WebAcl

Provides a WAF Web ACL Resource

Example Usage

using Pulumi;
using Aws = Pulumi.Aws;

class MyStack : Stack
{
    public MyStack()
    {
        var ipset = new Aws.Waf.IpSet("ipset", new Aws.Waf.IpSetArgs
        {
            IpSetDescriptors = 
            {
                new Aws.Waf.Inputs.IpSetIpSetDescriptorArgs
                {
                    Type = "IPV4",
                    Value = "192.0.7.0/24",
                },
            },
        });
        var wafrule = new Aws.Waf.Rule("wafrule", new Aws.Waf.RuleArgs
        {
            MetricName = "tfWAFRule",
            Predicates = 
            {
                new Aws.Waf.Inputs.RulePredicateArgs
                {
                    DataId = ipset.Id,
                    Negated = false,
                    Type = "IPMatch",
                },
            },
        }, new CustomResourceOptions
        {
            DependsOn = 
            {
                "aws_waf_ipset.ipset",
            },
        });
        var wafAcl = new Aws.Waf.WebAcl("wafAcl", new Aws.Waf.WebAclArgs
        {
            DefaultAction = new Aws.Waf.Inputs.WebAclDefaultActionArgs
            {
                Type = "ALLOW",
            },
            MetricName = "tfWebACL",
            Rules = 
            {
                new Aws.Waf.Inputs.WebAclRuleArgs
                {
                    Action = new Aws.Waf.Inputs.WebAclRuleActionArgs
                    {
                        Type = "BLOCK",
                    },
                    Priority = 1,
                    RuleId = wafrule.Id,
                    Type = "REGULAR",
                },
            },
        }, new CustomResourceOptions
        {
            DependsOn = 
            {
                "aws_waf_ipset.ipset",
                "aws_waf_rule.wafrule",
            },
        });
    }

}

package main

import (
    "github.com/pulumi/pulumi-aws/sdk/v2/go/aws/waf"
    "github.com/pulumi/pulumi/sdk/v2/go/pulumi"
)

func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
        ipset, err := waf.NewIpSet(ctx, "ipset", &waf.IpSetArgs{
            IpSetDescriptors: waf.IpSetIpSetDescriptorArray{
                &waf.IpSetIpSetDescriptorArgs{
                    Type:  pulumi.String("IPV4"),
                    Value: pulumi.String("192.0.7.0/24"),
                },
            },
        })
        if err != nil {
            return err
        }
        wafrule, err := waf.NewRule(ctx, "wafrule", &waf.RuleArgs{
            MetricName: pulumi.String("tfWAFRule"),
            Predicates: waf.RulePredicateArray{
                &waf.RulePredicateArgs{
                    DataId:  ipset.ID(),
                    Negated: pulumi.Bool(false),
                    Type:    pulumi.String("IPMatch"),
                },
            },
        }, pulumi.DependsOn([]pulumi.Resource{
            "aws_waf_ipset.ipset",
        }))
        if err != nil {
            return err
        }
        _, err = waf.NewWebAcl(ctx, "wafAcl", &waf.WebAclArgs{
            DefaultAction: &waf.WebAclDefaultActionArgs{
                Type: pulumi.String("ALLOW"),
            },
            MetricName: pulumi.String("tfWebACL"),
            Rules: waf.WebAclRuleArray{
                &waf.WebAclRuleArgs{
                    Action: &waf.WebAclRuleActionArgs{
                        Type: pulumi.String("BLOCK"),
                    },
                    Priority: pulumi.Int(1),
                    RuleId:   wafrule.ID(),
                    Type:     pulumi.String("REGULAR"),
                },
            },
        }, pulumi.DependsOn([]pulumi.Resource{
            "aws_waf_ipset.ipset",
            "aws_waf_rule.wafrule",
        }))
        if err != nil {
            return err
        }
        return nil
    })
}

import pulumi
import pulumi_aws as aws

ipset = aws.waf.IpSet("ipset", ip_set_descriptors=[{
    "type": "IPV4",
    "value": "192.0.7.0/24",
}])
wafrule = aws.waf.Rule("wafrule",
    metric_name="tfWAFRule",
    predicates=[{
        "dataId": ipset.id,
        "negated": False,
        "type": "IPMatch",
    }],
    opts=ResourceOptions(depends_on=["aws_waf_ipset.ipset"]))
waf_acl = aws.waf.WebAcl("wafAcl",
    default_action={
        "type": "ALLOW",
    },
    metric_name="tfWebACL",
    rules=[{
        "action": {
            "type": "BLOCK",
        },
        "priority": 1,
        "rule_id": wafrule.id,
        "type": "REGULAR",
    }],
    opts=ResourceOptions(depends_on=[
            "aws_waf_ipset.ipset",
            "aws_waf_rule.wafrule",
        ]))

