Action Description Resources Conditions
Creates a ByteMatchSet.
  • arn:aws:waf:$region:$account:bytematchset/$entity-id
Creates an IPSet, which you use to specify which web requests you want to allow or block based on the IP addresses that the requests originate from.
  • arn:aws:waf:$region:$account:ipset/$entity-id
Creates a Rule, which contains the IPSet objects, ByteMatchSet objects, and other predicates that identify the requests that you want to block.
  • arn:aws:waf:$region:$account:rule/$entity-id
Creates a SizeConstraintSet.
  • arn:aws:waf:$region:$account:sizeconstraintset/$entity-id
Creates a SqlInjectionMatchSet, which you use to allow, block, or count requests that contain snippets of SQL code in a specified part of web requests.
  • arn:aws:waf:$region:$account:sqlinjectionmatchset/$entity-id
Creates a WebACL, which contains the Rules that identify the CloudFront web requests that you want to allow, block, or count.
  • arn:aws:waf:$region:$account:webacl/$entity-id
Creates an XssMatchSet, which you use to allow, block, or count requests that contain cross-site scripting attacks in the specified part of web requests.
  • arn:aws:waf:$region:$account:xssmatchset/$entity-id
Permanently deletes a ByteMatchSet.
  • arn:aws:waf:$region:$account:bytematchset/$entity-id
Permanently deletes an IPSet.
  • arn:aws:waf:$region:$account:ipset/$entity-id
Permanently deletes a Rule.
  • arn:aws:waf:$region:$account:rule/$entity-id
Permanently deletes a SizeConstraintSet.
  • arn:aws:waf:$region:$account:sizeconstraintset/$entity-id
Permanently deletes a SqlInjectionMatchSet.
  • arn:aws:waf:$region:$account:sqlinjectionmatchset/$entity-id
Permanently deletes a WebACL.
  • arn:aws:waf:$region:$account:webacl/$entity-id
Permanently deletes an XssMatchSet.
  • arn:aws:waf:$region:$account:xssmatchset/$entity-id
Returns the ByteMatchSet specified by ByteMatchSetId.
  • arn:aws:waf:$region:$account:bytematchset/$entity-id
When you want to create, update, or delete AWS WAF objects, get a change token and include the change token in the create, update, or delete request.
  • arn:aws:waf:$region:$account:changetoken/$entity-id
Returns the status of a ChangeToken that you got by calling GetChangeToken.
  • arn:aws:waf:$region:$account:changetoken/$entity-id
Returns the IPSet that is specified by IPSetId.
  • arn:aws:waf:$region:$account:ipset/$entity-id
Returns the Rule that is specified by the RuleId that you included in the GetRule request.
  • arn:aws:waf:$region:$account:rule/$entity-id
Gets detailed information about a specified number of requests--a sample--that AWS WAF randomly selects from among the first 5,000 requests that your AWS resource received during a time range that you choose.
  • arn:aws:waf:$region:$account:rule/$entity-id
  • arn:aws:waf:$region:$account:webacl/$entity-id
Returns the SizeConstraintSet specified by SizeConstraintSetId.
  • arn:aws:waf:$region:$account:sizeconstraintset/$entity-id
Returns the SqlInjectionMatchSet that is specified by SqlInjectionMatchSetId.
  • arn:aws:waf:$region:$account:sqlinjectionmatchset/$entity-id
Returns the WebACL that is specified by WebACLId.
  • arn:aws:waf:$region:$account:webacl/$entity-id
Returns the XssMatchSet that is specified by XssMatchSetId.
  • arn:aws:waf:$region:$account:xssmatchset/$entity-id
Returns an array of ByteMatchSetSummary objects.
  • arn:aws:waf:$region:$account:bytematchset/$entity-id
Returns an array of IPSetSummary objects in the response.
  • arn:aws:waf:$region:$account:ipset/$entity-id
Returns an array of RuleSummary objects.
  • arn:aws:waf:$region:$account:rule/$entity-id
Returns an array of SizeConstraintSetSummary objects.
  • arn:aws:waf:$region:$account:sizeconstraintset/$entity-id
Returns an array of SqlInjectionMatchSet objects.
  • arn:aws:waf:$region:$account:sqlinjectionmatchset/$entity-id
Returns an array of WebACLSummary objects in the response.
  • arn:aws:waf:$region:$account:webacl/$entity-id
Returns an array of XssMatchSet objects.
  • arn:aws:waf:$region:$account:xssmatchset/$entity-id
Inserts or deletes ByteMatchTuple objects (filters) in a ByteMatchSet.
  • arn:aws:waf:$region:$account:bytematchset/$entity-id
Inserts or deletes IPSetDescriptor objects in an IPSet.
  • arn:aws:waf:$region:$account:ipset/$entity-id
Inserts or deletes Predicate objects in a Rule.
  • arn:aws:waf:$region:$account:rule/$entity-id
Inserts or deletes SizeConstraint objects (filters) in a SizeConstraintSet.
  • arn:aws:waf:$region:$account:sizeconstraintset/$entity-id
Inserts or deletes SqlInjectionMatchTuple objects (filters) in a SqlInjectionMatchSet.
  • arn:aws:waf:$region:$account:sqlinjectionmatchset/$entity-id
Inserts or deletes ActivatedRule objects in a WebACL.
  • arn:aws:waf:$region:$account:webacl/$entity-id
Inserts or deletes XssMatchTuple objects (filters) in an XssMatchSet.
  • arn:aws:waf:$region:$account:xssmatchset/$entity-id