waf

class pulumi_aws.waf.ByteMatchSet(resource_name, opts=None, byte_match_tuples=None, name=None, __name__=None, __opts__=None)

Provides a WAF Byte Match Set Resource

Parameters:
  • resource_name (str) – The name of the resource.
  • opts (pulumi.ResourceOptions) – Options for the resource.
  • byte_match_tuples (pulumi.Input[list]) – Specifies the bytes (typically a string that corresponds with ASCII characters) that you want to search for in web requests, the location in requests that you want to search, and other settings.
  • name (pulumi.Input[str]) – The name or description of the Byte Match Set.
byte_match_tuples = None

Specifies the bytes (typically a string that corresponds with ASCII characters) that you want to search for in web requests, the location in requests that you want to search, and other settings.

name = None

The name or description of the Byte Match Set.

translate_output_property(prop)

Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
translate_input_property(prop)

Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
class pulumi_aws.waf.GeoMatchSet(resource_name, opts=None, geo_match_constraints=None, name=None, __name__=None, __opts__=None)

Provides a WAF Geo Match Set Resource

Parameters:
  • resource_name (str) – The name of the resource.
  • opts (pulumi.ResourceOptions) – Options for the resource.
  • geo_match_constraints (pulumi.Input[list]) – The GeoMatchConstraint objects which contain the country that you want AWS WAF to search for.
  • name (pulumi.Input[str]) – The name or description of the GeoMatchSet.
geo_match_constraints = None

The GeoMatchConstraint objects which contain the country that you want AWS WAF to search for.

name = None

The name or description of the GeoMatchSet.

translate_output_property(prop)

Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
translate_input_property(prop)

Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
class pulumi_aws.waf.IpSet(resource_name, opts=None, ip_set_descriptors=None, name=None, __name__=None, __opts__=None)

Provides a WAF IPSet Resource

Parameters:
  • resource_name (str) – The name of the resource.
  • opts (pulumi.ResourceOptions) – Options for the resource.
  • ip_set_descriptors (pulumi.Input[list]) – One or more pairs specifying the IP address type (IPV4 or IPV6) and the IP address range (in CIDR format) from which web requests originate.
  • name (pulumi.Input[str]) – The name or description of the IPSet.
arn = None

The ARN of the WAF IPSet.

ip_set_descriptors = None

One or more pairs specifying the IP address type (IPV4 or IPV6) and the IP address range (in CIDR format) from which web requests originate.

name = None

The name or description of the IPSet.

translate_output_property(prop)

Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
translate_input_property(prop)

Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
class pulumi_aws.waf.RateBasedRule(resource_name, opts=None, metric_name=None, name=None, predicates=None, rate_key=None, rate_limit=None, __name__=None, __opts__=None)

Provides a WAF Rate Based Rule Resource

Parameters:
  • resource_name (str) – The name of the resource.
  • opts (pulumi.ResourceOptions) – Options for the resource.
  • metric_name (pulumi.Input[str]) – The name or description for the Amazon CloudWatch metric of this rule.
  • name (pulumi.Input[str]) – The name or description of the rule.
  • predicates (pulumi.Input[list]) – One of ByteMatchSet, IPSet, SizeConstraintSet, SqlInjectionMatchSet, or XssMatchSet objects to include in a rule.
  • rate_key (pulumi.Input[str]) – Valid value is IP.
  • rate_limit (pulumi.Input[float]) – The maximum number of requests, which have an identical value in the field specified by the RateKey, allowed in a five-minute period. Minimum value is 2000.
metric_name = None

The name or description for the Amazon CloudWatch metric of this rule.

name = None

The name or description of the rule.

predicates = None

One of ByteMatchSet, IPSet, SizeConstraintSet, SqlInjectionMatchSet, or XssMatchSet objects to include in a rule.

rate_key = None

Valid value is IP.

rate_limit = None

The maximum number of requests, which have an identical value in the field specified by the RateKey, allowed in a five-minute period. Minimum value is 2000.

