS WAF labels requests using the alpha-2 country and region codes from the International Organization for Standardization (ISO) 3166 standard. AWS WAF determines the codes using either the IP address in the web request origin or, if you specify it, the address in the geo match `ForwardedIPConfig` .
	//
	// If you use the web request origin, the label formats are `awswaf:clientip:geo:region:<ISO country code>-<ISO region code>` and `awswaf:clientip:geo:country:<ISO country code>` .
	//
	// If you use a forwarded IP address, the label formats are `awswaf:forwardedip:geo:region:<ISO country code>-<ISO region code>` and `awswaf:forwardedip:geo:country:<ISO country code>` .
	//
	// For additional details, see [Geographic match rule statement](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-geo-match.html) in the [AWS WAF Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .
	GeoMatchStatement WebAclGeoMatchStatementPtrInput `pulumi:"geoMatchStatement"`
	// A rule statement used to detect web requests coming from particular IP addresses or address ranges. To use this, create an `IPSet` that specifies the addresses you want to detect, then use the ARN of that set in this statement.
	//
	// Each IP set rule statement references an IP set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it.
	IpSetReferenceStatement WebAclIpSetReferenceStatementPtrInput `pulumi:"ipSetReferenceStatement"`
	// A rule statement to match against labels that have been added to the web request by rules that have already run in the web ACL.
	//
	// The label match statement provides the label or namespace string to search for. The label string can represent a part or all of the fully qualified label name that had been added to the web request. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label. If you do not provide the fully qualified name in your label match string, AWS WAF performs the search for labels that were added in the same context as the label match statement.
	LabelMatchStatement WebAclLabelMatchStatementPtrInput `pulumi:"labelMatchStatement"`
	// A rule statement used to run the rules that are defined in a managed rule group. To use this, provide the vendor name and the name of the rule group in this statement. You can retrieve the required names through the API call `ListAvailableManagedRuleGroups` .
	//
	// You cannot nest a `ManagedRuleGroupStatement` , for example for use inside a `NotStatement` or `OrStatement` . It can only be referenced as a top-level statement within a rule.
	//
	// > You are charged additional fees when you use the AWS WAF Bot Control managed rule group `AWSManagedRulesBotControlRuleSet` , the AWS WAF Fraud Control account takeover prevention (ATP) managed rule group `AWSManagedRulesATPRuleSet` , or the AWS WAF Fraud Control account creation fraud prevention (ACFP) managed rule group `AWSManagedRulesACFPRuleSet` . For more information, see [AWS WAF Pricing](https://docs.aws.amazon.com/waf/pricing/) .
	ManagedRuleGroupStatement WebAclManagedRuleGroupStatementPtrInput `pulumi:"managedRuleGroupStatement"`
	// A logical rule statement used to negate the results of another rule statement. You provide one `Statement` within the `NotStatement` .
	NotStatement WebAclNotStatementPtrInput `pulumi:"notStatement"`
	// A logical rule statement used to combine other rule statements with OR logic. You provide more than one `Statement` within the `OrStatement` .
	OrStatement WebAclOrStatementPtrInput `pulumi:"orStatement"`
	// A rate-based rule counts incoming requests and rate limits requests when they are coming at too fast a rate. The rule categorizes requests according to your aggregation criteria, collects them into aggregation instances, and counts and rate limits the requests for each instance.
	//
	// > If you change any of these settings in a rule that's currently in use, the change resets the rule's rate limiting counts. This can pause the rule's rate limiting activities for up to a minute.
	//
	// You can specify individual aggregation keys, like IP address or HTTP method. You can also specify aggregation key combinations, like IP address and HTTP method, or HTTP method, query argument, and cookie.
	//
	// Each unique set of values for the aggregation keys that you specify is a separate aggregation instance, with the value from each key contributing to the aggregation instance definition.
	//
	// For example, assume the rule evaluates web requests with the following IP address and HTTP method values:
	//
	// - IP address 10.1.1.1, HTTP method POST
	// - IP address 10.1.1.1, HTTP method GET
	// - IP address 127.0.0.0, HTTP method POST
	// - IP address 10.1.1.1, HTTP method GET
	//
	// The rule would create different aggregation instances according to your aggregation criteria, for example:
	//
	// - If the aggregation criteria is just the IP address, then each individual address is an aggregation instance, and AWS WAF counts requests separately for each. The aggregation instances and request counts for our example would be the following:
	//
	// - IP address 10.1.1.1: count 3
	// - IP address 127.0.0.0: count 1
	// - If the aggregation criteria is HTTP method, then each individual HTTP method is an aggregation instance. The aggregation instances and request counts for our example would be the following:
	//
	// - HTTP method POST: count 2
	// - HTTP method GET: count 2
	// - If the aggregation criteria is IP address and HTTP method, then each IP address and each HTTP method would contribute to the combined aggregation instance. The aggregation instances and request counts for our example would be the following:
	//
	// - IP address 10.1.1.1, HTTP method POST: count 1
	// - IP address 10.1.1.1, HTTP method GET: count 2
	// - IP address 127.0.0.0, HTTP method POST: count 1
	//
	// For any n-tuple of aggregation keys, each unique combination of values for the keys defines a separate aggregation instance, which AWS WAF counts and rate-limits individually.
	//
	// You can optionally nest another statement inside the rate-based statement, to narrow the scope of the rule so that it only counts and rate limits requests that match the nested statement. You can use this nested scope-down statement in conjunction with your aggregation key specifications or you can just count and rate limit all requests that match the scope-down statement, without additional aggregation. When you choose to just manage all requests that match a scope-down statement, the aggregation instance is singular for the rule.
	//
	// You cannot nest a `RateBasedStatement` inside another statement, for example inside a `NotStatement` or `OrStatement` . You can define a `RateBasedStatement` inside a web ACL and inside a rule group.
	//
	// For additional information about the options, see [Rate limiting web requests using rate-based rules](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rate-based-rules.html) in the *AWS WAF Developer Guide* .
	//
	// If you only aggregate on the individual IP address or forwarded IP address, you can retrieve the list of IP addresses that AWS WAF is currently rate limiting for a rule through the API call `GetRateBasedStatementManagedKeys` . This option is not available for other aggregation configurations.
	//
	// AWS WAF tracks and manages web requests separately for each instance of a rate-based rule that you use. For example, if you provide the same rate-based rule settings in two web ACLs, each of the two rule statements represents a separate instance of the rate-based rule and gets its own tracking and management by AWS WAF . If you define a rate-based rule inside a rule group, and then use that rule group in multiple places, each use creates a separate instance of the rate-based rule that gets its own tracking and management by AWS WAF .
	RateBasedStatement WebAclRateBasedStatementPtrInput `pulumi:"rateBasedStatement"`
	// A rule statement used to search web request components for a match against a single regular expression.
	RegexMatchStatement WebAclRegexMatchStatementPtrInput `pulumi:"regexMatchStatement"`
	// A rule statement used to search web request components for matches with regular expressions. To use this, create a `RegexPatternSet` that specifies the expressions that you want to detect, then use the ARN of that set in this statement. A web request matches the pattern set rule statement if the request component matches any of the patterns in the set.
	//
	// Each regex pattern set rule statement references a regex pattern set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it.
	RegexPatternSetReferenceStatement WebAclRegexPatternSetReferenceStatementPtrInput `pulumi:"regexPatternSetReferenceStatement"`
	// A rule statement used to run the rules that are defined in a `RuleGroup` . To use this, create a rule group with your rules, then provide the ARN of the rule group in this statement.
	//
	// You cannot nest a `RuleGroupReferenceStatement` , for example for use inside a `NotStatement` or `OrStatement` . You cannot use a rule group reference statement inside another rule group. You can only reference a rule group as a top-level statement within a rule that you define in a web ACL.
	RuleGroupReferenceStatement WebAclRuleGroupReferenceStatementPtrInput `pulumi:"ruleGroupReferenceStatement"`
	// A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes.
	//
	// If you configure AWS WAF to inspect the request body, AWS WAF inspects only the number of bytes in the body up to the limit for the web ACL and protected resource type. If you know that the request body for your web requests should never exceed the inspection limit, you can use a size constraint statement to block requests that have a larger request body size. For more information about the inspection limits, see `Body` and `JsonBody` settings for the `FieldToMatch` data type.
	//
	// If you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI `/logo.jpg` is nine characters long.
	SizeConstraintStatement WebAclSizeConstraintStatementPtrInput `pulumi:"sizeConstraintStatement"`
	// A rule statement that inspects for malicious SQL code. Attackers insert malicious SQL code into web requests to do things like modify your database or extract data from it.
	SqliMatchStatement WebAclSqliMatchStatementPtrInput `pulumi:"sqliMatchStatement"`
	// A rule statement that inspects for cross-site scripting (XSS) attacks. In XSS attacks, the attacker uses vulnerabilities in a benign website as a vehicle to inject malicious client-site scripts into other legitimate web browsers.
	XssMatchStatement WebAclXssMatchStatementPtrInput `pulumi:"xssMatchStatement"`
}

