Class WebAclState


  • public final class WebAclState
    extends com.pulumi.resources.ResourceArgs
    • Method Detail

      • applicationIntegrationUrl

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> applicationIntegrationUrl()
        Returns:
        URL to use in SDK integrations with managed rule groups.
      • arn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> arn()
        Returns:
        ARN of the WAF WebACL.
      • associationConfig

        public java.util.Optional<com.pulumi.core.Output<WebAclAssociationConfigArgs>> associationConfig()
        Returns:
        Custom configurations for the associations between the web ACL and protected resources. See `associationConfig` below for details.
      • capacity

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> capacity()
        Returns:
        Web ACL capacity units (WCUs) currently being used by this web ACL.
      • captchaConfig

        public java.util.Optional<com.pulumi.core.Output<WebAclCaptchaConfigArgs>> captchaConfig()
        Returns:
        Configuration for how AWS WAF handles CAPTCHA evaluations at the web ACL level (used by [AWS Bot Control](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html)). See `captchaConfig` below for details.
      • challengeConfig

        public java.util.Optional<com.pulumi.core.Output<WebAclChallengeConfigArgs>> challengeConfig()
        Returns:
        Configuration for how AWS WAF handles Challenge evaluations at the web ACL level (used by [AWS Bot Control](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html)). See `challengeConfig` below for details.
      • customResponseBodies

        public java.util.Optional<com.pulumi.core.Output<java.util.List<WebAclCustomResponseBodyArgs>>> customResponseBodies()
        Returns:
        Custom response bodies that can be referenced by `customResponse` actions. See `customResponseBody` below for details.
      • dataProtectionConfig

        public java.util.Optional<com.pulumi.core.Output<WebAclDataProtectionConfigArgs>> dataProtectionConfig()
        Returns:
        Data protection to apply to the web request data for the web ACL. This is a web ACL level data protection option. See `dataProtectionConfig` below for details.
      • defaultAction

        public java.util.Optional<com.pulumi.core.Output<WebAclDefaultActionArgs>> defaultAction()
        Returns:
        Action to perform if none of the `rules` contained in the WebACL match. See `defaultAction` below for details.
      • description

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> description()
        Returns:
        Friendly description of the WebACL.
      • lockToken

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> lockToken()
      • monetizationConfig

        public java.util.Optional<com.pulumi.core.Output<WebAclMonetizationConfigArgs>> monetizationConfig()
        Returns:
        Monetization configuration for the web ACL. Provide this when any rule in the web ACL uses the `monetize` action. See `monetizationConfig` below for details.
      • name

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> name()
        Returns:
        Friendly name of the WebACL. If omitted, the provider will assign a random, unique name. Conflicts with `namePrefix`.
      • namePrefix

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> namePrefix()
        Returns:
        Creates a unique name beginning with the specified prefix. Conflicts with `name`.
      • region

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
      • ruleJson

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> ruleJson()
        Returns:
        Raw JSON string to allow more than three nested statements. Conflicts with `rule` attribute. This is for advanced use cases where more than 3 levels of nested statements are required. **There is no drift detection at this time**. If you use this attribute instead of `rule`, you will be foregoing drift detection. Additionally, importing an existing web ACL into a configuration with `ruleJson` set will result in a one time in-place update as the remote rule configuration is initially written to the `rule` attribute. See the AWS [documentation](https://docs.aws.amazon.com/waf/latest/APIReference/API_CreateWebACL.html) for the JSON structure.
      • rules

        public java.util.Optional<com.pulumi.core.Output<java.util.List<WebAclRuleArgs>>> rules()
        Returns:
        **`rule` blocks in this resource have several known limitations.** Consider using `aws.wafv2.WebAclRule` to manage rules as separate resources instead. Rule blocks used to identify the web requests that you want to `allow`, `block`, or `count`. See `rule` below for details.
      • scope

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> scope()
        Returns:
        Scope of the web ACL, either an AWS CloudFront distribution or a regional application. Valid values are `CLOUDFRONT` or `REGIONAL`. To work with CloudFront, you must also specify the region `us-east-1` (N. Virginia) on the AWS provider.
      • tags

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tags()
        Returns:
        Map of key-value pairs to associate with the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
      • tagsAll

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tagsAll()
        Returns:
        Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
      • tokenDomains

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> tokenDomains()
        Returns:
        Domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
      • visibilityConfig

        public java.util.Optional<com.pulumi.core.Output<WebAclVisibilityConfigArgs>> visibilityConfig()
        Returns:
        Amazon CloudWatch metrics and web request sample collection configuration. See `visibilityConfig` below for details.