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const ipset = new aws.waf.IpSet("ipset", {
    ipSetDescriptors: [{
        type: "IPV4",
        value: "192.0.7.0/24",
    }],
});
const wafrule = new aws.waf.Rule("wafrule", {
    metricName: "tfWAFRule",
    predicates: [{
        dataId: ipset.id,
        negated: false,
        type: "IPMatch",
    }],
}, { dependsOn: [ipset] });
const wafAcl = new aws.waf.WebAcl("waf_acl", {
    defaultAction: {
        type: "ALLOW",
    },
    metricName: "tfWebACL",
    rules: [{
        action: {
            type: "BLOCK",
        },
        priority: 1,
        ruleId: wafrule.id,
        type: "REGULAR",
    }],
}, { dependsOn: [ipset, wafrule] });

Logging

using Pulumi;
using Aws = Pulumi.Aws;

class MyStack : Stack
{
    public MyStack()
    {
        var example = new Aws.Waf.WebAcl("example", new Aws.Waf.WebAclArgs
        {
            LoggingConfiguration = new Aws.Waf.Inputs.WebAclLoggingConfigurationArgs
            {
                LogDestination = aws_kinesis_firehose_delivery_stream.Example.Arn,
                RedactedFields = new Aws.Waf.Inputs.WebAclLoggingConfigurationRedactedFieldsArgs
                {
                    FieldToMatch = 
                    {
                        
                        {
                            { "type", "URI" },
                        },
                        
                        {
                            { "data", "referer" },
                            { "type", "HEADER" },
                        },
                    },
                },
            },
        });
    }

}

package main

import (
    "github.com/pulumi/pulumi-aws/sdk/v2/go/aws/waf"
    "github.com/pulumi/pulumi/sdk/v2/go/pulumi"
)

func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
        _, err := waf.NewWebAcl(ctx, "example", &waf.WebAclArgs{
            LoggingConfiguration: &waf.WebAclLoggingConfigurationArgs{
                LogDestination: pulumi.String(aws_kinesis_firehose_delivery_stream.Example.Arn),
                RedactedFields: &waf.WebAclLoggingConfigurationRedactedFieldsArgs{
                    FieldToMatch: pulumi.Array{
                        pulumi.StringMap{
                            "type": pulumi.String("URI"),
                        },
                        pulumi.StringMap{
                            "data": pulumi.String("referer"),
                            "type": pulumi.String("HEADER"),
                        },
                    },
                },
            },
        })
        if err != nil {
            return err
        }
        return nil
    })
}

import pulumi
import pulumi_aws as aws

example = aws.waf.WebAcl("example", logging_configuration={
    "log_destination": aws_kinesis_firehose_delivery_stream["example"]["arn"],
    "redactedFields": {
        "fieldToMatch": [
            {
                "type": "URI",
            },
            {
                "data": "referer",
                "type": "HEADER",
            },
        ],
    },
})

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.waf.WebAcl("example", {
    // ... other configuration ...
    loggingConfiguration: {
        logDestination: aws_kinesis_firehose_delivery_stream_example.arn,
        redactedFields: {
            fieldToMatches: [
                {
                    type: "URI",
                },
                {
                    data: "referer",
                    type: "HEADER",
                },
            ],
        },
    },
});

Create a WebAcl Resource

new WebAcl(name: string, args: WebAclArgs, opts?: CustomResourceOptions);

def WebAcl(resource_name, opts=None, default_action=None, logging_configuration=None, metric_name=None, name=None, rules=None, tags=None, __props__=None);

func NewWebAcl(ctx *Context, name string, args WebAclArgs, opts ...ResourceOption) (*WebAcl, error)

public WebAcl(string name, WebAclArgs args, CustomResourceOptions? opts = null)

name string: The unique name of the resource.
args WebAclArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
opts ResourceOptions: A bag of options that control this resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args WebAclArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args WebAclArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

WebAcl Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Programming Model docs.