First level statement that contains conditions, such as ByteMatch, SizeConstraint, etc

func (WebAclStatementArgs) ElementType added in v0.72.0

func (WebAclStatementArgs) ElementType() reflect.Type

func (WebAclStatementArgs) ToWebAclStatementOutput added in v0.72.0

func (i WebAclStatementArgs) ToWebAclStatementOutput() WebAclStatementOutput

func (WebAclStatementArgs) ToWebAclStatementOutputWithContext added in v0.72.0

func (i WebAclStatementArgs) ToWebAclStatementOutputWithContext(ctx context.Context) WebAclStatementOutput

func (WebAclStatementArgs) ToWebAclStatementPtrOutput added in v0.72.0

func (i WebAclStatementArgs) ToWebAclStatementPtrOutput() WebAclStatementPtrOutput

func (WebAclStatementArgs) ToWebAclStatementPtrOutputWithContext added in v0.72.0

func (i WebAclStatementArgs) ToWebAclStatementPtrOutputWithContext(ctx context.Context) WebAclStatementPtrOutput

type WebAclStatementArray added in v0.72.0

type WebAclStatementArray []WebAclStatementInput

func (WebAclStatementArray) ElementType added in v0.72.0

func (WebAclStatementArray) ElementType() reflect.Type

func (WebAclStatementArray) ToWebAclStatementArrayOutput added in v0.72.0

func (i WebAclStatementArray) ToWebAclStatementArrayOutput() WebAclStatementArrayOutput

func (WebAclStatementArray) ToWebAclStatementArrayOutputWithContext added in v0.72.0

func (i WebAclStatementArray) ToWebAclStatementArrayOutputWithContext(ctx context.Context) WebAclStatementArrayOutput

type WebAclStatementArrayInput added in v0.72.0

type WebAclStatementArrayInput interface {
	pulumi.Input

	ToWebAclStatementArrayOutput() WebAclStatementArrayOutput
	ToWebAclStatementArrayOutputWithContext(context.Context) WebAclStatementArrayOutput
}

WebAclStatementArrayInput is an input type that accepts WebAclStatementArray and WebAclStatementArrayOutput values. You can construct a concrete instance of `WebAclStatementArrayInput` via:

WebAclStatementArray{ WebAclStatementArgs{...} }

type WebAclStatementArrayOutput added in v0.72.0

type WebAclStatementArrayOutput struct{ *pulumi.OutputState }

func (WebAclStatementArrayOutput) ElementType added in v0.72.0

func (WebAclStatementArrayOutput) ElementType() reflect.Type

func (WebAclStatementArrayOutput) Index added in v0.72.0

func (WebAclStatementArrayOutput) ToWebAclStatementArrayOutput added in v0.72.0

func (o WebAclStatementArrayOutput) ToWebAclStatementArrayOutput() WebAclStatementArrayOutput

func (WebAclStatementArrayOutput) ToWebAclStatementArrayOutputWithContext added in v0.72.0

func (o WebAclStatementArrayOutput) ToWebAclStatementArrayOutputWithContext(ctx context.Context) WebAclStatementArrayOutput

type WebAclStatementInput added in v0.72.0

type WebAclStatementInput interface {
	pulumi.Input

	ToWebAclStatementOutput() WebAclStatementOutput
	ToWebAclStatementOutputWithContext(context.Context) WebAclStatementOutput
}

WebAclStatementInput is an input type that accepts WebAclStatementArgs and WebAclStatementOutput values. You can construct a concrete instance of `WebAclStatementInput` via:

WebAclStatementArgs{...}

type WebAclStatementOutput added in v0.72.0

type WebAclStatementOutput struct{ *pulumi.OutputState }

First level statement that contains conditions, such as ByteMatch, SizeConstraint, etc

func (WebAclStatementOutput) AndStatement added in v0.72.0

A logical rule statement used to combine other rule statements with AND logic. You provide more than one `Statement` within the `AndStatement` .

func (WebAclStatementOutput) ByteMatchStatement added in v0.72.0

A rule statement that defines a string match search for AWS WAF to apply to web requests. The byte match statement provides the bytes to search for, the location in requests that you want AWS WAF to search, and other settings. The bytes to search for are typically a string that corresponds with ASCII characters. In the AWS WAF console and the developer guide, this is called a string match statement.

func (WebAclStatementOutput) ElementType added in v0.72.0

func (WebAclStatementOutput) ElementType() reflect.Type

func (WebAclStatementOutput) GeoMatchStatement added in v0.72.0

A rule statement that labels web requests by country and region and that matches against web requests based on country code. A geo match rule labels every request that it inspects regardless of whether it finds a match.

- To manage requests only by country, you can use this statement by itself and specify the countries that you want to match against in the `CountryCodes` array. - Otherwise, configure your geo match rule with Count action so that it only labels requests. Then, add one or more label match rules to run after the geo match rule and configure them to match against the geographic labels and handle the requests as needed.

AWS WAF labels requests using the alpha-2 country and region codes from the International Organization for Standardization (ISO) 3166 standard. AWS WAF determines the codes using either the IP address in the web request origin or, if you specify it, the address in the geo match `ForwardedIPConfig` .

If you use the web request origin, the label formats are `awswaf:clientip:geo:region:<ISO country code>-<ISO region code>` and `awswaf:clientip:geo:country:<ISO country code>` .

If you use a forwarded IP address, the label formats are `awswaf:forwardedip:geo:region:<ISO country code>-<ISO region code>` and `awswaf:forwardedip:geo:country:<ISO country code>` .

For additional details, see [Geographic match rule statement](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-geo-match.html) in the [AWS WAF Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .

func (WebAclStatementOutput) IpSetReferenceStatement added in v0.72.0

A rule statement used to detect web requests coming from particular IP addresses or address ranges. To use this, create an `IPSet` that specifies the addresses you want to detect, then use the ARN of that set in this statement.

Each IP set rule statement references an IP set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it.

func (WebAclStatementOutput) LabelMatchStatement added in v0.72.0

A rule statement to match against labels that have been added to the web request by rules that have already run in the web ACL.

