Skip to content

Commit 81aeece

Browse files
author
awstools
committed
feat(client-wafv2): You can now associate an AWS WAF web ACL with an Amazon Cognito user pool.
1 parent 5426503 commit 81aeece

File tree

10 files changed

+148
-104
lines changed

10 files changed

+148
-104
lines changed

‎clients/client-wafv2/README.md‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -25,11 +25,11 @@ have retained the prior names, endpoints, and namespaces. </p>
2525
see the <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
2626
</note>
2727
<p>WAF is a web application firewall that lets you monitor the HTTP and HTTPS
28-
requests that are forwarded to Amazon CloudFront, an Amazon API Gateway REST API, an Application Load Balancer, or an AppSync
29-
GraphQL API. WAF also lets you control access to your content. Based on criteria that
28+
requests that are forwarded to Amazon CloudFront, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync
29+
GraphQL API, or an Amazon Cognito user pool. WAF also lets you control access to your content. Based on conditions that
3030
you specify, such as the IP addresses that requests originate from or the values of query
31-
strings, the Amazon API Gateway REST API, CloudFront distribution, the Application Load Balancer, or the AppSync GraphQL
32-
API responds to requests either with the requested content or with an HTTP 403 status code
31+
strings, the Amazon API Gateway REST API, CloudFront distribution, the Application Load Balancer, the AppSync GraphQL
32+
API, or the Amazon Cognito user pool responds to requests either with the requested content or with an HTTP 403 status code
3333
(Forbidden). You also can configure CloudFront to return a custom error page when a request is
3434
blocked.</p>
3535
<p>This API guide is for developers who need detailed information about WAF API actions,
@@ -40,7 +40,7 @@ Guide</a>.</p>
4040
<ul>
4141
<li>
4242
<p>For regional applications, you can use any of the endpoints in the list.
43-
A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync GraphQL API. </p>
43+
A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, or an Amazon Cognito user pool. </p>
4444
</li>
4545
<li>
4646
<p>For Amazon CloudFront applications, you must use the API endpoint listed for

‎clients/client-wafv2/src/WAFV2.ts‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -227,11 +227,11 @@ import { WAFV2Client } from "./WAFV2Client";
227227
* see the <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
228228
* </note>
229229
* <p>WAF is a web application firewall that lets you monitor the HTTP and HTTPS
230-
* requests that are forwarded to Amazon CloudFront, an Amazon API Gateway REST API, an Application Load Balancer, or an AppSync
231-
* GraphQL API. WAF also lets you control access to your content. Based on criteria that
230+
* requests that are forwarded to Amazon CloudFront, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync
231+
* GraphQL API, or an Amazon Cognito user pool. WAF also lets you control access to your content. Based on conditions that
232232
* you specify, such as the IP addresses that requests originate from or the values of query
233-
* strings, the Amazon API Gateway REST API, CloudFront distribution, the Application Load Balancer, or the AppSync GraphQL
234-
* API responds to requests either with the requested content or with an HTTP 403 status code
233+
* strings, the Amazon API Gateway REST API, CloudFront distribution, the Application Load Balancer, the AppSync GraphQL
234+
* API, or the Amazon Cognito user pool responds to requests either with the requested content or with an HTTP 403 status code
235235
* (Forbidden). You also can configure CloudFront to return a custom error page when a request is
236236
* blocked.</p>
237237
* <p>This API guide is for developers who need detailed information about WAF API actions,
@@ -242,7 +242,7 @@ import { WAFV2Client } from "./WAFV2Client";
242242
* <ul>
243243
* <li>
244244
* <p>For regional applications, you can use any of the endpoints in the list.
245-
* A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync GraphQL API. </p>
245+
* A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, or an Amazon Cognito user pool. </p>
246246
* </li>
247247
* <li>
248248
* <p>For Amazon CloudFront applications, you must use the API endpoint listed for
@@ -275,7 +275,7 @@ import { WAFV2Client } from "./WAFV2Client";
275275
export class WAFV2 extends WAFV2Client {
276276
/**
277277
* <p>Associates a web ACL with a regional application resource, to protect the resource.
278-
* A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync GraphQL API. </p>
278+
* A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, or an Amazon Cognito user pool. </p>
279279
* <p>For Amazon CloudFront, don't use this call. Instead, use your CloudFront distribution configuration. To
280280
* associate a web ACL, in the CloudFront call <code>UpdateDistribution</code>, set the web ACL ID
281281
* to the Amazon Resource Name (ARN) of the web ACL. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a>.</p>
@@ -451,7 +451,7 @@ export class WAFV2 extends WAFV2Client {
451451

452452
/**
453453
* <p>Creates a <a>WebACL</a> per the specifications provided.</p>
454-
* <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, or an AppSync GraphQL API. </p>
454+
* <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, or an Amazon Cognito user pool. </p>
455455
*/
456456
public createWebACL(
457457
args: CreateWebACLCommandInput,
@@ -764,7 +764,7 @@ export class WAFV2 extends WAFV2Client {
764764

