diff --git a/LICENSE b/LICENSE new file mode 100644 --- /dev/null +++ b/LICENSE @@ -0,0 +1,367 @@ +Mozilla Public License Version 2.0 +================================== + +1. Definitions +-------------- + +1.1. "Contributor" + means each individual or legal entity that creates, contributes to + the creation of, or owns Covered Software. + +1.2. "Contributor Version" + means the combination of the Contributions of others (if any) used + by a Contributor and that particular Contributor's Contribution. + +1.3. "Contribution" + means Covered Software of a particular Contributor. + +1.4. "Covered Software" + means Source Code Form to which the initial Contributor has attached + the notice in Exhibit A, the Executable Form of such Source Code + Form, and Modifications of such Source Code Form, in each case + including portions thereof. + +1.5. "Incompatible With Secondary Licenses" + means + + (a) that the initial Contributor has attached the notice described + in Exhibit B to the Covered Software; or + + (b) that the Covered Software was made available under the terms of + version 1.1 or earlier of the License, but not also under the + terms of a Secondary License. + +1.6. "Executable Form" + means any form of the work other than Source Code Form. + +1.7. "Larger Work" + means a work that combines Covered Software with other material, in + a separate file or files, that is not Covered Software. + +1.8. "License" + means this document. + +1.9. "Licensable" + means having the right to grant, to the maximum extent possible, + whether at the time of the initial grant or subsequently, any and + all of the rights conveyed by this License. + +1.10. "Modifications" + means any of the following: + + (a) any file in Source Code Form that results from an addition to, + deletion from, or modification of the contents of Covered + Software; or + + (b) any new file in Source Code Form that contains any Covered + Software. + +1.11. "Patent Claims" of a Contributor + means any patent claim(s), including without limitation, method, + process, and apparatus claims, in any patent Licensable by such + Contributor that would be infringed, but for the grant of the + License, by the making, using, selling, offering for sale, having + made, import, or transfer of either its Contributions or its + Contributor Version. + +1.12. "Secondary License" + means either the GNU General Public License, Version 2.0, the GNU + Lesser General Public License, Version 2.1, the GNU Affero General + Public License, Version 3.0, or any later versions of those + licenses. + +1.13. "Source Code Form" + means the form of the work preferred for making modifications. + +1.14. "You" (or "Your") + means an individual or a legal entity exercising rights under this + License. For legal entities, "You" includes any entity that + controls, is controlled by, or is under common control with You. For + purposes of this definition, "control" means (a) the power, direct + or indirect, to cause the direction or management of such entity, + whether by contract or otherwise, or (b) ownership of more than + fifty percent (50%) of the outstanding shares or beneficial + ownership of such entity. + +2. License Grants and Conditions +-------------------------------- + +2.1. Grants + +Each Contributor hereby grants You a world-wide, royalty-free, +non-exclusive license: + +(a) under intellectual property rights (other than patent or trademark) + Licensable by such Contributor to use, reproduce, make available, + modify, display, perform, distribute, and otherwise exploit its + Contributions, either on an unmodified basis, with Modifications, or + as part of a Larger Work; and + +(b) under Patent Claims of such Contributor to make, use, sell, offer + for sale, have made, import, and otherwise transfer either its + Contributions or its Contributor Version. + +2.2. Effective Date + +The licenses granted in Section 2.1 with respect to any Contribution +become effective for each Contribution on the date the Contributor first +distributes such Contribution. + +2.3. Limitations on Grant Scope + +The licenses granted in this Section 2 are the only rights granted under +this License. No additional rights or licenses will be implied from the +distribution or licensing of Covered Software under this License. +Notwithstanding Section 2.1(b) above, no patent license is granted by a +Contributor: + +(a) for any code that a Contributor has removed from Covered Software; + or + +(b) for infringements caused by: (i) Your and any other third party's + modifications of Covered Software, or (ii) the combination of its + Contributions with other software (except as part of its Contributor + Version); or + +(c) under Patent Claims infringed by Covered Software in the absence of + its Contributions. + +This License does not grant any rights in the trademarks, service marks, +or logos of any Contributor (except as may be necessary to comply with +the notice requirements in Section 3.4). + +2.4. Subsequent Licenses + +No Contributor makes additional grants as a result of Your choice to +distribute the Covered Software under a subsequent version of this +License (see Section 10.2) or under the terms of a Secondary License (if +permitted under the terms of Section 3.3). + +2.5. Representation + +Each Contributor represents that the Contributor believes its +Contributions are its original creation(s) or it has sufficient rights +to grant the rights to its Contributions conveyed by this License. + +2.6. Fair Use + +This License is not intended to limit any rights You have under +applicable copyright doctrines of fair use, fair dealing, or other +equivalents. + +2.7. Conditions + +Sections 3.1, 3.2, 3.3, and 3.4 are conditions of the licenses granted +in Section 2.1. + +3. Responsibilities +------------------- + +3.1. Distribution of Source Form + +All distribution of Covered Software in Source Code Form, including any +Modifications that You create or to which You contribute, must be under +the terms of this License. You must inform recipients that the Source +Code Form of the Covered Software is governed by the terms of this +License, and how they can obtain a copy of this License. You may not +attempt to alter or restrict the recipients' rights in the Source Code +Form. + +3.2. Distribution of Executable Form + +If You distribute Covered Software in Executable Form then: + +(a) such Covered Software must also be made available in Source Code + Form, as described in Section 3.1, and You must inform recipients of + the Executable Form how they can obtain a copy of such Source Code + Form by reasonable means in a timely manner, at a charge no more + than the cost of distribution to the recipient; and + +(b) You may distribute such Executable Form under the terms of this + License, or sublicense it under different terms, provided that the + license for the Executable Form does not attempt to limit or alter + the recipients' rights in the Source Code Form under this License. + +3.3. Distribution of a Larger Work + +You may create and distribute a Larger Work under terms of Your choice, +provided that You also comply with the requirements of this License for +the Covered Software. If the Larger Work is a combination of Covered +Software with a work governed by one or more Secondary Licenses, and the +Covered Software is not Incompatible With Secondary Licenses, this +License permits You to additionally distribute such Covered Software +under the terms of such Secondary License(s), so that the recipient of +the Larger Work may, at their option, further distribute the Covered +Software under the terms of either this License or such Secondary +License(s). + +3.4. Notices + +You may not remove or alter the substance of any license notices +(including copyright notices, patent notices, disclaimers of warranty, +or limitations of liability) contained within the Source Code Form of +the Covered Software, except that You may alter any license notices to +the extent required to remedy known factual inaccuracies. + +3.5. Application of Additional Terms + +You may choose to offer, and to charge a fee for, warranty, support, +indemnity or liability obligations to one or more recipients of Covered +Software. However, You may do so only on Your own behalf, and not on +behalf of any Contributor. You must make it absolutely clear that any +such warranty, support, indemnity, or liability obligation is offered by +You alone, and You hereby agree to indemnify every Contributor for any +liability incurred by such Contributor as a result of warranty, support, +indemnity or liability terms You offer. You may include additional +disclaimers of warranty and limitations of liability specific to any +jurisdiction. + +4. Inability to Comply Due to Statute or Regulation +--------------------------------------------------- + +If it is impossible for You to comply with any of the terms of this +License with respect to some or all of the Covered Software due to +statute, judicial order, or regulation then You must: (a) comply with +the terms of this License to the maximum extent possible; and (b) +describe the limitations and the code they affect. Such description must +be placed in a text file included with all distributions of the Covered +Software under this License. Except to the extent prohibited by statute +or regulation, such description must be sufficiently detailed for a +recipient of ordinary skill to be able to understand it. + +5. Termination +-------------- + +5.1. The rights granted under this License will terminate automatically +if You fail to comply with any of its terms. However, if You become +compliant, then the rights granted under this License from a particular +Contributor are reinstated (a) provisionally, unless and until such +Contributor explicitly and finally terminates Your grants, and (b) on an +ongoing basis, if such Contributor fails to notify You of the +non-compliance by some reasonable means prior to 60 days after You have +come back into compliance. Moreover, Your grants from a particular +Contributor are reinstated on an ongoing basis if such Contributor +notifies You of the non-compliance by some reasonable means, this is the +first time You have received notice of non-compliance with this License +from such Contributor, and You become compliant prior to 30 days after +Your receipt of the notice. + +5.2. If You initiate litigation against any entity by asserting a patent +infringement claim (excluding declaratory judgment actions, +counter-claims, and cross-claims) alleging that a Contributor Version +directly or indirectly infringes any patent, then the rights granted to +You by any and all Contributors for the Covered Software under Section +2.1 of this License shall terminate. + +5.3. In the event of termination under Sections 5.1 or 5.2 above, all +end user license agreements (excluding distributors and resellers) which +have been validly granted by You or Your distributors under this License +prior to termination shall survive termination. + +************************************************************************ +* * +* 6. Disclaimer of Warranty * +* ------------------------- * +* * +* Covered Software is provided under this License on an "as is" * +* basis, without warranty of any kind, either expressed, implied, or * +* statutory, including, without limitation, warranties that the * +* Covered Software is free of defects, merchantable, fit for a * +* particular purpose or non-infringing. The entire risk as to the * +* quality and performance of the Covered Software is with You. * +* Should any Covered Software prove defective in any respect, You * +* (not any Contributor) assume the cost of any necessary servicing, * +* repair, or correction. This disclaimer of warranty constitutes an * +* essential part of this License. No use of any Covered Software is * +* authorized under this License except under this disclaimer. * +* * +************************************************************************ + +************************************************************************ +* * +* 7. Limitation of Liability * +* -------------------------- * +* * +* Under no circumstances and under no legal theory, whether tort * +* (including negligence), contract, or otherwise, shall any * +* Contributor, or anyone who distributes Covered Software as * +* permitted above, be liable to You for any direct, indirect, * +* special, incidental, or consequential damages of any character * +* including, without limitation, damages for lost profits, loss of * +* goodwill, work stoppage, computer failure or malfunction, or any * +* and all other commercial damages or losses, even if such party * +* shall have been informed of the possibility of such damages. This * +* limitation of liability shall not apply to liability for death or * +* personal injury resulting from such party's negligence to the * +* extent applicable law prohibits such limitation. Some * +* jurisdictions do not allow the exclusion or limitation of * +* incidental or consequential damages, so this exclusion and * +* limitation may not apply to You. * +* * +************************************************************************ + +8. Litigation +------------- + +Any litigation relating to this License may be brought only in the +courts of a jurisdiction where the defendant maintains its principal +place of business and such litigation shall be governed by laws of that +jurisdiction, without reference to its conflict-of-law provisions. +Nothing in this Section shall prevent a party's ability to bring +cross-claims or counter-claims. + +9. Miscellaneous +---------------- + +This License represents the complete agreement concerning the subject +matter hereof. If any provision of this License is held to be +unenforceable, such provision shall be reformed only to the extent +necessary to make it enforceable. Any law or regulation which provides +that the language of a contract shall be construed against the drafter +shall not be used to construe this License against a Contributor. + +10. Versions of the License +--------------------------- + +10.1. New Versions + +Mozilla Foundation is the license steward. Except as provided in Section +10.3, no one other than the license steward has the right to modify or +publish new versions of this License. Each version will be given a +distinguishing version number. + +10.2. Effect of New Versions + +You may distribute the Covered Software under the terms of the version +of the License under which You originally received the Covered Software, +or under the terms of any subsequent version published by the license +steward. + +10.3. Modified Versions + +If you create software not governed by this License, and you want to +create a new license for such software, you may create and use a +modified version of this License if you rename the license and remove +any references to the name of the license steward (except to note that +such modified license differs from this License). + +10.4. Distributing Source Code Form that is Incompatible With Secondary +Licenses + +If You choose to distribute Source Code Form that is Incompatible With +Secondary Licenses under the terms of this version of the License, the +notice described in Exhibit B of this License must be attached. + +Exhibit A - Source Code Form License Notice +------------------------------------------- + + This Source Code Form is subject to the terms of the Mozilla Public + License, v. 2.0. If a copy of the MPL was not distributed with this + file, You can obtain one at http://mozilla.org/MPL/2.0/. + +If it is not possible or desirable to put the notice in a particular +file, then You may include the notice in a location (such as a LICENSE +file in a relevant directory) where a recipient would be likely to look +for such a notice. + +You may add additional accurate notices of copyright ownership. diff --git a/README.md b/README.md new file mode 100644 --- /dev/null +++ b/README.md @@ -0,0 +1,44 @@ +# Amazon WAFV2 SDK + +* [Version](#version) +* [Description](#description) +* [Contribute](#contribute) +* [Licence](#licence) + + +## Version + +`2.0` - Derived from API version @2019-07-29@ of the AWS service descriptions, licensed under Apache 2.0. + +## Description + +Documentation is available via [Hackage](http://hackage.haskell.org/package/amazonka-wafv2) +and the [AWS API Reference](https://aws.amazon.com/documentation/). + +The types from this library are intended to be used with [amazonka](http://hackage.haskell.org/package/amazonka), +which provides mechanisms for specifying AuthN/AuthZ information, sending requests, +and receiving responses. + +Lenses are used for constructing and manipulating types, +due to the depth of nesting of AWS types and transparency regarding +de/serialisation into more palatable Haskell values. +The provided lenses should be compatible with any of the major lens libraries +[lens](http://hackage.haskell.org/package/lens) or [lens-family-core](http://hackage.haskell.org/package/lens-family-core). + +See [Amazonka.WAFV2](http://hackage.haskell.org/package/amazonka-wafv2/docs/Amazonka-WAFV2.html) +or [the AWS documentation](https://aws.amazon.com/documentation/) to get started. + + +## Contribute + +For any problems, comments, or feedback please create an issue [here on GitHub](https://github.com/brendanhay/amazonka/issues). + +> _Note:_ this library is an auto-generated Haskell package. Please see `amazonka-gen` for more information. + + +## Licence + +`amazonka-wafv2` is released under the [Mozilla Public License Version 2.0](http://www.mozilla.org/MPL/). + +Parts of the code are derived from AWS service descriptions, licensed under Apache 2.0. +Source files subject to this contain an additional licensing clause in their header. diff --git a/amazonka-wafv2.cabal b/amazonka-wafv2.cabal new file mode 100644 --- /dev/null +++ b/amazonka-wafv2.cabal @@ -0,0 +1,250 @@ +cabal-version: 2.2 +name: amazonka-wafv2 +version: 2.0 +synopsis: Amazon WAFV2 SDK. +homepage: https://github.com/brendanhay/amazonka +bug-reports: https://github.com/brendanhay/amazonka/issues +license: MPL-2.0 +license-file: LICENSE +author: Brendan Hay +maintainer: + Brendan Hay , Jack Kelly + +copyright: Copyright (c) 2013-2023 Brendan Hay +category: AWS +build-type: Simple +extra-source-files: + fixture/*.proto + fixture/*.yaml + README.md + src/.gitkeep + +description: + Derived from API version @2019-07-29@ of the AWS service descriptions, licensed under Apache 2.0. + . + The types from this library are intended to be used with , + which provides mechanisms for specifying AuthN/AuthZ information, sending requests, and receiving responses. + . + It is recommended to use generic lenses or optics from packages such as or to modify optional fields and deconstruct responses. + . + Generated lenses can be found in "Amazonka.WAFV2.Lens" and are + suitable for use with a lens package such as or . + . + See "Amazonka.WAFV2" and the to get started. + +source-repository head + type: git + location: git://github.com/brendanhay/amazonka.git + subdir: amazonka-wafv2 + +library + default-language: Haskell2010 + hs-source-dirs: src gen + ghc-options: + -Wall -fwarn-incomplete-uni-patterns + -fwarn-incomplete-record-updates -funbox-strict-fields + + exposed-modules: + Amazonka.WAFV2 + Amazonka.WAFV2.AssociateWebACL + Amazonka.WAFV2.CheckCapacity + Amazonka.WAFV2.CreateIPSet + Amazonka.WAFV2.CreateRegexPatternSet + Amazonka.WAFV2.CreateRuleGroup + Amazonka.WAFV2.CreateWebACL + Amazonka.WAFV2.DeleteFirewallManagerRuleGroups + Amazonka.WAFV2.DeleteIPSet + Amazonka.WAFV2.DeleteLoggingConfiguration + Amazonka.WAFV2.DeletePermissionPolicy + Amazonka.WAFV2.DeleteRegexPatternSet + Amazonka.WAFV2.DeleteRuleGroup + Amazonka.WAFV2.DeleteWebACL + Amazonka.WAFV2.DescribeManagedRuleGroup + Amazonka.WAFV2.DisassociateWebACL + Amazonka.WAFV2.GenerateMobileSdkReleaseUrl + Amazonka.WAFV2.GetIPSet + Amazonka.WAFV2.GetLoggingConfiguration + Amazonka.WAFV2.GetManagedRuleSet + Amazonka.WAFV2.GetMobileSdkRelease + Amazonka.WAFV2.GetPermissionPolicy + Amazonka.WAFV2.GetRateBasedStatementManagedKeys + Amazonka.WAFV2.GetRegexPatternSet + Amazonka.WAFV2.GetRuleGroup + Amazonka.WAFV2.GetSampledRequests + Amazonka.WAFV2.GetWebACL + Amazonka.WAFV2.GetWebACLForResource + Amazonka.WAFV2.Lens + Amazonka.WAFV2.ListAvailableManagedRuleGroups + Amazonka.WAFV2.ListAvailableManagedRuleGroupVersions + Amazonka.WAFV2.ListIPSets + Amazonka.WAFV2.ListLoggingConfigurations + Amazonka.WAFV2.ListManagedRuleSets + Amazonka.WAFV2.ListMobileSdkReleases + Amazonka.WAFV2.ListRegexPatternSets + Amazonka.WAFV2.ListResourcesForWebACL + Amazonka.WAFV2.ListRuleGroups + Amazonka.WAFV2.ListTagsForResource + Amazonka.WAFV2.ListWebACLs + Amazonka.WAFV2.PutLoggingConfiguration + Amazonka.WAFV2.PutManagedRuleSetVersions + Amazonka.WAFV2.PutPermissionPolicy + Amazonka.WAFV2.TagResource + Amazonka.WAFV2.Types + Amazonka.WAFV2.Types.ActionCondition + Amazonka.WAFV2.Types.ActionValue + Amazonka.WAFV2.Types.All + Amazonka.WAFV2.Types.AllowAction + Amazonka.WAFV2.Types.AllQueryArguments + Amazonka.WAFV2.Types.AndStatement + Amazonka.WAFV2.Types.AWSManagedRulesBotControlRuleSet + Amazonka.WAFV2.Types.BlockAction + Amazonka.WAFV2.Types.Body + Amazonka.WAFV2.Types.BodyParsingFallbackBehavior + Amazonka.WAFV2.Types.ByteMatchStatement + Amazonka.WAFV2.Types.CaptchaAction + Amazonka.WAFV2.Types.CaptchaConfig + Amazonka.WAFV2.Types.CaptchaResponse + Amazonka.WAFV2.Types.ChallengeAction + Amazonka.WAFV2.Types.ChallengeConfig + Amazonka.WAFV2.Types.ChallengeResponse + Amazonka.WAFV2.Types.ComparisonOperator + Amazonka.WAFV2.Types.Condition + Amazonka.WAFV2.Types.CookieMatchPattern + Amazonka.WAFV2.Types.Cookies + Amazonka.WAFV2.Types.CountAction + Amazonka.WAFV2.Types.CountryCode + Amazonka.WAFV2.Types.CustomHTTPHeader + Amazonka.WAFV2.Types.CustomRequestHandling + Amazonka.WAFV2.Types.CustomResponse + Amazonka.WAFV2.Types.CustomResponseBody + Amazonka.WAFV2.Types.DefaultAction + Amazonka.WAFV2.Types.ExcludedRule + Amazonka.WAFV2.Types.FailureReason + Amazonka.WAFV2.Types.FallbackBehavior + Amazonka.WAFV2.Types.FieldToMatch + Amazonka.WAFV2.Types.Filter + Amazonka.WAFV2.Types.FilterBehavior + Amazonka.WAFV2.Types.FilterRequirement + Amazonka.WAFV2.Types.FirewallManagerRuleGroup + Amazonka.WAFV2.Types.FirewallManagerStatement + Amazonka.WAFV2.Types.ForwardedIPConfig + Amazonka.WAFV2.Types.ForwardedIPPosition + Amazonka.WAFV2.Types.GeoMatchStatement + Amazonka.WAFV2.Types.HeaderMatchPattern + Amazonka.WAFV2.Types.Headers + Amazonka.WAFV2.Types.HTTPHeader + Amazonka.WAFV2.Types.HTTPRequest + Amazonka.WAFV2.Types.ImmunityTimeProperty + Amazonka.WAFV2.Types.InspectionLevel + Amazonka.WAFV2.Types.IPAddressVersion + Amazonka.WAFV2.Types.IPSet + Amazonka.WAFV2.Types.IPSetForwardedIPConfig + Amazonka.WAFV2.Types.IPSetReferenceStatement + Amazonka.WAFV2.Types.IPSetSummary + Amazonka.WAFV2.Types.JsonBody + Amazonka.WAFV2.Types.JsonMatchPattern + Amazonka.WAFV2.Types.JsonMatchScope + Amazonka.WAFV2.Types.Label + Amazonka.WAFV2.Types.LabelMatchScope + Amazonka.WAFV2.Types.LabelMatchStatement + Amazonka.WAFV2.Types.LabelNameCondition + Amazonka.WAFV2.Types.LabelSummary + Amazonka.WAFV2.Types.LoggingConfiguration + Amazonka.WAFV2.Types.LoggingFilter + Amazonka.WAFV2.Types.ManagedRuleGroupConfig + Amazonka.WAFV2.Types.ManagedRuleGroupStatement + Amazonka.WAFV2.Types.ManagedRuleGroupSummary + Amazonka.WAFV2.Types.ManagedRuleGroupVersion + Amazonka.WAFV2.Types.ManagedRuleSet + Amazonka.WAFV2.Types.ManagedRuleSetSummary + Amazonka.WAFV2.Types.ManagedRuleSetVersion + Amazonka.WAFV2.Types.MapMatchScope + Amazonka.WAFV2.Types.Method + Amazonka.WAFV2.Types.MobileSdkRelease + Amazonka.WAFV2.Types.NoneAction + Amazonka.WAFV2.Types.NotStatement + Amazonka.WAFV2.Types.OrStatement + Amazonka.WAFV2.Types.OverrideAction + Amazonka.WAFV2.Types.OversizeHandling + Amazonka.WAFV2.Types.PasswordField + Amazonka.WAFV2.Types.PayloadType + Amazonka.WAFV2.Types.Platform + Amazonka.WAFV2.Types.PositionalConstraint + Amazonka.WAFV2.Types.QueryString + Amazonka.WAFV2.Types.RateBasedStatement + Amazonka.WAFV2.Types.RateBasedStatementAggregateKeyType + Amazonka.WAFV2.Types.RateBasedStatementManagedKeysIPSet + Amazonka.WAFV2.Types.Regex + Amazonka.WAFV2.Types.RegexMatchStatement + Amazonka.WAFV2.Types.RegexPatternSet + Amazonka.WAFV2.Types.RegexPatternSetReferenceStatement + Amazonka.WAFV2.Types.RegexPatternSetSummary + Amazonka.WAFV2.Types.ReleaseSummary + Amazonka.WAFV2.Types.ResourceType + Amazonka.WAFV2.Types.ResponseContentType + Amazonka.WAFV2.Types.Rule + Amazonka.WAFV2.Types.RuleAction + Amazonka.WAFV2.Types.RuleActionOverride + Amazonka.WAFV2.Types.RuleGroup + Amazonka.WAFV2.Types.RuleGroupReferenceStatement + Amazonka.WAFV2.Types.RuleGroupSummary + Amazonka.WAFV2.Types.RuleSummary + Amazonka.WAFV2.Types.SampledHTTPRequest + Amazonka.WAFV2.Types.Scope + Amazonka.WAFV2.Types.SensitivityLevel + Amazonka.WAFV2.Types.SingleHeader + Amazonka.WAFV2.Types.SingleQueryArgument + Amazonka.WAFV2.Types.SizeConstraintStatement + Amazonka.WAFV2.Types.SqliMatchStatement + Amazonka.WAFV2.Types.Statement + Amazonka.WAFV2.Types.Tag + Amazonka.WAFV2.Types.TagInfoForResource + Amazonka.WAFV2.Types.TextTransformation + Amazonka.WAFV2.Types.TextTransformationType + Amazonka.WAFV2.Types.TimeWindow + Amazonka.WAFV2.Types.UriPath + Amazonka.WAFV2.Types.UsernameField + Amazonka.WAFV2.Types.VersionToPublish + Amazonka.WAFV2.Types.VisibilityConfig + Amazonka.WAFV2.Types.WebACL + Amazonka.WAFV2.Types.WebACLSummary + Amazonka.WAFV2.Types.XssMatchStatement + Amazonka.WAFV2.UntagResource + Amazonka.WAFV2.UpdateIPSet + Amazonka.WAFV2.UpdateManagedRuleSetVersionExpiryDate + Amazonka.WAFV2.UpdateRegexPatternSet + Amazonka.WAFV2.UpdateRuleGroup + Amazonka.WAFV2.UpdateWebACL + Amazonka.WAFV2.Waiters + + build-depends: + , amazonka-core >=2.0 && <2.1 + , base >=4.12 && <5 + +test-suite amazonka-wafv2-test + type: exitcode-stdio-1.0 + default-language: Haskell2010 + hs-source-dirs: test + main-is: Main.hs + ghc-options: -Wall -threaded + + -- This section is encoded by the template and any modules added by + -- hand outside these namespaces will not correctly be added to the + -- distribution package. + other-modules: + Test.Amazonka.Gen.WAFV2 + Test.Amazonka.WAFV2 + Test.Amazonka.WAFV2.Internal + + build-depends: + , amazonka-core >=2.0 && <2.1 + , amazonka-test >=2.0 && <2.1 + , amazonka-wafv2 + , base + , bytestring + , case-insensitive + , tasty + , tasty-hunit + , text + , time + , unordered-containers diff --git a/fixture/AssociateWebACL.yaml b/fixture/AssociateWebACL.yaml new file mode 100644 --- /dev/null +++ b/fixture/AssociateWebACL.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/AssociateWebACLResponse.proto b/fixture/AssociateWebACLResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/AssociateWebACLResponse.proto diff --git a/fixture/CheckCapacity.yaml b/fixture/CheckCapacity.yaml new file mode 100644 --- /dev/null +++ b/fixture/CheckCapacity.