The label match statement provides the label or namespace string to search for. The label string can represent a part or all of the fully qualified label name that had been added to the web request. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label. If you do not provide the fully qualified name in your label match string, AWS WAF performs the search for labels that were added in the same context as the label match statement.

func (WebAclStatementOutput) ManagedRuleGroupStatement added in v0.72.0

A rule statement used to run the rules that are defined in a managed rule group. To use this, provide the vendor name and the name of the rule group in this statement. You can retrieve the required names through the API call `ListAvailableManagedRuleGroups` .

You cannot nest a `ManagedRuleGroupStatement` , for example for use inside a `NotStatement` or `OrStatement` . It can only be referenced as a top-level statement within a rule.

> You are charged additional fees when you use the AWS WAF Bot Control managed rule group `AWSManagedRulesBotControlRuleSet` , the AWS WAF Fraud Control account takeover prevention (ATP) managed rule group `AWSManagedRulesATPRuleSet` , or the AWS WAF Fraud Control account creation fraud prevention (ACFP) managed rule group `AWSManagedRulesACFPRuleSet` . For more information, see [AWS WAF Pricing](https://docs.aws.amazon.com/waf/pricing/) .

func (WebAclStatementOutput) NotStatement added in v0.72.0

A logical rule statement used to negate the results of another rule statement. You provide one `Statement` within the `NotStatement` .

func (WebAclStatementOutput) OrStatement added in v0.72.0

A logical rule statement used to combine other rule statements with OR logic. You provide more than one `Statement` within the `OrStatement` .

func (WebAclStatementOutput) RateBasedStatement added in v0.72.0

A rate-based rule counts incoming requests and rate limits requests when they are coming at too fast a rate. The rule categorizes requests according to your aggregation criteria, collects them into aggregation instances, and counts and rate limits the requests for each instance.

> If you change any of these settings in a rule that's currently in use, the change resets the rule's rate limiting counts. This can pause the rule's rate limiting activities for up to a minute.

You can specify individual aggregation keys, like IP address or HTTP method. You can also specify aggregation key combinations, like IP address and HTTP method, or HTTP method, query argument, and cookie.

Each unique set of values for the aggregation keys that you specify is a separate aggregation instance, with the value from each key contributing to the aggregation instance definition.

For example, assume the rule evaluates web requests with the following IP address and HTTP method values:

- IP address 10.1.1.1, HTTP method POST - IP address 10.1.1.1, HTTP method GET - IP address 127.0.0.0, HTTP method POST - IP address 10.1.1.1, HTTP method GET

The rule would create different aggregation instances according to your aggregation criteria, for example:

- If the aggregation criteria is just the IP address, then each individual address is an aggregation instance, and AWS WAF counts requests separately for each. The aggregation instances and request counts for our example would be the following:

- IP address 10.1.1.1: count 3 - IP address 127.0.0.0: count 1 - If the aggregation criteria is HTTP method, then each individual HTTP method is an aggregation instance. The aggregation instances and request counts for our example would be the following:

- HTTP method POST: count 2 - HTTP method GET: count 2 - If the aggregation criteria is IP address and HTTP method, then each IP address and each HTTP method would contribute to the combined aggregation instance. The aggregation instances and request counts for our example would be the following:

- IP address 10.1.1.1, HTTP method POST: count 1 - IP address 10.1.1.1, HTTP method GET: count 2 - IP address 127.0.0.0, HTTP method POST: count 1

For any n-tuple of aggregation keys, each unique combination of values for the keys defines a separate aggregation instance, which AWS WAF counts and rate-limits individually.

You can optionally nest another statement inside the rate-based statement, to narrow the scope of the rule so that it only counts and rate limits requests that match the nested statement. You can use this nested scope-down statement in conjunction with your aggregation key specifications or you can just count and rate limit all requests that match the scope-down statement, without additional aggregation. When you choose to just manage all requests that match a scope-down statement, the aggregation instance is singular for the rule.

You cannot nest a `RateBasedStatement` inside another statement, for example inside a `NotStatement` or `OrStatement` . You can define a `RateBasedStatement` inside a web ACL and inside a rule group.

For additional information about the options, see [Rate limiting web requests using rate-based rules](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rate-based-rules.html) in the *AWS WAF Developer Guide* .

If you only aggregate on the individual IP address or forwarded IP address, you can retrieve the list of IP addresses that AWS WAF is currently rate limiting for a rule through the API call `GetRateBasedStatementManagedKeys` . This option is not available for other aggregation configurations.

AWS WAF tracks and manages web requests separately for each instance of a rate-based rule that you use. For example, if you provide the same rate-based rule settings in two web ACLs, each of the two rule statements represents a separate instance of the rate-based rule and gets its own tracking and management by AWS WAF . If you define a rate-based rule inside a rule group, and then use that rule group in multiple places, each use creates a separate instance of the rate-based rule that gets its own tracking and management by AWS WAF .

func (WebAclStatementOutput) RegexMatchStatement added in v0.72.0

A rule statement used to search web request components for a match against a single regular expression.

func (WebAclStatementOutput) RegexPatternSetReferenceStatement added in v0.72.0

func (o WebAclStatementOutput) RegexPatternSetReferenceStatement() WebAclRegexPatternSetReferenceStatementPtrOutput

A rule statement used to search web request components for matches with regular expressions. To use this, create a `RegexPatternSet` that specifies the expressions that you want to detect, then use the ARN of that set in this statement. A web request matches the pattern set rule statement if the request component matches any of the patterns in the set.

Each regex pattern set rule statement references a regex pattern set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it.

func (WebAclStatementOutput) RuleGroupReferenceStatement added in v0.72.0

func (o WebAclStatementOutput) RuleGroupReferenceStatement() WebAclRuleGroupReferenceStatementPtrOutput

A rule statement used to run the rules that are defined in a `RuleGroup` . To use this, create a rule group with your rules, then provide the ARN of the rule group in this statement.

You cannot nest a `RuleGroupReferenceStatement` , for example for use inside a `NotStatement` or `OrStatement` . You cannot use a rule group reference statement inside another rule group. You can only reference a rule group as a top-level statement within a rule that you define in a web ACL.

func (WebAclStatementOutput) SizeConstraintStatement added in v0.72.0

A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes.

If you configure AWS WAF to inspect the request body, AWS WAF inspects only the number of bytes in the body up to the limit for the web ACL and protected resource type. If you know that the request body for your web requests should never exceed the inspection limit, you can use a size constraint statement to block requests that have a larger request body size. For more information about the inspection limits, see `Body` and `JsonBody` settings for the `FieldToMatch` data type.

If you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI `/logo.jpg` is nine characters long.

func (WebAclStatementOutput) SqliMatchStatement added in v0.72.0

A rule statement that inspects for malicious SQL code. Attackers insert malicious SQL code into web requests to do things like modify your database or extract data from it.

func (WebAclStatementOutput) ToWebAclStatementOutput added in v0.72.0

func (o WebAclStatementOutput) ToWebAclStatementOutput() WebAclStatementOutput

func (WebAclStatementOutput) ToWebAclStatementOutputWithContext added in v0.72.0

func (o WebAclStatementOutput) ToWebAclStatementOutputWithContext(ctx context.Context) WebAclStatementOutput

func (WebAclStatementOutput) ToWebAclStatementPtrOutput added in v0.72.0

func (o WebAclStatementOutput) ToWebAclStatementPtrOutput() WebAclStatementPtrOutput

func (WebAclStatementOutput) ToWebAclStatementPtrOutputWithContext added in v0.72.0

func (o WebAclStatementOutput) ToWebAclStatementPtrOutputWithContext(ctx context.Context) WebAclStatementPtrOutput

func (WebAclStatementOutput) XssMatchStatement added in v0.72.0

A rule statement that inspects for cross-site scripting (XSS) attacks. In XSS attacks, the attacker uses vulnerabilities in a benign website as a vehicle to inject malicious client-site scripts into other legitimate web browsers.