765765
/**
766766
* <p>Disassociates the specified regional application resource from any existing web ACL
767-
* association. A resource can have at most one web ACL association. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync GraphQL API. </p>
767+
* association. A resource can have at most one web ACL association. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, or an Amazon Cognito user pool. </p>
768768
* <p>For Amazon CloudFront, don't use this call. Instead, use your CloudFront distribution configuration. To
769769
* disassociate a web ACL, provide an empty web ACL ID in the CloudFront call
770770
* <code>UpdateDistribution</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a>.</p>
@@ -1936,7 +1936,7 @@ export class WAFV2 extends WAFV2Client {
19361936
* <note>
19371937
* <p>This operation completely replaces the mutable specifications that you already have for the web ACL with the ones that you provide to this call. To modify the web ACL, retrieve it by calling <a>GetWebACL</a>, update the settings as needed, and then provide the complete web ACL specification to this call.</p>
19381938
* </note>
1939-
* <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, or an AppSync GraphQL API. </p>
1939+
* <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, or an Amazon Cognito user pool. </p>
19401940
*/
19411941
public updateWebACL(
19421942
args: UpdateWebACLCommandInput,

‎clients/client-wafv2/src/WAFV2Client.ts‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -447,11 +447,11 @@ export interface WAFV2ClientResolvedConfig extends WAFV2ClientResolvedConfigType
447447
* see the <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html">WAF Developer Guide</a>. </p>
448448
* </note>
449449
* <p>WAF is a web application firewall that lets you monitor the HTTP and HTTPS
450-
* requests that are forwarded to Amazon CloudFront, an Amazon API Gateway REST API, an Application Load Balancer, or an AppSync
451-
* GraphQL API. WAF also lets you control access to your content. Based on criteria that
450+
* requests that are forwarded to Amazon CloudFront, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync
451+
* GraphQL API, or an Amazon Cognito user pool. WAF also lets you control access to your content. Based on conditions that
452452
* you specify, such as the IP addresses that requests originate from or the values of query
453-
* strings, the Amazon API Gateway REST API, CloudFront distribution, the Application Load Balancer, or the AppSync GraphQL
454-
* API responds to requests either with the requested content or with an HTTP 403 status code
453+
* strings, the Amazon API Gateway REST API, CloudFront distribution, the Application Load Balancer, the AppSync GraphQL
454+
* API, or the Amazon Cognito user pool responds to requests either with the requested content or with an HTTP 403 status code
455455
* (Forbidden). You also can configure CloudFront to return a custom error page when a request is
456456
* blocked.</p>
457457
* <p>This API guide is for developers who need detailed information about WAF API actions,
@@ -462,7 +462,7 @@ export interface WAFV2ClientResolvedConfig extends WAFV2ClientResolvedConfigType
462462
* <ul>
463463
* <li>
464464
* <p>For regional applications, you can use any of the endpoints in the list.
465-
* A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync GraphQL API. </p>
465+
* A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, or an Amazon Cognito user pool. </p>
466466
* </li>
467467
* <li>
468468
* <p>For Amazon CloudFront applications, you must use the API endpoint listed for

‎clients/client-wafv2/src/commands/AssociateWebACLCommand.ts‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ export interface AssociateWebACLCommandOutput extends AssociateWebACLResponse, _
2929

3030
/**
3131
* <p>Associates a web ACL with a regional application resource, to protect the resource.
32-
* A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync GraphQL API. </p>
32+
* A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, or an Amazon Cognito user pool. </p>
3333
* <p>For Amazon CloudFront, don't use this call. Instead, use your CloudFront distribution configuration. To
3434
* associate a web ACL, in the CloudFront call <code>UpdateDistribution</code>, set the web ACL ID
3535
* to the Amazon Resource Name (ARN) of the web ACL. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a>.</p>

‎clients/client-wafv2/src/commands/CreateWebACLCommand.ts‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ export interface CreateWebACLCommandOutput extends CreateWebACLResponse, __Metad
2929

3030
/**
3131
* <p>Creates a <a>WebACL</a> per the specifications provided.</p>
32-
* <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, or an AppSync GraphQL API. </p>
32+
* <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, or an Amazon Cognito user pool. </p>
3333
* @example
3434
* Use a bare-bones client and the command you need to make an API call.
3535
* ```javascript

‎clients/client-wafv2/src/commands/DisassociateWebACLCommand.ts‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ export interface DisassociateWebACLCommandOutput extends DisassociateWebACLRespo
2929

3030
/**
3131
* <p>Disassociates the specified regional application resource from any existing web ACL
32-
* association. A resource can have at most one web ACL association. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, or an AppSync GraphQL API. </p>
32+
* association. A resource can have at most one web ACL association. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, or an Amazon Cognito user pool. </p>
3333
* <p>For Amazon CloudFront, don't use this call. Instead, use your CloudFront distribution configuration. To
3434
* disassociate a web ACL, provide an empty web ACL ID in the CloudFront call
3535
* <code>UpdateDistribution</code>. For information, see <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html">UpdateDistribution</a>.</p>

‎clients/client-wafv2/src/commands/UpdateWebACLCommand.ts‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ export interface UpdateWebACLCommandOutput extends UpdateWebACLResponse, __Metad
3535
* <note>
3636
* <p>This operation completely replaces the mutable specifications that you already have for the web ACL with the ones that you provide to this call. To modify the web ACL, retrieve it by calling <a>GetWebACL</a>, update the settings as needed, and then provide the complete web ACL specification to this call.</p>
3737
* </note>
38-
* <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, or an AppSync GraphQL API. </p>
38+
* <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, or an Amazon Cognito user pool. </p>
3939
* @example
4040
* Use a bare-bones client and the command you need to make an API call.
4141
* ```javascript

0 commit comments

Comments
 (0)