wafv2

61 actions in the wafv2 service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

wafv2:AssociateWebACL

Write

Grants permission to associate a WebACL with a resource

wafv2:CheckCapacity

Read

Grants permission to calculate web ACL capacity unit (WCU) requirements for a specified scope and set of rules

wafv2:CreateAPIKey

Write

Grants permission to create an API key for use in the integration of the CAPTCHA API in your JavaScript client applications

wafv2:CreateIPSet

Write

Grants permission to create an IPSet

wafv2:CreateRegexPatternSet

Write

Grants permission to create a RegexPatternSet

wafv2:CreateRuleGroup

Write

Grants permission to create a RuleGroup

wafv2:CreateWebACL

Write

Grants permission to create a WebACL

wafv2:DeleteAPIKey

Write

Grants permission to delete an API key

wafv2:DeleteFirewallManagerRuleGroups

Write

Grants permission to delete FirewallManagedRulesGroups from a WebACL if not managed by Firewall Manager anymore

wafv2:DeleteIPSet

Write

Grants permission to delete an IPSet

wafv2:DeleteLoggingConfiguration

Write

Grants permission to delete the LoggingConfiguration from a WebACL

wafv2:DeletePermissionPolicy

Permissions management

Grants permission to delete the PermissionPolicy on a RuleGroup

wafv2:DeleteRegexPatternSet

Write

Grants permission to delete a RegexPatternSet

wafv2:DeleteRuleGroup

Write

Grants permission to delete a RuleGroup

wafv2:DeleteWebACL

Write

Grants permission to delete a WebACL

wafv2:DescribeAllManagedProducts

Read

Grants permission to retrieve product information for a managed rule group

wafv2:DescribeManagedProductsByVendor

Read

Grants permission to retrieve product information for a managed rule group by a given vendor

wafv2:DescribeManagedRuleGroup

Read

Grants permission to retrieve high-level information for a managed rule group

wafv2:DisassociateFirewallManager

Write

Grants permission to disassociate Firewall Manager from a WebACL

wafv2:DisassociateWebACL

Write

Grants permission to disassociate a WebACL from an application resource

wafv2:GenerateMobileSdkReleaseUrl

Read

Grants permission to generate a presigned download URL for the specified release of the mobile SDK

wafv2:GetDecryptedAPIKey

Read

Grants permission to return your API key in decrypted form. Use this to check the token domains that you have defined for the key

wafv2:GetIPSet

Read

Grants permission to retrieve details about an IPSet

wafv2:GetLoggingConfiguration

Read

Grants permission to retrieve LoggingConfiguration for a WebACL

wafv2:GetManagedRuleSet

Read

Grants permission to retrieve details about a ManagedRuleSet

wafv2:GetMobileSdkRelease

Read

Grants permission to retrieve information for the specified mobile SDK release, including release notes and tags

wafv2:GetPermissionPolicy

Read

Grants permission to retrieve a PermissionPolicy for a RuleGroup

wafv2:GetRateBasedStatementManagedKeys

Read

Grants permission to retrieve the keys that are currently blocked by a rate-based rule

wafv2:GetRegexPatternSet

Read

Grants permission to retrieve details about a RegexPatternSet

wafv2:GetRevenueStatistics

Read

Grants permission to retrieve monetization revenue statistics ranked by source or path within a specified time window

wafv2:GetRevenueStatisticsSummary

Read

Grants permission to retrieve a summary of monetization revenue statistics within a specified time window

wafv2:GetRevenueStatisticsTimeSeries

Read

Grants permission to retrieve monetization revenue statistics as a time series within a specified time window

wafv2:GetRuleGroup

Read

Grants permission to retrieve details about a RuleGroup

wafv2:GetSampledRequests

Read

Grants permission to retrieve detailed information about a sampling of web requests

wafv2:GetTopPathStatisticsByTraffic

Read

Grants permission to retrieve aggregated path statistics with bot traffic analysis for a WebACL within a specified time window

wafv2:GetWebACL

Read

Grants permission to retrieve details about a WebACL

wafv2:GetWebACLForResource

Read

Grants permission to retrieve the WebACL that's associated with a resource

wafv2:ListAPIKeys

List

Grants permission to retrieve a list of the API keys that you've defined for the specified scope

wafv2:ListAvailableManagedRuleGroups

List

Grants permission to retrieve an array of managed rule groups that are available for you to use

wafv2:ListAvailableManagedRuleGroupVersions

List

Grants permission to retrieve an array of managed rule group versions that are available for you to use

wafv2:ListIPSets

List

Grants permission to retrieve an array of IPSetSummary objects for the IP sets that you manage

wafv2:ListLoggingConfigurations

List

Grants permission to retrieve an array of your LoggingConfiguration objects

wafv2:ListManagedRuleSets

List

Grants permission to retrieve an array of your ManagedRuleSet objects

wafv2:ListMobileSdkReleases

List

Grants permission to retrieve a list of the available releases for the mobile SDK and the specified device platform

wafv2:ListRegexPatternSets

List

Grants permission to retrieve an array of RegexPatternSetSummary objects for the regex pattern sets that you manage

wafv2:ListResourcesForWebACL

List

Grants permission to retrieve an array of the Amazon Resource Names (ARNs) for the resources that are associated with a web ACL

wafv2:ListRuleGroups

List

Grants permission to retrieve an array of RuleGroupSummary objects for the rule groups that you manage

wafv2:ListSettlementRecords

List

Grants permission to retrieve a list of monetization settlement records within a specified time window

wafv2:ListTagsForResource

Read

Grants permission to list tags for a resource

wafv2:ListWebACLs

List

Grants permission to retrieve an array of WebACLSummary objects for the web ACLs that you manage

wafv2:PutFirewallManagerRuleGroups

Write

Grants permission to create FirewallManagedRulesGroups in a WebACL

wafv2:PutLoggingConfiguration

Write

Grants permission to enable a LoggingConfiguration, to start logging for a web ACL

wafv2:PutManagedRuleSetVersions

Write

Grants permission to enable create a new or update an existing version of a ManagedRuleSet

wafv2:PutPermissionPolicy

Permissions management

Grants permission to attach an IAM policy to a resource, used to share rule groups between accounts

wafv2:TagResource

Tagging

Grants permission to associate tags with a AWS resource

wafv2:UntagResource

Tagging

Grants permission to disassociate tags from an AWS resource

wafv2:UpdateIPSet

Write

Grants permission to update an IPSet

wafv2:UpdateManagedRuleSetVersionExpiryDate

Write

Grants permission to update the expiry date of a version in ManagedRuleSet

wafv2:UpdateRegexPatternSet

Write

Grants permission to update a RegexPatternSet

wafv2:UpdateRuleGroup

Write

Grants permission to update a RuleGroup

wafv2:UpdateWebACL

Write

Grants permission to update a WebACL