type WebAclStatementPtrInput added in v0.72.0

type WebAclStatementPtrInput interface {
	pulumi.Input

	ToWebAclStatementPtrOutput() WebAclStatementPtrOutput
	ToWebAclStatementPtrOutputWithContext(context.Context) WebAclStatementPtrOutput
}

WebAclStatementPtrInput is an input type that accepts WebAclStatementArgs, WebAclStatementPtr and WebAclStatementPtrOutput values. You can construct a concrete instance of `WebAclStatementPtrInput` via:

        WebAclStatementArgs{...}

or:

        nil

func WebAclStatementPtr added in v0.72.0

func WebAclStatementPtr(v *WebAclStatementArgs) WebAclStatementPtrInput

type WebAclStatementPtrOutput added in v0.72.0

type WebAclStatementPtrOutput struct{ *pulumi.OutputState }

func (WebAclStatementPtrOutput) AndStatement added in v0.72.0

A logical rule statement used to combine other rule statements with AND logic. You provide more than one `Statement` within the `AndStatement` .

func (WebAclStatementPtrOutput) ByteMatchStatement added in v0.72.0

A rule statement that defines a string match search for AWS WAF to apply to web requests. The byte match statement provides the bytes to search for, the location in requests that you want AWS WAF to search, and other settings. The bytes to search for are typically a string that corresponds with ASCII characters. In the AWS WAF console and the developer guide, this is called a string match statement.

func (WebAclStatementPtrOutput) Elem added in v0.72.0

func (WebAclStatementPtrOutput) ElementType added in v0.72.0

func (WebAclStatementPtrOutput) ElementType() reflect.Type

func (WebAclStatementPtrOutput) GeoMatchStatement added in v0.72.0

A rule statement that labels web requests by country and region and that matches against web requests based on country code. A geo match rule labels every request that it inspects regardless of whether it finds a match.

- To manage requests only by country, you can use this statement by itself and specify the countries that you want to match against in the `CountryCodes` array. - Otherwise, configure your geo match rule with Count action so that it only labels requests. Then, add one or more label match rules to run after the geo match rule and configure them to match against the geographic labels and handle the requests as needed.

AWS WAF labels requests using the alpha-2 country and region codes from the International Organization for Standardization (ISO) 3166 standard. AWS WAF determines the codes using either the IP address in the web request origin or, if you specify it, the address in the geo match `ForwardedIPConfig` .

If you use the web request origin, the label formats are `awswaf:clientip:geo:region:<ISO country code>-<ISO region code>` and `awswaf:clientip:geo:country:<ISO country code>` .

If you use a forwarded IP address, the label formats are `awswaf:forwardedip:geo:region:<ISO country code>-<ISO region code>` and `awswaf:forwardedip:geo:country:<ISO country code>` .

For additional details, see [Geographic match rule statement](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-geo-match.html) in the [AWS WAF Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .

func (WebAclStatementPtrOutput) IpSetReferenceStatement added in v0.72.0

A rule statement used to detect web requests coming from particular IP addresses or address ranges. To use this, create an `IPSet` that specifies the addresses you want to detect, then use the ARN of that set in this statement.

Each IP set rule statement references an IP set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it.

func (WebAclStatementPtrOutput) LabelMatchStatement added in v0.72.0

A rule statement to match against labels that have been added to the web request by rules that have already run in the web ACL.

The label match statement provides the label or namespace string to search for. The label string can represent a part or all of the fully qualified label name that had been added to the web request. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label. If you do not provide the fully qualified name in your label match string, AWS WAF performs the search for labels that were added in the same context as the label match statement.

func (WebAclStatementPtrOutput) ManagedRuleGroupStatement added in v0.72.0

A rule statement used to run the rules that are defined in a managed rule group. To use this, provide the vendor name and the name of the rule group in this statement. You can retrieve the required names through the API call `ListAvailableManagedRuleGroups` .

You cannot nest a `ManagedRuleGroupStatement` , for example for use inside a `NotStatement` or `OrStatement` . It can only be referenced as a top-level statement within a rule.

> You are charged additional fees when you use the AWS WAF Bot Control managed rule group `AWSManagedRulesBotControlRuleSet` , the AWS WAF Fraud Control account takeover prevention (ATP) managed rule group `AWSManagedRulesATPRuleSet` , or the AWS WAF Fraud Control account creation fraud prevention (ACFP) managed rule group `AWSManagedRulesACFPRuleSet` . For more information, see [AWS WAF Pricing](https://docs.aws.amazon.com/waf/pricing/) .

func (WebAclStatementPtrOutput) NotStatement added in v0.72.0

A logical rule statement used to negate the results of another rule statement. You provide one `Statement` within the `NotStatement` .

func (WebAclStatementPtrOutput) OrStatement added in v0.72.0

A logical rule statement used to combine other rule statements with OR logic. You provide more than one `Statement` within the `OrStatement` .

func (WebAclStatementPtrOutput) RateBasedStatement added in v0.72.0

A rate-based rule counts incoming requests and rate limits requests when they are coming at too fast a rate. The rule categorizes requests according to your aggregation criteria, collects them into aggregation instances, and counts and rate limits the requests for each instance.

> If you change any of these settings in a rule that's currently in use, the change resets the rule's rate limiting counts. This can pause the rule's rate limiting activities for up to a minute.

You can specify individual aggregation keys, like IP address or HTTP method. You can also specify aggregation key combinations, like IP address and HTTP method, or HTTP method, query argument, and cookie.

Each unique set of values for the aggregation keys that you specify is a separate aggregation instance, with the value from each key contributing to the aggregation instance definition.

For example, assume the rule evaluates web requests with the following IP address and HTTP method values:

- IP address 10.1.1.1, HTTP method POST - IP address 10.1.1.1, HTTP method GET - IP address 127.0.0.0, HTTP method POST - IP address 10.1.1.1, HTTP method GET

The rule would create different aggregation instances according to your aggregation criteria, for example:

- If the aggregation criteria is just the IP address, then each individual address is an aggregation instance, and AWS WAF counts requests separately for each. The aggregation instances and request counts for our example would be the following:

- IP address 10.1.1.1: count 3 - IP address 127.0.0.0: count 1 - If the aggregation criteria is HTTP method, then each individual HTTP method is an aggregation instance. The aggregation instances and request counts for our example would be the following:

- HTTP method POST: count 2 - HTTP method GET: count 2 - If the aggregation criteria is IP address and HTTP method, then each IP address and each HTTP method would contribute to the combined aggregation instance. The aggregation instances and request counts for our example would be the following:

- IP address 10.1.1.1, HTTP method POST: count 1 - IP address 10.1.1.1, HTTP method GET: count 2 - IP address 127.0.0.0, HTTP method POST: count 1

For any n-tuple of aggregation keys, each unique combination of values for the keys defines a separate aggregation instance, which AWS WAF counts and rate-limits individually.

You can optionally nest another statement inside the rate-based statement, to narrow the scope of the rule so that it only counts and rate limits requests that match the nested statement. You can use this nested scope-down statement in conjunction with your aggregation key specifications or you can just count and rate limit all requests that match the scope-down statement, without additional aggregation. When you choose to just manage all requests that match a scope-down statement, the aggregation instance is singular for the rule.

You cannot nest a `RateBasedStatement` inside another statement, for example inside a `NotStatement` or `OrStatement` . You can define a `RateBasedStatement` inside a web ACL and inside a rule group.

For additional information about the options, see [Rate limiting web requests using rate-based rules](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rate-based-rules.html) in the *AWS WAF Developer Guide* .

