Copyright | (c) 2013-2021 Brendan Hay |
---|---|
License | Mozilla Public License, v. 2.0. |
Maintainer | Brendan Hay <brendan.g.hay+amazonka@gmail.com> |
Stability | auto-generated |
Portability | non-portable (GHC extensions) |
Safe Haskell | None |
This is AWS WAF Classic documentation. For more information, see AWS WAF Classic in the developer guide.
For the latest version of AWS WAF, use the AWS WAFV2 API and see the AWS WAF Developer Guide. With the latest version, AWS WAF has a single set of endpoints for regional and global use.
Inserts or deletes Predicate objects in a Rule
. Each Predicate
object identifies a predicate, such as a ByteMatchSet or an IPSet, that
specifies the web requests that you want to allow, block, or count. If
you add more than one predicate to a Rule
, a request must match all of
the specifications to be allowed, blocked, or counted. For example,
suppose that you add the following to a Rule
:
- A
ByteMatchSet
that matches the valueBadBot
in theUser-Agent
header - An
IPSet
that matches the IP address192.0.2.44
You then add the Rule
to a WebACL
and specify that you want to block
requests that satisfy the Rule
. For a request to be blocked, the
User-Agent
header in the request must contain the value BadBot
and
the request must originate from the IP address 192.0.2.44.
To create and configure a Rule
, perform the following steps:
- Create and update the predicates that you want to include in the
Rule
. - Create the
Rule
. See CreateRule. - Use
GetChangeToken
to get the change token that you provide in theChangeToken
parameter of an UpdateRule request. - Submit an
UpdateRule
request to add predicates to theRule
. - Create and update a
WebACL
that contains theRule
. See CreateWebACL.
If you want to replace one ByteMatchSet
or IPSet
with another, you
delete the existing one and add the new one.
For more information about how to use the AWS WAF API to allow or block HTTP requests, see the AWS WAF Developer Guide.
Synopsis
- data UpdateRule = UpdateRule' {
- ruleId :: Text
- changeToken :: Text
- updates :: [RuleUpdate]
- newUpdateRule :: Text -> Text -> UpdateRule
- updateRule_ruleId :: Lens' UpdateRule Text
- updateRule_changeToken :: Lens' UpdateRule Text
- updateRule_updates :: Lens' UpdateRule [RuleUpdate]
- data UpdateRuleResponse = UpdateRuleResponse' {
- changeToken :: Maybe Text
- httpStatus :: Int
- newUpdateRuleResponse :: Int -> UpdateRuleResponse
- updateRuleResponse_changeToken :: Lens' UpdateRuleResponse (Maybe Text)
- updateRuleResponse_httpStatus :: Lens' UpdateRuleResponse Int
Creating a Request
data UpdateRule Source #
See: newUpdateRule
smart constructor.
UpdateRule' | |
|
Instances
Create a value of UpdateRule
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:ruleId:UpdateRule'
, updateRule_ruleId
- The RuleId
of the Rule
that you want to update. RuleId
is returned
by CreateRule
and by ListRules.
$sel:changeToken:UpdateRule'
, updateRule_changeToken
- The value returned by the most recent call to GetChangeToken.
$sel:updates:UpdateRule'
, updateRule_updates
- An array of RuleUpdate
objects that you want to insert into or delete
from a Rule. For more information, see the applicable data types:
- RuleUpdate: Contains
Action
andPredicate
- Predicate: Contains
DataId
,Negated
, andType
- FieldToMatch: Contains
Data
andType
Request Lenses
updateRule_ruleId :: Lens' UpdateRule Text Source #
The RuleId
of the Rule
that you want to update. RuleId
is returned
by CreateRule
and by ListRules.
updateRule_changeToken :: Lens' UpdateRule Text Source #
The value returned by the most recent call to GetChangeToken.
updateRule_updates :: Lens' UpdateRule [RuleUpdate] Source #
An array of RuleUpdate
objects that you want to insert into or delete
from a Rule. For more information, see the applicable data types:
- RuleUpdate: Contains
Action
andPredicate
- Predicate: Contains
DataId
,Negated
, andType
- FieldToMatch: Contains
Data
andType
Destructuring the Response
data UpdateRuleResponse Source #
See: newUpdateRuleResponse
smart constructor.
UpdateRuleResponse' | |
|
Instances
newUpdateRuleResponse Source #
Create a value of UpdateRuleResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:changeToken:UpdateRule'
, updateRuleResponse_changeToken
- The ChangeToken
that you used to submit the UpdateRule
request. You
can also use this value to query the status of the request. For more
information, see GetChangeTokenStatus.
$sel:httpStatus:UpdateRuleResponse'
, updateRuleResponse_httpStatus
- The response's http status code.
Response Lenses
updateRuleResponse_changeToken :: Lens' UpdateRuleResponse (Maybe Text) Source #
The ChangeToken
that you used to submit the UpdateRule
request. You
can also use this value to query the status of the request. For more
information, see GetChangeTokenStatus.
updateRuleResponse_httpStatus :: Lens' UpdateRuleResponse Int Source #
The response's http status code.