Inputs

The WebAcl resource accepts the following input properties:

DefaultAction WebAclDefaultActionArgs: Configuration block with action that you want AWS WAF to take when a request doesn’t match the criteria in any of the rules that are associated with the web ACL. Detailed below.
MetricName string: The name or description for the Amazon CloudWatch metric of this web ACL.
LoggingConfiguration WebAclLoggingConfigurationArgs: Configuration block to enable WAF logging. Detailed below.
Name string: The name or description of the web ACL.
Rules List<WebAclRuleArgs>: Configuration blocks containing rules to associate with the web ACL and the settings for each rule. Detailed below.
Tags Dictionary<string, string>: Key-value map of resource tags

DefaultAction WebAclDefaultAction: Configuration block with action that you want AWS WAF to take when a request doesn’t match the criteria in any of the rules that are associated with the web ACL. Detailed below.
MetricName string: The name or description for the Amazon CloudWatch metric of this web ACL.
LoggingConfiguration WebAclLoggingConfiguration: Configuration block to enable WAF logging. Detailed below.
Name string: The name or description of the web ACL.
Rules []WebAclRule: Configuration blocks containing rules to associate with the web ACL and the settings for each rule. Detailed below.
Tags map[string]string: Key-value map of resource tags

defaultAction WebAclDefaultAction: Configuration block with action that you want AWS WAF to take when a request doesn’t match the criteria in any of the rules that are associated with the web ACL. Detailed below.
metricName string: The name or description for the Amazon CloudWatch metric of this web ACL.
loggingConfiguration WebAclLoggingConfiguration: Configuration block to enable WAF logging. Detailed below.
name string: The name or description of the web ACL.
rules WebAclRule[]: Configuration blocks containing rules to associate with the web ACL and the settings for each rule. Detailed below.
tags {[key: string]: string}: Key-value map of resource tags

default_action Dict[WebAclDefaultAction]: Configuration block with action that you want AWS WAF to take when a request doesn’t match the criteria in any of the rules that are associated with the web ACL. Detailed below.
metric_name str: The name or description for the Amazon CloudWatch metric of this web ACL.
logging_configuration Dict[WebAclLoggingConfiguration]: Configuration block to enable WAF logging. Detailed below.
name str: The name or description of the web ACL.
rules List[WebAclRule]: Configuration blocks containing rules to associate with the web ACL and the settings for each rule. Detailed below.
tags Dict[str, str]: Key-value map of resource tags

Outputs

All input properties are implicitly available as output properties. Additionally, the WebAcl resource produces the following output properties:

Arn string: The ARN of the WAF WebACL.
Id string: The provider-assigned unique ID for this managed resource.

Arn string: The ARN of the WAF WebACL.
Id string: The provider-assigned unique ID for this managed resource.

arn string: The ARN of the WAF WebACL.
id string: The provider-assigned unique ID for this managed resource.

arn str: The ARN of the WAF WebACL.
id str: The provider-assigned unique ID for this managed resource.

Look up an Existing WebAcl Resource

Get an existing WebAcl resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: WebAclState, opts?: CustomResourceOptions): WebAcl

static get(resource_name, id, opts=None, arn=None, default_action=None, logging_configuration=None, metric_name=None, name=None, rules=None, tags=None, __props__=None);

func GetWebAcl(ctx *Context, name string, id IDInput, state *WebAclState, opts ...ResourceOption) (*WebAcl, error)

public static WebAcl Get(string name, Input<string> id, WebAclState? state, CustomResourceOptions? opts = null)

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Arn string: The ARN of the WAF WebACL.
DefaultAction WebAclDefaultActionArgs: Configuration block with action that you want AWS WAF to take when a request doesn’t match the criteria in any of the rules that are associated with the web ACL. Detailed below.
LoggingConfiguration WebAclLoggingConfigurationArgs: Configuration block to enable WAF logging. Detailed below.
MetricName string: The name or description for the Amazon CloudWatch metric of this web ACL.
Name string: The name or description of the web ACL.
Rules List<WebAclRuleArgs>: Configuration blocks containing rules to associate with the web ACL and the settings for each rule. Detailed below.
Tags Dictionary<string, string>: Key-value map of resource tags

Arn string: The ARN of the WAF WebACL.
DefaultAction WebAclDefaultAction: Configuration block with action that you want AWS WAF to take when a request doesn’t match the criteria in any of the rules that are associated with the web ACL. Detailed below.
LoggingConfiguration WebAclLoggingConfiguration: Configuration block to enable WAF logging. Detailed below.
MetricName string: The name or description for the Amazon CloudWatch metric of this web ACL.
Name string: The name or description of the web ACL.
Rules []WebAclRule: Configuration blocks containing rules to associate with the web ACL and the settings for each rule. Detailed below.
Tags map[string]string: Key-value map of resource tags

arn string: The ARN of the WAF WebACL.
defaultAction WebAclDefaultAction: Configuration block with action that you want AWS WAF to take when a request doesn’t match the criteria in any of the rules that are associated with the web ACL. Detailed below.
loggingConfiguration WebAclLoggingConfiguration: Configuration block to enable WAF logging. Detailed below.
metricName string: The name or description for the Amazon CloudWatch metric of this web ACL.
name string: The name or description of the web ACL.
rules WebAclRule[]: Configuration blocks containing rules to associate with the web ACL and the settings for each rule. Detailed below.
tags {[key: string]: string}: Key-value map of resource tags

arn str: The ARN of the WAF WebACL.
default_action Dict[WebAclDefaultAction]: Configuration block with action that you want AWS WAF to take when a request doesn’t match the criteria in any of the rules that are associated with the web ACL. Detailed below.
logging_configuration Dict[WebAclLoggingConfiguration]: Configuration block to enable WAF logging. Detailed below.
metric_name str: The name or description for the Amazon CloudWatch metric of this web ACL.
name str: The name or description of the web ACL.
rules List[WebAclRule]: Configuration blocks containing rules to associate with the web ACL and the settings for each rule. Detailed below.
tags Dict[str, str]: Key-value map of resource tags

Supporting Types

WebAclDefaultAction

See the input and output API doc for this type.

Type string: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.

Type string: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.

type string: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.

type str: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.

WebAclLoggingConfiguration

See the input and output API doc for this type.

LogDestination string: Amazon Resource Name (ARN) of Kinesis Firehose Delivery Stream
RedactedFields WebAclLoggingConfigurationRedactedFieldsArgs: Configuration block containing parts of the request that you want redacted from the logs. Detailed below.

LogDestination string: Amazon Resource Name (ARN) of Kinesis Firehose Delivery Stream
RedactedFields WebAclLoggingConfigurationRedactedFields: Configuration block containing parts of the request that you want redacted from the logs. Detailed below.

logDestination string: Amazon Resource Name (ARN) of Kinesis Firehose Delivery Stream
redactedFields WebAclLoggingConfigurationRedactedFields: Configuration block containing parts of the request that you want redacted from the logs. Detailed below.

log_destination str: Amazon Resource Name (ARN) of Kinesis Firehose Delivery Stream
redactedFields Dict[WebAclLoggingConfigurationRedactedFields]: Configuration block containing parts of the request that you want redacted from the logs. Detailed below.

WebAclLoggingConfigurationRedactedFields

See the input and output API doc for this type.

FieldToMatches List<WebAclLoggingConfigurationRedactedFieldsFieldToMatchArgs>: Set of configuration blocks for fields to redact. Detailed below.

FieldToMatches []WebAclLoggingConfigurationRedactedFieldsFieldToMatch: Set of configuration blocks for fields to redact. Detailed below.

fieldToMatches WebAclLoggingConfigurationRedactedFieldsFieldToMatch[]: Set of configuration blocks for fields to redact. Detailed below.

fieldToMatches List[WebAclLoggingConfigurationRedactedFieldsFieldToMatch]: Set of configuration blocks for fields to redact. Detailed below.

WebAclLoggingConfigurationRedactedFieldsFieldToMatch

See the input and output API doc for this type.