If you only aggregate on the individual IP address or forwarded IP address, you can retrieve the list of IP addresses that AWS WAF is currently rate limiting for a rule through the API call `GetRateBasedStatementManagedKeys` . This option is not available for other aggregation configurations.

AWS WAF tracks and manages web requests separately for each instance of a rate-based rule that you use. For example, if you provide the same rate-based rule settings in two web ACLs, each of the two rule statements represents a separate instance of the rate-based rule and gets its own tracking and management by AWS WAF . If you define a rate-based rule inside a rule group, and then use that rule group in multiple places, each use creates a separate instance of the rate-based rule that gets its own tracking and management by AWS WAF .

func (WebAclStatementPtrOutput) RegexMatchStatement added in v0.72.0

A rule statement used to search web request components for a match against a single regular expression.

func (WebAclStatementPtrOutput) RegexPatternSetReferenceStatement added in v0.72.0

func (o WebAclStatementPtrOutput) RegexPatternSetReferenceStatement() WebAclRegexPatternSetReferenceStatementPtrOutput

A rule statement used to search web request components for matches with regular expressions. To use this, create a `RegexPatternSet` that specifies the expressions that you want to detect, then use the ARN of that set in this statement. A web request matches the pattern set rule statement if the request component matches any of the patterns in the set.

Each regex pattern set rule statement references a regex pattern set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it.

func (WebAclStatementPtrOutput) RuleGroupReferenceStatement added in v0.72.0

A rule statement used to run the rules that are defined in a `RuleGroup` . To use this, create a rule group with your rules, then provide the ARN of the rule group in this statement.

You cannot nest a `RuleGroupReferenceStatement` , for example for use inside a `NotStatement` or `OrStatement` . You cannot use a rule group reference statement inside another rule group. You can only reference a rule group as a top-level statement within a rule that you define in a web ACL.

func (WebAclStatementPtrOutput) SizeConstraintStatement added in v0.72.0

A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes.

If you configure AWS WAF to inspect the request body, AWS WAF inspects only the number of bytes in the body up to the limit for the web ACL and protected resource type. If you know that the request body for your web requests should never exceed the inspection limit, you can use a size constraint statement to block requests that have a larger request body size. For more information about the inspection limits, see `Body` and `JsonBody` settings for the `FieldToMatch` data type.

If you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI `/logo.jpg` is nine characters long.

func (WebAclStatementPtrOutput) SqliMatchStatement added in v0.72.0

A rule statement that inspects for malicious SQL code. Attackers insert malicious SQL code into web requests to do things like modify your database or extract data from it.

func (WebAclStatementPtrOutput) ToWebAclStatementPtrOutput added in v0.72.0

func (o WebAclStatementPtrOutput) ToWebAclStatementPtrOutput() WebAclStatementPtrOutput

func (WebAclStatementPtrOutput) ToWebAclStatementPtrOutputWithContext added in v0.72.0

func (o WebAclStatementPtrOutput) ToWebAclStatementPtrOutputWithContext(ctx context.Context) WebAclStatementPtrOutput

func (WebAclStatementPtrOutput) XssMatchStatement added in v0.72.0

A rule statement that inspects for cross-site scripting (XSS) attacks. In XSS attacks, the attacker uses vulnerabilities in a benign website as a vehicle to inject malicious client-site scripts into other legitimate web browsers.

type WebAclTag added in v0.72.0

type WebAclTag struct {
	// Part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as "customer." Tag keys are case-sensitive.
	Key *string `pulumi:"key"`
	// Part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as "companyA" or "companyB." Tag values are case-sensitive.
	Value *string `pulumi:"value"`
}

type WebAclTextTransformation added in v0.72.0

type WebAclTextTransformation struct {
	// Sets the relative processing order for multiple transformations. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content. The priorities don't need to be consecutive, but they must all be different.
	Priority int `pulumi:"priority"`
	// For detailed descriptions of each of the transformation types, see [Text transformations](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-transformation.html) in the *AWS WAF Developer Guide* .
	Type WebAclTextTransformationType `pulumi:"type"`
}

Text Transformation on the Search String before match.

type WebAclTextTransformationArgs added in v0.72.0

type WebAclTextTransformationArgs struct {
	// Sets the relative processing order for multiple transformations. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content. The priorities don't need to be consecutive, but they must all be different.
	Priority pulumi.IntInput `pulumi:"priority"`
	// For detailed descriptions of each of the transformation types, see [Text transformations](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-transformation.html) in the *AWS WAF Developer Guide* .
	Type WebAclTextTransformationTypeInput `pulumi:"type"`
}

Text Transformation on the Search String before match.

func (WebAclTextTransformationArgs) ElementType added in v0.72.0

func (WebAclTextTransformationArgs) ToWebAclTextTransformationOutput added in v0.72.0

func (i WebAclTextTransformationArgs) ToWebAclTextTransformationOutput() WebAclTextTransformationOutput

func (WebAclTextTransformationArgs) ToWebAclTextTransformationOutputWithContext added in v0.72.0

func (i WebAclTextTransformationArgs) ToWebAclTextTransformationOutputWithContext(ctx context.Context) WebAclTextTransformationOutput

type WebAclTextTransformationArray added in v0.72.0

type WebAclTextTransformationArray []WebAclTextTransformationInput

func (WebAclTextTransformationArray) ElementType added in v0.72.0

func (WebAclTextTransformationArray) ToWebAclTextTransformationArrayOutput added in v0.72.0

func (i WebAclTextTransformationArray) ToWebAclTextTransformationArrayOutput() WebAclTextTransformationArrayOutput

func (WebAclTextTransformationArray) ToWebAclTextTransformationArrayOutputWithContext added in v0.72.0

func (i WebAclTextTransformationArray) ToWebAclTextTransformationArrayOutputWithContext(ctx context.Context) WebAclTextTransformationArrayOutput

type WebAclTextTransformationArrayInput added in v0.72.0

type WebAclTextTransformationArrayInput interface {
	pulumi.Input

	ToWebAclTextTransformationArrayOutput() WebAclTextTransformationArrayOutput
	ToWebAclTextTransformationArrayOutputWithContext(context.Context) WebAclTextTransformationArrayOutput
}

WebAclTextTransformationArrayInput is an input type that accepts WebAclTextTransformationArray and WebAclTextTransformationArrayOutput values. You can construct a concrete instance of `WebAclTextTransformationArrayInput` via:

WebAclTextTransformationArray{ WebAclTextTransformationArgs{...} }

type WebAclTextTransformationArrayOutput added in v0.72.0

type WebAclTextTransformationArrayOutput struct{ *pulumi.OutputState }

func (WebAclTextTransformationArrayOutput) ElementType added in v0.72.0

func (WebAclTextTransformationArrayOutput) Index added in v0.72.0

func (WebAclTextTransformationArrayOutput) ToWebAclTextTransformationArrayOutput added in v0.72.0

func (o WebAclTextTransformationArrayOutput) ToWebAclTextTransformationArrayOutput() WebAclTextTransformationArrayOutput

func (WebAclTextTransformationArrayOutput) ToWebAclTextTransformationArrayOutputWithContext added in v0.72.0

func (o WebAclTextTransformationArrayOutput) ToWebAclTextTransformationArrayOutputWithContext(ctx context.Context) WebAclTextTransformationArrayOutput

type WebAclTextTransformationInput added in v0.72.0

type WebAclTextTransformationInput interface {
	pulumi.Input

	ToWebAclTextTransformationOutput() WebAclTextTransformationOutput
	ToWebAclTextTransformationOutputWithContext(context.Context) WebAclTextTransformationOutput
}

WebAclTextTransformationInput is an input type that accepts WebAclTextTransformationArgs and WebAclTextTransformationOutput values. You can construct a concrete instance of `WebAclTextTransformationInput` via:

WebAclTextTransformationArgs{...}

type WebAclTextTransformationOutput added in v0.72.0

type WebAclTextTransformationOutput struct{ *pulumi.OutputState }

Text Transformation on the Search String before match.

func (WebAclTextTransformationOutput) ElementType added in v0.72.0

func (WebAclTextTransformationOutput) Priority added in v0.72.0

Sets the relative processing order for multiple transformations. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content. The priorities don't need to be consecutive, but they must all be different.

func (WebAclTextTransformationOutput) ToWebAclTextTransformationOutput added in v0.72.0

func (o WebAclTextTransformationOutput) ToWebAclTextTransformationOutput() WebAclTextTransformationOutput

func (WebAclTextTransformationOutput) ToWebAclTextTransformationOutputWithContext added in v0.72.0

func (o WebAclTextTransformationOutput) ToWebAclTextTransformationOutputWithContext(ctx context.Context) WebAclTextTransformationOutput

func (WebAclTextTransformationOutput) Type added in v0.72.0

For detailed descriptions of each of the transformation types, see [Text transformations](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-transformation.html) in the *AWS WAF Developer Guide* .

type WebAclTextTransformationType added in v0.72.0

type WebAclTextTransformationType string

Type of text transformation.

func (WebAclTextTransformationType) ElementType added in v0.72.0

func (WebAclTextTransformationType) ToStringOutput added in v0.72.0

func (WebAclTextTransformationType) ToStringOutputWithContext added in v0.72.0

func (e WebAclTextTransformationType) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclTextTransformationType) ToStringPtrOutput added in v0.72.0

func (e WebAclTextTransformationType) ToStringPtrOutput() pulumi.StringPtrOutput

func (WebAclTextTransformationType) ToStringPtrOutputWithContext added in v0.72.0

func (e WebAclTextTransformationType) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclTextTransformationType) ToWebAclTextTransformationTypeOutput added in v0.72.0

func (e WebAclTextTransformationType) ToWebAclTextTransformationTypeOutput() WebAclTextTransformationTypeOutput

func (WebAclTextTransformationType) ToWebAclTextTransformationTypeOutputWithContext added in v0.72.0

func (e WebAclTextTransformationType) ToWebAclTextTransformationTypeOutputWithContext(ctx context.Context) WebAclTextTransformationTypeOutput

func (WebAclTextTransformationType) ToWebAclTextTransformationTypePtrOutput added in v0.72.0

func (e WebAclTextTransformationType) ToWebAclTextTransformationTypePtrOutput() WebAclTextTransformationTypePtrOutput

func (WebAclTextTransformationType) ToWebAclTextTransformationTypePtrOutputWithContext added in v0.72.0

func (e WebAclTextTransformationType) ToWebAclTextTransformationTypePtrOutputWithContext(ctx context.Context) WebAclTextTransformationTypePtrOutput

type WebAclTextTransformationTypeInput added in v0.72.0

type WebAclTextTransformationTypeInput interface {
	pulumi.Input

	ToWebAclTextTransformationTypeOutput() WebAclTextTransformationTypeOutput
	ToWebAclTextTransformationTypeOutputWithContext(context.Context) WebAclTextTransformationTypeOutput
}

WebAclTextTransformationTypeInput is an input type that accepts values of the WebAclTextTransformationType enum A concrete instance of `WebAclTextTransformationTypeInput` can be one of the following:

WebAclTextTransformationTypeNone
WebAclTextTransformationTypeCompressWhiteSpace
WebAclTextTransformationTypeHtmlEntityDecode
WebAclTextTransformationTypeLowercase
WebAclTextTransformationTypeCmdLine
WebAclTextTransformationTypeUrlDecode
WebAclTextTransformationTypeBase64Decode
WebAclTextTransformationTypeHexDecode
WebAclTextTransformationTypeMd5
WebAclTextTransformationTypeReplaceComments
WebAclTextTransformationTypeEscapeSeqDecode
WebAclTextTransformationTypeSqlHexDecode
WebAclTextTransformationTypeCssDecode
WebAclTextTransformationTypeJsDecode
WebAclTextTransformationTypeNormalizePath
WebAclTextTransformationTypeNormalizePathWin
WebAclTextTransformationTypeRemoveNulls
WebAclTextTransformationTypeReplaceNulls
WebAclTextTransformationTypeBase64DecodeExt
WebAclTextTransformationTypeUrlDecodeUni
WebAclTextTransformationTypeUtf8ToUnicode

type WebAclTextTransformationTypeOutput added in v0.72.0

type WebAclTextTransformationTypeOutput struct{ *pulumi.OutputState }

func (WebAclTextTransformationTypeOutput) ElementType added in v0.72.0

func (WebAclTextTransformationTypeOutput) ToStringOutput added in v0.72.0

func (WebAclTextTransformationTypeOutput) ToStringOutputWithContext added in v0.72.0

func (o WebAclTextTransformationTypeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (WebAclTextTransformationTypeOutput) ToStringPtrOutput added in v0.72.0

func (WebAclTextTransformationTypeOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o WebAclTextTransformationTypeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclTextTransformationTypeOutput) ToWebAclTextTransformationTypeOutput added in v0.72.0

func (o WebAclTextTransformationTypeOutput) ToWebAclTextTransformationTypeOutput() WebAclTextTransformationTypeOutput

func (WebAclTextTransformationTypeOutput) ToWebAclTextTransformationTypeOutputWithContext added in v0.72.0

func (o WebAclTextTransformationTypeOutput) ToWebAclTextTransformationTypeOutputWithContext(ctx context.Context) WebAclTextTransformationTypeOutput

func (WebAclTextTransformationTypeOutput) ToWebAclTextTransformationTypePtrOutput added in v0.72.0

func (o WebAclTextTransformationTypeOutput) ToWebAclTextTransformationTypePtrOutput() WebAclTextTransformationTypePtrOutput

func (WebAclTextTransformationTypeOutput) ToWebAclTextTransformationTypePtrOutputWithContext added in v0.72.0

func (o WebAclTextTransformationTypeOutput) ToWebAclTextTransformationTypePtrOutputWithContext(ctx context.Context) WebAclTextTransformationTypePtrOutput

type WebAclTextTransformationTypePtrInput added in v0.72.0

type WebAclTextTransformationTypePtrInput interface {
	pulumi.Input

	ToWebAclTextTransformationTypePtrOutput() WebAclTextTransformationTypePtrOutput
	ToWebAclTextTransformationTypePtrOutputWithContext(context.Context) WebAclTextTransformationTypePtrOutput
}

func WebAclTextTransformationTypePtr added in v0.72.0

func WebAclTextTransformationTypePtr(v string) WebAclTextTransformationTypePtrInput

type WebAclTextTransformationTypePtrOutput added in v0.72.0

type WebAclTextTransformationTypePtrOutput struct{ *pulumi.OutputState }

func (WebAclTextTransformationTypePtrOutput) Elem added in v0.72.0

func (WebAclTextTransformationTypePtrOutput) ElementType added in v0.72.0

func (WebAclTextTransformationTypePtrOutput) ToStringPtrOutput added in v0.72.0

func (WebAclTextTransformationTypePtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o WebAclTextTransformationTypePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (WebAclTextTransformationTypePtrOutput) ToWebAclTextTransformationTypePtrOutput added in v0.72.0

func (o WebAclTextTransformationTypePtrOutput) ToWebAclTextTransformationTypePtrOutput() WebAclTextTransformationTypePtrOutput

func (WebAclTextTransformationTypePtrOutput) ToWebAclTextTransformationTypePtrOutputWithContext added in v0.72.0

