waf:CreateRateBasedRule is a Write access-level action in the waf service. Grants permission to create a RateBasedRule for limiting the volume of requests from a single IP address
ARNs that waf:CreateRateBasedRule can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants waf:CreateRateBasedRule.
Filters actions based on the allowed set of values for each of the tags
Filters actions based on the presence of mandatory tags in the request
Filters actions based on tag-value associated with the resource
A minimal policy that allows waf:CreateRateBasedRule. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowWafCreateRateBasedRule",
"Effect": "Allow",
"Action": "waf:CreateRateBasedRule",
"Resource": "*"
}
]
}