Type string: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.
Data string: When the value of type is HEADER, enter the name of the header that you want the WAF to search, for example, User-Agent or Referer. If the value of type is any other value, omit data.

Type string: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.
Data string: When the value of type is HEADER, enter the name of the header that you want the WAF to search, for example, User-Agent or Referer. If the value of type is any other value, omit data.

type string: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.
data string: When the value of type is HEADER, enter the name of the header that you want the WAF to search, for example, User-Agent or Referer. If the value of type is any other value, omit data.

type str: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.
data str: When the value of type is HEADER, enter the name of the header that you want the WAF to search, for example, User-Agent or Referer. If the value of type is any other value, omit data.

WebAclRule

See the input and output API doc for this type.

Priority int: Specifies the order in which the rules in a WebACL are evaluated. Rules with a lower value are evaluated before rules with a higher value.
RuleId string: ID of the associated WAF (Global) rule (e.g. aws.waf.Rule). WAF (Regional) rules cannot be used.
Action WebAclRuleActionArgs: The action that CloudFront or AWS WAF takes when a web request matches the conditions in the rule. Not used if type is GROUP.
OverrideAction WebAclRuleOverrideActionArgs: Override the action that a group requests CloudFront or AWS WAF takes when a web request matches the conditions in the rule. Only used if type is GROUP.
Type string: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.

Priority int: Specifies the order in which the rules in a WebACL are evaluated. Rules with a lower value are evaluated before rules with a higher value.
RuleId string: ID of the associated WAF (Global) rule (e.g. aws.waf.Rule). WAF (Regional) rules cannot be used.
Action WebAclRuleAction: The action that CloudFront or AWS WAF takes when a web request matches the conditions in the rule. Not used if type is GROUP.
OverrideAction WebAclRuleOverrideAction: Override the action that a group requests CloudFront or AWS WAF takes when a web request matches the conditions in the rule. Only used if type is GROUP.
Type string: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.

priority number: Specifies the order in which the rules in a WebACL are evaluated. Rules with a lower value are evaluated before rules with a higher value.
ruleId string: ID of the associated WAF (Global) rule (e.g. aws.waf.Rule). WAF (Regional) rules cannot be used.
action WebAclRuleAction: The action that CloudFront or AWS WAF takes when a web request matches the conditions in the rule. Not used if type is GROUP.
overrideAction WebAclRuleOverrideAction: Override the action that a group requests CloudFront or AWS WAF takes when a web request matches the conditions in the rule. Only used if type is GROUP.
type string: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.

priority float: Specifies the order in which the rules in a WebACL are evaluated. Rules with a lower value are evaluated before rules with a higher value.
rule_id str: ID of the associated WAF (Global) rule (e.g. aws.waf.Rule). WAF (Regional) rules cannot be used.
action Dict[WebAclRuleAction]: The action that CloudFront or AWS WAF takes when a web request matches the conditions in the rule. Not used if type is GROUP.
overrideAction Dict[WebAclRuleOverrideAction]: Override the action that a group requests CloudFront or AWS WAF takes when a web request matches the conditions in the rule. Only used if type is GROUP.
type str: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.

WebAclRuleAction

See the input and output API doc for this type.

Type string: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.

Type string: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.

type string: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.

type str: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.

WebAclRuleOverrideAction

See the input and output API doc for this type.

Type string: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.

Type string: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.

type string: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.

type str: The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.

Package Details

Repository: https://github.com/pulumi/pulumi-aws
License: Apache-2.0
Notes: This Pulumi package is based on the aws Terraform Provider.

The Pulumi Platform

Get Started

Migrate to Pulumi

Solutions for All Teams and Engineers

Any Code

Any Cloud

WebAcl

Example Usage

Logging

Create a WebAcl Resource

WebAcl Resource Properties

Inputs

Outputs

Look up an Existing WebAcl Resource

Supporting Types

WebAclDefaultAction

WebAclLoggingConfiguration

WebAclLoggingConfigurationRedactedFields

WebAclLoggingConfigurationRedactedFieldsFieldToMatch

WebAclRule

WebAclRuleAction

WebAclRuleOverrideAction

Package Details

On This Page