func (o WebAclTextTransformationTypePtrOutput) ToWebAclTextTransformationTypePtrOutputWithContext(ctx context.Context) WebAclTextTransformationTypePtrOutput

type WebAclVisibilityConfig added in v0.72.0

type WebAclVisibilityConfig struct {
	// Indicates whether the associated resource sends metrics to Amazon CloudWatch. For the list of available metrics, see [AWS WAF Metrics](https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#waf-metrics) in the *AWS WAF Developer Guide* .
	//
	// For web ACLs, the metrics are for web requests that have the web ACL default action applied. AWS WAF applies the default action to web requests that pass the inspection of all rules in the web ACL without being either allowed or blocked. For more information,
	// see [The web ACL default action](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-default-action.html) in the *AWS WAF Developer Guide* .
	CloudWatchMetricsEnabled bool `pulumi:"cloudWatchMetricsEnabled"`
	// A name of the Amazon CloudWatch metric dimension. The name can contain only the characters: A-Z, a-z, 0-9, - (hyphen), and _ (underscore). The name can be from one to 128 characters long. It can't contain whitespace or metric names that are reserved for AWS WAF , for example `All` and `Default_Action` .
	MetricName string `pulumi:"metricName"`
	// Indicates whether AWS WAF should store a sampling of the web requests that match the rules. You can view the sampled requests through the AWS WAF console.
	//
	// > Request sampling doesn't provide a field redaction option, and any field redaction that you specify in your logging configuration doesn't affect sampling. The only way to exclude fields from request sampling is by disabling sampling in the web ACL visibility configuration.
	SampledRequestsEnabled bool `pulumi:"sampledRequestsEnabled"`
}

Visibility Metric of the WebACL.

type WebAclVisibilityConfigArgs added in v0.72.0

type WebAclVisibilityConfigArgs struct {
	// Indicates whether the associated resource sends metrics to Amazon CloudWatch. For the list of available metrics, see [AWS WAF Metrics](https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#waf-metrics) in the *AWS WAF Developer Guide* .
	//
	// For web ACLs, the metrics are for web requests that have the web ACL default action applied. AWS WAF applies the default action to web requests that pass the inspection of all rules in the web ACL without being either allowed or blocked. For more information,
	// see [The web ACL default action](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-default-action.html) in the *AWS WAF Developer Guide* .
	CloudWatchMetricsEnabled pulumi.BoolInput `pulumi:"cloudWatchMetricsEnabled"`
	// A name of the Amazon CloudWatch metric dimension. The name can contain only the characters: A-Z, a-z, 0-9, - (hyphen), and _ (underscore). The name can be from one to 128 characters long. It can't contain whitespace or metric names that are reserved for AWS WAF , for example `All` and `Default_Action` .
	MetricName pulumi.StringInput `pulumi:"metricName"`
	// Indicates whether AWS WAF should store a sampling of the web requests that match the rules. You can view the sampled requests through the AWS WAF console.
	//
	// > Request sampling doesn't provide a field redaction option, and any field redaction that you specify in your logging configuration doesn't affect sampling. The only way to exclude fields from request sampling is by disabling sampling in the web ACL visibility configuration.
	SampledRequestsEnabled pulumi.BoolInput `pulumi:"sampledRequestsEnabled"`
}

Visibility Metric of the WebACL.

func (WebAclVisibilityConfigArgs) ElementType added in v0.72.0

func (WebAclVisibilityConfigArgs) ElementType() reflect.Type

func (WebAclVisibilityConfigArgs) ToWebAclVisibilityConfigOutput added in v0.72.0

func (i WebAclVisibilityConfigArgs) ToWebAclVisibilityConfigOutput() WebAclVisibilityConfigOutput

func (WebAclVisibilityConfigArgs) ToWebAclVisibilityConfigOutputWithContext added in v0.72.0

func (i WebAclVisibilityConfigArgs) ToWebAclVisibilityConfigOutputWithContext(ctx context.Context) WebAclVisibilityConfigOutput

type WebAclVisibilityConfigInput added in v0.72.0

type WebAclVisibilityConfigInput interface {
	pulumi.Input

	ToWebAclVisibilityConfigOutput() WebAclVisibilityConfigOutput
	ToWebAclVisibilityConfigOutputWithContext(context.Context) WebAclVisibilityConfigOutput
}

WebAclVisibilityConfigInput is an input type that accepts WebAclVisibilityConfigArgs and WebAclVisibilityConfigOutput values. You can construct a concrete instance of `WebAclVisibilityConfigInput` via:

WebAclVisibilityConfigArgs{...}

type WebAclVisibilityConfigOutput added in v0.72.0

type WebAclVisibilityConfigOutput struct{ *pulumi.OutputState }

Visibility Metric of the WebACL.

func (WebAclVisibilityConfigOutput) CloudWatchMetricsEnabled added in v0.72.0

func (o WebAclVisibilityConfigOutput) CloudWatchMetricsEnabled() pulumi.BoolOutput

Indicates whether the associated resource sends metrics to Amazon CloudWatch. For the list of available metrics, see [AWS WAF Metrics](https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#waf-metrics) in the *AWS WAF Developer Guide* .

For web ACLs, the metrics are for web requests that have the web ACL default action applied. AWS WAF applies the default action to web requests that pass the inspection of all rules in the web ACL without being either allowed or blocked. For more information, see [The web ACL default action](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-default-action.html) in the *AWS WAF Developer Guide* .

func (WebAclVisibilityConfigOutput) ElementType added in v0.72.0

func (WebAclVisibilityConfigOutput) MetricName added in v0.72.0

A name of the Amazon CloudWatch metric dimension. The name can contain only the characters: A-Z, a-z, 0-9, - (hyphen), and _ (underscore). The name can be from one to 128 characters long. It can't contain whitespace or metric names that are reserved for AWS WAF , for example `All` and `Default_Action` .

func (WebAclVisibilityConfigOutput) SampledRequestsEnabled added in v0.72.0

func (o WebAclVisibilityConfigOutput) SampledRequestsEnabled() pulumi.BoolOutput

Indicates whether AWS WAF should store a sampling of the web requests that match the rules. You can view the sampled requests through the AWS WAF console.

> Request sampling doesn't provide a field redaction option, and any field redaction that you specify in your logging configuration doesn't affect sampling. The only way to exclude fields from request sampling is by disabling sampling in the web ACL visibility configuration.

func (WebAclVisibilityConfigOutput) ToWebAclVisibilityConfigOutput added in v0.72.0

func (o WebAclVisibilityConfigOutput) ToWebAclVisibilityConfigOutput() WebAclVisibilityConfigOutput

func (WebAclVisibilityConfigOutput) ToWebAclVisibilityConfigOutputWithContext added in v0.72.0

func (o WebAclVisibilityConfigOutput) ToWebAclVisibilityConfigOutputWithContext(ctx context.Context) WebAclVisibilityConfigOutput

type WebAclVisibilityConfigPtrOutput added in v0.72.0

type WebAclVisibilityConfigPtrOutput struct{ *pulumi.OutputState }

func (WebAclVisibilityConfigPtrOutput) CloudWatchMetricsEnabled added in v0.72.0

func (o WebAclVisibilityConfigPtrOutput) CloudWatchMetricsEnabled() pulumi.BoolPtrOutput

Indicates whether the associated resource sends metrics to Amazon CloudWatch. For the list of available metrics, see [AWS WAF Metrics](https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#waf-metrics) in the *AWS WAF Developer Guide* .