translate_output_property(prop)

Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
translate_input_property(prop)

Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
class pulumi_aws.waf.RegexMatchSet(resource_name, opts=None, name=None, regex_match_tuples=None, __name__=None, __opts__=None)

Provides a WAF Regex Match Set Resource

Parameters:
  • resource_name (str) – The name of the resource.
  • opts (pulumi.ResourceOptions) – Options for the resource.
  • name (pulumi.Input[str]) – The name or description of the Regex Match Set.
  • regex_match_tuples (pulumi.Input[list]) – The regular expression pattern that you want AWS WAF to search for in web requests, the location in requests that you want AWS WAF to search, and other settings. See below.
name = None

The name or description of the Regex Match Set.

regex_match_tuples = None

The regular expression pattern that you want AWS WAF to search for in web requests, the location in requests that you want AWS WAF to search, and other settings. See below.

translate_output_property(prop)

Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
translate_input_property(prop)

Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
class pulumi_aws.waf.RegexPatternSet(resource_name, opts=None, name=None, regex_pattern_strings=None, __name__=None, __opts__=None)

Provides a WAF Regex Pattern Set Resource

Parameters:
  • resource_name (str) – The name of the resource.
  • opts (pulumi.ResourceOptions) – Options for the resource.
  • name (pulumi.Input[str]) – The name or description of the Regex Pattern Set.
  • regex_pattern_strings (pulumi.Input[list]) – A list of regular expression (regex) patterns that you want AWS WAF to search for, such as B[a@]dB[o0]t.
name = None

The name or description of the Regex Pattern Set.

regex_pattern_strings = None

A list of regular expression (regex) patterns that you want AWS WAF to search for, such as B[a@]dB[o0]t.

translate_output_property(prop)

Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
translate_input_property(prop)

Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
class pulumi_aws.waf.Rule(resource_name, opts=None, metric_name=None, name=None, predicates=None, __name__=None, __opts__=None)

Provides a WAF Rule Resource

Parameters:
  • resource_name (str) – The name of the resource.
  • opts (pulumi.ResourceOptions) – Options for the resource.
  • metric_name (pulumi.Input[str]) – The name or description for the Amazon CloudWatch metric of this rule. The name can contain only alphanumeric characters (A-Z, a-z, 0-9); the name can’t contain whitespace.
  • name (pulumi.Input[str]) – The name or description of the rule.
  • predicates (pulumi.Input[list]) – One of ByteMatchSet, IPSet, SizeConstraintSet, SqlInjectionMatchSet, or XssMatchSet objects to include in a rule.
metric_name = None

The name or description for the Amazon CloudWatch metric of this rule. The name can contain only alphanumeric characters (A-Z, a-z, 0-9); the name can’t contain whitespace.

name = None

The name or description of the rule.

predicates = None

One of ByteMatchSet, IPSet, SizeConstraintSet, SqlInjectionMatchSet, or XssMatchSet objects to include in a rule.

translate_output_property(prop)

Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
translate_input_property(prop)

Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
class pulumi_aws.waf.RuleGroup(resource_name, opts=None, activated_rules=None, metric_name=None, name=None, __name__=None, __opts__=None)

Provides a WAF Rule Group Resource

Parameters:
  • resource_name (str) – The name of the resource.
  • opts (pulumi.ResourceOptions) – Options for the resource.
  • activated_rules (pulumi.Input[list]) – A list of activated rules, see below
  • metric_name (pulumi.Input[str]) – A friendly name for the metrics from the rule group
  • name (pulumi.Input[str]) – A friendly name of the rule group
activated_rules = None

A list of activated rules, see below

metric_name = None

A friendly name for the metrics from the rule group

name = None

A friendly name of the rule group

translate_output_property(prop)

Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
translate_input_property(prop)

Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
class pulumi_aws.waf.SizeConstraintSet(resource_name, opts=None, name=None, size_constraints=None, __name__=None, __opts__=None)

Provides a WAF Size Constraint Set Resource

Parameters:
  • resource_name (str) – The name of the resource.
  • opts (pulumi.ResourceOptions) – Options for the resource.
  • name (pulumi.Input[str]) – The name or description of the Size Constraint Set.
  • size_constraints (pulumi.Input[list]) – Specifies the parts of web requests that you want to inspect the size of.
name = None

The name or description of the Size Constraint Set.

size_constraints = None

Specifies the parts of web requests that you want to inspect the size of.

translate_output_property(prop)

Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
translate_input_property(prop)

Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
class pulumi_aws.waf.SqlInjectionMatchSet(resource_name, opts=None, name=None, sql_injection_match_tuples=None, __name__=None, __opts__=None)

Provides a WAF SQL Injection Match Set Resource

Parameters:
  • resource_name (str) – The name of the resource.
  • opts (pulumi.ResourceOptions) – Options for the resource.
  • name (pulumi.Input[str]) – The name or description of the SizeConstraintSet.
  • sql_injection_match_tuples (pulumi.Input[list]) – The parts of web requests that you want AWS WAF to inspect for malicious SQL code and, if you want AWS WAF to inspect a header, the name of the header.
name = None

The name or description of the SizeConstraintSet.

sql_injection_match_tuples = None

The parts of web requests that you want AWS WAF to inspect for malicious SQL code and, if you want AWS WAF to inspect a header, the name of the header.

translate_output_property(prop)

Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
translate_input_property(prop)

Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
class pulumi_aws.waf.WebAcl(resource_name, opts=None, default_action=None, logging_configuration=None, metric_name=None, name=None, rules=None, __name__=None, __opts__=None)

Provides a WAF Web ACL Resource

Parameters:
  • resource_name (str) – The name of the resource.
  • opts (pulumi.ResourceOptions) – Options for the resource.
  • default_action (pulumi.Input[dict]) – Configuration block with action that you want AWS WAF to take when a request doesn’t match the criteria in any of the rules that are associated with the web ACL. Detailed below.
  • logging_configuration (pulumi.Input[dict]) – Configuration block to enable WAF logging. Detailed below.
  • metric_name (pulumi.Input[str]) – The name or description for the Amazon CloudWatch metric of this web ACL.
  • name (pulumi.Input[str]) – The name or description of the web ACL.
  • rules (pulumi.Input[list]) – Configuration blocks containing rules to associate with the web ACL and the settings for each rule. Detailed below.
default_action = None

Configuration block with action that you want AWS WAF to take when a request doesn’t match the criteria in any of the rules that are associated with the web ACL. Detailed below.

logging_configuration = None

Configuration block to enable WAF logging. Detailed below.

metric_name = None

The name or description for the Amazon CloudWatch metric of this web ACL.

name = None

The name or description of the web ACL.

rules = None

Configuration blocks containing rules to associate with the web ACL and the settings for each rule. Detailed below.

translate_output_property(prop)

Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
translate_input_property(prop)

Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
class pulumi_aws.waf.XssMatchSet(resource_name, opts=None, name=None, xss_match_tuples=None, __name__=None, __opts__=None)

Provides a WAF XSS Match Set Resource

Parameters:
  • resource_name (str) – The name of the resource.
  • opts (pulumi.ResourceOptions) – Options for the resource.
  • name (pulumi.Input[str]) – The name or description of the SizeConstraintSet.
  • xss_match_tuples (pulumi.Input[list]) – The parts of web requests that you want to inspect for cross-site scripting attacks.
name = None

The name or description of the SizeConstraintSet.

xss_match_tuples = None

The parts of web requests that you want to inspect for cross-site scripting attacks.

translate_output_property(prop)

Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str
translate_input_property(prop)

Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.

Parameters:prop (str) – A property name.
Returns:A potentially transformed property name.
Return type:str