waf

77 actions in the waf service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

waf:CreateByteMatchSet

Write

Grants permission to create a ByteMatchSet

waf:CreateGeoMatchSet

Write

Grants permission to create a GeoMatchSet

waf:CreateIPSet

Write

Grants permission to create an IPSet

waf:CreateRateBasedRule

Write

Grants permission to create a RateBasedRule for limiting the volume of requests from a single IP address

waf:CreateRegexMatchSet

Write

Grants permission to create a RegexMatchSet

waf:CreateRegexPatternSet

Write

Grants permission to create a RegexPatternSet

waf:CreateRule

Write

Grants permission to create a Rule for filtering web requests

waf:CreateRuleGroup

Write

Grants permission to create a RuleGroup, which is a collection of predefined rules that you can use in a WebACL

waf:CreateSizeConstraintSet

Write

Grants permission to create a SizeConstraintSet

waf:CreateSqlInjectionMatchSet

Write

Grants permission to create an SqlInjectionMatchSet

waf:CreateWebACL

Permissions management

Grants permission to create a WebACL, which contains rules for filtering web requests

waf:CreateWebACLMigrationStack

Write

Grants permission to create a CloudFormation web ACL template in an S3 bucket for the purposes of migrating the web ACL from AWS WAF Classic to AWS WAF v2

waf:CreateXssMatchSet

Write

Grants permission to create an XssMatchSet, which you use to detect requests that contain cross-site scripting attacks

waf:DeleteByteMatchSet

Write

Grants permission to delete a ByteMatchSet

waf:DeleteGeoMatchSet

Write

Grants permission to delete a GeoMatchSet

waf:DeleteIPSet

Write

Grants permission to delete an IPSet

waf:DeleteLoggingConfiguration

Write

Grants permission to delete the LoggingConfiguration from a web ACL

waf:DeletePermissionPolicy

Permissions management

Grants permission to delete an IAM policy from a rule group

waf:DeleteRateBasedRule

Write

Grants permission to delete a RateBasedRule

waf:DeleteRegexMatchSet

Write

Grants permission to delete a RegexMatchSet

waf:DeleteRegexPatternSet

Write

Grants permission to delete a RegexPatternSet

waf:DeleteRule

Write

Grants permission to delete a Rule

waf:DeleteRuleGroup

Write

Grants permission to delete a RuleGroup

waf:DeleteSizeConstraintSet

Write

Grants permission to delete a SizeConstraintSet

waf:DeleteSqlInjectionMatchSet

Write

Grants permission to delete an SqlInjectionMatchSet

waf:DeleteWebACL

Permissions management

Grants permission to delete a WebACL

waf:DeleteXssMatchSet

Write

Grants permission to delete an XssMatchSet

waf:GetByteMatchSet

Read

Grants permission to retrieve a ByteMatchSet

waf:GetChangeToken

Read

Grants permission to retrieve a change token to use in create, update, and delete requests

waf:GetChangeTokenStatus

Read

Grants permission to retrieve the status of a change token

waf:GetGeoMatchSet

Read

Grants permission to retrieve a GeoMatchSet

waf:GetIPSet

Read

Grants permission to retrieve an IPSet

waf:GetLoggingConfiguration

Read

Grants permission to retrieve a LoggingConfiguration for a web ACL

waf:GetPermissionPolicy

Read

Grants permission to retrieve an IAM policy for a rule group

waf:GetRateBasedRule

Read

Grants permission to retrieve a RateBasedRule

waf:GetRateBasedRuleManagedKeys

Read

Grants permission to retrieve the array of IP addresses that are currently being blocked by a RateBasedRule

waf:GetRegexMatchSet

Read

Grants permission to retrieve a RegexMatchSet

waf:GetRegexPatternSet

Read

Grants permission to retrieve a RegexPatternSet

waf:GetRule

Read

Grants permission to retrieve a Rule

waf:GetRuleGroup

Read

Grants permission to retrieve a RuleGroup

waf:GetSampledRequests

Read

Grants permission to retrieve detailed information about a sample set of web requests

waf:GetSizeConstraintSet

Read

Grants permission to retrieve a SizeConstraintSet

waf:GetSqlInjectionMatchSet

Read

Grants permission to retrieve an SqlInjectionMatchSet

waf:GetWebACL

Read

Grants permission to retrieve a WebACL

waf:GetXssMatchSet

Read

Grants permission to retrieve an XssMatchSet

waf:ListActivatedRulesInRuleGroup

List

Grants permission to retrieve an array of ActivatedRule objects

waf:ListByteMatchSets

List

Grants permission to retrieve an array of ByteMatchSetSummary objects

waf:ListGeoMatchSets

List

Grants permission to retrieve an array of GeoMatchSetSummary objects

waf:ListIPSets

List

Grants permission to retrieve an array of IPSetSummary objects

waf:ListLoggingConfigurations

List

Grants permission to retrieve an array of LoggingConfiguration objects

waf:ListRateBasedRules

List

Grants permission to retrieve an array of RuleSummary objects

waf:ListRegexMatchSets

List

Grants permission to retrieve an array of RegexMatchSetSummary objects

waf:ListRegexPatternSets

List

Grants permission to retrieve an array of RegexPatternSetSummary objects

waf:ListRuleGroups

List

Grants permission to retrieve an array of RuleGroup objects

waf:ListRules

List

Grants permission to retrieve an array of RuleSummary objects

waf:ListSizeConstraintSets

List

Grants permission to retrieve an array of SizeConstraintSetSummary objects

waf:ListSqlInjectionMatchSets

List

Grants permission to retrieve an array of SqlInjectionMatchSet objects

waf:ListSubscribedRuleGroups

List

Grants permission to retrieve an array of RuleGroup objects that you are subscribed to

waf:ListTagsForResource

Read

Grants permission to retrieve the tags for a resource

waf:ListWebACLs

List

Grants permission to retrieve an array of WebACLSummary objects

waf:ListXssMatchSets

List

Grants permission to retrieve an array of XssMatchSet objects

waf:PutLoggingConfiguration

Write

Grants permission to associate a LoggingConfiguration with a specified web ACL

waf:PutPermissionPolicy

Permissions management

Grants permission to attach an IAM policy to a rule group, to share the rule group between accounts

waf:TagResource

Tagging

Grants permission to add a Tag to a resource

waf:UntagResource

Tagging

Grants permission to remove a Tag from a resource

waf:UpdateByteMatchSet

Write

Grants permission to insert or delete ByteMatchTuple objects in a ByteMatchSet

waf:UpdateGeoMatchSet

Write

Grants permission to insert or delete GeoMatchConstraint objects in a GeoMatchSet

waf:UpdateIPSet

Write

Grants permission to insert or delete IPSetDescriptor objects in an IPSet

waf:UpdateRateBasedRule

Write

Grants permission to modify a rate based rule

waf:UpdateRegexMatchSet

Write

Grants permission to insert or delete RegexMatchTuple objects in a RegexMatchSet

waf:UpdateRegexPatternSet

Write

Grants permission to insert or delete RegexPatternStrings in a RegexPatternSet

waf:UpdateRule

Write

Grants permission to modify a Rule

waf:UpdateRuleGroup

Write

Grants permission to insert or delete ActivatedRule objects in a RuleGroup

waf:UpdateSizeConstraintSet

Write

Grants permission to insert or delete SizeConstraint objects in a SizeConstraintSet

waf:UpdateSqlInjectionMatchSet

Write

Grants permission to insert or delete SqlInjectionMatchTuple objects in an SqlInjectionMatchSet

waf:UpdateWebACL

Permissions management

Grants permission to insert or delete ActivatedRule objects in a WebACL

waf:UpdateXssMatchSet

Write

Grants permission to insert or delete XssMatchTuple objects in an XssMatchSet