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/CheckCapacityResponse.proto b/fixture/CheckCapacityResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/CheckCapacityResponse.proto diff --git a/fixture/CreateIPSet.yaml b/fixture/CreateIPSet.yaml new file mode 100644 --- /dev/null +++ b/fixture/CreateIPSet.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/CreateIPSetResponse.proto b/fixture/CreateIPSetResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/CreateIPSetResponse.proto diff --git a/fixture/CreateRegexPatternSet.yaml b/fixture/CreateRegexPatternSet.yaml new file mode 100644 --- /dev/null +++ b/fixture/CreateRegexPatternSet.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/CreateRegexPatternSetResponse.proto b/fixture/CreateRegexPatternSetResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/CreateRegexPatternSetResponse.proto diff --git a/fixture/CreateRuleGroup.yaml b/fixture/CreateRuleGroup.yaml new file mode 100644 --- /dev/null +++ b/fixture/CreateRuleGroup.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/CreateRuleGroupResponse.proto b/fixture/CreateRuleGroupResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/CreateRuleGroupResponse.proto diff --git a/fixture/CreateWebACL.yaml b/fixture/CreateWebACL.yaml new file mode 100644 --- /dev/null +++ b/fixture/CreateWebACL.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/CreateWebACLResponse.proto b/fixture/CreateWebACLResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/CreateWebACLResponse.proto diff --git a/fixture/DeleteFirewallManagerRuleGroups.yaml b/fixture/DeleteFirewallManagerRuleGroups.yaml new file mode 100644 --- /dev/null +++ b/fixture/DeleteFirewallManagerRuleGroups.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/DeleteFirewallManagerRuleGroupsResponse.proto b/fixture/DeleteFirewallManagerRuleGroupsResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/DeleteFirewallManagerRuleGroupsResponse.proto diff --git a/fixture/DeleteIPSet.yaml b/fixture/DeleteIPSet.yaml new file mode 100644 --- /dev/null +++ b/fixture/DeleteIPSet.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/DeleteIPSetResponse.proto b/fixture/DeleteIPSetResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/DeleteIPSetResponse.proto diff --git a/fixture/DeleteLoggingConfiguration.yaml b/fixture/DeleteLoggingConfiguration.yaml new file mode 100644 --- /dev/null +++ b/fixture/DeleteLoggingConfiguration.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/DeleteLoggingConfigurationResponse.proto b/fixture/DeleteLoggingConfigurationResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/DeleteLoggingConfigurationResponse.proto diff --git a/fixture/DeletePermissionPolicy.yaml b/fixture/DeletePermissionPolicy.yaml new file mode 100644 --- /dev/null +++ b/fixture/DeletePermissionPolicy.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/DeletePermissionPolicyResponse.proto b/fixture/DeletePermissionPolicyResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/DeletePermissionPolicyResponse.proto diff --git a/fixture/DeleteRegexPatternSet.yaml b/fixture/DeleteRegexPatternSet.yaml new file mode 100644 --- /dev/null +++ b/fixture/DeleteRegexPatternSet.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/DeleteRegexPatternSetResponse.proto b/fixture/DeleteRegexPatternSetResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/DeleteRegexPatternSetResponse.proto diff --git a/fixture/DeleteRuleGroup.yaml b/fixture/DeleteRuleGroup.yaml new file mode 100644 --- /dev/null +++ b/fixture/DeleteRuleGroup.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/DeleteRuleGroupResponse.proto b/fixture/DeleteRuleGroupResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/DeleteRuleGroupResponse.proto diff --git a/fixture/DeleteWebACL.yaml b/fixture/DeleteWebACL.yaml new file mode 100644 --- /dev/null +++ b/fixture/DeleteWebACL.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/DeleteWebACLResponse.proto b/fixture/DeleteWebACLResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/DeleteWebACLResponse.proto diff --git a/fixture/DescribeManagedRuleGroup.yaml b/fixture/DescribeManagedRuleGroup.yaml new file mode 100644 --- /dev/null +++ b/fixture/DescribeManagedRuleGroup.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/DescribeManagedRuleGroupResponse.proto b/fixture/DescribeManagedRuleGroupResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/DescribeManagedRuleGroupResponse.proto diff --git a/fixture/DisassociateWebACL.yaml b/fixture/DisassociateWebACL.yaml new file mode 100644 --- /dev/null +++ b/fixture/DisassociateWebACL.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/DisassociateWebACLResponse.proto b/fixture/DisassociateWebACLResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/DisassociateWebACLResponse.proto diff --git a/fixture/GenerateMobileSdkReleaseUrl.yaml b/fixture/GenerateMobileSdkReleaseUrl.yaml new file mode 100644 --- /dev/null +++ b/fixture/GenerateMobileSdkReleaseUrl.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/GenerateMobileSdkReleaseUrlResponse.proto b/fixture/GenerateMobileSdkReleaseUrlResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/GenerateMobileSdkReleaseUrlResponse.proto diff --git a/fixture/GetIPSet.yaml b/fixture/GetIPSet.yaml new file mode 100644 --- /dev/null +++ b/fixture/GetIPSet.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/GetIPSetResponse.proto b/fixture/GetIPSetResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/GetIPSetResponse.proto diff --git a/fixture/GetLoggingConfiguration.yaml b/fixture/GetLoggingConfiguration.yaml new file mode 100644 --- /dev/null +++ b/fixture/GetLoggingConfiguration.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/GetLoggingConfigurationResponse.proto b/fixture/GetLoggingConfigurationResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/GetLoggingConfigurationResponse.proto diff --git a/fixture/GetManagedRuleSet.yaml b/fixture/GetManagedRuleSet.yaml new file mode 100644 --- /dev/null +++ b/fixture/GetManagedRuleSet.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/GetManagedRuleSetResponse.proto b/fixture/GetManagedRuleSetResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/GetManagedRuleSetResponse.proto diff --git a/fixture/GetMobileSdkRelease.yaml b/fixture/GetMobileSdkRelease.yaml new file mode 100644 --- /dev/null +++ b/fixture/GetMobileSdkRelease.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/GetMobileSdkReleaseResponse.proto b/fixture/GetMobileSdkReleaseResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/GetMobileSdkReleaseResponse.proto diff --git a/fixture/GetPermissionPolicy.yaml b/fixture/GetPermissionPolicy.yaml new file mode 100644 --- /dev/null +++ b/fixture/GetPermissionPolicy.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/GetPermissionPolicyResponse.proto b/fixture/GetPermissionPolicyResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/GetPermissionPolicyResponse.proto diff --git a/fixture/GetRateBasedStatementManagedKeys.yaml b/fixture/GetRateBasedStatementManagedKeys.yaml new file mode 100644 --- /dev/null +++ b/fixture/GetRateBasedStatementManagedKeys.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/GetRateBasedStatementManagedKeysResponse.proto b/fixture/GetRateBasedStatementManagedKeysResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/GetRateBasedStatementManagedKeysResponse.proto diff --git a/fixture/GetRegexPatternSet.yaml b/fixture/GetRegexPatternSet.yaml new file mode 100644 --- /dev/null +++ b/fixture/GetRegexPatternSet.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/GetRegexPatternSetResponse.proto b/fixture/GetRegexPatternSetResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/GetRegexPatternSetResponse.proto diff --git a/fixture/GetRuleGroup.yaml b/fixture/GetRuleGroup.yaml new file mode 100644 --- /dev/null +++ b/fixture/GetRuleGroup.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/GetRuleGroupResponse.proto b/fixture/GetRuleGroupResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/GetRuleGroupResponse.proto diff --git a/fixture/GetSampledRequests.yaml b/fixture/GetSampledRequests.yaml new file mode 100644 --- /dev/null +++ b/fixture/GetSampledRequests.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/GetSampledRequestsResponse.proto b/fixture/GetSampledRequestsResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/GetSampledRequestsResponse.proto diff --git a/fixture/GetWebACL.yaml b/fixture/GetWebACL.yaml new file mode 100644 --- /dev/null +++ b/fixture/GetWebACL.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/GetWebACLForResource.yaml b/fixture/GetWebACLForResource.yaml new file mode 100644 --- /dev/null +++ b/fixture/GetWebACLForResource.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/GetWebACLForResourceResponse.proto b/fixture/GetWebACLForResourceResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/GetWebACLForResourceResponse.proto diff --git a/fixture/GetWebACLResponse.proto b/fixture/GetWebACLResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/GetWebACLResponse.proto diff --git a/fixture/ListAvailableManagedRuleGroupVersions.yaml b/fixture/ListAvailableManagedRuleGroupVersions.yaml new file mode 100644 --- /dev/null +++ b/fixture/ListAvailableManagedRuleGroupVersions.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/ListAvailableManagedRuleGroupVersionsResponse.proto b/fixture/ListAvailableManagedRuleGroupVersionsResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/ListAvailableManagedRuleGroupVersionsResponse.proto diff --git a/fixture/ListAvailableManagedRuleGroups.yaml b/fixture/ListAvailableManagedRuleGroups.yaml new file mode 100644 --- /dev/null +++ b/fixture/ListAvailableManagedRuleGroups.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/ListAvailableManagedRuleGroupsResponse.proto b/fixture/ListAvailableManagedRuleGroupsResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/ListAvailableManagedRuleGroupsResponse.proto diff --git a/fixture/ListIPSets.yaml b/fixture/ListIPSets.yaml new file mode 100644 --- /dev/null +++ b/fixture/ListIPSets.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/ListIPSetsResponse.proto b/fixture/ListIPSetsResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/ListIPSetsResponse.proto diff --git a/fixture/ListLoggingConfigurations.yaml b/fixture/ListLoggingConfigurations.yaml new file mode 100644 --- /dev/null +++ b/fixture/ListLoggingConfigurations.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/ListLoggingConfigurationsResponse.proto b/fixture/ListLoggingConfigurationsResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/ListLoggingConfigurationsResponse.proto diff --git a/fixture/ListManagedRuleSets.yaml b/fixture/ListManagedRuleSets.yaml new file mode 100644 --- /dev/null +++ b/fixture/ListManagedRuleSets.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/ListManagedRuleSetsResponse.proto b/fixture/ListManagedRuleSetsResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/ListManagedRuleSetsResponse.proto diff --git a/fixture/ListMobileSdkReleases.yaml b/fixture/ListMobileSdkReleases.yaml new file mode 100644 --- /dev/null +++ b/fixture/ListMobileSdkReleases.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/ListMobileSdkReleasesResponse.proto b/fixture/ListMobileSdkReleasesResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/ListMobileSdkReleasesResponse.proto diff --git a/fixture/ListRegexPatternSets.yaml b/fixture/ListRegexPatternSets.yaml new file mode 100644 --- /dev/null +++ b/fixture/ListRegexPatternSets.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/ListRegexPatternSetsResponse.proto b/fixture/ListRegexPatternSetsResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/ListRegexPatternSetsResponse.proto diff --git a/fixture/ListResourcesForWebACL.yaml b/fixture/ListResourcesForWebACL.yaml new file mode 100644 --- /dev/null +++ b/fixture/ListResourcesForWebACL.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/ListResourcesForWebACLResponse.proto b/fixture/ListResourcesForWebACLResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/ListResourcesForWebACLResponse.proto diff --git a/fixture/ListRuleGroups.yaml b/fixture/ListRuleGroups.yaml new file mode 100644 --- /dev/null +++ b/fixture/ListRuleGroups.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/ListRuleGroupsResponse.proto b/fixture/ListRuleGroupsResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/ListRuleGroupsResponse.proto diff --git a/fixture/ListTagsForResource.yaml b/fixture/ListTagsForResource.yaml new file mode 100644 --- /dev/null +++ b/fixture/ListTagsForResource.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/ListTagsForResourceResponse.proto b/fixture/ListTagsForResourceResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/ListTagsForResourceResponse.proto diff --git a/fixture/ListWebACLs.yaml b/fixture/ListWebACLs.yaml new file mode 100644 --- /dev/null +++ b/fixture/ListWebACLs.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/ListWebACLsResponse.proto b/fixture/ListWebACLsResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/ListWebACLsResponse.proto diff --git a/fixture/PutLoggingConfiguration.yaml b/fixture/PutLoggingConfiguration.yaml new file mode 100644 --- /dev/null +++ b/fixture/PutLoggingConfiguration.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/PutLoggingConfigurationResponse.proto b/fixture/PutLoggingConfigurationResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/PutLoggingConfigurationResponse.proto diff --git a/fixture/PutManagedRuleSetVersions.yaml b/fixture/PutManagedRuleSetVersions.yaml new file mode 100644 --- /dev/null +++ b/fixture/PutManagedRuleSetVersions.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/PutManagedRuleSetVersionsResponse.proto b/fixture/PutManagedRuleSetVersionsResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/PutManagedRuleSetVersionsResponse.proto diff --git a/fixture/PutPermissionPolicy.yaml b/fixture/PutPermissionPolicy.yaml new file mode 100644 --- /dev/null +++ b/fixture/PutPermissionPolicy.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/PutPermissionPolicyResponse.proto b/fixture/PutPermissionPolicyResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/PutPermissionPolicyResponse.proto diff --git a/fixture/TagResource.yaml b/fixture/TagResource.yaml new file mode 100644 --- /dev/null +++ b/fixture/TagResource.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/TagResourceResponse.proto b/fixture/TagResourceResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/TagResourceResponse.proto diff --git a/fixture/UntagResource.yaml b/fixture/UntagResource.yaml new file mode 100644 --- /dev/null +++ b/fixture/UntagResource.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/UntagResourceResponse.proto b/fixture/UntagResourceResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/UntagResourceResponse.proto diff --git a/fixture/UpdateIPSet.yaml b/fixture/UpdateIPSet.yaml new file mode 100644 --- /dev/null +++ b/fixture/UpdateIPSet.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/UpdateIPSetResponse.proto b/fixture/UpdateIPSetResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/UpdateIPSetResponse.proto diff --git a/fixture/UpdateManagedRuleSetVersionExpiryDate.yaml b/fixture/UpdateManagedRuleSetVersionExpiryDate.yaml new file mode 100644 --- /dev/null +++ b/fixture/UpdateManagedRuleSetVersionExpiryDate.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/UpdateManagedRuleSetVersionExpiryDateResponse.proto b/fixture/UpdateManagedRuleSetVersionExpiryDateResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/UpdateManagedRuleSetVersionExpiryDateResponse.proto diff --git a/fixture/UpdateRegexPatternSet.yaml b/fixture/UpdateRegexPatternSet.yaml new file mode 100644 --- /dev/null +++ b/fixture/UpdateRegexPatternSet.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/UpdateRegexPatternSetResponse.proto b/fixture/UpdateRegexPatternSetResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/UpdateRegexPatternSetResponse.proto diff --git a/fixture/UpdateRuleGroup.yaml b/fixture/UpdateRuleGroup.yaml new file mode 100644 --- /dev/null +++ b/fixture/UpdateRuleGroup.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/UpdateRuleGroupResponse.proto b/fixture/UpdateRuleGroupResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/UpdateRuleGroupResponse.proto diff --git a/fixture/UpdateWebACL.yaml b/fixture/UpdateWebACL.yaml new file mode 100644 --- /dev/null +++ b/fixture/UpdateWebACL.yaml @@ -0,0 +1,10 @@ +--- +method: POST +headers: + Authorization: AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/wafv2/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=? + Host: wafv2.us-east-1.amazonaws.com + Content-Type: application/x-www-form-urlencoded; charset=utf-8 + X-Amz-Content-SHA256: abcdef + X-Amz-Date: 20091028T223200Z +body: + '' diff --git a/fixture/UpdateWebACLResponse.proto b/fixture/UpdateWebACLResponse.proto new file mode 100644 --- /dev/null +++ b/fixture/UpdateWebACLResponse.proto diff --git a/gen/Amazonka/WAFV2.hs b/gen/Amazonka/WAFV2.hs new file mode 100644 --- /dev/null +++ b/gen/Amazonka/WAFV2.hs @@ -0,0 +1,971 @@ +{-# OPTIONS_GHC -fno-warn-duplicate-exports #-} +{-# OPTIONS_GHC -fno-warn-unused-imports #-} + +-- | +-- Module : Amazonka.WAFV2 +-- Copyright : (c) 2013-2023 Brendan Hay +-- License : Mozilla Public License, v. 2.0. +-- Maintainer : Brendan Hay +-- Stability : auto-generated +-- Portability : non-portable (GHC extensions) +-- +-- Derived from API version @2019-07-29@ of the AWS service descriptions, licensed under Apache 2.0. +-- +-- WAF +-- +-- This is the latest version of the __WAF__ API, released in November, +-- 2019. The names of the entities that you use to access this API, like +-- endpoints and namespaces, all have the versioning information added, +-- like \"V2\" or \"v2\", to distinguish from the prior version. We +-- recommend migrating your resources to this version, because it has a +-- number of significant improvements. +-- +-- If you used WAF prior to this release, you can\'t use this WAFV2 API to +-- access any WAF resources that you created before. You can access your +-- old rules, web ACLs, and other WAF resources only through the WAF +-- Classic APIs. The WAF Classic APIs have retained the prior names, +-- endpoints, and namespaces. +-- +-- For information, including how to migrate your WAF resources to this +-- version, see the +-- . +-- +-- WAF is a web application firewall that lets you monitor the HTTP and +-- HTTPS requests that are forwarded to Amazon CloudFront, an Amazon API +-- Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. WAF also lets you control access to your +-- content. Based on conditions that you specify, such as the IP addresses +-- that requests originate from or the values of query strings, the Amazon +-- API Gateway REST API, CloudFront distribution, the Application Load +-- Balancer, the AppSync GraphQL API, or the Amazon Cognito user pool +-- responds to requests either with the requested content or with an HTTP +-- 403 status code (Forbidden). You also can configure CloudFront to return +-- a custom error page when a request is blocked. +-- +-- This API guide is for developers who need detailed information about WAF +-- API actions, data types, and errors. For detailed information about WAF +-- features and an overview of how to use WAF, see the +-- . +-- +-- You can make calls using the endpoints listed in +-- . +-- +-- - For regional applications, you can use any of the endpoints in the +-- list. A regional application can be an Application Load Balancer +-- (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, or an +-- Amazon Cognito user pool. +-- +-- - For Amazon CloudFront applications, you must use the API endpoint +-- listed for US East (N. Virginia): us-east-1. +-- +-- Alternatively, you can use one of the Amazon Web Services SDKs to access +-- an API that\'s tailored to the programming language or platform that +-- you\'re using. For more information, see +-- . +-- +-- We currently provide two versions of the WAF API: this API and the prior +-- versions, the classic WAF APIs. This new API provides the same +-- functionality as the older versions, with the following major +-- improvements: +-- +-- - You use one API for both global and regional applications. Where you +-- need to distinguish the scope, you specify a @Scope@ parameter and +-- set it to @CLOUDFRONT@ or @REGIONAL@. +-- +-- - You can define a web ACL or rule group with a single call, and +-- update it with a single call. You define all rule specifications in +-- JSON format, and pass them to your rule group or web ACL calls. +-- +-- - The limits WAF places on the use of rules more closely reflects the +-- cost of running each type of rule. Rule groups include capacity +-- settings, so you know the maximum cost of a rule group when you use +-- it. +module Amazonka.WAFV2 + ( -- * Service Configuration + defaultService, + + -- * Errors + -- $errors + + -- ** WAFAssociatedItemException + _WAFAssociatedItemException, + + -- ** WAFConfigurationWarningException + _WAFConfigurationWarningException, + + -- ** WAFDuplicateItemException + _WAFDuplicateItemException, + + -- ** WAFExpiredManagedRuleGroupVersionException + _WAFExpiredManagedRuleGroupVersionException, + + -- ** WAFInternalErrorException + _WAFInternalErrorException, + + -- ** WAFInvalidOperationException + _WAFInvalidOperationException, + + -- ** WAFInvalidParameterException + _WAFInvalidParameterException, + + -- ** WAFInvalidPermissionPolicyException + _WAFInvalidPermissionPolicyException, + + -- ** WAFInvalidResourceException + _WAFInvalidResourceException, + + -- ** WAFLimitsExceededException + _WAFLimitsExceededException, + + -- ** WAFLogDestinationPermissionIssueException + _WAFLogDestinationPermissionIssueException, + + -- ** WAFNonexistentItemException + _WAFNonexistentItemException, + + -- ** WAFOptimisticLockException + _WAFOptimisticLockException, + + -- ** WAFServiceLinkedRoleErrorException + _WAFServiceLinkedRoleErrorException, + + -- ** WAFSubscriptionNotFoundException + _WAFSubscriptionNotFoundException, + + -- ** WAFTagOperationException + _WAFTagOperationException, + + -- ** WAFTagOperationInternalErrorException + _WAFTagOperationInternalErrorException, + + -- ** WAFUnavailableEntityException + _WAFUnavailableEntityException, + + -- * Waiters + -- $waiters + + -- * Operations + -- $operations + + -- ** AssociateWebACL + AssociateWebACL (AssociateWebACL'), + newAssociateWebACL, + AssociateWebACLResponse (AssociateWebACLResponse'), + newAssociateWebACLResponse, + + -- ** CheckCapacity + CheckCapacity (CheckCapacity'), + newCheckCapacity, + CheckCapacityResponse (CheckCapacityResponse'), + newCheckCapacityResponse, + + -- ** CreateIPSet + CreateIPSet (CreateIPSet'), + newCreateIPSet, + CreateIPSetResponse (CreateIPSetResponse'), + newCreateIPSetResponse, + + -- ** CreateRegexPatternSet + CreateRegexPatternSet (CreateRegexPatternSet'), + newCreateRegexPatternSet, + CreateRegexPatternSetResponse (CreateRegexPatternSetResponse'), + newCreateRegexPatternSetResponse, + + -- ** CreateRuleGroup + CreateRuleGroup (CreateRuleGroup'), + newCreateRuleGroup, + CreateRuleGroupResponse (CreateRuleGroupResponse'), + newCreateRuleGroupResponse, + + -- ** CreateWebACL + CreateWebACL (CreateWebACL'), + newCreateWebACL, + CreateWebACLResponse (CreateWebACLResponse'), + newCreateWebACLResponse, + + -- ** DeleteFirewallManagerRuleGroups + DeleteFirewallManagerRuleGroups (DeleteFirewallManagerRuleGroups'), + newDeleteFirewallManagerRuleGroups, + DeleteFirewallManagerRuleGroupsResponse (DeleteFirewallManagerRuleGroupsResponse'), + newDeleteFirewallManagerRuleGroupsResponse, + + -- ** DeleteIPSet + DeleteIPSet (DeleteIPSet'), + newDeleteIPSet, + DeleteIPSetResponse (DeleteIPSetResponse'), + newDeleteIPSetResponse, + + -- ** DeleteLoggingConfiguration + DeleteLoggingConfiguration (DeleteLoggingConfiguration'), + newDeleteLoggingConfiguration, + DeleteLoggingConfigurationResponse (DeleteLoggingConfigurationResponse'), + newDeleteLoggingConfigurationResponse, + + -- ** DeletePermissionPolicy + DeletePermissionPolicy (DeletePermissionPolicy'), + newDeletePermissionPolicy, + DeletePermissionPolicyResponse (DeletePermissionPolicyResponse'), + newDeletePermissionPolicyResponse, + + -- ** DeleteRegexPatternSet + DeleteRegexPatternSet (DeleteRegexPatternSet'), + newDeleteRegexPatternSet, + DeleteRegexPatternSetResponse (DeleteRegexPatternSetResponse'), + newDeleteRegexPatternSetResponse, + + -- ** DeleteRuleGroup + DeleteRuleGroup (DeleteRuleGroup'), + newDeleteRuleGroup, + DeleteRuleGroupResponse (DeleteRuleGroupResponse'), + newDeleteRuleGroupResponse, + + -- ** DeleteWebACL + DeleteWebACL (DeleteWebACL'), + newDeleteWebACL, + DeleteWebACLResponse (DeleteWebACLResponse'), + newDeleteWebACLResponse, + + -- ** DescribeManagedRuleGroup + DescribeManagedRuleGroup (DescribeManagedRuleGroup'), + newDescribeManagedRuleGroup, + DescribeManagedRuleGroupResponse (DescribeManagedRuleGroupResponse'), + newDescribeManagedRuleGroupResponse, + + -- ** DisassociateWebACL + DisassociateWebACL (DisassociateWebACL'), + newDisassociateWebACL, + DisassociateWebACLResponse (DisassociateWebACLResponse'), + newDisassociateWebACLResponse, + + -- ** GenerateMobileSdkReleaseUrl + GenerateMobileSdkReleaseUrl (GenerateMobileSdkReleaseUrl'), + newGenerateMobileSdkReleaseUrl, + GenerateMobileSdkReleaseUrlResponse (GenerateMobileSdkReleaseUrlResponse'), + newGenerateMobileSdkReleaseUrlResponse, + + -- ** GetIPSet + GetIPSet (GetIPSet'), + newGetIPSet, + GetIPSetResponse (GetIPSetResponse'), + newGetIPSetResponse, + + -- ** GetLoggingConfiguration + GetLoggingConfiguration (GetLoggingConfiguration'), + newGetLoggingConfiguration, + GetLoggingConfigurationResponse (GetLoggingConfigurationResponse'), + newGetLoggingConfigurationResponse, + + -- ** GetManagedRuleSet + GetManagedRuleSet (GetManagedRuleSet'), + newGetManagedRuleSet, + GetManagedRuleSetResponse (GetManagedRuleSetResponse'), + newGetManagedRuleSetResponse, + + -- ** GetMobileSdkRelease + GetMobileSdkRelease (GetMobileSdkRelease'), + newGetMobileSdkRelease, + GetMobileSdkReleaseResponse (GetMobileSdkReleaseResponse'), + newGetMobileSdkReleaseResponse, + + -- ** GetPermissionPolicy + GetPermissionPolicy (GetPermissionPolicy'), + newGetPermissionPolicy, + GetPermissionPolicyResponse (GetPermissionPolicyResponse'), + newGetPermissionPolicyResponse, + + -- ** GetRateBasedStatementManagedKeys + GetRateBasedStatementManagedKeys (GetRateBasedStatementManagedKeys'), + newGetRateBasedStatementManagedKeys, + GetRateBasedStatementManagedKeysResponse (GetRateBasedStatementManagedKeysResponse'), + newGetRateBasedStatementManagedKeysResponse, + + -- ** GetRegexPatternSet + GetRegexPatternSet (GetRegexPatternSet'), + newGetRegexPatternSet, + GetRegexPatternSetResponse (GetRegexPatternSetResponse'), + newGetRegexPatternSetResponse, + + -- ** GetRuleGroup + GetRuleGroup (GetRuleGroup'), + newGetRuleGroup, + GetRuleGroupResponse (GetRuleGroupResponse'), + newGetRuleGroupResponse, + + -- ** GetSampledRequests + GetSampledRequests (GetSampledRequests'), + newGetSampledRequests, + GetSampledRequestsResponse (GetSampledRequestsResponse'), + newGetSampledRequestsResponse, + + -- ** GetWebACL + GetWebACL (GetWebACL'), + newGetWebACL, + GetWebACLResponse (GetWebACLResponse'), + newGetWebACLResponse, + + -- ** GetWebACLForResource + GetWebACLForResource (GetWebACLForResource'), + newGetWebACLForResource, + GetWebACLForResourceResponse (GetWebACLForResourceResponse'), + newGetWebACLForResourceResponse, + + -- ** ListAvailableManagedRuleGroupVersions + ListAvailableManagedRuleGroupVersions (ListAvailableManagedRuleGroupVersions'), + newListAvailableManagedRuleGroupVersions, + ListAvailableManagedRuleGroupVersionsResponse (ListAvailableManagedRuleGroupVersionsResponse'), + newListAvailableManagedRuleGroupVersionsResponse, + + -- ** ListAvailableManagedRuleGroups + ListAvailableManagedRuleGroups (ListAvailableManagedRuleGroups'), + newListAvailableManagedRuleGroups, + ListAvailableManagedRuleGroupsResponse (ListAvailableManagedRuleGroupsResponse'), + newListAvailableManagedRuleGroupsResponse, + + -- ** ListIPSets + ListIPSets (ListIPSets'), + newListIPSets, + ListIPSetsResponse (ListIPSetsResponse'), + newListIPSetsResponse, + + -- ** ListLoggingConfigurations + ListLoggingConfigurations (ListLoggingConfigurations'), + newListLoggingConfigurations, + ListLoggingConfigurationsResponse (ListLoggingConfigurationsResponse'), + newListLoggingConfigurationsResponse, + + -- ** ListManagedRuleSets + ListManagedRuleSets (ListManagedRuleSets'), + newListManagedRuleSets, + ListManagedRuleSetsResponse (ListManagedRuleSetsResponse'), + newListManagedRuleSetsResponse, + + -- ** ListMobileSdkReleases + ListMobileSdkReleases (ListMobileSdkReleases'), + newListMobileSdkReleases, + ListMobileSdkReleasesResponse (ListMobileSdkReleasesResponse'), + newListMobileSdkReleasesResponse, + + -- ** ListRegexPatternSets + ListRegexPatternSets (ListRegexPatternSets'), + newListRegexPatternSets, + ListRegexPatternSetsResponse (ListRegexPatternSetsResponse'), + newListRegexPatternSetsResponse, + + -- ** ListResourcesForWebACL + ListResourcesForWebACL (ListResourcesForWebACL'), + newListResourcesForWebACL, + ListResourcesForWebACLResponse (ListResourcesForWebACLResponse'), + newListResourcesForWebACLResponse, + + -- ** ListRuleGroups + ListRuleGroups (ListRuleGroups'), + newListRuleGroups, + ListRuleGroupsResponse (ListRuleGroupsResponse'), + newListRuleGroupsResponse, + + -- ** ListTagsForResource + ListTagsForResource (ListTagsForResource'), + newListTagsForResource, + ListTagsForResourceResponse (ListTagsForResourceResponse'), + newListTagsForResourceResponse, + + -- ** ListWebACLs + ListWebACLs (ListWebACLs'), + newListWebACLs, + ListWebACLsResponse (ListWebACLsResponse'), + newListWebACLsResponse, + + -- ** PutLoggingConfiguration + PutLoggingConfiguration (PutLoggingConfiguration'), + newPutLoggingConfiguration, + PutLoggingConfigurationResponse (PutLoggingConfigurationResponse'), + newPutLoggingConfigurationResponse, + + -- ** PutManagedRuleSetVersions + PutManagedRuleSetVersions (PutManagedRuleSetVersions'), + newPutManagedRuleSetVersions, + PutManagedRuleSetVersionsResponse (PutManagedRuleSetVersionsResponse'), + newPutManagedRuleSetVersionsResponse, + + -- ** PutPermissionPolicy + PutPermissionPolicy (PutPermissionPolicy'), + newPutPermissionPolicy, + PutPermissionPolicyResponse (PutPermissionPolicyResponse'), + newPutPermissionPolicyResponse, + + -- ** TagResource + TagResource (TagResource'), + newTagResource, + TagResourceResponse (TagResourceResponse'), + newTagResourceResponse, + + -- ** UntagResource + UntagResource (UntagResource'), + newUntagResource, + UntagResourceResponse (UntagResourceResponse'), + newUntagResourceResponse, + + -- ** UpdateIPSet + UpdateIPSet (UpdateIPSet'), + newUpdateIPSet, + UpdateIPSetResponse (UpdateIPSetResponse'), + newUpdateIPSetResponse, + + -- ** UpdateManagedRuleSetVersionExpiryDate + UpdateManagedRuleSetVersionExpiryDate (UpdateManagedRuleSetVersionExpiryDate'), + newUpdateManagedRuleSetVersionExpiryDate, + UpdateManagedRuleSetVersionExpiryDateResponse (UpdateManagedRuleSetVersionExpiryDateResponse'), + newUpdateManagedRuleSetVersionExpiryDateResponse, + + -- ** UpdateRegexPatternSet + UpdateRegexPatternSet (UpdateRegexPatternSet'), + newUpdateRegexPatternSet, + UpdateRegexPatternSetResponse (UpdateRegexPatternSetResponse'), + newUpdateRegexPatternSetResponse, + + -- ** UpdateRuleGroup + UpdateRuleGroup (UpdateRuleGroup'), + newUpdateRuleGroup, + UpdateRuleGroupResponse (UpdateRuleGroupResponse'), + newUpdateRuleGroupResponse, + + -- ** UpdateWebACL + UpdateWebACL (UpdateWebACL'), + newUpdateWebACL, + UpdateWebACLResponse (UpdateWebACLResponse'), + newUpdateWebACLResponse, + + -- * Types + + -- ** ActionValue + ActionValue (..), + + -- ** BodyParsingFallbackBehavior + BodyParsingFallbackBehavior (..), + + -- ** ComparisonOperator + ComparisonOperator (..), + + -- ** CountryCode + CountryCode (..), + + -- ** FailureReason + FailureReason (..), + + -- ** FallbackBehavior + FallbackBehavior (..), + + -- ** FilterBehavior + FilterBehavior (..), + + -- ** FilterRequirement + FilterRequirement (..), + + -- ** ForwardedIPPosition + ForwardedIPPosition (..), + + -- ** IPAddressVersion + IPAddressVersion (..), + + -- ** InspectionLevel + InspectionLevel (..), + + -- ** JsonMatchScope + JsonMatchScope (..), + + -- ** LabelMatchScope + LabelMatchScope (..), + + -- ** MapMatchScope + MapMatchScope (..), + + -- ** OversizeHandling + OversizeHandling (..), + + -- ** PayloadType + PayloadType (..), + + -- ** Platform + Platform (..), + + -- ** PositionalConstraint + PositionalConstraint (..), + + -- ** RateBasedStatementAggregateKeyType + RateBasedStatementAggregateKeyType (..), + + -- ** ResourceType + ResourceType (..), + + -- ** ResponseContentType + ResponseContentType (..), + + -- ** Scope + Scope (..), + + -- ** SensitivityLevel + SensitivityLevel (..), + + -- ** TextTransformationType + TextTransformationType (..), + + -- ** AWSManagedRulesBotControlRuleSet + AWSManagedRulesBotControlRuleSet (AWSManagedRulesBotControlRuleSet'), + newAWSManagedRulesBotControlRuleSet, + + -- ** ActionCondition + ActionCondition (ActionCondition'), + newActionCondition, + + -- ** All + All (All'), + newAll, + + -- ** AllQueryArguments + AllQueryArguments (AllQueryArguments'), + newAllQueryArguments, + + -- ** AllowAction + AllowAction (AllowAction'), + newAllowAction, + + -- ** AndStatement + AndStatement (AndStatement'), + newAndStatement, + + -- ** BlockAction + BlockAction (BlockAction'), + newBlockAction, + + -- ** Body + Body (Body'), + newBody, + + -- ** ByteMatchStatement + ByteMatchStatement (ByteMatchStatement'), + newByteMatchStatement, + + -- ** CaptchaAction + CaptchaAction (CaptchaAction'), + newCaptchaAction, + + -- ** CaptchaConfig + CaptchaConfig (CaptchaConfig'), + newCaptchaConfig, + + -- ** CaptchaResponse + CaptchaResponse (CaptchaResponse'), + newCaptchaResponse, + + -- ** ChallengeAction + ChallengeAction (ChallengeAction'), + newChallengeAction, + + -- ** ChallengeConfig + ChallengeConfig (ChallengeConfig'), + newChallengeConfig, + + -- ** ChallengeResponse + ChallengeResponse (ChallengeResponse'), + newChallengeResponse, + + -- ** Condition + Condition (Condition'), + newCondition, + + -- ** CookieMatchPattern + CookieMatchPattern (CookieMatchPattern'), + newCookieMatchPattern, + + -- ** Cookies + Cookies (Cookies'), + newCookies, + + -- ** CountAction + CountAction (CountAction'), + newCountAction, + + -- ** CustomHTTPHeader + CustomHTTPHeader (CustomHTTPHeader'), + newCustomHTTPHeader, + + -- ** CustomRequestHandling + CustomRequestHandling (CustomRequestHandling'), + newCustomRequestHandling, + + -- ** CustomResponse + CustomResponse (CustomResponse'), + newCustomResponse, + + -- ** CustomResponseBody + CustomResponseBody (CustomResponseBody'), + newCustomResponseBody, + + -- ** DefaultAction + DefaultAction (DefaultAction'), + newDefaultAction, + + -- ** ExcludedRule + ExcludedRule (ExcludedRule'), + newExcludedRule, + + -- ** FieldToMatch + FieldToMatch (FieldToMatch'), + newFieldToMatch, + + -- ** Filter + Filter (Filter'), + newFilter, + + -- ** FirewallManagerRuleGroup + FirewallManagerRuleGroup (FirewallManagerRuleGroup'), + newFirewallManagerRuleGroup, + + -- ** FirewallManagerStatement + FirewallManagerStatement (FirewallManagerStatement'), + newFirewallManagerStatement, + + -- ** ForwardedIPConfig + ForwardedIPConfig (ForwardedIPConfig'), + newForwardedIPConfig, + + -- ** GeoMatchStatement + GeoMatchStatement (GeoMatchStatement'), + newGeoMatchStatement, + + -- ** HTTPHeader + HTTPHeader (HTTPHeader'), + newHTTPHeader, + + -- ** HTTPRequest + HTTPRequest (HTTPRequest'), + newHTTPRequest, + + -- ** HeaderMatchPattern + HeaderMatchPattern (HeaderMatchPattern'), + newHeaderMatchPattern, + + -- ** Headers + Headers (Headers'), + newHeaders, + + -- ** IPSet + IPSet (IPSet'), + newIPSet, + + -- ** IPSetForwardedIPConfig + IPSetForwardedIPConfig (IPSetForwardedIPConfig'), + newIPSetForwardedIPConfig, + + -- ** IPSetReferenceStatement + IPSetReferenceStatement (IPSetReferenceStatement'), + newIPSetReferenceStatement, + + -- ** IPSetSummary + IPSetSummary (IPSetSummary'), + newIPSetSummary, + + -- ** ImmunityTimeProperty + ImmunityTimeProperty (ImmunityTimeProperty'), + newImmunityTimeProperty, + + -- ** JsonBody + JsonBody (JsonBody'), + newJsonBody, + + -- ** JsonMatchPattern + JsonMatchPattern (JsonMatchPattern'), + newJsonMatchPattern, + + -- ** Label + Label (Label'), + newLabel, + + -- ** LabelMatchStatement + LabelMatchStatement (LabelMatchStatement'), + newLabelMatchStatement, + + -- ** LabelNameCondition + LabelNameCondition (LabelNameCondition'), + newLabelNameCondition, + + -- ** LabelSummary + LabelSummary (LabelSummary'), + newLabelSummary, + + -- ** LoggingConfiguration + LoggingConfiguration (LoggingConfiguration'), + newLoggingConfiguration, + + -- ** LoggingFilter + LoggingFilter (LoggingFilter'), + newLoggingFilter, + + -- ** ManagedRuleGroupConfig + ManagedRuleGroupConfig (ManagedRuleGroupConfig'), + newManagedRuleGroupConfig, + + -- ** ManagedRuleGroupStatement + ManagedRuleGroupStatement (ManagedRuleGroupStatement'), + newManagedRuleGroupStatement, + + -- ** ManagedRuleGroupSummary + ManagedRuleGroupSummary (ManagedRuleGroupSummary'), + newManagedRuleGroupSummary, + + -- ** ManagedRuleGroupVersion + ManagedRuleGroupVersion (ManagedRuleGroupVersion'), + newManagedRuleGroupVersion, + + -- ** ManagedRuleSet + ManagedRuleSet (ManagedRuleSet'), + newManagedRuleSet, + + -- ** ManagedRuleSetSummary + ManagedRuleSetSummary (ManagedRuleSetSummary'), + newManagedRuleSetSummary, + + -- ** ManagedRuleSetVersion + ManagedRuleSetVersion (ManagedRuleSetVersion'), + newManagedRuleSetVersion, + + -- ** Method + Method (Method'), + newMethod, + + -- ** MobileSdkRelease + MobileSdkRelease (MobileSdkRelease'), + newMobileSdkRelease, + + -- ** NoneAction + NoneAction (NoneAction'), + newNoneAction, + + -- ** NotStatement + NotStatement (NotStatement'), + newNotStatement, + + -- ** OrStatement + OrStatement (OrStatement'), + newOrStatement, + + -- ** OverrideAction + OverrideAction (OverrideAction'), + newOverrideAction, + + -- ** PasswordField + PasswordField (PasswordField'), + newPasswordField, + + -- ** QueryString + QueryString (QueryString'), + newQueryString, + + -- ** RateBasedStatement + RateBasedStatement (RateBasedStatement'), + newRateBasedStatement, + + -- ** RateBasedStatementManagedKeysIPSet + RateBasedStatementManagedKeysIPSet (RateBasedStatementManagedKeysIPSet'), + newRateBasedStatementManagedKeysIPSet, + + -- ** Regex + Regex (Regex'), + newRegex, + + -- ** RegexMatchStatement + RegexMatchStatement (RegexMatchStatement'), + newRegexMatchStatement, + + -- ** RegexPatternSet + RegexPatternSet (RegexPatternSet'), + newRegexPatternSet, + + -- ** RegexPatternSetReferenceStatement + RegexPatternSetReferenceStatement (RegexPatternSetReferenceStatement'), + newRegexPatternSetReferenceStatement, + + -- ** RegexPatternSetSummary + RegexPatternSetSummary (RegexPatternSetSummary'), + newRegexPatternSetSummary, + + -- ** ReleaseSummary + ReleaseSummary (ReleaseSummary'), + newReleaseSummary, + + -- ** Rule + Rule (Rule'), + newRule, + + -- ** RuleAction + RuleAction (RuleAction'), + newRuleAction, + + -- ** RuleActionOverride + RuleActionOverride (RuleActionOverride'), + newRuleActionOverride, + + -- ** RuleGroup + RuleGroup (RuleGroup'), + newRuleGroup, + + -- ** RuleGroupReferenceStatement + RuleGroupReferenceStatement (RuleGroupReferenceStatement'), + newRuleGroupReferenceStatement, + + -- ** RuleGroupSummary + RuleGroupSummary (RuleGroupSummary'), + newRuleGroupSummary, + + -- ** RuleSummary + RuleSummary (RuleSummary'), + newRuleSummary, + + -- ** SampledHTTPRequest + SampledHTTPRequest (SampledHTTPRequest'), + newSampledHTTPRequest, + + -- ** SingleHeader + SingleHeader (SingleHeader'), + newSingleHeader, + + -- ** SingleQueryArgument + SingleQueryArgument (SingleQueryArgument'), + newSingleQueryArgument, + + -- ** SizeConstraintStatement + SizeConstraintStatement (SizeConstraintStatement'), + newSizeConstraintStatement, + + -- ** SqliMatchStatement + SqliMatchStatement (SqliMatchStatement'), + newSqliMatchStatement, + + -- ** Statement + Statement (Statement'), + newStatement, + + -- ** Tag + Tag (Tag'), + newTag, + + -- ** TagInfoForResource + TagInfoForResource (TagInfoForResource'), + newTagInfoForResource, + + -- ** TextTransformation + TextTransformation (TextTransformation'), + newTextTransformation, + + -- ** TimeWindow + TimeWindow (TimeWindow'), + newTimeWindow, + + -- ** UriPath + UriPath (UriPath'), + newUriPath, + + -- ** UsernameField + UsernameField (UsernameField'), + newUsernameField, + + -- ** VersionToPublish + VersionToPublish (VersionToPublish'), + newVersionToPublish, + + -- ** VisibilityConfig + VisibilityConfig (VisibilityConfig'), + newVisibilityConfig, + + -- ** WebACL + WebACL (WebACL'), + newWebACL, + + -- ** WebACLSummary + WebACLSummary (WebACLSummary'), + newWebACLSummary, + + -- ** XssMatchStatement + XssMatchStatement (XssMatchStatement'), + newXssMatchStatement, + ) +where + +import Amazonka.WAFV2.AssociateWebACL +import Amazonka.WAFV2.CheckCapacity +import Amazonka.WAFV2.CreateIPSet +import Amazonka.WAFV2.CreateRegexPatternSet +import Amazonka.WAFV2.CreateRuleGroup +import Amazonka.WAFV2.CreateWebACL +import Amazonka.WAFV2.DeleteFirewallManagerRuleGroups +import Amazonka.WAFV2.DeleteIPSet +import Amazonka.WAFV2.DeleteLoggingConfiguration +import Amazonka.WAFV2.DeletePermissionPolicy +import Amazonka.WAFV2.DeleteRegexPatternSet +import Amazonka.WAFV2.DeleteRuleGroup +import Amazonka.WAFV2.DeleteWebACL +import Amazonka.WAFV2.DescribeManagedRuleGroup +import Amazonka.WAFV2.DisassociateWebACL +import Amazonka.WAFV2.GenerateMobileSdkReleaseUrl +import Amazonka.WAFV2.GetIPSet +import Amazonka.WAFV2.GetLoggingConfiguration +import Amazonka.WAFV2.GetManagedRuleSet +import Amazonka.WAFV2.GetMobileSdkRelease +import Amazonka.WAFV2.GetPermissionPolicy +import Amazonka.WAFV2.GetRateBasedStatementManagedKeys +import Amazonka.WAFV2.GetRegexPatternSet +import Amazonka.WAFV2.GetRuleGroup +import Amazonka.WAFV2.GetSampledRequests +import Amazonka.WAFV2.GetWebACL +import Amazonka.WAFV2.GetWebACLForResource +import Amazonka.WAFV2.Lens +import Amazonka.WAFV2.ListAvailableManagedRuleGroupVersions +import Amazonka.WAFV2.ListAvailableManagedRuleGroups +import Amazonka.WAFV2.ListIPSets +import Amazonka.WAFV2.ListLoggingConfigurations +import Amazonka.WAFV2.ListManagedRuleSets +import Amazonka.WAFV2.ListMobileSdkReleases +import Amazonka.WAFV2.ListRegexPatternSets +import Amazonka.WAFV2.ListResourcesForWebACL +import Amazonka.WAFV2.ListRuleGroups +import Amazonka.WAFV2.ListTagsForResource +import Amazonka.WAFV2.ListWebACLs +import Amazonka.WAFV2.PutLoggingConfiguration +import Amazonka.WAFV2.PutManagedRuleSetVersions +import Amazonka.WAFV2.PutPermissionPolicy +import Amazonka.WAFV2.TagResource +import Amazonka.WAFV2.Types +import Amazonka.WAFV2.UntagResource +import Amazonka.WAFV2.UpdateIPSet +import Amazonka.WAFV2.UpdateManagedRuleSetVersionExpiryDate +import Amazonka.WAFV2.UpdateRegexPatternSet +import Amazonka.WAFV2.UpdateRuleGroup +import Amazonka.WAFV2.UpdateWebACL +import Amazonka.WAFV2.Waiters + +-- $errors +-- Error matchers are designed for use with the functions provided by +-- . +-- This allows catching (and rethrowing) service specific errors returned +-- by 'WAFV2'. + +-- $operations +-- Some AWS operations return results that are incomplete and require subsequent +-- requests in order to obtain the entire result set. The process of sending +-- subsequent requests to continue where a previous request left off is called +-- pagination. For example, the 'ListObjects' operation of Amazon S3 returns up to +-- 1000 objects at a time, and you must send subsequent requests with the +-- appropriate Marker in order to retrieve the next page of results. +-- +-- Operations that have an 'AWSPager' instance can transparently perform subsequent +-- requests, correctly setting Markers and other request facets to iterate through +-- the entire result set of a truncated API operation. Operations which support +-- this have an additional note in the documentation. +-- +-- Many operations have the ability to filter results on the server side. See the +-- individual operation parameters for details. + +-- $waiters +-- Waiters poll by repeatedly sending a request until some remote success condition +-- configured by the 'Wait' specification is fulfilled. The 'Wait' specification +-- determines how many attempts should be made, in addition to delay and retry strategies. diff --git a/gen/Amazonka/WAFV2/AssociateWebACL.hs b/gen/Amazonka/WAFV2/AssociateWebACL.hs new file mode 100644 --- /dev/null +++ b/gen/Amazonka/WAFV2/AssociateWebACL.hs @@ -0,0 +1,244 @@ +{-# LANGUAGE DeriveGeneric #-} +{-# LANGUAGE DuplicateRecordFields #-} +{-# LANGUAGE NamedFieldPuns #-} +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE RecordWildCards #-} +{-# LANGUAGE StrictData #-} +{-# LANGUAGE TypeFamilies #-} +{-# LANGUAGE NoImplicitPrelude #-} +{-# OPTIONS_GHC -fno-warn-unused-binds #-} +{-# OPTIONS_GHC -fno-warn-unused-imports #-} +{-# OPTIONS_GHC -fno-warn-unused-matches #-} + +-- Derived from AWS service descriptions, licensed under Apache 2.0. + +-- | +-- Module : Amazonka.WAFV2.AssociateWebACL +-- Copyright : (c) 2013-2023 Brendan Hay +-- License : Mozilla Public License, v. 2.0. +-- Maintainer : Brendan Hay +-- Stability : auto-generated +-- Portability : non-portable (GHC extensions) +-- +-- Associates a web ACL with a regional application resource, to protect +-- the resource. A regional application can be an Application Load Balancer +-- (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, or an +-- Amazon Cognito user pool. +-- +-- For Amazon CloudFront, don\'t use this call. Instead, use your +-- CloudFront distribution configuration. To associate a web ACL, in the +-- CloudFront call @UpdateDistribution@, set the web ACL ID to the Amazon +-- Resource Name (ARN) of the web ACL. For information, see +-- . +-- +-- When you make changes to web ACLs or web ACL components, like rules and +-- rule groups, WAF propagates the changes everywhere that the web ACL and +-- its components are stored and used. Your changes are applied within +-- seconds, but there might be a brief period of inconsistency when the +-- changes have arrived in some places and not in others. So, for example, +-- if you change a rule action setting, the action might be the old action +-- in one area and the new action in another area. Or if you add an IP +-- address to an IP set used in a blocking rule, the new address might +-- briefly be blocked in one area while still allowed in another. This +-- temporary inconsistency can occur when you first associate a web ACL +-- with an Amazon Web Services resource and when you change a web ACL that +-- is already associated with a resource. Generally, any inconsistencies of +-- this type last only a few seconds. +module Amazonka.WAFV2.AssociateWebACL + ( -- * Creating a Request + AssociateWebACL (..), + newAssociateWebACL, + + -- * Request Lenses + associateWebACL_webACLArn, + associateWebACL_resourceArn, + + -- * Destructuring the Response + AssociateWebACLResponse (..), + newAssociateWebACLResponse, + + -- * Response Lenses + associateWebACLResponse_httpStatus, + ) +where + +import qualified Amazonka.Core as Core +import qualified Amazonka.Core.Lens.Internal as Lens +import qualified Amazonka.Data as Data +import qualified Amazonka.Prelude as Prelude +import qualified Amazonka.Request as Request +import qualified Amazonka.Response as Response +import Amazonka.WAFV2.Types + +-- | /See:/ 'newAssociateWebACL' smart constructor. +data AssociateWebACL = AssociateWebACL' + { -- | The Amazon Resource Name (ARN) of the web ACL that you want to associate + -- with the resource. + webACLArn :: Prelude.Text, + -- | The Amazon Resource Name (ARN) of the resource to associate with the web + -- ACL. + -- + -- The ARN must be in one of the following formats: + -- + -- - For an Application Load Balancer: + -- @arn:aws:elasticloadbalancing:@/@region@/@:@/@account-id@/@:loadbalancer\/app\/@/@load-balancer-name@/@\/@/@load-balancer-id@/@ @ + -- + -- - For an Amazon API Gateway REST API: + -- @arn:aws:apigateway:@/@region@/@::\/restapis\/@/@api-id@/@\/stages\/@/@stage-name@/@ @ + -- + -- - For an AppSync GraphQL API: + -- @arn:aws:appsync:@/@region@/@:@/@account-id@/@:apis\/@/@GraphQLApiId@/@ @ + -- + -- - For an Amazon Cognito user pool: + -- @arn:aws:cognito-idp:@/@region@/@:@/@account-id@/@:userpool\/@/@user-pool-id@/@ @ + resourceArn :: Prelude.Text + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'AssociateWebACL' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'webACLArn', 'associateWebACL_webACLArn' - The Amazon Resource Name (ARN) of the web ACL that you want to associate +-- with the resource. +-- +-- 'resourceArn', 'associateWebACL_resourceArn' - The Amazon Resource Name (ARN) of the resource to associate with the web +-- ACL. +-- +-- The ARN must be in one of the following formats: +-- +-- - For an Application Load Balancer: +-- @arn:aws:elasticloadbalancing:@/@region@/@:@/@account-id@/@:loadbalancer\/app\/@/@load-balancer-name@/@\/@/@load-balancer-id@/@ @ +-- +-- - For an Amazon API Gateway REST API: +-- @arn:aws:apigateway:@/@region@/@::\/restapis\/@/@api-id@/@\/stages\/@/@stage-name@/@ @ +-- +-- - For an AppSync GraphQL API: +-- @arn:aws:appsync:@/@region@/@:@/@account-id@/@:apis\/@/@GraphQLApiId@/@ @ +-- +-- - For an Amazon Cognito user pool: +-- @arn:aws:cognito-idp:@/@region@/@:@/@account-id@/@:userpool\/@/@user-pool-id@/@ @ +newAssociateWebACL :: + -- | 'webACLArn' + Prelude.Text -> + -- | 'resourceArn' + Prelude.Text -> + AssociateWebACL +newAssociateWebACL pWebACLArn_ pResourceArn_ = + AssociateWebACL' + { webACLArn = pWebACLArn_, + resourceArn = pResourceArn_ + } + +-- | The Amazon Resource Name (ARN) of the web ACL that you want to associate +-- with the resource. +associateWebACL_webACLArn :: Lens.Lens' AssociateWebACL Prelude.Text +associateWebACL_webACLArn = Lens.lens (\AssociateWebACL' {webACLArn} -> webACLArn) (\s@AssociateWebACL' {} a -> s {webACLArn = a} :: AssociateWebACL) + +-- | The Amazon Resource Name (ARN) of the resource to associate with the web +-- ACL. +-- +-- The ARN must be in one of the following formats: +-- +-- - For an Application Load Balancer: +-- @arn:aws:elasticloadbalancing:@/@region@/@:@/@account-id@/@:loadbalancer\/app\/@/@load-balancer-name@/@\/@/@load-balancer-id@/@ @ +-- +-- - For an Amazon API Gateway REST API: +-- @arn:aws:apigateway:@/@region@/@::\/restapis\/@/@api-id@/@\/stages\/@/@stage-name@/@ @ +-- +-- - For an AppSync GraphQL API: +-- @arn:aws:appsync:@/@region@/@:@/@account-id@/@:apis\/@/@GraphQLApiId@/@ @ +-- +-- - For an Amazon Cognito user pool: +-- @arn:aws:cognito-idp:@/@region@/@:@/@account-id@/@:userpool\/@/@user-pool-id@/@ @ +associateWebACL_resourceArn :: Lens.Lens' AssociateWebACL Prelude.Text +associateWebACL_resourceArn = Lens.lens (\AssociateWebACL' {resourceArn} -> resourceArn) (\s@AssociateWebACL' {} a -> s {resourceArn = a} :: AssociateWebACL) + +instance Core.AWSRequest AssociateWebACL where + type + AWSResponse AssociateWebACL = + AssociateWebACLResponse + request overrides = + Request.postJSON (overrides defaultService) + response = + Response.receiveEmpty + ( \s h x -> + AssociateWebACLResponse' + Prelude.<$> (Prelude.pure (Prelude.fromEnum s)) + ) + +instance Prelude.Hashable AssociateWebACL where + hashWithSalt _salt AssociateWebACL' {..} = + _salt + `Prelude.hashWithSalt` webACLArn + `Prelude.hashWithSalt` resourceArn + +instance Prelude.NFData AssociateWebACL where + rnf AssociateWebACL' {..} = + Prelude.rnf webACLArn + `Prelude.seq` Prelude.rnf resourceArn + +instance Data.ToHeaders AssociateWebACL where + toHeaders = + Prelude.const + ( Prelude.mconcat + [ "X-Amz-Target" + Data.=# ( "AWSWAF_20190729.AssociateWebACL" :: + Prelude.ByteString + ), + "Content-Type" + Data.=# ( "application/x-amz-json-1.1" :: + Prelude.ByteString + ) + ] + ) + +instance Data.ToJSON AssociateWebACL where + toJSON AssociateWebACL' {..} = + Data.object + ( Prelude.catMaybes + [ Prelude.Just ("WebACLArn" Data..= webACLArn), + Prelude.Just ("ResourceArn" Data..= resourceArn) + ] + ) + +instance Data.ToPath AssociateWebACL where + toPath = Prelude.const "/" + +instance Data.ToQuery AssociateWebACL where + toQuery = Prelude.const Prelude.mempty + +-- | /See:/ 'newAssociateWebACLResponse' smart constructor. +data AssociateWebACLResponse = AssociateWebACLResponse' + { -- | The response's http status code. + httpStatus :: Prelude.Int + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'AssociateWebACLResponse' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'httpStatus', 'associateWebACLResponse_httpStatus' - The response's http status code. +newAssociateWebACLResponse :: + -- | 'httpStatus' + Prelude.Int -> + AssociateWebACLResponse +newAssociateWebACLResponse pHttpStatus_ = + AssociateWebACLResponse' {httpStatus = pHttpStatus_} + +-- | The response's http status code. +associateWebACLResponse_httpStatus :: Lens.Lens' AssociateWebACLResponse Prelude.Int +associateWebACLResponse_httpStatus = Lens.lens (\AssociateWebACLResponse' {httpStatus} -> httpStatus) (\s@AssociateWebACLResponse' {} a -> s {httpStatus = a} :: AssociateWebACLResponse) + +instance Prelude.NFData AssociateWebACLResponse where + rnf AssociateWebACLResponse' {..} = + Prelude.rnf httpStatus diff --git a/gen/Amazonka/WAFV2/CheckCapacity.hs b/gen/Amazonka/WAFV2/CheckCapacity.hs new file mode 100644 --- /dev/null +++ b/gen/Amazonka/WAFV2/CheckCapacity.hs @@ -0,0 +1,230 @@ +{-# LANGUAGE DeriveGeneric #-} +{-# LANGUAGE DuplicateRecordFields #-} +{-# LANGUAGE NamedFieldPuns #-} +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE RecordWildCards #-} +{-# LANGUAGE StrictData #-} +{-# LANGUAGE TypeFamilies #-} +{-# LANGUAGE NoImplicitPrelude #-} +{-# OPTIONS_GHC -fno-warn-unused-binds #-} +{-# OPTIONS_GHC -fno-warn-unused-imports #-} +{-# OPTIONS_GHC -fno-warn-unused-matches #-} + +-- Derived from AWS service descriptions, licensed under Apache 2.0. + +-- | +-- Module : Amazonka.WAFV2.CheckCapacity +-- Copyright : (c) 2013-2023 Brendan Hay +-- License : Mozilla Public License, v. 2.0. +-- Maintainer : Brendan Hay +-- Stability : auto-generated +-- Portability : non-portable (GHC extensions) +-- +-- Returns the web ACL capacity unit (WCU) requirements for a specified +-- scope and set of rules. You can use this to check the capacity +-- requirements for the rules you want to use in a RuleGroup or WebACL. +-- +-- WAF uses WCUs to calculate and control the operating resources that are +-- used to run your rules, rule groups, and web ACLs. WAF calculates +-- capacity differently for each rule type, to reflect the relative cost of +-- each rule. Simple rules that cost little to run use fewer WCUs than more +-- complex rules that use more processing power. Rule group capacity is +-- fixed at creation, which helps users plan their web ACL WCU usage when +-- they use a rule group. The WCU limit for web ACLs is 1,500. +module Amazonka.WAFV2.CheckCapacity + ( -- * Creating a Request + CheckCapacity (..), + newCheckCapacity, + + -- * Request Lenses + checkCapacity_scope, + checkCapacity_rules, + + -- * Destructuring the Response + CheckCapacityResponse (..), + newCheckCapacityResponse, + + -- * Response Lenses + checkCapacityResponse_capacity, + checkCapacityResponse_httpStatus, + ) +where + +import qualified Amazonka.Core as Core +import qualified Amazonka.Core.Lens.Internal as Lens +import qualified Amazonka.Data as Data +import qualified Amazonka.Prelude as Prelude +import qualified Amazonka.Request as Request +import qualified Amazonka.Response as Response +import Amazonka.WAFV2.Types + +-- | /See:/ 'newCheckCapacity' smart constructor. +data CheckCapacity = CheckCapacity' + { -- | Specifies whether this is for an Amazon CloudFront distribution or for a + -- regional application. A regional application can be an Application Load + -- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, + -- or an Amazon Cognito user pool. + -- + -- To work with CloudFront, you must also specify the Region US East (N. + -- Virginia) as follows: + -- + -- - CLI - Specify the Region when you use the CloudFront scope: + -- @--scope=CLOUDFRONT --region=us-east-1@. + -- + -- - API and SDKs - For all calls, use the Region endpoint us-east-1. + scope :: Scope, + -- | An array of Rule that you\'re configuring to use in a rule group or web + -- ACL. + rules :: [Rule] + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'CheckCapacity' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'scope', 'checkCapacity_scope' - Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +-- +-- 'rules', 'checkCapacity_rules' - An array of Rule that you\'re configuring to use in a rule group or web +-- ACL. +newCheckCapacity :: + -- | 'scope' + Scope -> + CheckCapacity +newCheckCapacity pScope_ = + CheckCapacity' + { scope = pScope_, + rules = Prelude.mempty + } + +-- | Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +checkCapacity_scope :: Lens.Lens' CheckCapacity Scope +checkCapacity_scope = Lens.lens (\CheckCapacity' {scope} -> scope) (\s@CheckCapacity' {} a -> s {scope = a} :: CheckCapacity) + +-- | An array of Rule that you\'re configuring to use in a rule group or web +-- ACL. +checkCapacity_rules :: Lens.Lens' CheckCapacity [Rule] +checkCapacity_rules = Lens.lens (\CheckCapacity' {rules} -> rules) (\s@CheckCapacity' {} a -> s {rules = a} :: CheckCapacity) Prelude.. Lens.coerced + +instance Core.AWSRequest CheckCapacity where + type + AWSResponse CheckCapacity = + CheckCapacityResponse + request overrides = + Request.postJSON (overrides defaultService) + response = + Response.receiveJSON + ( \s h x -> + CheckCapacityResponse' + Prelude.<$> (x Data..?> "Capacity") + Prelude.<*> (Prelude.pure (Prelude.fromEnum s)) + ) + +instance Prelude.Hashable CheckCapacity where + hashWithSalt _salt CheckCapacity' {..} = + _salt + `Prelude.hashWithSalt` scope + `Prelude.hashWithSalt` rules + +instance Prelude.NFData CheckCapacity where + rnf CheckCapacity' {..} = + Prelude.rnf scope `Prelude.seq` Prelude.rnf rules + +instance Data.ToHeaders CheckCapacity where + toHeaders = + Prelude.const + ( Prelude.mconcat + [ "X-Amz-Target" + Data.=# ( "AWSWAF_20190729.CheckCapacity" :: + Prelude.ByteString + ), + "Content-Type" + Data.=# ( "application/x-amz-json-1.1" :: + Prelude.ByteString + ) + ] + ) + +instance Data.ToJSON CheckCapacity where + toJSON CheckCapacity' {..} = + Data.object + ( Prelude.catMaybes + [ Prelude.Just ("Scope" Data..= scope), + Prelude.Just ("Rules" Data..= rules) + ] + ) + +instance Data.ToPath CheckCapacity where + toPath = Prelude.const "/" + +instance Data.ToQuery CheckCapacity where + toQuery = Prelude.const Prelude.mempty + +-- | /See:/ 'newCheckCapacityResponse' smart constructor. +data CheckCapacityResponse = CheckCapacityResponse' + { -- | The capacity required by the rules and scope. + capacity :: Prelude.Maybe Prelude.Natural, + -- | The response's http status code. + httpStatus :: Prelude.Int + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'CheckCapacityResponse' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'capacity', 'checkCapacityResponse_capacity' - The capacity required by the rules and scope. +-- +-- 'httpStatus', 'checkCapacityResponse_httpStatus' - The response's http status code. +newCheckCapacityResponse :: + -- | 'httpStatus' + Prelude.Int -> + CheckCapacityResponse +newCheckCapacityResponse pHttpStatus_ = + CheckCapacityResponse' + { capacity = Prelude.Nothing, + httpStatus = pHttpStatus_ + } + +-- | The capacity required by the rules and scope. +checkCapacityResponse_capacity :: Lens.Lens' CheckCapacityResponse (Prelude.Maybe Prelude.Natural) +checkCapacityResponse_capacity = Lens.lens (\CheckCapacityResponse' {capacity} -> capacity) (\s@CheckCapacityResponse' {} a -> s {capacity = a} :: CheckCapacityResponse) + +-- | The response's http status code. +checkCapacityResponse_httpStatus :: Lens.Lens' CheckCapacityResponse Prelude.Int +checkCapacityResponse_httpStatus = Lens.lens (\CheckCapacityResponse' {httpStatus} -> httpStatus) (\s@CheckCapacityResponse' {} a -> s {httpStatus = a} :: CheckCapacityResponse) + +instance Prelude.NFData CheckCapacityResponse where + rnf CheckCapacityResponse' {..} = + Prelude.rnf capacity + `Prelude.seq` Prelude.rnf httpStatus diff --git a/gen/Amazonka/WAFV2/CreateIPSet.hs b/gen/Amazonka/WAFV2/CreateIPSet.hs new file mode 100644 --- /dev/null +++ b/gen/Amazonka/WAFV2/CreateIPSet.hs @@ -0,0 +1,394 @@ +{-# LANGUAGE DeriveGeneric #-} +{-# LANGUAGE DuplicateRecordFields #-} +{-# LANGUAGE NamedFieldPuns #-} +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE RecordWildCards #-} +{-# LANGUAGE StrictData #-} +{-# LANGUAGE TypeFamilies #-} +{-# LANGUAGE NoImplicitPrelude #-} +{-# OPTIONS_GHC -fno-warn-unused-binds #-} +{-# OPTIONS_GHC -fno-warn-unused-imports #-} +{-# OPTIONS_GHC -fno-warn-unused-matches #-} + +-- Derived from AWS service descriptions, licensed under Apache 2.0. + +-- | +-- Module : Amazonka.WAFV2.CreateIPSet +-- Copyright : (c) 2013-2023 Brendan Hay +-- License : Mozilla Public License, v. 2.0. +-- Maintainer : Brendan Hay +-- Stability : auto-generated +-- Portability : non-portable (GHC extensions) +-- +-- Creates an IPSet, which you use to identify web requests that originate +-- from specific IP addresses or ranges of IP addresses. For example, if +-- you\'re receiving a lot of requests from a ranges of IP addresses, you +-- can configure WAF to block them using an IPSet that lists those IP +-- addresses. +module Amazonka.WAFV2.CreateIPSet + ( -- * Creating a Request + CreateIPSet (..), + newCreateIPSet, + + -- * Request Lenses + createIPSet_description, + createIPSet_tags, + createIPSet_name, + createIPSet_scope, + createIPSet_iPAddressVersion, + createIPSet_addresses, + + -- * Destructuring the Response + CreateIPSetResponse (..), + newCreateIPSetResponse, + + -- * Response Lenses + createIPSetResponse_summary, + createIPSetResponse_httpStatus, + ) +where + +import qualified Amazonka.Core as Core +import qualified Amazonka.Core.Lens.Internal as Lens +import qualified Amazonka.Data as Data +import qualified Amazonka.Prelude as Prelude +import qualified Amazonka.Request as Request +import qualified Amazonka.Response as Response +import Amazonka.WAFV2.Types + +-- | /See:/ 'newCreateIPSet' smart constructor. +data CreateIPSet = CreateIPSet' + { -- | A description of the IP set that helps with identification. + description :: Prelude.Maybe Prelude.Text, + -- | An array of key:value pairs to associate with the resource. + tags :: Prelude.Maybe (Prelude.NonEmpty Tag), + -- | The name of the IP set. You cannot change the name of an @IPSet@ after + -- you create it. + name :: Prelude.Text, + -- | Specifies whether this is for an Amazon CloudFront distribution or for a + -- regional application. A regional application can be an Application Load + -- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, + -- or an Amazon Cognito user pool. + -- + -- To work with CloudFront, you must also specify the Region US East (N. + -- Virginia) as follows: + -- + -- - CLI - Specify the Region when you use the CloudFront scope: + -- @--scope=CLOUDFRONT --region=us-east-1@. + -- + -- - API and SDKs - For all calls, use the Region endpoint us-east-1. + scope :: Scope, + -- | The version of the IP addresses, either @IPV4@ or @IPV6@. + iPAddressVersion :: IPAddressVersion, + -- | Contains an array of strings that specifies zero or more IP addresses or + -- blocks of IP addresses. All addresses must be specified using Classless + -- Inter-Domain Routing (CIDR) notation. WAF supports all IPv4 and IPv6 + -- CIDR ranges except for @\/0@. + -- + -- Example address strings: + -- + -- - To configure WAF to allow, block, or count requests that originated + -- from the IP address 192.0.2.44, specify @192.0.2.44\/32@. + -- + -- - To configure WAF to allow, block, or count requests that originated + -- from IP addresses from 192.0.2.0 to 192.0.2.255, specify + -- @192.0.2.0\/24@. + -- + -- - To configure WAF to allow, block, or count requests that originated + -- from the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify + -- @1111:0000:0000:0000:0000:0000:0000:0111\/128@. + -- + -- - To configure WAF to allow, block, or count requests that originated + -- from IP addresses 1111:0000:0000:0000:0000:0000:0000:0000 to + -- 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify + -- @1111:0000:0000:0000:0000:0000:0000:0000\/64@. + -- + -- For more information about CIDR notation, see the Wikipedia entry + -- . + -- + -- Example JSON @Addresses@ specifications: + -- + -- - Empty array: @\"Addresses\": []@ + -- + -- - Array with one address: @\"Addresses\": [\"192.0.2.44\/32\"]@ + -- + -- - Array with three addresses: + -- @\"Addresses\": [\"192.0.2.44\/32\", \"192.0.2.0\/24\", \"192.0.0.0\/16\"]@ + -- + -- - INVALID specification: @\"Addresses\": [\"\"]@ INVALID + addresses :: [Prelude.Text] + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'CreateIPSet' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'description', 'createIPSet_description' - A description of the IP set that helps with identification. +-- +-- 'tags', 'createIPSet_tags' - An array of key:value pairs to associate with the resource. +-- +-- 'name', 'createIPSet_name' - The name of the IP set. You cannot change the name of an @IPSet@ after +-- you create it. +-- +-- 'scope', 'createIPSet_scope' - Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +-- +-- 'iPAddressVersion', 'createIPSet_iPAddressVersion' - The version of the IP addresses, either @IPV4@ or @IPV6@. +-- +-- 'addresses', 'createIPSet_addresses' - Contains an array of strings that specifies zero or more IP addresses or +-- blocks of IP addresses. All addresses must be specified using Classless +-- Inter-Domain Routing (CIDR) notation. WAF supports all IPv4 and IPv6 +-- CIDR ranges except for @\/0@. +-- +-- Example address strings: +-- +-- - To configure WAF to allow, block, or count requests that originated +-- from the IP address 192.0.2.44, specify @192.0.2.44\/32@. +-- +-- - To configure WAF to allow, block, or count requests that originated +-- from IP addresses from 192.0.2.0 to 192.0.2.255, specify +-- @192.0.2.0\/24@. +-- +-- - To configure WAF to allow, block, or count requests that originated +-- from the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify +-- @1111:0000:0000:0000:0000:0000:0000:0111\/128@. +-- +-- - To configure WAF to allow, block, or count requests that originated +-- from IP addresses 1111:0000:0000:0000:0000:0000:0000:0000 to +-- 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify +-- @1111:0000:0000:0000:0000:0000:0000:0000\/64@. +-- +-- For more information about CIDR notation, see the Wikipedia entry +-- . +-- +-- Example JSON @Addresses@ specifications: +-- +-- - Empty array: @\"Addresses\": []@ +-- +-- - Array with one address: @\"Addresses\": [\"192.0.2.44\/32\"]@ +-- +-- - Array with three addresses: +-- @\"Addresses\": [\"192.0.2.44\/32\", \"192.0.2.0\/24\", \"192.0.0.0\/16\"]@ +-- +-- - INVALID specification: @\"Addresses\": [\"\"]@ INVALID +newCreateIPSet :: + -- | 'name' + Prelude.Text -> + -- | 'scope' + Scope -> + -- | 'iPAddressVersion' + IPAddressVersion -> + CreateIPSet +newCreateIPSet pName_ pScope_ pIPAddressVersion_ = + CreateIPSet' + { description = Prelude.Nothing, + tags = Prelude.Nothing, + name = pName_, + scope = pScope_, + iPAddressVersion = pIPAddressVersion_, + addresses = Prelude.mempty + } + +-- | A description of the IP set that helps with identification. +createIPSet_description :: Lens.Lens' CreateIPSet (Prelude.Maybe Prelude.Text) +createIPSet_description = Lens.lens (\CreateIPSet' {description} -> description) (\s@CreateIPSet' {} a -> s {description = a} :: CreateIPSet) + +-- | An array of key:value pairs to associate with the resource. +createIPSet_tags :: Lens.Lens' CreateIPSet (Prelude.Maybe (Prelude.NonEmpty Tag)) +createIPSet_tags = Lens.lens (\CreateIPSet' {tags} -> tags) (\s@CreateIPSet' {} a -> s {tags = a} :: CreateIPSet) Prelude.. Lens.mapping Lens.coerced + +-- | The name of the IP set. You cannot change the name of an @IPSet@ after +-- you create it. +createIPSet_name :: Lens.Lens' CreateIPSet Prelude.Text +createIPSet_name = Lens.lens (\CreateIPSet' {name} -> name) (\s@CreateIPSet' {} a -> s {name = a} :: CreateIPSet) + +-- | Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +createIPSet_scope :: Lens.Lens' CreateIPSet Scope +createIPSet_scope = Lens.lens (\CreateIPSet' {scope} -> scope) (\s@CreateIPSet' {} a -> s {scope = a} :: CreateIPSet) + +-- | The version of the IP addresses, either @IPV4@ or @IPV6@. +createIPSet_iPAddressVersion :: Lens.Lens' CreateIPSet IPAddressVersion +createIPSet_iPAddressVersion = Lens.lens (\CreateIPSet' {iPAddressVersion} -> iPAddressVersion) (\s@CreateIPSet' {} a -> s {iPAddressVersion = a} :: CreateIPSet) + +-- | Contains an array of strings that specifies zero or more IP addresses or +-- blocks of IP addresses. All addresses must be specified using Classless +-- Inter-Domain Routing (CIDR) notation. WAF supports all IPv4 and IPv6 +-- CIDR ranges except for @\/0@. +-- +-- Example address strings: +-- +-- - To configure WAF to allow, block, or count requests that originated +-- from the IP address 192.0.2.44, specify @192.0.2.44\/32@. +-- +-- - To configure WAF to allow, block, or count requests that originated +-- from IP addresses from 192.0.2.0 to 192.0.2.255, specify +-- @192.0.2.0\/24@. +-- +-- - To configure WAF to allow, block, or count requests that originated +-- from the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify +-- @1111:0000:0000:0000:0000:0000:0000:0111\/128@. +-- +-- - To configure WAF to allow, block, or count requests that originated +-- from IP addresses 1111:0000:0000:0000:0000:0000:0000:0000 to +-- 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify +-- @1111:0000:0000:0000:0000:0000:0000:0000\/64@. +-- +-- For more information about CIDR notation, see the Wikipedia entry +-- . +-- +-- Example JSON @Addresses@ specifications: +-- +-- - Empty array: @\"Addresses\": []@ +-- +-- - Array with one address: @\"Addresses\": [\"192.0.2.44\/32\"]@ +-- +-- - Array with three addresses: +-- @\"Addresses\": [\"192.0.2.44\/32\", \"192.0.2.0\/24\", \"192.0.0.0\/16\"]@ +-- +-- - INVALID specification: @\"Addresses\": [\"\"]@ INVALID +createIPSet_addresses :: Lens.Lens' CreateIPSet [Prelude.Text] +createIPSet_addresses = Lens.lens (\CreateIPSet' {addresses} -> addresses) (\s@CreateIPSet' {} a -> s {addresses = a} :: CreateIPSet) Prelude.. Lens.coerced + +instance Core.AWSRequest CreateIPSet where + type AWSResponse CreateIPSet = CreateIPSetResponse + request overrides = + Request.postJSON (overrides defaultService) + response = + Response.receiveJSON + ( \s h x -> + CreateIPSetResponse' + Prelude.<$> (x Data..?> "Summary") + Prelude.<*> (Prelude.pure (Prelude.fromEnum s)) + ) + +instance Prelude.Hashable CreateIPSet where + hashWithSalt _salt CreateIPSet' {..} = + _salt + `Prelude.hashWithSalt` description + `Prelude.hashWithSalt` tags + `Prelude.hashWithSalt` name + `Prelude.hashWithSalt` scope + `Prelude.hashWithSalt` iPAddressVersion + `Prelude.hashWithSalt` addresses + +instance Prelude.NFData CreateIPSet where + rnf CreateIPSet' {..} = + Prelude.rnf description + `Prelude.seq` Prelude.rnf tags + `Prelude.seq` Prelude.rnf name + `Prelude.seq` Prelude.rnf scope + `Prelude.seq` Prelude.rnf iPAddressVersion + `Prelude.seq` Prelude.rnf addresses + +instance Data.ToHeaders CreateIPSet where + toHeaders = + Prelude.const + ( Prelude.mconcat + [ "X-Amz-Target" + Data.=# ( "AWSWAF_20190729.CreateIPSet" :: + Prelude.ByteString + ), + "Content-Type" + Data.=# ( "application/x-amz-json-1.1" :: + Prelude.ByteString + ) + ] + ) + +instance Data.ToJSON CreateIPSet where + toJSON CreateIPSet' {..} = + Data.object + ( Prelude.catMaybes + [ ("Description" Data..=) Prelude.<$> description, + ("Tags" Data..=) Prelude.<$> tags, + Prelude.Just ("Name" Data..= name), + Prelude.Just ("Scope" Data..= scope), + Prelude.Just + ("IPAddressVersion" Data..= iPAddressVersion), + Prelude.Just ("Addresses" Data..= addresses) + ] + ) + +instance Data.ToPath CreateIPSet where + toPath = Prelude.const "/" + +instance Data.ToQuery CreateIPSet where + toQuery = Prelude.const Prelude.mempty + +-- | /See:/ 'newCreateIPSetResponse' smart constructor. +data CreateIPSetResponse = CreateIPSetResponse' + { -- | High-level information about an IPSet, returned by operations like + -- create and list. This provides information like the ID, that you can use + -- to retrieve and manage an @IPSet@, and the ARN, that you provide to the + -- IPSetReferenceStatement to use the address set in a Rule. + summary :: Prelude.Maybe IPSetSummary, + -- | The response's http status code. + httpStatus :: Prelude.Int + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'CreateIPSetResponse' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'summary', 'createIPSetResponse_summary' - High-level information about an IPSet, returned by operations like +-- create and list. This provides information like the ID, that you can use +-- to retrieve and manage an @IPSet@, and the ARN, that you provide to the +-- IPSetReferenceStatement to use the address set in a Rule. +-- +-- 'httpStatus', 'createIPSetResponse_httpStatus' - The response's http status code. +newCreateIPSetResponse :: + -- | 'httpStatus' + Prelude.Int -> + CreateIPSetResponse +newCreateIPSetResponse pHttpStatus_ = + CreateIPSetResponse' + { summary = Prelude.Nothing, + httpStatus = pHttpStatus_ + } + +-- | High-level information about an IPSet, returned by operations like +-- create and list. This provides information like the ID, that you can use +-- to retrieve and manage an @IPSet@, and the ARN, that you provide to the +-- IPSetReferenceStatement to use the address set in a Rule. +createIPSetResponse_summary :: Lens.Lens' CreateIPSetResponse (Prelude.Maybe IPSetSummary) +createIPSetResponse_summary = Lens.lens (\CreateIPSetResponse' {summary} -> summary) (\s@CreateIPSetResponse' {} a -> s {summary = a} :: CreateIPSetResponse) + +-- | The response's http status code. +createIPSetResponse_httpStatus :: Lens.Lens' CreateIPSetResponse Prelude.Int +createIPSetResponse_httpStatus = Lens.lens (\CreateIPSetResponse' {httpStatus} -> httpStatus) (\s@CreateIPSetResponse' {} a -> s {httpStatus = a} :: CreateIPSetResponse) + +instance Prelude.NFData CreateIPSetResponse where + rnf CreateIPSetResponse' {..} = + Prelude.rnf summary + `Prelude.seq` Prelude.rnf httpStatus diff --git a/gen/Amazonka/WAFV2/CreateRegexPatternSet.hs b/gen/Amazonka/WAFV2/CreateRegexPatternSet.hs new file mode 100644 --- /dev/null +++ b/gen/Amazonka/WAFV2/CreateRegexPatternSet.hs @@ -0,0 +1,281 @@ +{-# LANGUAGE DeriveGeneric #-} +{-# LANGUAGE DuplicateRecordFields #-} +{-# LANGUAGE NamedFieldPuns #-} +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE RecordWildCards #-} +{-# LANGUAGE StrictData #-} +{-# LANGUAGE TypeFamilies #-} +{-# LANGUAGE NoImplicitPrelude #-} +{-# OPTIONS_GHC -fno-warn-unused-binds #-} +{-# OPTIONS_GHC -fno-warn-unused-imports #-} +{-# OPTIONS_GHC -fno-warn-unused-matches #-} + +-- Derived from AWS service descriptions, licensed under Apache 2.0. + +-- | +-- Module : Amazonka.WAFV2.CreateRegexPatternSet +-- Copyright : (c) 2013-2023 Brendan Hay +-- License : Mozilla Public License, v. 2.0. +-- Maintainer : Brendan Hay +-- Stability : auto-generated +-- Portability : non-portable (GHC extensions) +-- +-- Creates a RegexPatternSet, which you reference in a +-- RegexPatternSetReferenceStatement, to have WAF inspect a web request +-- component for the specified patterns. +module Amazonka.WAFV2.CreateRegexPatternSet + ( -- * Creating a Request + CreateRegexPatternSet (..), + newCreateRegexPatternSet, + + -- * Request Lenses + createRegexPatternSet_description, + createRegexPatternSet_tags, + createRegexPatternSet_name, + createRegexPatternSet_scope, + createRegexPatternSet_regularExpressionList, + + -- * Destructuring the Response + CreateRegexPatternSetResponse (..), + newCreateRegexPatternSetResponse, + + -- * Response Lenses + createRegexPatternSetResponse_summary, + createRegexPatternSetResponse_httpStatus, + ) +where + +import qualified Amazonka.Core as Core +import qualified Amazonka.Core.Lens.Internal as Lens +import qualified Amazonka.Data as Data +import qualified Amazonka.Prelude as Prelude +import qualified Amazonka.Request as Request +import qualified Amazonka.Response as Response +import Amazonka.WAFV2.Types + +-- | /See:/ 'newCreateRegexPatternSet' smart constructor. +data CreateRegexPatternSet = CreateRegexPatternSet' + { -- | A description of the set that helps with identification. + description :: Prelude.Maybe Prelude.Text, + -- | An array of key:value pairs to associate with the resource. + tags :: Prelude.Maybe (Prelude.NonEmpty Tag), + -- | The name of the set. You cannot change the name after you create the + -- set. + name :: Prelude.Text, + -- | Specifies whether this is for an Amazon CloudFront distribution or for a + -- regional application. A regional application can be an Application Load + -- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, + -- or an Amazon Cognito user pool. + -- + -- To work with CloudFront, you must also specify the Region US East (N. + -- Virginia) as follows: + -- + -- - CLI - Specify the Region when you use the CloudFront scope: + -- @--scope=CLOUDFRONT --region=us-east-1@. + -- + -- - API and SDKs - For all calls, use the Region endpoint us-east-1. + scope :: Scope, + -- | Array of regular expression strings. + regularExpressionList :: [Regex] + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'CreateRegexPatternSet' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'description', 'createRegexPatternSet_description' - A description of the set that helps with identification. +-- +-- 'tags', 'createRegexPatternSet_tags' - An array of key:value pairs to associate with the resource. +-- +-- 'name', 'createRegexPatternSet_name' - The name of the set. You cannot change the name after you create the +-- set. +-- +-- 'scope', 'createRegexPatternSet_scope' - Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +-- +-- 'regularExpressionList', 'createRegexPatternSet_regularExpressionList' - Array of regular expression strings. +newCreateRegexPatternSet :: + -- | 'name' + Prelude.Text -> + -- | 'scope' + Scope -> + CreateRegexPatternSet +newCreateRegexPatternSet pName_ pScope_ = + CreateRegexPatternSet' + { description = + Prelude.Nothing, + tags = Prelude.Nothing, + name = pName_, + scope = pScope_, + regularExpressionList = Prelude.mempty + } + +-- | A description of the set that helps with identification. +createRegexPatternSet_description :: Lens.Lens' CreateRegexPatternSet (Prelude.Maybe Prelude.Text) +createRegexPatternSet_description = Lens.lens (\CreateRegexPatternSet' {description} -> description) (\s@CreateRegexPatternSet' {} a -> s {description = a} :: CreateRegexPatternSet) + +-- | An array of key:value pairs to associate with the resource. +createRegexPatternSet_tags :: Lens.Lens' CreateRegexPatternSet (Prelude.Maybe (Prelude.NonEmpty Tag)) +createRegexPatternSet_tags = Lens.lens (\CreateRegexPatternSet' {tags} -> tags) (\s@CreateRegexPatternSet' {} a -> s {tags = a} :: CreateRegexPatternSet) Prelude.. Lens.mapping Lens.coerced + +-- | The name of the set. You cannot change the name after you create the +-- set. +createRegexPatternSet_name :: Lens.Lens' CreateRegexPatternSet Prelude.Text +createRegexPatternSet_name = Lens.lens (\CreateRegexPatternSet' {name} -> name) (\s@CreateRegexPatternSet' {} a -> s {name = a} :: CreateRegexPatternSet) + +-- | Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +createRegexPatternSet_scope :: Lens.Lens' CreateRegexPatternSet Scope +createRegexPatternSet_scope = Lens.lens (\CreateRegexPatternSet' {scope} -> scope) (\s@CreateRegexPatternSet' {} a -> s {scope = a} :: CreateRegexPatternSet) + +-- | Array of regular expression strings. +createRegexPatternSet_regularExpressionList :: Lens.Lens' CreateRegexPatternSet [Regex] +createRegexPatternSet_regularExpressionList = Lens.lens (\CreateRegexPatternSet' {regularExpressionList} -> regularExpressionList) (\s@CreateRegexPatternSet' {} a -> s {regularExpressionList = a} :: CreateRegexPatternSet) Prelude.. Lens.coerced + +instance Core.AWSRequest CreateRegexPatternSet where + type + AWSResponse CreateRegexPatternSet = + CreateRegexPatternSetResponse + request overrides = + Request.postJSON (overrides defaultService) + response = + Response.receiveJSON + ( \s h x -> + CreateRegexPatternSetResponse' + Prelude.<$> (x Data..?> "Summary") + Prelude.<*> (Prelude.pure (Prelude.fromEnum s)) + ) + +instance Prelude.Hashable CreateRegexPatternSet where + hashWithSalt _salt CreateRegexPatternSet' {..} = + _salt + `Prelude.hashWithSalt` description + `Prelude.hashWithSalt` tags + `Prelude.hashWithSalt` name + `Prelude.hashWithSalt` scope + `Prelude.hashWithSalt` regularExpressionList + +instance Prelude.NFData CreateRegexPatternSet where + rnf CreateRegexPatternSet' {..} = + Prelude.rnf description + `Prelude.seq` Prelude.rnf tags + `Prelude.seq` Prelude.rnf name + `Prelude.seq` Prelude.rnf scope + `Prelude.seq` Prelude.rnf regularExpressionList + +instance Data.ToHeaders CreateRegexPatternSet where + toHeaders = + Prelude.const + ( Prelude.mconcat + [ "X-Amz-Target" + Data.=# ( "AWSWAF_20190729.CreateRegexPatternSet" :: + Prelude.ByteString + ), + "Content-Type" + Data.=# ( "application/x-amz-json-1.1" :: + Prelude.ByteString + ) + ] + ) + +instance Data.ToJSON CreateRegexPatternSet where + toJSON CreateRegexPatternSet' {..} = + Data.object + ( Prelude.catMaybes + [ ("Description" Data..=) Prelude.<$> description, + ("Tags" Data..=) Prelude.<$> tags, + Prelude.Just ("Name" Data..= name), + Prelude.Just ("Scope" Data..= scope), + Prelude.Just + ( "RegularExpressionList" + Data..= regularExpressionList + ) + ] + ) + +instance Data.ToPath CreateRegexPatternSet where + toPath = Prelude.const "/" + +instance Data.ToQuery CreateRegexPatternSet where + toQuery = Prelude.const Prelude.mempty + +-- | /See:/ 'newCreateRegexPatternSetResponse' smart constructor. +data CreateRegexPatternSetResponse = CreateRegexPatternSetResponse' + { -- | High-level information about a RegexPatternSet, returned by operations + -- like create and list. This provides information like the ID, that you + -- can use to retrieve and manage a @RegexPatternSet@, and the ARN, that + -- you provide to the RegexPatternSetReferenceStatement to use the pattern + -- set in a Rule. + summary :: Prelude.Maybe RegexPatternSetSummary, + -- | The response's http status code. + httpStatus :: Prelude.Int + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'CreateRegexPatternSetResponse' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'summary', 'createRegexPatternSetResponse_summary' - High-level information about a RegexPatternSet, returned by operations +-- like create and list. This provides information like the ID, that you +-- can use to retrieve and manage a @RegexPatternSet@, and the ARN, that +-- you provide to the RegexPatternSetReferenceStatement to use the pattern +-- set in a Rule. +-- +-- 'httpStatus', 'createRegexPatternSetResponse_httpStatus' - The response's http status code. +newCreateRegexPatternSetResponse :: + -- | 'httpStatus' + Prelude.Int -> + CreateRegexPatternSetResponse +newCreateRegexPatternSetResponse pHttpStatus_ = + CreateRegexPatternSetResponse' + { summary = + Prelude.Nothing, + httpStatus = pHttpStatus_ + } + +-- | High-level information about a RegexPatternSet, returned by operations +-- like create and list. This provides information like the ID, that you +-- can use to retrieve and manage a @RegexPatternSet@, and the ARN, that +-- you provide to the RegexPatternSetReferenceStatement to use the pattern +-- set in a Rule. +createRegexPatternSetResponse_summary :: Lens.Lens' CreateRegexPatternSetResponse (Prelude.Maybe RegexPatternSetSummary) +createRegexPatternSetResponse_summary = Lens.lens (\CreateRegexPatternSetResponse' {summary} -> summary) (\s@CreateRegexPatternSetResponse' {} a -> s {summary = a} :: CreateRegexPatternSetResponse) + +-- | The response's http status code. +createRegexPatternSetResponse_httpStatus :: Lens.Lens' CreateRegexPatternSetResponse Prelude.Int +createRegexPatternSetResponse_httpStatus = Lens.lens (\CreateRegexPatternSetResponse' {httpStatus} -> httpStatus) (\s@CreateRegexPatternSetResponse' {} a -> s {httpStatus = a} :: CreateRegexPatternSetResponse) + +instance Prelude.NFData CreateRegexPatternSetResponse where + rnf CreateRegexPatternSetResponse' {..} = + Prelude.rnf summary + `Prelude.seq` Prelude.rnf httpStatus diff --git a/gen/Amazonka/WAFV2/CreateRuleGroup.hs b/gen/Amazonka/WAFV2/CreateRuleGroup.hs new file mode 100644 --- /dev/null +++ b/gen/Amazonka/WAFV2/CreateRuleGroup.hs @@ -0,0 +1,420 @@ +{-# LANGUAGE DeriveGeneric #-} +{-# LANGUAGE DuplicateRecordFields #-} +{-# LANGUAGE NamedFieldPuns #-} +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE RecordWildCards #-} +{-# LANGUAGE StrictData #-} +{-# LANGUAGE TypeFamilies #-} +{-# LANGUAGE NoImplicitPrelude #-} +{-# OPTIONS_GHC -fno-warn-unused-binds #-} +{-# OPTIONS_GHC -fno-warn-unused-imports #-} +{-# OPTIONS_GHC -fno-warn-unused-matches #-} + +-- Derived from AWS service descriptions, licensed under Apache 2.0. + +-- | +-- Module : Amazonka.WAFV2.CreateRuleGroup +-- Copyright : (c) 2013-2023 Brendan Hay +-- License : Mozilla Public License, v. 2.0. +-- Maintainer : Brendan Hay +-- Stability : auto-generated +-- Portability : non-portable (GHC extensions) +-- +-- Creates a RuleGroup per the specifications provided. +-- +-- A rule group defines a collection of rules to inspect and control web +-- requests that you can use in a WebACL. When you create a rule group, you +-- define an immutable capacity limit. If you update a rule group, you must +-- stay within the capacity. This allows others to reuse the rule group +-- with confidence in its capacity requirements. +module Amazonka.WAFV2.CreateRuleGroup + ( -- * Creating a Request + CreateRuleGroup (..), + newCreateRuleGroup, + + -- * Request Lenses + createRuleGroup_customResponseBodies, + createRuleGroup_description, + createRuleGroup_rules, + createRuleGroup_tags, + createRuleGroup_name, + createRuleGroup_scope, + createRuleGroup_capacity, + createRuleGroup_visibilityConfig, + + -- * Destructuring the Response + CreateRuleGroupResponse (..), + newCreateRuleGroupResponse, + + -- * Response Lenses + createRuleGroupResponse_summary, + createRuleGroupResponse_httpStatus, + ) +where + +import qualified Amazonka.Core as Core +import qualified Amazonka.Core.Lens.Internal as Lens +import qualified Amazonka.Data as Data +import qualified Amazonka.Prelude as Prelude +import qualified Amazonka.Request as Request +import qualified Amazonka.Response as Response +import Amazonka.WAFV2.Types + +-- | /See:/ 'newCreateRuleGroup' smart constructor. +data CreateRuleGroup = CreateRuleGroup' + { -- | A map of custom response keys and content bodies. When you create a rule + -- with a block action, you can send a custom response to the web request. + -- You define these for the rule group, and then use them in the rules that + -- you define in the rule group. + -- + -- For information about customizing web requests and responses, see + -- + -- in the + -- . + -- + -- For information about the limits on count and size for custom request + -- and response settings, see + -- + -- in the + -- . + customResponseBodies :: Prelude.Maybe (Prelude.HashMap Prelude.Text CustomResponseBody), + -- | A description of the rule group that helps with identification. + description :: Prelude.Maybe Prelude.Text, + -- | The Rule statements used to identify the web requests that you want to + -- allow, block, or count. Each rule includes one top-level statement that + -- WAF uses to identify matching web requests, and parameters that govern + -- how WAF handles them. + rules :: Prelude.Maybe [Rule], + -- | An array of key:value pairs to associate with the resource. + tags :: Prelude.Maybe (Prelude.NonEmpty Tag), + -- | The name of the rule group. You cannot change the name of a rule group + -- after you create it. + name :: Prelude.Text, + -- | Specifies whether this is for an Amazon CloudFront distribution or for a + -- regional application. A regional application can be an Application Load + -- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, + -- or an Amazon Cognito user pool. + -- + -- To work with CloudFront, you must also specify the Region US East (N. + -- Virginia) as follows: + -- + -- - CLI - Specify the Region when you use the CloudFront scope: + -- @--scope=CLOUDFRONT --region=us-east-1@. + -- + -- - API and SDKs - For all calls, use the Region endpoint us-east-1. + scope :: Scope, + -- | The web ACL capacity units (WCUs) required for this rule group. + -- + -- When you create your own rule group, you define this, and you cannot + -- change it after creation. When you add or modify the rules in a rule + -- group, WAF enforces this limit. You can check the capacity for a set of + -- rules using CheckCapacity. + -- + -- WAF uses WCUs to calculate and control the operating resources that are + -- used to run your rules, rule groups, and web ACLs. WAF calculates + -- capacity differently for each rule type, to reflect the relative cost of + -- each rule. Simple rules that cost little to run use fewer WCUs than more + -- complex rules that use more processing power. Rule group capacity is + -- fixed at creation, which helps users plan their web ACL WCU usage when + -- they use a rule group. The WCU limit for web ACLs is 1,500. + capacity :: Prelude.Natural, + -- | Defines and enables Amazon CloudWatch metrics and web request sample + -- collection. + visibilityConfig :: VisibilityConfig + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'CreateRuleGroup' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'customResponseBodies', 'createRuleGroup_customResponseBodies' - A map of custom response keys and content bodies. When you create a rule +-- with a block action, you can send a custom response to the web request. +-- You define these for the rule group, and then use them in the rules that +-- you define in the rule group. +-- +-- For information about customizing web requests and responses, see +-- +-- in the +-- . +-- +-- For information about the limits on count and size for custom request +-- and response settings, see +-- +-- in the +-- . +-- +-- 'description', 'createRuleGroup_description' - A description of the rule group that helps with identification. +-- +-- 'rules', 'createRuleGroup_rules' - The Rule statements used to identify the web requests that you want to +-- allow, block, or count. Each rule includes one top-level statement that +-- WAF uses to identify matching web requests, and parameters that govern +-- how WAF handles them. +-- +-- 'tags', 'createRuleGroup_tags' - An array of key:value pairs to associate with the resource. +-- +-- 'name', 'createRuleGroup_name' - The name of the rule group. You cannot change the name of a rule group +-- after you create it. +-- +-- 'scope', 'createRuleGroup_scope' - Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +-- +-- 'capacity', 'createRuleGroup_capacity' - The web ACL capacity units (WCUs) required for this rule group. +-- +-- When you create your own rule group, you define this, and you cannot +-- change it after creation. When you add or modify the rules in a rule +-- group, WAF enforces this limit. You can check the capacity for a set of +-- rules using CheckCapacity. +-- +-- WAF uses WCUs to calculate and control the operating resources that are +-- used to run your rules, rule groups, and web ACLs. WAF calculates +-- capacity differently for each rule type, to reflect the relative cost of +-- each rule. Simple rules that cost little to run use fewer WCUs than more +-- complex rules that use more processing power. Rule group capacity is +-- fixed at creation, which helps users plan their web ACL WCU usage when +-- they use a rule group. The WCU limit for web ACLs is 1,500. +-- +-- 'visibilityConfig', 'createRuleGroup_visibilityConfig' - Defines and enables Amazon CloudWatch metrics and web request sample +-- collection. +newCreateRuleGroup :: + -- | 'name' + Prelude.Text -> + -- | 'scope' + Scope -> + -- | 'capacity' + Prelude.Natural -> + -- | 'visibilityConfig' + VisibilityConfig -> + CreateRuleGroup +newCreateRuleGroup + pName_ + pScope_ + pCapacity_ + pVisibilityConfig_ = + CreateRuleGroup' + { customResponseBodies = + Prelude.Nothing, + description = Prelude.Nothing, + rules = Prelude.Nothing, + tags = Prelude.Nothing, + name = pName_, + scope = pScope_, + capacity = pCapacity_, + visibilityConfig = pVisibilityConfig_ + } + +-- | A map of custom response keys and content bodies. When you create a rule +-- with a block action, you can send a custom response to the web request. +-- You define these for the rule group, and then use them in the rules that +-- you define in the rule group. +-- +-- For information about customizing web requests and responses, see +-- +-- in the +-- . +-- +-- For information about the limits on count and size for custom request +-- and response settings, see +-- +-- in the +-- . +createRuleGroup_customResponseBodies :: Lens.Lens' CreateRuleGroup (Prelude.Maybe (Prelude.HashMap Prelude.Text CustomResponseBody)) +createRuleGroup_customResponseBodies = Lens.lens (\CreateRuleGroup' {customResponseBodies} -> customResponseBodies) (\s@CreateRuleGroup' {} a -> s {customResponseBodies = a} :: CreateRuleGroup) Prelude.. Lens.mapping Lens.coerced + +-- | A description of the rule group that helps with identification. +createRuleGroup_description :: Lens.Lens' CreateRuleGroup (Prelude.Maybe Prelude.Text) +createRuleGroup_description = Lens.lens (\CreateRuleGroup' {description} -> description) (\s@CreateRuleGroup' {} a -> s {description = a} :: CreateRuleGroup) + +-- | The Rule statements used to identify the web requests that you want to +-- allow, block, or count. Each rule includes one top-level statement that +-- WAF uses to identify matching web requests, and parameters that govern +-- how WAF handles them. +createRuleGroup_rules :: Lens.Lens' CreateRuleGroup (Prelude.Maybe [Rule]) +createRuleGroup_rules = Lens.lens (\CreateRuleGroup' {rules} -> rules) (\s@CreateRuleGroup' {} a -> s {rules = a} :: CreateRuleGroup) Prelude.. Lens.mapping Lens.coerced + +-- | An array of key:value pairs to associate with the resource. +createRuleGroup_tags :: Lens.Lens' CreateRuleGroup (Prelude.Maybe (Prelude.NonEmpty Tag)) +createRuleGroup_tags = Lens.lens (\CreateRuleGroup' {tags} -> tags) (\s@CreateRuleGroup' {} a -> s {tags = a} :: CreateRuleGroup) Prelude.. Lens.mapping Lens.coerced + +-- | The name of the rule group. You cannot change the name of a rule group +-- after you create it. +createRuleGroup_name :: Lens.Lens' CreateRuleGroup Prelude.Text +createRuleGroup_name = Lens.lens (\CreateRuleGroup' {name} -> name) (\s@CreateRuleGroup' {} a -> s {name = a} :: CreateRuleGroup) + +-- | Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +createRuleGroup_scope :: Lens.Lens' CreateRuleGroup Scope +createRuleGroup_scope = Lens.lens (\CreateRuleGroup' {scope} -> scope) (\s@CreateRuleGroup' {} a -> s {scope = a} :: CreateRuleGroup) + +-- | The web ACL capacity units (WCUs) required for this rule group. +-- +-- When you create your own rule group, you define this, and you cannot +-- change it after creation. When you add or modify the rules in a rule +-- group, WAF enforces this limit. You can check the capacity for a set of +-- rules using CheckCapacity. +-- +-- WAF uses WCUs to calculate and control the operating resources that are +-- used to run your rules, rule groups, and web ACLs. WAF calculates +-- capacity differently for each rule type, to reflect the relative cost of +-- each rule. Simple rules that cost little to run use fewer WCUs than more +-- complex rules that use more processing power. Rule group capacity is +-- fixed at creation, which helps users plan their web ACL WCU usage when +-- they use a rule group. The WCU limit for web ACLs is 1,500. +createRuleGroup_capacity :: Lens.Lens' CreateRuleGroup Prelude.Natural +createRuleGroup_capacity = Lens.lens (\CreateRuleGroup' {capacity} -> capacity) (\s@CreateRuleGroup' {} a -> s {capacity = a} :: CreateRuleGroup) + +-- | Defines and enables Amazon CloudWatch metrics and web request sample +-- collection. +createRuleGroup_visibilityConfig :: Lens.Lens' CreateRuleGroup VisibilityConfig +createRuleGroup_visibilityConfig = Lens.lens (\CreateRuleGroup' {visibilityConfig} -> visibilityConfig) (\s@CreateRuleGroup' {} a -> s {visibilityConfig = a} :: CreateRuleGroup) + +instance Core.AWSRequest CreateRuleGroup where + type + AWSResponse CreateRuleGroup = + CreateRuleGroupResponse + request overrides = + Request.postJSON (overrides defaultService) + response = + Response.receiveJSON + ( \s h x -> + CreateRuleGroupResponse' + Prelude.<$> (x Data..?> "Summary") + Prelude.<*> (Prelude.pure (Prelude.fromEnum s)) + ) + +instance Prelude.Hashable CreateRuleGroup where + hashWithSalt _salt CreateRuleGroup' {..} = + _salt + `Prelude.hashWithSalt` customResponseBodies + `Prelude.hashWithSalt` description + `Prelude.hashWithSalt` rules + `Prelude.hashWithSalt` tags + `Prelude.hashWithSalt` name + `Prelude.hashWithSalt` scope + `Prelude.hashWithSalt` capacity + `Prelude.hashWithSalt` visibilityConfig + +instance Prelude.NFData CreateRuleGroup where + rnf CreateRuleGroup' {..} = + Prelude.rnf customResponseBodies + `Prelude.seq` Prelude.rnf description + `Prelude.seq` Prelude.rnf rules + `Prelude.seq` Prelude.rnf tags + `Prelude.seq` Prelude.rnf name + `Prelude.seq` Prelude.rnf scope + `Prelude.seq` Prelude.rnf capacity + `Prelude.seq` Prelude.rnf visibilityConfig + +instance Data.ToHeaders CreateRuleGroup where + toHeaders = + Prelude.const + ( Prelude.mconcat + [ "X-Amz-Target" + Data.=# ( "AWSWAF_20190729.CreateRuleGroup" :: + Prelude.ByteString + ), + "Content-Type" + Data.=# ( "application/x-amz-json-1.1" :: + Prelude.ByteString + ) + ] + ) + +instance Data.ToJSON CreateRuleGroup where + toJSON CreateRuleGroup' {..} = + Data.object + ( Prelude.catMaybes + [ ("CustomResponseBodies" Data..=) + Prelude.<$> customResponseBodies, + ("Description" Data..=) Prelude.<$> description, + ("Rules" Data..=) Prelude.<$> rules, + ("Tags" Data..=) Prelude.<$> tags, + Prelude.Just ("Name" Data..= name), + Prelude.Just ("Scope" Data..= scope), + Prelude.Just ("Capacity" Data..= capacity), + Prelude.Just + ("VisibilityConfig" Data..= visibilityConfig) + ] + ) + +instance Data.ToPath CreateRuleGroup where + toPath = Prelude.const "/" + +instance Data.ToQuery CreateRuleGroup where + toQuery = Prelude.const Prelude.mempty + +-- | /See:/ 'newCreateRuleGroupResponse' smart constructor. +data CreateRuleGroupResponse = CreateRuleGroupResponse' + { -- | High-level information about a RuleGroup, returned by operations like + -- create and list. This provides information like the ID, that you can use + -- to retrieve and manage a @RuleGroup@, and the ARN, that you provide to + -- the RuleGroupReferenceStatement to use the rule group in a Rule. + summary :: Prelude.Maybe RuleGroupSummary, + -- | The response's http status code. + httpStatus :: Prelude.Int + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'CreateRuleGroupResponse' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'summary', 'createRuleGroupResponse_summary' - High-level information about a RuleGroup, returned by operations like +-- create and list. This provides information like the ID, that you can use +-- to retrieve and manage a @RuleGroup@, and the ARN, that you provide to +-- the RuleGroupReferenceStatement to use the rule group in a Rule. +-- +-- 'httpStatus', 'createRuleGroupResponse_httpStatus' - The response's http status code. +newCreateRuleGroupResponse :: + -- | 'httpStatus' + Prelude.Int -> + CreateRuleGroupResponse +newCreateRuleGroupResponse pHttpStatus_ = + CreateRuleGroupResponse' + { summary = Prelude.Nothing, + httpStatus = pHttpStatus_ + } + +-- | High-level information about a RuleGroup, returned by operations like +-- create and list. This provides information like the ID, that you can use +-- to retrieve and manage a @RuleGroup@, and the ARN, that you provide to +-- the RuleGroupReferenceStatement to use the rule group in a Rule. +createRuleGroupResponse_summary :: Lens.Lens' CreateRuleGroupResponse (Prelude.Maybe RuleGroupSummary) +createRuleGroupResponse_summary = Lens.lens (\CreateRuleGroupResponse' {summary} -> summary) (\s@CreateRuleGroupResponse' {} a -> s {summary = a} :: CreateRuleGroupResponse) + +-- | The response's http status code. +createRuleGroupResponse_httpStatus :: Lens.Lens' CreateRuleGroupResponse Prelude.Int +createRuleGroupResponse_httpStatus = Lens.lens (\CreateRuleGroupResponse' {httpStatus} -> httpStatus) (\s@CreateRuleGroupResponse' {} a -> s {httpStatus = a} :: CreateRuleGroupResponse) + +instance Prelude.NFData CreateRuleGroupResponse where + rnf CreateRuleGroupResponse' {..} = + Prelude.rnf summary + `Prelude.seq` Prelude.rnf httpStatus diff --git a/gen/Amazonka/WAFV2/CreateWebACL.hs b/gen/Amazonka/WAFV2/CreateWebACL.hs new file mode 100644 --- /dev/null +++ b/gen/Amazonka/WAFV2/CreateWebACL.hs @@ -0,0 +1,477 @@ +{-# LANGUAGE DeriveGeneric #-} +{-# LANGUAGE DuplicateRecordFields #-} +{-# LANGUAGE NamedFieldPuns #-} +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE RecordWildCards #-} +{-# LANGUAGE StrictData #-} +{-# LANGUAGE TypeFamilies #-} +{-# LANGUAGE NoImplicitPrelude #-} +{-# OPTIONS_GHC -fno-warn-unused-binds #-} +{-# OPTIONS_GHC -fno-warn-unused-imports #-} +{-# OPTIONS_GHC -fno-warn-unused-matches #-} + +-- Derived from AWS service descriptions, licensed under Apache 2.0. + +-- | +-- Module : Amazonka.WAFV2.CreateWebACL +-- Copyright : (c) 2013-2023 Brendan Hay +-- License : Mozilla Public License, v. 2.0. +-- Maintainer : Brendan Hay +-- Stability : auto-generated +-- Portability : non-portable (GHC extensions) +-- +-- Creates a WebACL per the specifications provided. +-- +-- A web ACL defines a collection of rules to use to inspect and control +-- web requests. Each rule has an action defined (allow, block, or count) +-- for requests that match the statement of the rule. In the web ACL, you +-- assign a default action to take (allow, block) for any request that does +-- not match any of the rules. The rules in a web ACL can be a combination +-- of the types Rule, RuleGroup, and managed rule group. You can associate +-- a web ACL with one or more Amazon Web Services resources to protect. The +-- resources can be an Amazon CloudFront distribution, an Amazon API +-- Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +module Amazonka.WAFV2.CreateWebACL + ( -- * Creating a Request + CreateWebACL (..), + newCreateWebACL, + + -- * Request Lenses + createWebACL_captchaConfig, + createWebACL_challengeConfig, + createWebACL_customResponseBodies, + createWebACL_description, + createWebACL_rules, + createWebACL_tags, + createWebACL_tokenDomains, + createWebACL_name, + createWebACL_scope, + createWebACL_defaultAction, + createWebACL_visibilityConfig, + + -- * Destructuring the Response + CreateWebACLResponse (..), + newCreateWebACLResponse, + + -- * Response Lenses + createWebACLResponse_summary, + createWebACLResponse_httpStatus, + ) +where + +import qualified Amazonka.Core as Core +import qualified Amazonka.Core.Lens.Internal as Lens +import qualified Amazonka.Data as Data +import qualified Amazonka.Prelude as Prelude +import qualified Amazonka.Request as Request +import qualified Amazonka.Response as Response +import Amazonka.WAFV2.Types + +-- | /See:/ 'newCreateWebACL' smart constructor. +data CreateWebACL = CreateWebACL' + { -- | Specifies how WAF should handle @CAPTCHA@ evaluations for rules that + -- don\'t have their own @CaptchaConfig@ settings. If you don\'t specify + -- this, WAF uses its default settings for @CaptchaConfig@. + captchaConfig :: Prelude.Maybe CaptchaConfig, + -- | Specifies how WAF should handle challenge evaluations for rules that + -- don\'t have their own @ChallengeConfig@ settings. If you don\'t specify + -- this, WAF uses its default settings for @ChallengeConfig@. + challengeConfig :: Prelude.Maybe ChallengeConfig, + -- | A map of custom response keys and content bodies. When you create a rule + -- with a block action, you can send a custom response to the web request. + -- You define these for the web ACL, and then use them in the rules and + -- default actions that you define in the web ACL. + -- + -- For information about customizing web requests and responses, see + -- + -- in the + -- . + -- + -- For information about the limits on count and size for custom request + -- and response settings, see + -- + -- in the + -- . + customResponseBodies :: Prelude.Maybe (Prelude.HashMap Prelude.Text CustomResponseBody), + -- | A description of the web ACL that helps with identification. + description :: Prelude.Maybe Prelude.Text, + -- | The Rule statements used to identify the web requests that you want to + -- allow, block, or count. Each rule includes one top-level statement that + -- WAF uses to identify matching web requests, and parameters that govern + -- how WAF handles them. + rules :: Prelude.Maybe [Rule], + -- | An array of key:value pairs to associate with the resource. + tags :: Prelude.Maybe (Prelude.NonEmpty Tag), + -- | Specifies the domains that WAF should accept in a web request token. + -- This enables the use of tokens across multiple protected websites. When + -- WAF provides a token, it uses the domain of the Amazon Web Services + -- resource that the web ACL is protecting. If you don\'t specify a list of + -- token domains, WAF accepts tokens only for the domain of the protected + -- resource. With a token domain list, WAF accepts the resource\'s host + -- domain plus all domains in the token domain list, including their + -- prefixed subdomains. + -- + -- Example JSON: + -- @\"TokenDomains\": { \"mywebsite.com\", \"myotherwebsite.com\" }@ + -- + -- Public suffixes aren\'t allowed. For example, you can\'t use @usa.gov@ + -- or @co.uk@ as token domains. + tokenDomains :: Prelude.Maybe (Prelude.NonEmpty Prelude.Text), + -- | The name of the web ACL. You cannot change the name of a web ACL after + -- you create it. + name :: Prelude.Text, + -- | Specifies whether this is for an Amazon CloudFront distribution or for a + -- regional application. A regional application can be an Application Load + -- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, + -- or an Amazon Cognito user pool. + -- + -- To work with CloudFront, you must also specify the Region US East (N. + -- Virginia) as follows: + -- + -- - CLI - Specify the Region when you use the CloudFront scope: + -- @--scope=CLOUDFRONT --region=us-east-1@. + -- + -- - API and SDKs - For all calls, use the Region endpoint us-east-1. + scope :: Scope, + -- | The action to perform if none of the @Rules@ contained in the @WebACL@ + -- match. + defaultAction :: DefaultAction, + -- | Defines and enables Amazon CloudWatch metrics and web request sample + -- collection. + visibilityConfig :: VisibilityConfig + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'CreateWebACL' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'captchaConfig', 'createWebACL_captchaConfig' - Specifies how WAF should handle @CAPTCHA@ evaluations for rules that +-- don\'t have their own @CaptchaConfig@ settings. If you don\'t specify +-- this, WAF uses its default settings for @CaptchaConfig@. +-- +-- 'challengeConfig', 'createWebACL_challengeConfig' - Specifies how WAF should handle challenge evaluations for rules that +-- don\'t have their own @ChallengeConfig@ settings. If you don\'t specify +-- this, WAF uses its default settings for @ChallengeConfig@. +-- +-- 'customResponseBodies', 'createWebACL_customResponseBodies' - A map of custom response keys and content bodies. When you create a rule +-- with a block action, you can send a custom response to the web request. +-- You define these for the web ACL, and then use them in the rules and +-- default actions that you define in the web ACL. +-- +-- For information about customizing web requests and responses, see +-- +-- in the +-- . +-- +-- For information about the limits on count and size for custom request +-- and response settings, see +-- +-- in the +-- . +-- +-- 'description', 'createWebACL_description' - A description of the web ACL that helps with identification. +-- +-- 'rules', 'createWebACL_rules' - The Rule statements used to identify the web requests that you want to +-- allow, block, or count. Each rule includes one top-level statement that +-- WAF uses to identify matching web requests, and parameters that govern +-- how WAF handles them. +-- +-- 'tags', 'createWebACL_tags' - An array of key:value pairs to associate with the resource. +-- +-- 'tokenDomains', 'createWebACL_tokenDomains' - Specifies the domains that WAF should accept in a web request token. +-- This enables the use of tokens across multiple protected websites. When +-- WAF provides a token, it uses the domain of the Amazon Web Services +-- resource that the web ACL is protecting. If you don\'t specify a list of +-- token domains, WAF accepts tokens only for the domain of the protected +-- resource. With a token domain list, WAF accepts the resource\'s host +-- domain plus all domains in the token domain list, including their +-- prefixed subdomains. +-- +-- Example JSON: +-- @\"TokenDomains\": { \"mywebsite.com\", \"myotherwebsite.com\" }@ +-- +-- Public suffixes aren\'t allowed. For example, you can\'t use @usa.gov@ +-- or @co.uk@ as token domains. +-- +-- 'name', 'createWebACL_name' - The name of the web ACL. You cannot change the name of a web ACL after +-- you create it. +-- +-- 'scope', 'createWebACL_scope' - Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +-- +-- 'defaultAction', 'createWebACL_defaultAction' - The action to perform if none of the @Rules@ contained in the @WebACL@ +-- match. +-- +-- 'visibilityConfig', 'createWebACL_visibilityConfig' - Defines and enables Amazon CloudWatch metrics and web request sample +-- collection. +newCreateWebACL :: + -- | 'name' + Prelude.Text -> + -- | 'scope' + Scope -> + -- | 'defaultAction' + DefaultAction -> + -- | 'visibilityConfig' + VisibilityConfig -> + CreateWebACL +newCreateWebACL + pName_ + pScope_ + pDefaultAction_ + pVisibilityConfig_ = + CreateWebACL' + { captchaConfig = Prelude.Nothing, + challengeConfig = Prelude.Nothing, + customResponseBodies = Prelude.Nothing, + description = Prelude.Nothing, + rules = Prelude.Nothing, + tags = Prelude.Nothing, + tokenDomains = Prelude.Nothing, + name = pName_, + scope = pScope_, + defaultAction = pDefaultAction_, + visibilityConfig = pVisibilityConfig_ + } + +-- | Specifies how WAF should handle @CAPTCHA@ evaluations for rules that +-- don\'t have their own @CaptchaConfig@ settings. If you don\'t specify +-- this, WAF uses its default settings for @CaptchaConfig@. +createWebACL_captchaConfig :: Lens.Lens' CreateWebACL (Prelude.Maybe CaptchaConfig) +createWebACL_captchaConfig = Lens.lens (\CreateWebACL' {captchaConfig} -> captchaConfig) (\s@CreateWebACL' {} a -> s {captchaConfig = a} :: CreateWebACL) + +-- | Specifies how WAF should handle challenge evaluations for rules that +-- don\'t have their own @ChallengeConfig@ settings. If you don\'t specify +-- this, WAF uses its default settings for @ChallengeConfig@. +createWebACL_challengeConfig :: Lens.Lens' CreateWebACL (Prelude.Maybe ChallengeConfig) +createWebACL_challengeConfig = Lens.lens (\CreateWebACL' {challengeConfig} -> challengeConfig) (\s@CreateWebACL' {} a -> s {challengeConfig = a} :: CreateWebACL) + +-- | A map of custom response keys and content bodies. When you create a rule +-- with a block action, you can send a custom response to the web request. +-- You define these for the web ACL, and then use them in the rules and +-- default actions that you define in the web ACL. +-- +-- For information about customizing web requests and responses, see +-- +-- in the +-- . +-- +-- For information about the limits on count and size for custom request +-- and response settings, see +-- +-- in the +-- . +createWebACL_customResponseBodies :: Lens.Lens' CreateWebACL (Prelude.Maybe (Prelude.HashMap Prelude.Text CustomResponseBody)) +createWebACL_customResponseBodies = Lens.lens (\CreateWebACL' {customResponseBodies} -> customResponseBodies) (\s@CreateWebACL' {} a -> s {customResponseBodies = a} :: CreateWebACL) Prelude.. Lens.mapping Lens.coerced + +-- | A description of the web ACL that helps with identification. +createWebACL_description :: Lens.Lens' CreateWebACL (Prelude.Maybe Prelude.Text) +createWebACL_description = Lens.lens (\CreateWebACL' {description} -> description) (\s@CreateWebACL' {} a -> s {description = a} :: CreateWebACL) + +-- | The Rule statements used to identify the web requests that you want to +-- allow, block, or count. Each rule includes one top-level statement that +-- WAF uses to identify matching web requests, and parameters that govern +-- how WAF handles them. +createWebACL_rules :: Lens.Lens' CreateWebACL (Prelude.Maybe [Rule]) +createWebACL_rules = Lens.lens (\CreateWebACL' {rules} -> rules) (\s@CreateWebACL' {} a -> s {rules = a} :: CreateWebACL) Prelude.. Lens.mapping Lens.coerced + +-- | An array of key:value pairs to associate with the resource. +createWebACL_tags :: Lens.Lens' CreateWebACL (Prelude.Maybe (Prelude.NonEmpty Tag)) +createWebACL_tags = Lens.lens (\CreateWebACL' {tags} -> tags) (\s@CreateWebACL' {} a -> s {tags = a} :: CreateWebACL) Prelude.. Lens.mapping Lens.coerced + +-- | Specifies the domains that WAF should accept in a web request token. +-- This enables the use of tokens across multiple protected websites. When +-- WAF provides a token, it uses the domain of the Amazon Web Services +-- resource that the web ACL is protecting. If you don\'t specify a list of +-- token domains, WAF accepts tokens only for the domain of the protected +-- resource. With a token domain list, WAF accepts the resource\'s host +-- domain plus all domains in the token domain list, including their +-- prefixed subdomains. +-- +-- Example JSON: +-- @\"TokenDomains\": { \"mywebsite.com\", \"myotherwebsite.com\" }@ +-- +-- Public suffixes aren\'t allowed. For example, you can\'t use @usa.gov@ +-- or @co.uk@ as token domains. +createWebACL_tokenDomains :: Lens.Lens' CreateWebACL (Prelude.Maybe (Prelude.NonEmpty Prelude.Text)) +createWebACL_tokenDomains = Lens.lens (\CreateWebACL' {tokenDomains} -> tokenDomains) (\s@CreateWebACL' {} a -> s {tokenDomains = a} :: CreateWebACL) Prelude.. Lens.mapping Lens.coerced + +-- | The name of the web ACL. You cannot change the name of a web ACL after +-- you create it. +createWebACL_name :: Lens.Lens' CreateWebACL Prelude.Text +createWebACL_name = Lens.lens (\CreateWebACL' {name} -> name) (\s@CreateWebACL' {} a -> s {name = a} :: CreateWebACL) + +-- | Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +createWebACL_scope :: Lens.Lens' CreateWebACL Scope +createWebACL_scope = Lens.lens (\CreateWebACL' {scope} -> scope) (\s@CreateWebACL' {} a -> s {scope = a} :: CreateWebACL) + +-- | The action to perform if none of the @Rules@ contained in the @WebACL@ +-- match. +createWebACL_defaultAction :: Lens.Lens' CreateWebACL DefaultAction +createWebACL_defaultAction = Lens.lens (\CreateWebACL' {defaultAction} -> defaultAction) (\s@CreateWebACL' {} a -> s {defaultAction = a} :: CreateWebACL) + +-- | Defines and enables Amazon CloudWatch metrics and web request sample +-- collection. +createWebACL_visibilityConfig :: Lens.Lens' CreateWebACL VisibilityConfig +createWebACL_visibilityConfig = Lens.lens (\CreateWebACL' {visibilityConfig} -> visibilityConfig) (\s@CreateWebACL' {} a -> s {visibilityConfig = a} :: CreateWebACL) + +instance Core.AWSRequest CreateWebACL where + type AWSResponse CreateWebACL = CreateWebACLResponse + request overrides = + Request.postJSON (overrides defaultService) + response = + Response.receiveJSON + ( \s h x -> + CreateWebACLResponse' + Prelude.<$> (x Data..?> "Summary") + Prelude.<*> (Prelude.pure (Prelude.fromEnum s)) + ) + +instance Prelude.Hashable CreateWebACL where + hashWithSalt _salt CreateWebACL' {..} = + _salt + `Prelude.hashWithSalt` captchaConfig + `Prelude.hashWithSalt` challengeConfig + `Prelude.hashWithSalt` customResponseBodies + `Prelude.hashWithSalt` description + `Prelude.hashWithSalt` rules + `Prelude.hashWithSalt` tags + `Prelude.hashWithSalt` tokenDomains + `Prelude.hashWithSalt` name + `Prelude.hashWithSalt` scope + `Prelude.hashWithSalt` defaultAction + `Prelude.hashWithSalt` visibilityConfig + +instance Prelude.NFData CreateWebACL where + rnf CreateWebACL' {..} = + Prelude.rnf captchaConfig + `Prelude.seq` Prelude.rnf challengeConfig + `Prelude.seq` Prelude.rnf customResponseBodies + `Prelude.seq` Prelude.rnf description + `Prelude.seq` Prelude.rnf rules + `Prelude.seq` Prelude.rnf tags + `Prelude.seq` Prelude.rnf tokenDomains + `Prelude.seq` Prelude.rnf name + `Prelude.seq` Prelude.rnf scope + `Prelude.seq` Prelude.rnf defaultAction + `Prelude.seq` Prelude.rnf visibilityConfig + +instance Data.ToHeaders CreateWebACL where + toHeaders = + Prelude.const + ( Prelude.mconcat + [ "X-Amz-Target" + Data.=# ( "AWSWAF_20190729.CreateWebACL" :: + Prelude.ByteString + ), + "Content-Type" + Data.=# ( "application/x-amz-json-1.1" :: + Prelude.ByteString + ) + ] + ) + +instance Data.ToJSON CreateWebACL where + toJSON CreateWebACL' {..} = + Data.object + ( Prelude.catMaybes + [ ("CaptchaConfig" Data..=) Prelude.<$> captchaConfig, + ("ChallengeConfig" Data..=) + Prelude.<$> challengeConfig, + ("CustomResponseBodies" Data..=) + Prelude.<$> customResponseBodies, + ("Description" Data..=) Prelude.<$> description, + ("Rules" Data..=) Prelude.<$> rules, + ("Tags" Data..=) Prelude.<$> tags, + ("TokenDomains" Data..=) Prelude.<$> tokenDomains, + Prelude.Just ("Name" Data..= name), + Prelude.Just ("Scope" Data..= scope), + Prelude.Just ("DefaultAction" Data..= defaultAction), + Prelude.Just + ("VisibilityConfig" Data..= visibilityConfig) + ] + ) + +instance Data.ToPath CreateWebACL where + toPath = Prelude.const "/" + +instance Data.ToQuery CreateWebACL where + toQuery = Prelude.const Prelude.mempty + +-- | /See:/ 'newCreateWebACLResponse' smart constructor. +data CreateWebACLResponse = CreateWebACLResponse' + { -- | High-level information about a WebACL, returned by operations like + -- create and list. This provides information like the ID, that you can use + -- to retrieve and manage a @WebACL@, and the ARN, that you provide to + -- operations like AssociateWebACL. + summary :: Prelude.Maybe WebACLSummary, + -- | The response's http status code. + httpStatus :: Prelude.Int + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'CreateWebACLResponse' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'summary', 'createWebACLResponse_summary' - High-level information about a WebACL, returned by operations like +-- create and list. This provides information like the ID, that you can use +-- to retrieve and manage a @WebACL@, and the ARN, that you provide to +-- operations like AssociateWebACL. +-- +-- 'httpStatus', 'createWebACLResponse_httpStatus' - The response's http status code. +newCreateWebACLResponse :: + -- | 'httpStatus' + Prelude.Int -> + CreateWebACLResponse +newCreateWebACLResponse pHttpStatus_ = + CreateWebACLResponse' + { summary = Prelude.Nothing, + httpStatus = pHttpStatus_ + } + +-- | High-level information about a WebACL, returned by operations like +-- create and list. This provides information like the ID, that you can use +-- to retrieve and manage a @WebACL@, and the ARN, that you provide to +-- operations like AssociateWebACL. +createWebACLResponse_summary :: Lens.Lens' CreateWebACLResponse (Prelude.Maybe WebACLSummary) +createWebACLResponse_summary = Lens.lens (\CreateWebACLResponse' {summary} -> summary) (\s@CreateWebACLResponse' {} a -> s {summary = a} :: CreateWebACLResponse) + +-- | The response's http status code. +createWebACLResponse_httpStatus :: Lens.Lens' CreateWebACLResponse Prelude.Int +createWebACLResponse_httpStatus = Lens.lens (\CreateWebACLResponse' {httpStatus} -> httpStatus) (\s@CreateWebACLResponse' {} a -> s {httpStatus = a} :: CreateWebACLResponse) + +instance Prelude.NFData CreateWebACLResponse where + rnf CreateWebACLResponse' {..} = + Prelude.rnf summary + `Prelude.seq` Prelude.rnf httpStatus diff --git a/gen/Amazonka/WAFV2/DeleteFirewallManagerRuleGroups.hs b/gen/Amazonka/WAFV2/DeleteFirewallManagerRuleGroups.hs new file mode 100644 --- /dev/null +++ b/gen/Amazonka/WAFV2/DeleteFirewallManagerRuleGroups.hs @@ -0,0 +1,256 @@ +{-# LANGUAGE DeriveGeneric #-} +{-# LANGUAGE DuplicateRecordFields #-} +{-# LANGUAGE NamedFieldPuns #-} +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE RecordWildCards #-} +{-# LANGUAGE StrictData #-} +{-# LANGUAGE TypeFamilies #-} +{-# LANGUAGE NoImplicitPrelude #-} +{-# OPTIONS_GHC -fno-warn-unused-binds #-} +{-# OPTIONS_GHC -fno-warn-unused-imports #-} +{-# OPTIONS_GHC -fno-warn-unused-matches #-} + +-- Derived from AWS service descriptions, licensed under Apache 2.0. + +-- | +-- Module : Amazonka.WAFV2.DeleteFirewallManagerRuleGroups +-- Copyright : (c) 2013-2023 Brendan Hay +-- License : Mozilla Public License, v. 2.0. +-- Maintainer : Brendan Hay +-- Stability : auto-generated +-- Portability : non-portable (GHC extensions) +-- +-- Deletes all rule groups that are managed by Firewall Manager for the +-- specified web ACL. +-- +-- You can only use this if @ManagedByFirewallManager@ is false in the +-- specified WebACL. +module Amazonka.WAFV2.DeleteFirewallManagerRuleGroups + ( -- * Creating a Request + DeleteFirewallManagerRuleGroups (..), + newDeleteFirewallManagerRuleGroups, + + -- * Request Lenses + deleteFirewallManagerRuleGroups_webACLArn, + deleteFirewallManagerRuleGroups_webACLLockToken, + + -- * Destructuring the Response + DeleteFirewallManagerRuleGroupsResponse (..), + newDeleteFirewallManagerRuleGroupsResponse, + + -- * Response Lenses + deleteFirewallManagerRuleGroupsResponse_nextWebACLLockToken, + deleteFirewallManagerRuleGroupsResponse_httpStatus, + ) +where + +import qualified Amazonka.Core as Core +import qualified Amazonka.Core.Lens.Internal as Lens +import qualified Amazonka.Data as Data +import qualified Amazonka.Prelude as Prelude +import qualified Amazonka.Request as Request +import qualified Amazonka.Response as Response +import Amazonka.WAFV2.Types + +-- | /See:/ 'newDeleteFirewallManagerRuleGroups' smart constructor. +data DeleteFirewallManagerRuleGroups = DeleteFirewallManagerRuleGroups' + { -- | The Amazon Resource Name (ARN) of the web ACL. + webACLArn :: Prelude.Text, + -- | A token used for optimistic locking. WAF returns a token to your @get@ + -- and @list@ requests, to mark the state of the entity at the time of the + -- request. To make changes to the entity associated with the token, you + -- provide the token to operations like @update@ and @delete@. WAF uses the + -- token to ensure that no changes have been made to the entity since you + -- last retrieved it. If a change has been made, the update fails with a + -- @WAFOptimisticLockException@. If this happens, perform another @get@, + -- and use the new token returned by that operation. + webACLLockToken :: Prelude.Text + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'DeleteFirewallManagerRuleGroups' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'webACLArn', 'deleteFirewallManagerRuleGroups_webACLArn' - The Amazon Resource Name (ARN) of the web ACL. +-- +-- 'webACLLockToken', 'deleteFirewallManagerRuleGroups_webACLLockToken' - A token used for optimistic locking. WAF returns a token to your @get@ +-- and @list@ requests, to mark the state of the entity at the time of the +-- request. To make changes to the entity associated with the token, you +-- provide the token to operations like @update@ and @delete@. WAF uses the +-- token to ensure that no changes have been made to the entity since you +-- last retrieved it. If a change has been made, the update fails with a +-- @WAFOptimisticLockException@. If this happens, perform another @get@, +-- and use the new token returned by that operation. +newDeleteFirewallManagerRuleGroups :: + -- | 'webACLArn' + Prelude.Text -> + -- | 'webACLLockToken' + Prelude.Text -> + DeleteFirewallManagerRuleGroups +newDeleteFirewallManagerRuleGroups + pWebACLArn_ + pWebACLLockToken_ = + DeleteFirewallManagerRuleGroups' + { webACLArn = + pWebACLArn_, + webACLLockToken = pWebACLLockToken_ + } + +-- | The Amazon Resource Name (ARN) of the web ACL. +deleteFirewallManagerRuleGroups_webACLArn :: Lens.Lens' DeleteFirewallManagerRuleGroups Prelude.Text +deleteFirewallManagerRuleGroups_webACLArn = Lens.lens (\DeleteFirewallManagerRuleGroups' {webACLArn} -> webACLArn) (\s@DeleteFirewallManagerRuleGroups' {} a -> s {webACLArn = a} :: DeleteFirewallManagerRuleGroups) + +-- | A token used for optimistic locking. WAF returns a token to your @get@ +-- and @list@ requests, to mark the state of the entity at the time of the +-- request. To make changes to the entity associated with the token, you +-- provide the token to operations like @update@ and @delete@. WAF uses the +-- token to ensure that no changes have been made to the entity since you +-- last retrieved it. If a change has been made, the update fails with a +-- @WAFOptimisticLockException@. If this happens, perform another @get@, +-- and use the new token returned by that operation. +deleteFirewallManagerRuleGroups_webACLLockToken :: Lens.Lens' DeleteFirewallManagerRuleGroups Prelude.Text +deleteFirewallManagerRuleGroups_webACLLockToken = Lens.lens (\DeleteFirewallManagerRuleGroups' {webACLLockToken} -> webACLLockToken) (\s@DeleteFirewallManagerRuleGroups' {} a -> s {webACLLockToken = a} :: DeleteFirewallManagerRuleGroups) + +instance + Core.AWSRequest + DeleteFirewallManagerRuleGroups + where + type + AWSResponse DeleteFirewallManagerRuleGroups = + DeleteFirewallManagerRuleGroupsResponse + request overrides = + Request.postJSON (overrides defaultService) + response = + Response.receiveJSON + ( \s h x -> + DeleteFirewallManagerRuleGroupsResponse' + Prelude.<$> (x Data..?> "NextWebACLLockToken") + Prelude.<*> (Prelude.pure (Prelude.fromEnum s)) + ) + +instance + Prelude.Hashable + DeleteFirewallManagerRuleGroups + where + hashWithSalt + _salt + DeleteFirewallManagerRuleGroups' {..} = + _salt + `Prelude.hashWithSalt` webACLArn + `Prelude.hashWithSalt` webACLLockToken + +instance + Prelude.NFData + DeleteFirewallManagerRuleGroups + where + rnf DeleteFirewallManagerRuleGroups' {..} = + Prelude.rnf webACLArn + `Prelude.seq` Prelude.rnf webACLLockToken + +instance + Data.ToHeaders + DeleteFirewallManagerRuleGroups + where + toHeaders = + Prelude.const + ( Prelude.mconcat + [ "X-Amz-Target" + Data.=# ( "AWSWAF_20190729.DeleteFirewallManagerRuleGroups" :: + Prelude.ByteString + ), + "Content-Type" + Data.=# ( "application/x-amz-json-1.1" :: + Prelude.ByteString + ) + ] + ) + +instance Data.ToJSON DeleteFirewallManagerRuleGroups where + toJSON DeleteFirewallManagerRuleGroups' {..} = + Data.object + ( Prelude.catMaybes + [ Prelude.Just ("WebACLArn" Data..= webACLArn), + Prelude.Just + ("WebACLLockToken" Data..= webACLLockToken) + ] + ) + +instance Data.ToPath DeleteFirewallManagerRuleGroups where + toPath = Prelude.const "/" + +instance Data.ToQuery DeleteFirewallManagerRuleGroups where + toQuery = Prelude.const Prelude.mempty + +-- | /See:/ 'newDeleteFirewallManagerRuleGroupsResponse' smart constructor. +data DeleteFirewallManagerRuleGroupsResponse = DeleteFirewallManagerRuleGroupsResponse' + { -- | A token used for optimistic locking. WAF returns a token to your @get@ + -- and @list@ requests, to mark the state of the entity at the time of the + -- request. To make changes to the entity associated with the token, you + -- provide the token to operations like @update@ and @delete@. WAF uses the + -- token to ensure that no changes have been made to the entity since you + -- last retrieved it. If a change has been made, the update fails with a + -- @WAFOptimisticLockException@. If this happens, perform another @get@, + -- and use the new token returned by that operation. + nextWebACLLockToken :: Prelude.Maybe Prelude.Text, + -- | The response's http status code. + httpStatus :: Prelude.Int + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'DeleteFirewallManagerRuleGroupsResponse' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'nextWebACLLockToken', 'deleteFirewallManagerRuleGroupsResponse_nextWebACLLockToken' - A token used for optimistic locking. WAF returns a token to your @get@ +-- and @list@ requests, to mark the state of the entity at the time of the +-- request. To make changes to the entity associated with the token, you +-- provide the token to operations like @update@ and @delete@. WAF uses the +-- token to ensure that no changes have been made to the entity since you +-- last retrieved it. If a change has been made, the update fails with a +-- @WAFOptimisticLockException@. If this happens, perform another @get@, +-- and use the new token returned by that operation. +-- +-- 'httpStatus', 'deleteFirewallManagerRuleGroupsResponse_httpStatus' - The response's http status code. +newDeleteFirewallManagerRuleGroupsResponse :: + -- | 'httpStatus' + Prelude.Int -> + DeleteFirewallManagerRuleGroupsResponse +newDeleteFirewallManagerRuleGroupsResponse + pHttpStatus_ = + DeleteFirewallManagerRuleGroupsResponse' + { nextWebACLLockToken = + Prelude.Nothing, + httpStatus = pHttpStatus_ + } + +-- | A token used for optimistic locking. WAF returns a token to your @get@ +-- and @list@ requests, to mark the state of the entity at the time of the +-- request. To make changes to the entity associated with the token, you +-- provide the token to operations like @update@ and @delete@. WAF uses the +-- token to ensure that no changes have been made to the entity since you +-- last retrieved it. If a change has been made, the update fails with a +-- @WAFOptimisticLockException@. If this happens, perform another @get@, +-- and use the new token returned by that operation. +deleteFirewallManagerRuleGroupsResponse_nextWebACLLockToken :: Lens.Lens' DeleteFirewallManagerRuleGroupsResponse (Prelude.Maybe Prelude.Text) +deleteFirewallManagerRuleGroupsResponse_nextWebACLLockToken = Lens.lens (\DeleteFirewallManagerRuleGroupsResponse' {nextWebACLLockToken} -> nextWebACLLockToken) (\s@DeleteFirewallManagerRuleGroupsResponse' {} a -> s {nextWebACLLockToken = a} :: DeleteFirewallManagerRuleGroupsResponse) + +-- | The response's http status code. +deleteFirewallManagerRuleGroupsResponse_httpStatus :: Lens.Lens' DeleteFirewallManagerRuleGroupsResponse Prelude.Int +deleteFirewallManagerRuleGroupsResponse_httpStatus = Lens.lens (\DeleteFirewallManagerRuleGroupsResponse' {httpStatus} -> httpStatus) (\s@DeleteFirewallManagerRuleGroupsResponse' {} a -> s {httpStatus = a} :: DeleteFirewallManagerRuleGroupsResponse) + +instance + Prelude.NFData + DeleteFirewallManagerRuleGroupsResponse + where + rnf DeleteFirewallManagerRuleGroupsResponse' {..} = + Prelude.rnf nextWebACLLockToken + `Prelude.seq` Prelude.rnf httpStatus diff --git a/gen/Amazonka/WAFV2/DeleteIPSet.hs b/gen/Amazonka/WAFV2/DeleteIPSet.hs new file mode 100644 --- /dev/null +++ b/gen/Amazonka/WAFV2/DeleteIPSet.hs @@ -0,0 +1,263 @@ +{-# LANGUAGE DeriveGeneric #-} +{-# LANGUAGE DuplicateRecordFields #-} +{-# LANGUAGE NamedFieldPuns #-} +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE RecordWildCards #-} +{-# LANGUAGE StrictData #-} +{-# LANGUAGE TypeFamilies #-} +{-# LANGUAGE NoImplicitPrelude #-} +{-# OPTIONS_GHC -fno-warn-unused-binds #-} +{-# OPTIONS_GHC -fno-warn-unused-imports #-} +{-# OPTIONS_GHC -fno-warn-unused-matches #-} + +-- Derived from AWS service descriptions, licensed under Apache 2.0. + +-- | +-- Module : Amazonka.WAFV2.DeleteIPSet +-- Copyright : (c) 2013-2023 Brendan Hay +-- License : Mozilla Public License, v. 2.0. +-- Maintainer : Brendan Hay +-- Stability : auto-generated +-- Portability : non-portable (GHC extensions) +-- +-- Deletes the specified IPSet. +module Amazonka.WAFV2.DeleteIPSet + ( -- * Creating a Request + DeleteIPSet (..), + newDeleteIPSet, + + -- * Request Lenses + deleteIPSet_name, + deleteIPSet_scope, + deleteIPSet_id, + deleteIPSet_lockToken, + + -- * Destructuring the Response + DeleteIPSetResponse (..), + newDeleteIPSetResponse, + + -- * Response Lenses + deleteIPSetResponse_httpStatus, + ) +where + +import qualified Amazonka.Core as Core +import qualified Amazonka.Core.Lens.Internal as Lens +import qualified Amazonka.Data as Data +import qualified Amazonka.Prelude as Prelude +import qualified Amazonka.Request as Request +import qualified Amazonka.Response as Response +import Amazonka.WAFV2.Types + +-- | /See:/ 'newDeleteIPSet' smart constructor. +data DeleteIPSet = DeleteIPSet' + { -- | The name of the IP set. You cannot change the name of an @IPSet@ after + -- you create it. + name :: Prelude.Text, + -- | Specifies whether this is for an Amazon CloudFront distribution or for a + -- regional application. A regional application can be an Application Load + -- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, + -- or an Amazon Cognito user pool. + -- + -- To work with CloudFront, you must also specify the Region US East (N. + -- Virginia) as follows: + -- + -- - CLI - Specify the Region when you use the CloudFront scope: + -- @--scope=CLOUDFRONT --region=us-east-1@. + -- + -- - API and SDKs - For all calls, use the Region endpoint us-east-1. + scope :: Scope, + -- | A unique identifier for the set. This ID is returned in the responses to + -- create and list commands. You provide it to operations like update and + -- delete. + id :: Prelude.Text, + -- | A token used for optimistic locking. WAF returns a token to your @get@ + -- and @list@ requests, to mark the state of the entity at the time of the + -- request. To make changes to the entity associated with the token, you + -- provide the token to operations like @update@ and @delete@. WAF uses the + -- token to ensure that no changes have been made to the entity since you + -- last retrieved it. If a change has been made, the update fails with a + -- @WAFOptimisticLockException@. If this happens, perform another @get@, + -- and use the new token returned by that operation. + lockToken :: Prelude.Text + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'DeleteIPSet' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'name', 'deleteIPSet_name' - The name of the IP set. You cannot change the name of an @IPSet@ after +-- you create it. +-- +-- 'scope', 'deleteIPSet_scope' - Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +-- +-- 'id', 'deleteIPSet_id' - A unique identifier for the set. This ID is returned in the responses to +-- create and list commands. You provide it to operations like update and +-- delete. +-- +-- 'lockToken', 'deleteIPSet_lockToken' - A token used for optimistic locking. WAF returns a token to your @get@ +-- and @list@ requests, to mark the state of the entity at the time of the +-- request. To make changes to the entity associated with the token, you +-- provide the token to operations like @update@ and @delete@. WAF uses the +-- token to ensure that no changes have been made to the entity since you +-- last retrieved it. If a change has been made, the update fails with a +-- @WAFOptimisticLockException@. If this happens, perform another @get@, +-- and use the new token returned by that operation. +newDeleteIPSet :: + -- | 'name' + Prelude.Text -> + -- | 'scope' + Scope -> + -- | 'id' + Prelude.Text -> + -- | 'lockToken' + Prelude.Text -> + DeleteIPSet +newDeleteIPSet pName_ pScope_ pId_ pLockToken_ = + DeleteIPSet' + { name = pName_, + scope = pScope_, + id = pId_, + lockToken = pLockToken_ + } + +-- | The name of the IP set. You cannot change the name of an @IPSet@ after +-- you create it. +deleteIPSet_name :: Lens.Lens' DeleteIPSet Prelude.Text +deleteIPSet_name = Lens.lens (\DeleteIPSet' {name} -> name) (\s@DeleteIPSet' {} a -> s {name = a} :: DeleteIPSet) + +-- | Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +deleteIPSet_scope :: Lens.Lens' DeleteIPSet Scope +deleteIPSet_scope = Lens.lens (\DeleteIPSet' {scope} -> scope) (\s@DeleteIPSet' {} a -> s {scope = a} :: DeleteIPSet) + +-- | A unique identifier for the set. This ID is returned in the responses to +-- create and list commands. You provide it to operations like update and +-- delete. +deleteIPSet_id :: Lens.Lens' DeleteIPSet Prelude.Text +deleteIPSet_id = Lens.lens (\DeleteIPSet' {id} -> id) (\s@DeleteIPSet' {} a -> s {id = a} :: DeleteIPSet) + +-- | A token used for optimistic locking. WAF returns a token to your @get@ +-- and @list@ requests, to mark the state of the entity at the time of the +-- request. To make changes to the entity associated with the token, you +-- provide the token to operations like @update@ and @delete@. WAF uses the +-- token to ensure that no changes have been made to the entity since you +-- last retrieved it. If a change has been made, the update fails with a +-- @WAFOptimisticLockException@. If this happens, perform another @get@, +-- and use the new token returned by that operation. +deleteIPSet_lockToken :: Lens.Lens' DeleteIPSet Prelude.Text +deleteIPSet_lockToken = Lens.lens (\DeleteIPSet' {lockToken} -> lockToken) (\s@DeleteIPSet' {} a -> s {lockToken = a} :: DeleteIPSet) + +instance Core.AWSRequest DeleteIPSet where + type AWSResponse DeleteIPSet = DeleteIPSetResponse + request overrides = + Request.postJSON (overrides defaultService) + response = + Response.receiveEmpty + ( \s h x -> + DeleteIPSetResponse' + Prelude.<$> (Prelude.pure (Prelude.fromEnum s)) + ) + +instance Prelude.Hashable DeleteIPSet where + hashWithSalt _salt DeleteIPSet' {..} = + _salt + `Prelude.hashWithSalt` name + `Prelude.hashWithSalt` scope + `Prelude.hashWithSalt` id + `Prelude.hashWithSalt` lockToken + +instance Prelude.NFData DeleteIPSet where + rnf DeleteIPSet' {..} = + Prelude.rnf name + `Prelude.seq` Prelude.rnf scope + `Prelude.seq` Prelude.rnf id + `Prelude.seq` Prelude.rnf lockToken + +instance Data.ToHeaders DeleteIPSet where + toHeaders = + Prelude.const + ( Prelude.mconcat + [ "X-Amz-Target" + Data.=# ( "AWSWAF_20190729.DeleteIPSet" :: + Prelude.ByteString + ), + "Content-Type" + Data.=# ( "application/x-amz-json-1.1" :: + Prelude.ByteString + ) + ] + ) + +instance Data.ToJSON DeleteIPSet where + toJSON DeleteIPSet' {..} = + Data.object + ( Prelude.catMaybes + [ Prelude.Just ("Name" Data..= name), + Prelude.Just ("Scope" Data..= scope), + Prelude.Just ("Id" Data..= id), + Prelude.Just ("LockToken" Data..= lockToken) + ] + ) + +instance Data.ToPath DeleteIPSet where + toPath = Prelude.const "/" + +instance Data.ToQuery DeleteIPSet where + toQuery = Prelude.const Prelude.mempty + +-- | /See:/ 'newDeleteIPSetResponse' smart constructor. +data DeleteIPSetResponse = DeleteIPSetResponse' + { -- | The response's http status code. + httpStatus :: Prelude.Int + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'DeleteIPSetResponse' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'httpStatus', 'deleteIPSetResponse_httpStatus' - The response's http status code. +newDeleteIPSetResponse :: + -- | 'httpStatus' + Prelude.Int -> + DeleteIPSetResponse +newDeleteIPSetResponse pHttpStatus_ = + DeleteIPSetResponse' {httpStatus = pHttpStatus_} + +-- | The response's http status code. +deleteIPSetResponse_httpStatus :: Lens.Lens' DeleteIPSetResponse Prelude.Int +deleteIPSetResponse_httpStatus = Lens.lens (\DeleteIPSetResponse' {httpStatus} -> httpStatus) (\s@DeleteIPSetResponse' {} a -> s {httpStatus = a} :: DeleteIPSetResponse) + +instance Prelude.NFData DeleteIPSetResponse where + rnf DeleteIPSetResponse' {..} = Prelude.rnf httpStatus diff --git a/gen/Amazonka/WAFV2/DeleteLoggingConfiguration.hs b/gen/Amazonka/WAFV2/DeleteLoggingConfiguration.hs new file mode 100644 --- /dev/null +++ b/gen/Amazonka/WAFV2/DeleteLoggingConfiguration.hs @@ -0,0 +1,166 @@ +{-# LANGUAGE DeriveGeneric #-} +{-# LANGUAGE DuplicateRecordFields #-} +{-# LANGUAGE NamedFieldPuns #-} +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE RecordWildCards #-} +{-# LANGUAGE StrictData #-} +{-# LANGUAGE TypeFamilies #-} +{-# LANGUAGE NoImplicitPrelude #-} +{-# OPTIONS_GHC -fno-warn-unused-binds #-} +{-# OPTIONS_GHC -fno-warn-unused-imports #-} +{-# OPTIONS_GHC -fno-warn-unused-matches #-} + +-- Derived from AWS service descriptions, licensed under Apache 2.0. + +-- | +-- Module : Amazonka.WAFV2.DeleteLoggingConfiguration +-- Copyright : (c) 2013-2023 Brendan Hay +-- License : Mozilla Public License, v. 2.0. +-- Maintainer : Brendan Hay +-- Stability : auto-generated +-- Portability : non-portable (GHC extensions) +-- +-- Deletes the LoggingConfiguration from the specified web ACL. +module Amazonka.WAFV2.DeleteLoggingConfiguration + ( -- * Creating a Request + DeleteLoggingConfiguration (..), + newDeleteLoggingConfiguration, + + -- * Request Lenses + deleteLoggingConfiguration_resourceArn, + + -- * Destructuring the Response + DeleteLoggingConfigurationResponse (..), + newDeleteLoggingConfigurationResponse, + + -- * Response Lenses + deleteLoggingConfigurationResponse_httpStatus, + ) +where + +import qualified Amazonka.Core as Core +import qualified Amazonka.Core.Lens.Internal as Lens +import qualified Amazonka.Data as Data +import qualified Amazonka.Prelude as Prelude +import qualified Amazonka.Request as Request +import qualified Amazonka.Response as Response +import Amazonka.WAFV2.Types + +-- | /See:/ 'newDeleteLoggingConfiguration' smart constructor. +data DeleteLoggingConfiguration = DeleteLoggingConfiguration' + { -- | The Amazon Resource Name (ARN) of the web ACL from which you want to + -- delete the LoggingConfiguration. + resourceArn :: Prelude.Text + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'DeleteLoggingConfiguration' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'resourceArn', 'deleteLoggingConfiguration_resourceArn' - The Amazon Resource Name (ARN) of the web ACL from which you want to +-- delete the LoggingConfiguration. +newDeleteLoggingConfiguration :: + -- | 'resourceArn' + Prelude.Text -> + DeleteLoggingConfiguration +newDeleteLoggingConfiguration pResourceArn_ = + DeleteLoggingConfiguration' + { resourceArn = + pResourceArn_ + } + +-- | The Amazon Resource Name (ARN) of the web ACL from which you want to +-- delete the LoggingConfiguration. +deleteLoggingConfiguration_resourceArn :: Lens.Lens' DeleteLoggingConfiguration Prelude.Text +deleteLoggingConfiguration_resourceArn = Lens.lens (\DeleteLoggingConfiguration' {resourceArn} -> resourceArn) (\s@DeleteLoggingConfiguration' {} a -> s {resourceArn = a} :: DeleteLoggingConfiguration) + +instance Core.AWSRequest DeleteLoggingConfiguration where + type + AWSResponse DeleteLoggingConfiguration = + DeleteLoggingConfigurationResponse + request overrides = + Request.postJSON (overrides defaultService) + response = + Response.receiveEmpty + ( \s h x -> + DeleteLoggingConfigurationResponse' + Prelude.<$> (Prelude.pure (Prelude.fromEnum s)) + ) + +instance Prelude.Hashable DeleteLoggingConfiguration where + hashWithSalt _salt DeleteLoggingConfiguration' {..} = + _salt `Prelude.hashWithSalt` resourceArn + +instance Prelude.NFData DeleteLoggingConfiguration where + rnf DeleteLoggingConfiguration' {..} = + Prelude.rnf resourceArn + +instance Data.ToHeaders DeleteLoggingConfiguration where + toHeaders = + Prelude.const + ( Prelude.mconcat + [ "X-Amz-Target" + Data.=# ( "AWSWAF_20190729.DeleteLoggingConfiguration" :: + Prelude.ByteString + ), + "Content-Type" + Data.=# ( "application/x-amz-json-1.1" :: + Prelude.ByteString + ) + ] + ) + +instance Data.ToJSON DeleteLoggingConfiguration where + toJSON DeleteLoggingConfiguration' {..} = + Data.object + ( Prelude.catMaybes + [Prelude.Just ("ResourceArn" Data..= resourceArn)] + ) + +instance Data.ToPath DeleteLoggingConfiguration where + toPath = Prelude.const "/" + +instance Data.ToQuery DeleteLoggingConfiguration where + toQuery = Prelude.const Prelude.mempty + +-- | /See:/ 'newDeleteLoggingConfigurationResponse' smart constructor. +data DeleteLoggingConfigurationResponse = DeleteLoggingConfigurationResponse' + { -- | The response's http status code. + httpStatus :: Prelude.Int + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'DeleteLoggingConfigurationResponse' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'httpStatus', 'deleteLoggingConfigurationResponse_httpStatus' - The response's http status code. +newDeleteLoggingConfigurationResponse :: + -- | 'httpStatus' + Prelude.Int -> + DeleteLoggingConfigurationResponse +newDeleteLoggingConfigurationResponse pHttpStatus_ = + DeleteLoggingConfigurationResponse' + { httpStatus = + pHttpStatus_ + } + +-- | The response's http status code. +deleteLoggingConfigurationResponse_httpStatus :: Lens.Lens' DeleteLoggingConfigurationResponse Prelude.Int +deleteLoggingConfigurationResponse_httpStatus = Lens.lens (\DeleteLoggingConfigurationResponse' {httpStatus} -> httpStatus) (\s@DeleteLoggingConfigurationResponse' {} a -> s {httpStatus = a} :: DeleteLoggingConfigurationResponse) + +instance + Prelude.NFData + DeleteLoggingConfigurationResponse + where + rnf DeleteLoggingConfigurationResponse' {..} = + Prelude.rnf httpStatus diff --git a/gen/Amazonka/WAFV2/DeletePermissionPolicy.hs b/gen/Amazonka/WAFV2/DeletePermissionPolicy.hs new file mode 100644 --- /dev/null +++ b/gen/Amazonka/WAFV2/DeletePermissionPolicy.hs @@ -0,0 +1,174 @@ +{-# LANGUAGE DeriveGeneric #-} +{-# LANGUAGE DuplicateRecordFields #-} +{-# LANGUAGE NamedFieldPuns #-} +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE RecordWildCards #-} +{-# LANGUAGE StrictData #-} +{-# LANGUAGE TypeFamilies #-} +{-# LANGUAGE NoImplicitPrelude #-} +{-# OPTIONS_GHC -fno-warn-unused-binds #-} +{-# OPTIONS_GHC -fno-warn-unused-imports #-} +{-# OPTIONS_GHC -fno-warn-unused-matches #-} + +-- Derived from AWS service descriptions, licensed under Apache 2.0. + +-- | +-- Module : Amazonka.WAFV2.DeletePermissionPolicy +-- Copyright : (c) 2013-2023 Brendan Hay +-- License : Mozilla Public License, v. 2.0. +-- Maintainer : Brendan Hay +-- Stability : auto-generated +-- Portability : non-portable (GHC extensions) +-- +-- Permanently deletes an IAM policy from the specified rule group. +-- +-- You must be the owner of the rule group to perform this operation. +module Amazonka.WAFV2.DeletePermissionPolicy + ( -- * Creating a Request + DeletePermissionPolicy (..), + newDeletePermissionPolicy, + + -- * Request Lenses + deletePermissionPolicy_resourceArn, + + -- * Destructuring the Response + DeletePermissionPolicyResponse (..), + newDeletePermissionPolicyResponse, + + -- * Response Lenses + deletePermissionPolicyResponse_httpStatus, + ) +where + +import qualified Amazonka.Core as Core +import qualified Amazonka.Core.Lens.Internal as Lens +import qualified Amazonka.Data as Data +import qualified Amazonka.Prelude as Prelude +import qualified Amazonka.Request as Request +import qualified Amazonka.Response as Response +import Amazonka.WAFV2.Types + +-- | /See:/ 'newDeletePermissionPolicy' smart constructor. +data DeletePermissionPolicy = DeletePermissionPolicy' + { -- | The Amazon Resource Name (ARN) of the rule group from which you want to + -- delete the policy. + -- + -- You must be the owner of the rule group to perform this operation. + resourceArn :: Prelude.Text + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'DeletePermissionPolicy' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'resourceArn', 'deletePermissionPolicy_resourceArn' - The Amazon Resource Name (ARN) of the rule group from which you want to +-- delete the policy. +-- +-- You must be the owner of the rule group to perform this operation. +newDeletePermissionPolicy :: + -- | 'resourceArn' + Prelude.Text -> + DeletePermissionPolicy +newDeletePermissionPolicy pResourceArn_ = + DeletePermissionPolicy' + { resourceArn = + pResourceArn_ + } + +-- | The Amazon Resource Name (ARN) of the rule group from which you want to +-- delete the policy. +-- +-- You must be the owner of the rule group to perform this operation. +deletePermissionPolicy_resourceArn :: Lens.Lens' DeletePermissionPolicy Prelude.Text +deletePermissionPolicy_resourceArn = Lens.lens (\DeletePermissionPolicy' {resourceArn} -> resourceArn) (\s@DeletePermissionPolicy' {} a -> s {resourceArn = a} :: DeletePermissionPolicy) + +instance Core.AWSRequest DeletePermissionPolicy where + type + AWSResponse DeletePermissionPolicy = + DeletePermissionPolicyResponse + request overrides = + Request.postJSON (overrides defaultService) + response = + Response.receiveEmpty + ( \s h x -> + DeletePermissionPolicyResponse' + Prelude.<$> (Prelude.pure (Prelude.fromEnum s)) + ) + +instance Prelude.Hashable DeletePermissionPolicy where + hashWithSalt _salt DeletePermissionPolicy' {..} = + _salt `Prelude.hashWithSalt` resourceArn + +instance Prelude.NFData DeletePermissionPolicy where + rnf DeletePermissionPolicy' {..} = + Prelude.rnf resourceArn + +instance Data.ToHeaders DeletePermissionPolicy where + toHeaders = + Prelude.const + ( Prelude.mconcat + [ "X-Amz-Target" + Data.=# ( "AWSWAF_20190729.DeletePermissionPolicy" :: + Prelude.ByteString + ), + "Content-Type" + Data.=# ( "application/x-amz-json-1.1" :: + Prelude.ByteString + ) + ] + ) + +instance Data.ToJSON DeletePermissionPolicy where + toJSON DeletePermissionPolicy' {..} = + Data.object + ( Prelude.catMaybes + [Prelude.Just ("ResourceArn" Data..= resourceArn)] + ) + +instance Data.ToPath DeletePermissionPolicy where + toPath = Prelude.const "/" + +instance Data.ToQuery DeletePermissionPolicy where + toQuery = Prelude.const Prelude.mempty + +-- | /See:/ 'newDeletePermissionPolicyResponse' smart constructor. +data DeletePermissionPolicyResponse = DeletePermissionPolicyResponse' + { -- | The response's http status code. + httpStatus :: Prelude.Int + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'DeletePermissionPolicyResponse' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'httpStatus', 'deletePermissionPolicyResponse_httpStatus' - The response's http status code. +newDeletePermissionPolicyResponse :: + -- | 'httpStatus' + Prelude.Int -> + DeletePermissionPolicyResponse +newDeletePermissionPolicyResponse pHttpStatus_ = + DeletePermissionPolicyResponse' + { httpStatus = + pHttpStatus_ + } + +-- | The response's http status code. +deletePermissionPolicyResponse_httpStatus :: Lens.Lens' DeletePermissionPolicyResponse Prelude.Int +deletePermissionPolicyResponse_httpStatus = Lens.lens (\DeletePermissionPolicyResponse' {httpStatus} -> httpStatus) (\s@DeletePermissionPolicyResponse' {} a -> s {httpStatus = a} :: DeletePermissionPolicyResponse) + +instance + Prelude.NFData + DeletePermissionPolicyResponse + where + rnf DeletePermissionPolicyResponse' {..} = + Prelude.rnf httpStatus diff --git a/gen/Amazonka/WAFV2/DeleteRegexPatternSet.hs b/gen/Amazonka/WAFV2/DeleteRegexPatternSet.hs new file mode 100644 --- /dev/null +++ b/gen/Amazonka/WAFV2/DeleteRegexPatternSet.hs @@ -0,0 +1,273 @@ +{-# LANGUAGE DeriveGeneric #-} +{-# LANGUAGE DuplicateRecordFields #-} +{-# LANGUAGE NamedFieldPuns #-} +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE RecordWildCards #-} +{-# LANGUAGE StrictData #-} +{-# LANGUAGE TypeFamilies #-} +{-# LANGUAGE NoImplicitPrelude #-} +{-# OPTIONS_GHC -fno-warn-unused-binds #-} +{-# OPTIONS_GHC -fno-warn-unused-imports #-} +{-# OPTIONS_GHC -fno-warn-unused-matches #-} + +-- Derived from AWS service descriptions, licensed under Apache 2.0. + +-- | +-- Module : Amazonka.WAFV2.DeleteRegexPatternSet +-- Copyright : (c) 2013-2023 Brendan Hay +-- License : Mozilla Public License, v. 2.0. +-- Maintainer : Brendan Hay +-- Stability : auto-generated +-- Portability : non-portable (GHC extensions) +-- +-- Deletes the specified RegexPatternSet. +module Amazonka.WAFV2.DeleteRegexPatternSet + ( -- * Creating a Request + DeleteRegexPatternSet (..), + newDeleteRegexPatternSet, + + -- * Request Lenses + deleteRegexPatternSet_name, + deleteRegexPatternSet_scope, + deleteRegexPatternSet_id, + deleteRegexPatternSet_lockToken, + + -- * Destructuring the Response + DeleteRegexPatternSetResponse (..), + newDeleteRegexPatternSetResponse, + + -- * Response Lenses + deleteRegexPatternSetResponse_httpStatus, + ) +where + +import qualified Amazonka.Core as Core +import qualified Amazonka.Core.Lens.Internal as Lens +import qualified Amazonka.Data as Data +import qualified Amazonka.Prelude as Prelude +import qualified Amazonka.Request as Request +import qualified Amazonka.Response as Response +import Amazonka.WAFV2.Types + +-- | /See:/ 'newDeleteRegexPatternSet' smart constructor. +data DeleteRegexPatternSet = DeleteRegexPatternSet' + { -- | The name of the set. You cannot change the name after you create the + -- set. + name :: Prelude.Text, + -- | Specifies whether this is for an Amazon CloudFront distribution or for a + -- regional application. A regional application can be an Application Load + -- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, + -- or an Amazon Cognito user pool. + -- + -- To work with CloudFront, you must also specify the Region US East (N. + -- Virginia) as follows: + -- + -- - CLI - Specify the Region when you use the CloudFront scope: + -- @--scope=CLOUDFRONT --region=us-east-1@. + -- + -- - API and SDKs - For all calls, use the Region endpoint us-east-1. + scope :: Scope, + -- | A unique identifier for the set. This ID is returned in the responses to + -- create and list commands. You provide it to operations like update and + -- delete. + id :: Prelude.Text, + -- | A token used for optimistic locking. WAF returns a token to your @get@ + -- and @list@ requests, to mark the state of the entity at the time of the + -- request. To make changes to the entity associated with the token, you + -- provide the token to operations like @update@ and @delete@. WAF uses the + -- token to ensure that no changes have been made to the entity since you + -- last retrieved it. If a change has been made, the update fails with a + -- @WAFOptimisticLockException@. If this happens, perform another @get@, + -- and use the new token returned by that operation. + lockToken :: Prelude.Text + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'DeleteRegexPatternSet' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'name', 'deleteRegexPatternSet_name' - The name of the set. You cannot change the name after you create the +-- set. +-- +-- 'scope', 'deleteRegexPatternSet_scope' - Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +-- +-- 'id', 'deleteRegexPatternSet_id' - A unique identifier for the set. This ID is returned in the responses to +-- create and list commands. You provide it to operations like update and +-- delete. +-- +-- 'lockToken', 'deleteRegexPatternSet_lockToken' - A token used for optimistic locking. WAF returns a token to your @get@ +-- and @list@ requests, to mark the state of the entity at the time of the +-- request. To make changes to the entity associated with the token, you +-- provide the token to operations like @update@ and @delete@. WAF uses the +-- token to ensure that no changes have been made to the entity since you +-- last retrieved it. If a change has been made, the update fails with a +-- @WAFOptimisticLockException@. If this happens, perform another @get@, +-- and use the new token returned by that operation. +newDeleteRegexPatternSet :: + -- | 'name' + Prelude.Text -> + -- | 'scope' + Scope -> + -- | 'id' + Prelude.Text -> + -- | 'lockToken' + Prelude.Text -> + DeleteRegexPatternSet +newDeleteRegexPatternSet + pName_ + pScope_ + pId_ + pLockToken_ = + DeleteRegexPatternSet' + { name = pName_, + scope = pScope_, + id = pId_, + lockToken = pLockToken_ + } + +-- | The name of the set. You cannot change the name after you create the +-- set. +deleteRegexPatternSet_name :: Lens.Lens' DeleteRegexPatternSet Prelude.Text +deleteRegexPatternSet_name = Lens.lens (\DeleteRegexPatternSet' {name} -> name) (\s@DeleteRegexPatternSet' {} a -> s {name = a} :: DeleteRegexPatternSet) + +-- | Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +deleteRegexPatternSet_scope :: Lens.Lens' DeleteRegexPatternSet Scope +deleteRegexPatternSet_scope = Lens.lens (\DeleteRegexPatternSet' {scope} -> scope) (\s@DeleteRegexPatternSet' {} a -> s {scope = a} :: DeleteRegexPatternSet) + +-- | A unique identifier for the set. This ID is returned in the responses to +-- create and list commands. You provide it to operations like update and +-- delete. +deleteRegexPatternSet_id :: Lens.Lens' DeleteRegexPatternSet Prelude.Text +deleteRegexPatternSet_id = Lens.lens (\DeleteRegexPatternSet' {id} -> id) (\s@DeleteRegexPatternSet' {} a -> s {id = a} :: DeleteRegexPatternSet) + +-- | A token used for optimistic locking. WAF returns a token to your @get@ +-- and @list@ requests, to mark the state of the entity at the time of the +-- request. To make changes to the entity associated with the token, you +-- provide the token to operations like @update@ and @delete@. WAF uses the +-- token to ensure that no changes have been made to the entity since you +-- last retrieved it. If a change has been made, the update fails with a +-- @WAFOptimisticLockException@. If this happens, perform another @get@, +-- and use the new token returned by that operation. +deleteRegexPatternSet_lockToken :: Lens.Lens' DeleteRegexPatternSet Prelude.Text +deleteRegexPatternSet_lockToken = Lens.lens (\DeleteRegexPatternSet' {lockToken} -> lockToken) (\s@DeleteRegexPatternSet' {} a -> s {lockToken = a} :: DeleteRegexPatternSet) + +instance Core.AWSRequest DeleteRegexPatternSet where + type + AWSResponse DeleteRegexPatternSet = + DeleteRegexPatternSetResponse + request overrides = + Request.postJSON (overrides defaultService) + response = + Response.receiveEmpty + ( \s h x -> + DeleteRegexPatternSetResponse' + Prelude.<$> (Prelude.pure (Prelude.fromEnum s)) + ) + +instance Prelude.Hashable DeleteRegexPatternSet where + hashWithSalt _salt DeleteRegexPatternSet' {..} = + _salt + `Prelude.hashWithSalt` name + `Prelude.hashWithSalt` scope + `Prelude.hashWithSalt` id + `Prelude.hashWithSalt` lockToken + +instance Prelude.NFData DeleteRegexPatternSet where + rnf DeleteRegexPatternSet' {..} = + Prelude.rnf name + `Prelude.seq` Prelude.rnf scope + `Prelude.seq` Prelude.rnf id + `Prelude.seq` Prelude.rnf lockToken + +instance Data.ToHeaders DeleteRegexPatternSet where + toHeaders = + Prelude.const + ( Prelude.mconcat + [ "X-Amz-Target" + Data.=# ( "AWSWAF_20190729.DeleteRegexPatternSet" :: + Prelude.ByteString + ), + "Content-Type" + Data.=# ( "application/x-amz-json-1.1" :: + Prelude.ByteString + ) + ] + ) + +instance Data.ToJSON DeleteRegexPatternSet where + toJSON DeleteRegexPatternSet' {..} = + Data.object + ( Prelude.catMaybes + [ Prelude.Just ("Name" Data..= name), + Prelude.Just ("Scope" Data..= scope), + Prelude.Just ("Id" Data..= id), + Prelude.Just ("LockToken" Data..= lockToken) + ] + ) + +instance Data.ToPath DeleteRegexPatternSet where + toPath = Prelude.const "/" + +instance Data.ToQuery DeleteRegexPatternSet where + toQuery = Prelude.const Prelude.mempty + +-- | /See:/ 'newDeleteRegexPatternSetResponse' smart constructor. +data DeleteRegexPatternSetResponse = DeleteRegexPatternSetResponse' + { -- | The response's http status code. + httpStatus :: Prelude.Int + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'DeleteRegexPatternSetResponse' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'httpStatus', 'deleteRegexPatternSetResponse_httpStatus' - The response's http status code. +newDeleteRegexPatternSetResponse :: + -- | 'httpStatus' + Prelude.Int -> + DeleteRegexPatternSetResponse +newDeleteRegexPatternSetResponse pHttpStatus_ = + DeleteRegexPatternSetResponse' + { httpStatus = + pHttpStatus_ + } + +-- | The response's http status code. +deleteRegexPatternSetResponse_httpStatus :: Lens.Lens' DeleteRegexPatternSetResponse Prelude.Int +deleteRegexPatternSetResponse_httpStatus = Lens.lens (\DeleteRegexPatternSetResponse' {httpStatus} -> httpStatus) (\s@DeleteRegexPatternSetResponse' {} a -> s {httpStatus = a} :: DeleteRegexPatternSetResponse) + +instance Prelude.NFData DeleteRegexPatternSetResponse where + rnf DeleteRegexPatternSetResponse' {..} = + Prelude.rnf httpStatus diff --git a/gen/Amazonka/WAFV2/DeleteRuleGroup.hs b/gen/Amazonka/WAFV2/DeleteRuleGroup.hs new file mode 100644 --- /dev/null +++ b/gen/Amazonka/WAFV2/DeleteRuleGroup.hs @@ -0,0 +1,266 @@ +{-# LANGUAGE DeriveGeneric #-} +{-# LANGUAGE DuplicateRecordFields #-} +{-# LANGUAGE NamedFieldPuns #-} +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE RecordWildCards #-} +{-# LANGUAGE StrictData #-} +{-# LANGUAGE TypeFamilies #-} +{-# LANGUAGE NoImplicitPrelude #-} +{-# OPTIONS_GHC -fno-warn-unused-binds #-} +{-# OPTIONS_GHC -fno-warn-unused-imports #-} +{-# OPTIONS_GHC -fno-warn-unused-matches #-} + +-- Derived from AWS service descriptions, licensed under Apache 2.0. + +-- | +-- Module : Amazonka.WAFV2.DeleteRuleGroup +-- Copyright : (c) 2013-2023 Brendan Hay +-- License : Mozilla Public License, v. 2.0. +-- Maintainer : Brendan Hay +-- Stability : auto-generated +-- Portability : non-portable (GHC extensions) +-- +-- Deletes the specified RuleGroup. +module Amazonka.WAFV2.DeleteRuleGroup + ( -- * Creating a Request + DeleteRuleGroup (..), + newDeleteRuleGroup, + + -- * Request Lenses + deleteRuleGroup_name, + deleteRuleGroup_scope, + deleteRuleGroup_id, + deleteRuleGroup_lockToken, + + -- * Destructuring the Response + DeleteRuleGroupResponse (..), + newDeleteRuleGroupResponse, + + -- * Response Lenses + deleteRuleGroupResponse_httpStatus, + ) +where + +import qualified Amazonka.Core as Core +import qualified Amazonka.Core.Lens.Internal as Lens +import qualified Amazonka.Data as Data +import qualified Amazonka.Prelude as Prelude +import qualified Amazonka.Request as Request +import qualified Amazonka.Response as Response +import Amazonka.WAFV2.Types + +-- | /See:/ 'newDeleteRuleGroup' smart constructor. +data DeleteRuleGroup = DeleteRuleGroup' + { -- | The name of the rule group. You cannot change the name of a rule group + -- after you create it. + name :: Prelude.Text, + -- | Specifies whether this is for an Amazon CloudFront distribution or for a + -- regional application. A regional application can be an Application Load + -- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, + -- or an Amazon Cognito user pool. + -- + -- To work with CloudFront, you must also specify the Region US East (N. + -- Virginia) as follows: + -- + -- - CLI - Specify the Region when you use the CloudFront scope: + -- @--scope=CLOUDFRONT --region=us-east-1@. + -- + -- - API and SDKs - For all calls, use the Region endpoint us-east-1. + scope :: Scope, + -- | A unique identifier for the rule group. This ID is returned in the + -- responses to create and list commands. You provide it to operations like + -- update and delete. + id :: Prelude.Text, + -- | A token used for optimistic locking. WAF returns a token to your @get@ + -- and @list@ requests, to mark the state of the entity at the time of the + -- request. To make changes to the entity associated with the token, you + -- provide the token to operations like @update@ and @delete@. WAF uses the + -- token to ensure that no changes have been made to the entity since you + -- last retrieved it. If a change has been made, the update fails with a + -- @WAFOptimisticLockException@. If this happens, perform another @get@, + -- and use the new token returned by that operation. + lockToken :: Prelude.Text + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'DeleteRuleGroup' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'name', 'deleteRuleGroup_name' - The name of the rule group. You cannot change the name of a rule group +-- after you create it. +-- +-- 'scope', 'deleteRuleGroup_scope' - Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +-- +-- 'id', 'deleteRuleGroup_id' - A unique identifier for the rule group. This ID is returned in the +-- responses to create and list commands. You provide it to operations like +-- update and delete. +-- +-- 'lockToken', 'deleteRuleGroup_lockToken' - A token used for optimistic locking. WAF returns a token to your @get@ +-- and @list@ requests, to mark the state of the entity at the time of the +-- request. To make changes to the entity associated with the token, you +-- provide the token to operations like @update@ and @delete@. WAF uses the +-- token to ensure that no changes have been made to the entity since you +-- last retrieved it. If a change has been made, the update fails with a +-- @WAFOptimisticLockException@. If this happens, perform another @get@, +-- and use the new token returned by that operation. +newDeleteRuleGroup :: + -- | 'name' + Prelude.Text -> + -- | 'scope' + Scope -> + -- | 'id' + Prelude.Text -> + -- | 'lockToken' + Prelude.Text -> + DeleteRuleGroup +newDeleteRuleGroup pName_ pScope_ pId_ pLockToken_ = + DeleteRuleGroup' + { name = pName_, + scope = pScope_, + id = pId_, + lockToken = pLockToken_ + } + +-- | The name of the rule group. You cannot change the name of a rule group +-- after you create it. +deleteRuleGroup_name :: Lens.Lens' DeleteRuleGroup Prelude.Text +deleteRuleGroup_name = Lens.lens (\DeleteRuleGroup' {name} -> name) (\s@DeleteRuleGroup' {} a -> s {name = a} :: DeleteRuleGroup) + +-- | Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +deleteRuleGroup_scope :: Lens.Lens' DeleteRuleGroup Scope +deleteRuleGroup_scope = Lens.lens (\DeleteRuleGroup' {scope} -> scope) (\s@DeleteRuleGroup' {} a -> s {scope = a} :: DeleteRuleGroup) + +-- | A unique identifier for the rule group. This ID is returned in the +-- responses to create and list commands. You provide it to operations like +-- update and delete. +deleteRuleGroup_id :: Lens.Lens' DeleteRuleGroup Prelude.Text +deleteRuleGroup_id = Lens.lens (\DeleteRuleGroup' {id} -> id) (\s@DeleteRuleGroup' {} a -> s {id = a} :: DeleteRuleGroup) + +-- | A token used for optimistic locking. WAF returns a token to your @get@ +-- and @list@ requests, to mark the state of the entity at the time of the +-- request. To make changes to the entity associated with the token, you +-- provide the token to operations like @update@ and @delete@. WAF uses the +-- token to ensure that no changes have been made to the entity since you +-- last retrieved it. If a change has been made, the update fails with a +-- @WAFOptimisticLockException@. If this happens, perform another @get@, +-- and use the new token returned by that operation. +deleteRuleGroup_lockToken :: Lens.Lens' DeleteRuleGroup Prelude.Text +deleteRuleGroup_lockToken = Lens.lens (\DeleteRuleGroup' {lockToken} -> lockToken) (\s@DeleteRuleGroup' {} a -> s {lockToken = a} :: DeleteRuleGroup) + +instance Core.AWSRequest DeleteRuleGroup where + type + AWSResponse DeleteRuleGroup = + DeleteRuleGroupResponse + request overrides = + Request.postJSON (overrides defaultService) + response = + Response.receiveEmpty + ( \s h x -> + DeleteRuleGroupResponse' + Prelude.<$> (Prelude.pure (Prelude.fromEnum s)) + ) + +instance Prelude.Hashable DeleteRuleGroup where + hashWithSalt _salt DeleteRuleGroup' {..} = + _salt + `Prelude.hashWithSalt` name + `Prelude.hashWithSalt` scope + `Prelude.hashWithSalt` id + `Prelude.hashWithSalt` lockToken + +instance Prelude.NFData DeleteRuleGroup where + rnf DeleteRuleGroup' {..} = + Prelude.rnf name + `Prelude.seq` Prelude.rnf scope + `Prelude.seq` Prelude.rnf id + `Prelude.seq` Prelude.rnf lockToken + +instance Data.ToHeaders DeleteRuleGroup where + toHeaders = + Prelude.const + ( Prelude.mconcat + [ "X-Amz-Target" + Data.=# ( "AWSWAF_20190729.DeleteRuleGroup" :: + Prelude.ByteString + ), + "Content-Type" + Data.=# ( "application/x-amz-json-1.1" :: + Prelude.ByteString + ) + ] + ) + +instance Data.ToJSON DeleteRuleGroup where + toJSON DeleteRuleGroup' {..} = + Data.object + ( Prelude.catMaybes + [ Prelude.Just ("Name" Data..= name), + Prelude.Just ("Scope" Data..= scope), + Prelude.Just ("Id" Data..= id), + Prelude.Just ("LockToken" Data..= lockToken) + ] + ) + +instance Data.ToPath DeleteRuleGroup where + toPath = Prelude.const "/" + +instance Data.ToQuery DeleteRuleGroup where + toQuery = Prelude.const Prelude.mempty + +-- | /See:/ 'newDeleteRuleGroupResponse' smart constructor. +data DeleteRuleGroupResponse = DeleteRuleGroupResponse' + { -- | The response's http status code. + httpStatus :: Prelude.Int + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'DeleteRuleGroupResponse' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'httpStatus', 'deleteRuleGroupResponse_httpStatus' - The response's http status code. +newDeleteRuleGroupResponse :: + -- | 'httpStatus' + Prelude.Int -> + DeleteRuleGroupResponse +newDeleteRuleGroupResponse pHttpStatus_ = + DeleteRuleGroupResponse' {httpStatus = pHttpStatus_} + +-- | The response's http status code. +deleteRuleGroupResponse_httpStatus :: Lens.Lens' DeleteRuleGroupResponse Prelude.Int +deleteRuleGroupResponse_httpStatus = Lens.lens (\DeleteRuleGroupResponse' {httpStatus} -> httpStatus) (\s@DeleteRuleGroupResponse' {} a -> s {httpStatus = a} :: DeleteRuleGroupResponse) + +instance Prelude.NFData DeleteRuleGroupResponse where + rnf DeleteRuleGroupResponse' {..} = + Prelude.rnf httpStatus diff --git a/gen/Amazonka/WAFV2/DeleteWebACL.hs b/gen/Amazonka/WAFV2/DeleteWebACL.hs new file mode 100644 --- /dev/null +++ b/gen/Amazonka/WAFV2/DeleteWebACL.hs @@ -0,0 +1,287 @@ +{-# LANGUAGE DeriveGeneric #-} +{-# LANGUAGE DuplicateRecordFields #-} +{-# LANGUAGE NamedFieldPuns #-} +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE RecordWildCards #-} +{-# LANGUAGE StrictData #-} +{-# LANGUAGE TypeFamilies #-} +{-# LANGUAGE NoImplicitPrelude #-} +{-# OPTIONS_GHC -fno-warn-unused-binds #-} +{-# OPTIONS_GHC -fno-warn-unused-imports #-} +{-# OPTIONS_GHC -fno-warn-unused-matches #-} + +-- Derived from AWS service descriptions, licensed under Apache 2.0. + +-- | +-- Module : Amazonka.WAFV2.DeleteWebACL +-- Copyright : (c) 2013-2023 Brendan Hay +-- License : Mozilla Public License, v. 2.0. +-- Maintainer : Brendan Hay +-- Stability : auto-generated +-- Portability : non-portable (GHC extensions) +-- +-- Deletes the specified WebACL. +-- +-- You can only use this if @ManagedByFirewallManager@ is false in the +-- specified WebACL. +-- +-- Before deleting any web ACL, first disassociate it from all resources. +-- +-- - To retrieve a list of the resources that are associated with a web +-- ACL, use the following calls: +-- +-- - For regional resources, call ListResourcesForWebACL. +-- +-- - For Amazon CloudFront distributions, use the CloudFront call +-- @ListDistributionsByWebACLId@. For information, see +-- . +-- +-- - To disassociate a resource from a web ACL, use the following calls: +-- +-- - For regional resources, call DisassociateWebACL. +-- +-- - For Amazon CloudFront distributions, provide an empty web ACL ID +-- in the CloudFront call @UpdateDistribution@. For information, +-- see +-- . +module Amazonka.WAFV2.DeleteWebACL + ( -- * Creating a Request + DeleteWebACL (..), + newDeleteWebACL, + + -- * Request Lenses + deleteWebACL_name, + deleteWebACL_scope, + deleteWebACL_id, + deleteWebACL_lockToken, + + -- * Destructuring the Response + DeleteWebACLResponse (..), + newDeleteWebACLResponse, + + -- * Response Lenses + deleteWebACLResponse_httpStatus, + ) +where + +import qualified Amazonka.Core as Core +import qualified Amazonka.Core.Lens.Internal as Lens +import qualified Amazonka.Data as Data +import qualified Amazonka.Prelude as Prelude +import qualified Amazonka.Request as Request +import qualified Amazonka.Response as Response +import Amazonka.WAFV2.Types + +-- | /See:/ 'newDeleteWebACL' smart constructor. +data DeleteWebACL = DeleteWebACL' + { -- | The name of the web ACL. You cannot change the name of a web ACL after + -- you create it. + name :: Prelude.Text, + -- | Specifies whether this is for an Amazon CloudFront distribution or for a + -- regional application. A regional application can be an Application Load + -- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, + -- or an Amazon Cognito user pool. + -- + -- To work with CloudFront, you must also specify the Region US East (N. + -- Virginia) as follows: + -- + -- - CLI - Specify the Region when you use the CloudFront scope: + -- @--scope=CLOUDFRONT --region=us-east-1@. + -- + -- - API and SDKs - For all calls, use the Region endpoint us-east-1. + scope :: Scope, + -- | The unique identifier for the web ACL. This ID is returned in the + -- responses to create and list commands. You provide it to operations like + -- update and delete. + id :: Prelude.Text, + -- | A token used for optimistic locking. WAF returns a token to your @get@ + -- and @list@ requests, to mark the state of the entity at the time of the + -- request. To make changes to the entity associated with the token, you + -- provide the token to operations like @update@ and @delete@. WAF uses the + -- token to ensure that no changes have been made to the entity since you + -- last retrieved it. If a change has been made, the update fails with a + -- @WAFOptimisticLockException@. If this happens, perform another @get@, + -- and use the new token returned by that operation. + lockToken :: Prelude.Text + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'DeleteWebACL' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'name', 'deleteWebACL_name' - The name of the web ACL. You cannot change the name of a web ACL after +-- you create it. +-- +-- 'scope', 'deleteWebACL_scope' - Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +-- +-- 'id', 'deleteWebACL_id' - The unique identifier for the web ACL. This ID is returned in the +-- responses to create and list commands. You provide it to operations like +-- update and delete. +-- +-- 'lockToken', 'deleteWebACL_lockToken' - A token used for optimistic locking. WAF returns a token to your @get@ +-- and @list@ requests, to mark the state of the entity at the time of the +-- request. To make changes to the entity associated with the token, you +-- provide the token to operations like @update@ and @delete@. WAF uses the +-- token to ensure that no changes have been made to the entity since you +-- last retrieved it. If a change has been made, the update fails with a +-- @WAFOptimisticLockException@. If this happens, perform another @get@, +-- and use the new token returned by that operation. +newDeleteWebACL :: + -- | 'name' + Prelude.Text -> + -- | 'scope' + Scope -> + -- | 'id' + Prelude.Text -> + -- | 'lockToken' + Prelude.Text -> + DeleteWebACL +newDeleteWebACL pName_ pScope_ pId_ pLockToken_ = + DeleteWebACL' + { name = pName_, + scope = pScope_, + id = pId_, + lockToken = pLockToken_ + } + +-- | The name of the web ACL. You cannot change the name of a web ACL after +-- you create it. +deleteWebACL_name :: Lens.Lens' DeleteWebACL Prelude.Text +deleteWebACL_name = Lens.lens (\DeleteWebACL' {name} -> name) (\s@DeleteWebACL' {} a -> s {name = a} :: DeleteWebACL) + +-- | Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +deleteWebACL_scope :: Lens.Lens' DeleteWebACL Scope +deleteWebACL_scope = Lens.lens (\DeleteWebACL' {scope} -> scope) (\s@DeleteWebACL' {} a -> s {scope = a} :: DeleteWebACL) + +-- | The unique identifier for the web ACL. This ID is returned in the +-- responses to create and list commands. You provide it to operations like +-- update and delete. +deleteWebACL_id :: Lens.Lens' DeleteWebACL Prelude.Text +deleteWebACL_id = Lens.lens (\DeleteWebACL' {id} -> id) (\s@DeleteWebACL' {} a -> s {id = a} :: DeleteWebACL) + +-- | A token used for optimistic locking. WAF returns a token to your @get@ +-- and @list@ requests, to mark the state of the entity at the time of the +-- request. To make changes to the entity associated with the token, you +-- provide the token to operations like @update@ and @delete@. WAF uses the +-- token to ensure that no changes have been made to the entity since you +-- last retrieved it. If a change has been made, the update fails with a +-- @WAFOptimisticLockException@. If this happens, perform another @get@, +-- and use the new token returned by that operation. +deleteWebACL_lockToken :: Lens.Lens' DeleteWebACL Prelude.Text +deleteWebACL_lockToken = Lens.lens (\DeleteWebACL' {lockToken} -> lockToken) (\s@DeleteWebACL' {} a -> s {lockToken = a} :: DeleteWebACL) + +instance Core.AWSRequest DeleteWebACL where + type AWSResponse DeleteWebACL = DeleteWebACLResponse + request overrides = + Request.postJSON (overrides defaultService) + response = + Response.receiveEmpty + ( \s h x -> + DeleteWebACLResponse' + Prelude.<$> (Prelude.pure (Prelude.fromEnum s)) + ) + +instance Prelude.Hashable DeleteWebACL where + hashWithSalt _salt DeleteWebACL' {..} = + _salt + `Prelude.hashWithSalt` name + `Prelude.hashWithSalt` scope + `Prelude.hashWithSalt` id + `Prelude.hashWithSalt` lockToken + +instance Prelude.NFData DeleteWebACL where + rnf DeleteWebACL' {..} = + Prelude.rnf name + `Prelude.seq` Prelude.rnf scope + `Prelude.seq` Prelude.rnf id + `Prelude.seq` Prelude.rnf lockToken + +instance Data.ToHeaders DeleteWebACL where + toHeaders = + Prelude.const + ( Prelude.mconcat + [ "X-Amz-Target" + Data.=# ( "AWSWAF_20190729.DeleteWebACL" :: + Prelude.ByteString + ), + "Content-Type" + Data.=# ( "application/x-amz-json-1.1" :: + Prelude.ByteString + ) + ] + ) + +instance Data.ToJSON DeleteWebACL where + toJSON DeleteWebACL' {..} = + Data.object + ( Prelude.catMaybes + [ Prelude.Just ("Name" Data..= name), + Prelude.Just ("Scope" Data..= scope), + Prelude.Just ("Id" Data..= id), + Prelude.Just ("LockToken" Data..= lockToken) + ] + ) + +instance Data.ToPath DeleteWebACL where + toPath = Prelude.const "/" + +instance Data.ToQuery DeleteWebACL where + toQuery = Prelude.const Prelude.mempty + +-- | /See:/ 'newDeleteWebACLResponse' smart constructor. +data DeleteWebACLResponse = DeleteWebACLResponse' + { -- | The response's http status code. + httpStatus :: Prelude.Int + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'DeleteWebACLResponse' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'httpStatus', 'deleteWebACLResponse_httpStatus' - The response's http status code. +newDeleteWebACLResponse :: + -- | 'httpStatus' + Prelude.Int -> + DeleteWebACLResponse +newDeleteWebACLResponse pHttpStatus_ = + DeleteWebACLResponse' {httpStatus = pHttpStatus_} + +-- | The response's http status code. +deleteWebACLResponse_httpStatus :: Lens.Lens' DeleteWebACLResponse Prelude.Int +deleteWebACLResponse_httpStatus = Lens.lens (\DeleteWebACLResponse' {httpStatus} -> httpStatus) (\s@DeleteWebACLResponse' {} a -> s {httpStatus = a} :: DeleteWebACLResponse) + +instance Prelude.NFData DeleteWebACLResponse where + rnf DeleteWebACLResponse' {..} = + Prelude.rnf httpStatus diff --git a/gen/Amazonka/WAFV2/DescribeManagedRuleGroup.hs b/gen/Amazonka/WAFV2/DescribeManagedRuleGroup.hs new file mode 100644 --- /dev/null +++ b/gen/Amazonka/WAFV2/DescribeManagedRuleGroup.hs @@ -0,0 +1,426 @@ +{-# LANGUAGE DeriveGeneric #-} +{-# LANGUAGE DuplicateRecordFields #-} +{-# LANGUAGE NamedFieldPuns #-} +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE RecordWildCards #-} +{-# LANGUAGE StrictData #-} +{-# LANGUAGE TypeFamilies #-} +{-# LANGUAGE NoImplicitPrelude #-} +{-# OPTIONS_GHC -fno-warn-unused-binds #-} +{-# OPTIONS_GHC -fno-warn-unused-imports #-} +{-# OPTIONS_GHC -fno-warn-unused-matches #-} + +-- Derived from AWS service descriptions, licensed under Apache 2.0. + +-- | +-- Module : Amazonka.WAFV2.DescribeManagedRuleGroup +-- Copyright : (c) 2013-2023 Brendan Hay +-- License : Mozilla Public License, v. 2.0. +-- Maintainer : Brendan Hay +-- Stability : auto-generated +-- Portability : non-portable (GHC extensions) +-- +-- Provides high-level information for a managed rule group, including +-- descriptions of the rules. +module Amazonka.WAFV2.DescribeManagedRuleGroup + ( -- * Creating a Request + DescribeManagedRuleGroup (..), + newDescribeManagedRuleGroup, + + -- * Request Lenses + describeManagedRuleGroup_versionName, + describeManagedRuleGroup_vendorName, + describeManagedRuleGroup_name, + describeManagedRuleGroup_scope, + + -- * Destructuring the Response + DescribeManagedRuleGroupResponse (..), + newDescribeManagedRuleGroupResponse, + + -- * Response Lenses + describeManagedRuleGroupResponse_availableLabels, + describeManagedRuleGroupResponse_capacity, + describeManagedRuleGroupResponse_consumedLabels, + describeManagedRuleGroupResponse_labelNamespace, + describeManagedRuleGroupResponse_rules, + describeManagedRuleGroupResponse_snsTopicArn, + describeManagedRuleGroupResponse_versionName, + describeManagedRuleGroupResponse_httpStatus, + ) +where + +import qualified Amazonka.Core as Core +import qualified Amazonka.Core.Lens.Internal as Lens +import qualified Amazonka.Data as Data +import qualified Amazonka.Prelude as Prelude +import qualified Amazonka.Request as Request +import qualified Amazonka.Response as Response +import Amazonka.WAFV2.Types + +-- | /See:/ 'newDescribeManagedRuleGroup' smart constructor. +data DescribeManagedRuleGroup = DescribeManagedRuleGroup' + { -- | The version of the rule group. You can only use a version that is not + -- scheduled for expiration. If you don\'t provide this, WAF uses the + -- vendor\'s default version. + versionName :: Prelude.Maybe Prelude.Text, + -- | The name of the managed rule group vendor. You use this, along with the + -- rule group name, to identify the rule group. + vendorName :: Prelude.Text, + -- | The name of the managed rule group. You use this, along with the vendor + -- name, to identify the rule group. + name :: Prelude.Text, + -- | Specifies whether this is for an Amazon CloudFront distribution or for a + -- regional application. A regional application can be an Application Load + -- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, + -- or an Amazon Cognito user pool. + -- + -- To work with CloudFront, you must also specify the Region US East (N. + -- Virginia) as follows: + -- + -- - CLI - Specify the Region when you use the CloudFront scope: + -- @--scope=CLOUDFRONT --region=us-east-1@. + -- + -- - API and SDKs - For all calls, use the Region endpoint us-east-1. + scope :: Scope + } + deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) + +-- | +-- Create a value of 'DescribeManagedRuleGroup' with all optional fields omitted. +-- +-- Use or to modify other optional fields. +-- +-- The following record fields are available, with the corresponding lenses provided +-- for backwards compatibility: +-- +-- 'versionName', 'describeManagedRuleGroup_versionName' - The version of the rule group. You can only use a version that is not +-- scheduled for expiration. If you don\'t provide this, WAF uses the +-- vendor\'s default version. +-- +-- 'vendorName', 'describeManagedRuleGroup_vendorName' - The name of the managed rule group vendor. You use this, along with the +-- rule group name, to identify the rule group. +-- +-- 'name', 'describeManagedRuleGroup_name' - The name of the managed rule group. You use this, along with the vendor +-- name, to identify the rule group. +-- +-- 'scope', 'describeManagedRuleGroup_scope' - Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +newDescribeManagedRuleGroup :: + -- | 'vendorName' + Prelude.Text -> + -- | 'name' + Prelude.Text -> + -- | 'scope' + Scope -> + DescribeManagedRuleGroup +newDescribeManagedRuleGroup + pVendorName_ + pName_ + pScope_ = + DescribeManagedRuleGroup' + { versionName = + Prelude.Nothing, + vendorName = pVendorName_, + name = pName_, + scope = pScope_ + } + +-- | The version of the rule group. You can only use a version that is not +-- scheduled for expiration. If you don\'t provide this, WAF uses the +-- vendor\'s default version. +describeManagedRuleGroup_versionName :: Lens.Lens' DescribeManagedRuleGroup (Prelude.Maybe Prelude.Text) +describeManagedRuleGroup_versionName = Lens.lens (\DescribeManagedRuleGroup' {versionName} -> versionName) (\s@DescribeManagedRuleGroup' {} a -> s {versionName = a} :: DescribeManagedRuleGroup) + +-- | The name of the managed rule group vendor. You use this, along with the +-- rule group name, to identify the rule group. +describeManagedRuleGroup_vendorName :: Lens.Lens' DescribeManagedRuleGroup Prelude.Text +describeManagedRuleGroup_vendorName = Lens.lens (\DescribeManagedRuleGroup' {vendorName} -> vendorName) (\s@DescribeManagedRuleGroup' {} a -> s {vendorName = a} :: DescribeManagedRuleGroup) + +-- | The name of the managed rule group. You use this, along with the vendor +-- name, to identify the rule group. +describeManagedRuleGroup_name :: Lens.Lens' DescribeManagedRuleGroup Prelude.Text +describeManagedRuleGroup_name = Lens.lens (\DescribeManagedRuleGroup' {name} -> name) (\s@DescribeManagedRuleGroup' {} a -> s {name = a} :: DescribeManagedRuleGroup) + +-- | Specifies whether this is for an Amazon CloudFront distribution or for a +-- regional application. A regional application can be an Application Load +-- Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, +-- or an Amazon Cognito user pool. +-- +-- To work with CloudFront, you must also specify the Region US East (N. +-- Virginia) as follows: +-- +-- - CLI - Specify the Region when you use the CloudFront scope: +-- @--scope=CLOUDFRONT --region=us-east-1@. +-- +-- - API and SDKs - For all calls, use the Region endpoint us-east-1. +describeManagedRuleGroup_scope :: Lens.Lens' DescribeManagedRuleGroup Scope +describeManagedRuleGroup_scope = Lens.lens (\DescribeManagedRuleGroup' {scope} -> scope) (\s@DescribeManagedRuleGroup' {} a -> s {scope = a} :: DescribeManagedRuleGroup) + +instance Core.AWSRequest DescribeManagedRuleGroup where + type + AWSResponse DescribeManagedRuleGroup = + DescribeManagedRuleGroupResponse + request overrides = + Request.postJSON (overrides defaultService) + response = + Response.receiveJSON + ( \s h x -> + DescribeManagedRuleGroupResponse' + Prelude.<$> ( x + Data..?> "AvailableLabels" + Core..!@ Prelude.mempty + ) + Prelude.<*> (x Data..?> "Capacity") + Prelude.<*> (x Data..?> "ConsumedLabels" Core..!@ Prelude.mempty) + Prelude.<*> (x Data..?> "LabelNamespace") + Prelude.<*> (x Data..?> "Rules" Core..!@ Prelude.mempty) + Prelude.<*> (x Data..?> "SnsTopicArn") + Prelude.<*> (x Data..?> "VersionName") + Prelude.<*> (Prelude.pure (Prelude.fromEnum s)) + ) + +instance Prelude.Hashable DescribeManagedRuleGroup where + hashWithSalt _salt DescribeManagedRuleGroup' {..} = + _salt + `Prelude.hashWithSalt` versionName + `Prelude.hashWithSalt` vendorName + `Prelude.hashWithSalt` name + `Prelude.hashWithSalt` scope + +instance Prelude.NFData DescribeManagedRuleGroup where + rnf DescribeManagedRuleGroup' {..} = + Prelude.rnf versionName + `Prelude.seq` Prelude.rnf vendorName + `Prelude.seq` Prelude.rnf name + `Prelude.seq` Prelude.rnf scope + +instance Data.ToHeaders DescribeManagedRuleGroup where + toHeaders = + Prelude.const + ( Prelude.mconcat + [ "X-Amz-Target" + Data.=# ( "AWSWAF_20190729.DescribeManagedRuleGroup" :: + Prelude.ByteString + ), + "Content-Type" + Data.=# ( "application/x-amz-json-1.1" :: + Prelude.ByteString + ) + ] + ) + +instance Data.ToJSON DescribeManagedRuleGroup where + toJSON DescribeManagedRuleGroup' {..} = + Data.object + ( Prelude.catMaybes + [ ("VersionName" Data..=) Prelude.<$> versionName, + Prelude.Just ("VendorName" Data..= vendorName), + Prelude.Just ("Name" Data..= name), + Prelude.Just ("Scope" Data..= scope) + ] + ) + +instance Data.ToPath DescribeManagedRuleGroup where + toPath = Prelude.const "/" + +instance Data.ToQuery DescribeManagedRuleGroup where + toQuery = Prelude.const Prelude.mempty + +-- | /See:/ 'newDescribeManagedRuleGroupResponse' smart constructor. +data DescribeManagedRuleGroupResponse = DescribeManagedRuleGroupResponse' + { -- | The labels that one or more rules in this rule group add to matching web + -- requests. These labels are defined in the @RuleLabels@ for a Rule. + availableLabels :: Prelude.Maybe [LabelSummary], + -- | The web ACL capacity units (WCUs) required for this rule group. WAF uses + -- web ACL capacity units (WCU) to calculate and control the operating + -- resources that are used to run your rules, rule groups, and web ACLs. + -- WAF calculates capacity differently for each rule type, to reflect each + -- rule\'s relative cost. Rule group capacity is fixed at creation, so + -- users can plan their web ACL WCU usage when they use a rule group. The + -- WCU limit for web ACLs is 1,500. + capacity :: Prelude.Maybe Prelude.Natural, + -- | The labels that one or more rules in this rule group match against in + -- label match statements. These labels are defined in a + -- @LabelMatchStatement@ specification, in the Statement definition of a + -- rule. + consumedLabels :: Prelude.Maybe [LabelSummary], + -- | The label namespace prefix for this rule group. All labels added by + -- rules in this rule group have this prefix. + -- + -- - The syntax for the label namespace prefix for a managed rule group + -- is the following: + -- + -- @awswaf:managed:\:\@: + -- + -- - When a rule with a label matches a web request, WAF adds the fully + -- qualified label to the request. A fully qualified label is made up + -- of the label namespace from the rule group or web ACL where the rule + -- is defined and the label from the rule, separated by a colon: + -- + -- @\