For web ACLs, the metrics are for web requests that have the web ACL default action applied. AWS WAF applies the default action to web requests that pass the inspection of all rules in the web ACL without being either allowed or blocked. For more information, see [The web ACL default action](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-default-action.html) in the *AWS WAF Developer Guide* .

func (WebAclVisibilityConfigPtrOutput) Elem added in v0.72.0

func (WebAclVisibilityConfigPtrOutput) ElementType added in v0.72.0

func (WebAclVisibilityConfigPtrOutput) MetricName added in v0.72.0

A name of the Amazon CloudWatch metric dimension. The name can contain only the characters: A-Z, a-z, 0-9, - (hyphen), and _ (underscore). The name can be from one to 128 characters long. It can't contain whitespace or metric names that are reserved for AWS WAF , for example `All` and `Default_Action` .

func (WebAclVisibilityConfigPtrOutput) SampledRequestsEnabled added in v0.72.0

func (o WebAclVisibilityConfigPtrOutput) SampledRequestsEnabled() pulumi.BoolPtrOutput

Indicates whether AWS WAF should store a sampling of the web requests that match the rules. You can view the sampled requests through the AWS WAF console.

> Request sampling doesn't provide a field redaction option, and any field redaction that you specify in your logging configuration doesn't affect sampling. The only way to exclude fields from request sampling is by disabling sampling in the web ACL visibility configuration.

func (WebAclVisibilityConfigPtrOutput) ToWebAclVisibilityConfigPtrOutput added in v0.72.0

func (o WebAclVisibilityConfigPtrOutput) ToWebAclVisibilityConfigPtrOutput() WebAclVisibilityConfigPtrOutput

func (WebAclVisibilityConfigPtrOutput) ToWebAclVisibilityConfigPtrOutputWithContext added in v0.72.0

func (o WebAclVisibilityConfigPtrOutput) ToWebAclVisibilityConfigPtrOutputWithContext(ctx context.Context) WebAclVisibilityConfigPtrOutput

type WebAclXssMatchStatement added in v0.72.0

type WebAclXssMatchStatement struct {
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch WebAclFieldToMatch `pulumi:"fieldToMatch"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations []WebAclTextTransformation `pulumi:"textTransformations"`
}

Xss Match Statement.

type WebAclXssMatchStatementArgs added in v0.72.0

type WebAclXssMatchStatementArgs struct {
	// The part of the web request that you want AWS WAF to inspect.
	FieldToMatch WebAclFieldToMatchInput `pulumi:"fieldToMatch"`
	// Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.
	TextTransformations WebAclTextTransformationArrayInput `pulumi:"textTransformations"`
}

Xss Match Statement.

func (WebAclXssMatchStatementArgs) ElementType added in v0.72.0

func (WebAclXssMatchStatementArgs) ToWebAclXssMatchStatementOutput added in v0.72.0

func (i WebAclXssMatchStatementArgs) ToWebAclXssMatchStatementOutput() WebAclXssMatchStatementOutput

func (WebAclXssMatchStatementArgs) ToWebAclXssMatchStatementOutputWithContext added in v0.72.0

func (i WebAclXssMatchStatementArgs) ToWebAclXssMatchStatementOutputWithContext(ctx context.Context) WebAclXssMatchStatementOutput

func (WebAclXssMatchStatementArgs) ToWebAclXssMatchStatementPtrOutput added in v0.72.0

func (i WebAclXssMatchStatementArgs) ToWebAclXssMatchStatementPtrOutput() WebAclXssMatchStatementPtrOutput

func (WebAclXssMatchStatementArgs) ToWebAclXssMatchStatementPtrOutputWithContext added in v0.72.0

func (i WebAclXssMatchStatementArgs) ToWebAclXssMatchStatementPtrOutputWithContext(ctx context.Context) WebAclXssMatchStatementPtrOutput

type WebAclXssMatchStatementInput added in v0.72.0

type WebAclXssMatchStatementInput interface {
	pulumi.Input

	ToWebAclXssMatchStatementOutput() WebAclXssMatchStatementOutput
	ToWebAclXssMatchStatementOutputWithContext(context.Context) WebAclXssMatchStatementOutput
}

WebAclXssMatchStatementInput is an input type that accepts WebAclXssMatchStatementArgs and WebAclXssMatchStatementOutput values. You can construct a concrete instance of `WebAclXssMatchStatementInput` via:

WebAclXssMatchStatementArgs{...}

type WebAclXssMatchStatementOutput added in v0.72.0

type WebAclXssMatchStatementOutput struct{ *pulumi.OutputState }

Xss Match Statement.

func (WebAclXssMatchStatementOutput) ElementType added in v0.72.0

func (WebAclXssMatchStatementOutput) FieldToMatch added in v0.72.0

The part of the web request that you want AWS WAF to inspect.

func (WebAclXssMatchStatementOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (WebAclXssMatchStatementOutput) ToWebAclXssMatchStatementOutput added in v0.72.0

func (o WebAclXssMatchStatementOutput) ToWebAclXssMatchStatementOutput() WebAclXssMatchStatementOutput

func (WebAclXssMatchStatementOutput) ToWebAclXssMatchStatementOutputWithContext added in v0.72.0

func (o WebAclXssMatchStatementOutput) ToWebAclXssMatchStatementOutputWithContext(ctx context.Context) WebAclXssMatchStatementOutput

func (WebAclXssMatchStatementOutput) ToWebAclXssMatchStatementPtrOutput added in v0.72.0

func (o WebAclXssMatchStatementOutput) ToWebAclXssMatchStatementPtrOutput() WebAclXssMatchStatementPtrOutput

func (WebAclXssMatchStatementOutput) ToWebAclXssMatchStatementPtrOutputWithContext added in v0.72.0

func (o WebAclXssMatchStatementOutput) ToWebAclXssMatchStatementPtrOutputWithContext(ctx context.Context) WebAclXssMatchStatementPtrOutput

type WebAclXssMatchStatementPtrInput added in v0.72.0

type WebAclXssMatchStatementPtrInput interface {
	pulumi.Input

	ToWebAclXssMatchStatementPtrOutput() WebAclXssMatchStatementPtrOutput
	ToWebAclXssMatchStatementPtrOutputWithContext(context.Context) WebAclXssMatchStatementPtrOutput
}

WebAclXssMatchStatementPtrInput is an input type that accepts WebAclXssMatchStatementArgs, WebAclXssMatchStatementPtr and WebAclXssMatchStatementPtrOutput values. You can construct a concrete instance of `WebAclXssMatchStatementPtrInput` via:

        WebAclXssMatchStatementArgs{...}

or:

        nil

func WebAclXssMatchStatementPtr added in v0.72.0

func WebAclXssMatchStatementPtr(v *WebAclXssMatchStatementArgs) WebAclXssMatchStatementPtrInput

type WebAclXssMatchStatementPtrOutput added in v0.72.0

type WebAclXssMatchStatementPtrOutput struct{ *pulumi.OutputState }

func (WebAclXssMatchStatementPtrOutput) Elem added in v0.72.0

func (WebAclXssMatchStatementPtrOutput) ElementType added in v0.72.0

func (WebAclXssMatchStatementPtrOutput) FieldToMatch added in v0.72.0

The part of the web request that you want AWS WAF to inspect.

func (WebAclXssMatchStatementPtrOutput) TextTransformations added in v0.72.0

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match.

func (WebAclXssMatchStatementPtrOutput) ToWebAclXssMatchStatementPtrOutput added in v0.72.0

func (o WebAclXssMatchStatementPtrOutput) ToWebAclXssMatchStatementPtrOutput() WebAclXssMatchStatementPtrOutput

func (WebAclXssMatchStatementPtrOutput) ToWebAclXssMatchStatementPtrOutputWithContext added in v0.72.0

func (o WebAclXssMatchStatementPtrOutput) ToWebAclXssMatchStatementPtrOutputWithContext(ctx context.Context) WebAclXssMatchStatementPtrOutput

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL