feat(client-wafv2): You can now perform an exact match against the we…

…b request's JA3 fingerprint.
aws · Sep 25, 2023 · e4f0c48 · e4f0c48
1 parent 738cda3
commit e4f0c48
Show file tree

Hide file tree

Showing 14 changed files with 316 additions and 254 deletions.
diff --git a/clients/client-wafv2/src/commands/CheckCapacityCommand.ts b/clients/client-wafv2/src/commands/CheckCapacityCommand.ts
@@ -118,6 +118,9 @@ export interface CheckCapacityCommandOutput extends CheckCapacityResponse, __Met
  *             HeaderOrder: { // HeaderOrder
  *               OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  *             },
+ *             JA3Fingerprint: { // JA3Fingerprint
+ *               FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ *             },
  *           },
  *           TextTransformations: [ // TextTransformations // required
  *             { // TextTransformation
@@ -182,6 +185,9 @@ export interface CheckCapacityCommandOutput extends CheckCapacityResponse, __Met
  *             HeaderOrder: {
  *               OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  *             },
+ *             JA3Fingerprint: {
+ *               FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ *             },
  *           },
  *           TextTransformations: [ // required
  *             {
@@ -242,6 +248,9 @@ export interface CheckCapacityCommandOutput extends CheckCapacityResponse, __Met
  *             HeaderOrder: {
  *               OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  *             },
+ *             JA3Fingerprint: {
+ *               FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ *             },
  *           },
  *           TextTransformations: [ // required
  *             {
@@ -297,6 +306,9 @@ export interface CheckCapacityCommandOutput extends CheckCapacityResponse, __Met
  *             HeaderOrder: {
  *               OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  *             },
+ *             JA3Fingerprint: {
+ *               FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ *             },
  *           },
  *           ComparisonOperator: "EQ" || "NE" || "LE" || "LT" || "GE" || "GT", // required
  *           Size: Number("long"), // required
@@ -439,6 +451,9 @@ export interface CheckCapacityCommandOutput extends CheckCapacityResponse, __Met
  *             HeaderOrder: {
  *               OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  *             },
+ *             JA3Fingerprint: {
+ *               FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ *             },
  *           },
  *           TextTransformations: [ // required
  *             {

diff --git a/clients/client-wafv2/src/commands/CreateRuleGroupCommand.ts b/clients/client-wafv2/src/commands/CreateRuleGroupCommand.ts
@@ -111,6 +111,9 @@ export interface CreateRuleGroupCommandOutput extends CreateRuleGroupResponse, _
  *             HeaderOrder: { // HeaderOrder
  *               OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  *             },
+ *             JA3Fingerprint: { // JA3Fingerprint
+ *               FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ *             },
  *           },
  *           TextTransformations: [ // TextTransformations // required
  *             { // TextTransformation
@@ -175,6 +178,9 @@ export interface CreateRuleGroupCommandOutput extends CreateRuleGroupResponse, _
  *             HeaderOrder: {
  *               OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  *             },
+ *             JA3Fingerprint: {
+ *               FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ *             },
  *           },
  *           TextTransformations: [ // required
  *             {
@@ -235,6 +241,9 @@ export interface CreateRuleGroupCommandOutput extends CreateRuleGroupResponse, _
  *             HeaderOrder: {
  *               OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  *             },
+ *             JA3Fingerprint: {
+ *               FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ *             },
  *           },
  *           TextTransformations: [ // required
  *             {
@@ -290,6 +299,9 @@ export interface CreateRuleGroupCommandOutput extends CreateRuleGroupResponse, _
  *             HeaderOrder: {
  *               OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  *             },
+ *             JA3Fingerprint: {
+ *               FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ *             },
  *           },
  *           ComparisonOperator: "EQ" || "NE" || "LE" || "LT" || "GE" || "GT", // required
  *           Size: Number("long"), // required
@@ -432,6 +444,9 @@ export interface CreateRuleGroupCommandOutput extends CreateRuleGroupResponse, _
  *             HeaderOrder: {
  *               OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  *             },
+ *             JA3Fingerprint: {
+ *               FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ *             },
  *           },
  *           TextTransformations: [ // required
  *             {

diff --git a/clients/client-wafv2/src/commands/CreateWebACLCommand.ts b/clients/client-wafv2/src/commands/CreateWebACLCommand.ts
@@ -38,7 +38,7 @@ export interface CreateWebACLCommandOutput extends CreateWebACLResponse, __Metad
 /**
  * @public
  * <p>Creates a <a>WebACL</a> per the specifications provided.</p>
- *          <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, an Amazon Cognito user pool, an App Runner service, or an Amazon Web Services Verified Access instance.  </p>
+ *          <p> A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has a statement that defines what to look for in web requests and an action that WAF applies to requests that match the statement. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types <a>Rule</a>, <a>RuleGroup</a>, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, an Amazon Cognito user pool, an App Runner service, or an Amazon Web Services Verified Access instance.  </p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -134,6 +134,9 @@ export interface CreateWebACLCommandOutput extends CreateWebACLResponse, __Metad
  *             HeaderOrder: { // HeaderOrder
  *               OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  *             },
+ *             JA3Fingerprint: { // JA3Fingerprint
+ *               FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ *             },
  *           },
  *           TextTransformations: [ // TextTransformations // required
  *             { // TextTransformation
@@ -198,6 +201,9 @@ export interface CreateWebACLCommandOutput extends CreateWebACLResponse, __Metad
  *             HeaderOrder: {
  *               OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  *             },
+ *             JA3Fingerprint: {
+ *               FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ *             },
  *           },
  *           TextTransformations: [ // required
  *             {
@@ -258,6 +264,9 @@ export interface CreateWebACLCommandOutput extends CreateWebACLResponse, __Metad
  *             HeaderOrder: {
  *               OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  *             },
+ *             JA3Fingerprint: {
+ *               FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ *             },
  *           },
  *           TextTransformations: [ // required
  *             {
@@ -313,6 +322,9 @@ export interface CreateWebACLCommandOutput extends CreateWebACLResponse, __Metad
  *             HeaderOrder: {
  *               OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  *             },
+ *             JA3Fingerprint: {
+ *               FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ *             },
  *           },
  *           ComparisonOperator: "EQ" || "NE" || "LE" || "LT" || "GE" || "GT", // required
  *           Size: Number("long"), // required
@@ -445,6 +457,9 @@ export interface CreateWebACLCommandOutput extends CreateWebACLResponse, __Metad
  *             HeaderOrder: {
  *               OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  *             },
+ *             JA3Fingerprint: {
+ *               FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ *             },
  *           },
  *           TextTransformations: [ // required
  *             {

diff --git a/clients/client-wafv2/src/commands/GetLoggingConfigurationCommand.ts b/clients/client-wafv2/src/commands/GetLoggingConfigurationCommand.ts
@@ -110,6 +110,9 @@ export interface GetLoggingConfigurationCommandOutput extends GetLoggingConfigur
  * //         HeaderOrder: { // HeaderOrder
  * //           OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  * //         },
+ * //         JA3Fingerprint: { // JA3Fingerprint
+ * //           FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ * //         },
  * //       },
  * //     ],
  * //     ManagedByFirewallManager: true || false,

diff --git a/clients/client-wafv2/src/commands/GetRuleGroupCommand.ts b/clients/client-wafv2/src/commands/GetRuleGroupCommand.ts
@@ -120,6 +120,9 @@ export interface GetRuleGroupCommandOutput extends GetRuleGroupResponse, __Metad
  * //               HeaderOrder: { // HeaderOrder
  * //                 OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  * //               },
+ * //               JA3Fingerprint: { // JA3Fingerprint
+ * //                 FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ * //               },
  * //             },
  * //             TextTransformations: [ // TextTransformations // required
  * //               { // TextTransformation
@@ -184,6 +187,9 @@ export interface GetRuleGroupCommandOutput extends GetRuleGroupResponse, __Metad
  * //               HeaderOrder: {
  * //                 OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  * //               },
+ * //               JA3Fingerprint: {
+ * //                 FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ * //               },
  * //             },
  * //             TextTransformations: [ // required
  * //               {
@@ -244,6 +250,9 @@ export interface GetRuleGroupCommandOutput extends GetRuleGroupResponse, __Metad
  * //               HeaderOrder: {
  * //                 OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  * //               },
+ * //               JA3Fingerprint: {
+ * //                 FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ * //               },
  * //             },
  * //             TextTransformations: [ // required
  * //               {
@@ -299,6 +308,9 @@ export interface GetRuleGroupCommandOutput extends GetRuleGroupResponse, __Metad
  * //               HeaderOrder: {
  * //                 OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  * //               },
+ * //               JA3Fingerprint: {
+ * //                 FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ * //               },
  * //             },
  * //             ComparisonOperator: "EQ" || "NE" || "LE" || "LT" || "GE" || "GT", // required
  * //             Size: Number("long"), // required
@@ -441,6 +453,9 @@ export interface GetRuleGroupCommandOutput extends GetRuleGroupResponse, __Metad
  * //               HeaderOrder: {
  * //                 OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  * //               },
+ * //               JA3Fingerprint: {
+ * //                 FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ * //               },
  * //             },
  * //             TextTransformations: [ // required
  * //               {

diff --git a/clients/client-wafv2/src/commands/GetWebACLCommand.ts b/clients/client-wafv2/src/commands/GetWebACLCommand.ts
@@ -142,6 +142,9 @@ export interface GetWebACLCommandOutput extends GetWebACLResponse, __MetadataBea
  * //               HeaderOrder: { // HeaderOrder
  * //                 OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  * //               },
+ * //               JA3Fingerprint: { // JA3Fingerprint
+ * //                 FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ * //               },
  * //             },
  * //             TextTransformations: [ // TextTransformations // required
  * //               { // TextTransformation
@@ -206,6 +209,9 @@ export interface GetWebACLCommandOutput extends GetWebACLResponse, __MetadataBea
  * //               HeaderOrder: {
  * //                 OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  * //               },
+ * //               JA3Fingerprint: {
+ * //                 FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ * //               },
  * //             },
  * //             TextTransformations: [ // required
  * //               {
@@ -266,6 +272,9 @@ export interface GetWebACLCommandOutput extends GetWebACLResponse, __MetadataBea
  * //               HeaderOrder: {
  * //                 OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  * //               },
+ * //               JA3Fingerprint: {
+ * //                 FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ * //               },
  * //             },
  * //             TextTransformations: [ // required
  * //               {
@@ -321,6 +330,9 @@ export interface GetWebACLCommandOutput extends GetWebACLResponse, __MetadataBea
  * //               HeaderOrder: {
  * //                 OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  * //               },
+ * //               JA3Fingerprint: {
+ * //                 FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ * //               },
  * //             },
  * //             ComparisonOperator: "EQ" || "NE" || "LE" || "LT" || "GE" || "GT", // required
  * //             Size: Number("long"), // required
@@ -453,6 +465,9 @@ export interface GetWebACLCommandOutput extends GetWebACLResponse, __MetadataBea
  * //               HeaderOrder: {
  * //                 OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  * //               },
+ * //               JA3Fingerprint: {
+ * //                 FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ * //               },
  * //             },
  * //             TextTransformations: [ // required
  * //               {

diff --git a/clients/client-wafv2/src/commands/GetWebACLForResourceCommand.ts b/clients/client-wafv2/src/commands/GetWebACLForResourceCommand.ts
@@ -140,6 +140,9 @@ export interface GetWebACLForResourceCommandOutput extends GetWebACLForResourceR
  * //               HeaderOrder: { // HeaderOrder
  * //                 OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  * //               },
+ * //               JA3Fingerprint: { // JA3Fingerprint
+ * //                 FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ * //               },
  * //             },
  * //             TextTransformations: [ // TextTransformations // required
  * //               { // TextTransformation
@@ -204,6 +207,9 @@ export interface GetWebACLForResourceCommandOutput extends GetWebACLForResourceR
  * //               HeaderOrder: {
  * //                 OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  * //               },
+ * //               JA3Fingerprint: {
+ * //                 FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ * //               },
  * //             },
  * //             TextTransformations: [ // required
  * //               {
@@ -264,6 +270,9 @@ export interface GetWebACLForResourceCommandOutput extends GetWebACLForResourceR
  * //               HeaderOrder: {
  * //                 OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  * //               },
+ * //               JA3Fingerprint: {
+ * //                 FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ * //               },
  * //             },
  * //             TextTransformations: [ // required
  * //               {
@@ -319,6 +328,9 @@ export interface GetWebACLForResourceCommandOutput extends GetWebACLForResourceR
  * //               HeaderOrder: {
  * //                 OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  * //               },
+ * //               JA3Fingerprint: {
+ * //                 FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ * //               },
  * //             },
  * //             ComparisonOperator: "EQ" || "NE" || "LE" || "LT" || "GE" || "GT", // required
  * //             Size: Number("long"), // required
@@ -451,6 +463,9 @@ export interface GetWebACLForResourceCommandOutput extends GetWebACLForResourceR
  * //               HeaderOrder: {
  * //                 OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  * //               },
+ * //               JA3Fingerprint: {
+ * //                 FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ * //               },
  * //             },
  * //             TextTransformations: [ // required
  * //               {

diff --git a/clients/client-wafv2/src/commands/ListLoggingConfigurationsCommand.ts b/clients/client-wafv2/src/commands/ListLoggingConfigurationsCommand.ts
@@ -113,6 +113,9 @@ export interface ListLoggingConfigurationsCommandOutput extends ListLoggingConfi
  * //           HeaderOrder: { // HeaderOrder
  * //             OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  * //           },
+ * //           JA3Fingerprint: { // JA3Fingerprint
+ * //             FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ * //           },
  * //         },
  * //       ],
  * //       ManagedByFirewallManager: true || false,

diff --git a/clients/client-wafv2/src/commands/PutLoggingConfigurationCommand.ts b/clients/client-wafv2/src/commands/PutLoggingConfigurationCommand.ts
@@ -147,6 +147,9 @@ export interface PutLoggingConfigurationCommandOutput extends PutLoggingConfigur
  *         HeaderOrder: { // HeaderOrder
  *           OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  *         },
+ *         JA3Fingerprint: { // JA3Fingerprint
+ *           FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ *         },
  *       },
  *     ],
  *     ManagedByFirewallManager: true || false,
@@ -234,6 +237,9 @@ export interface PutLoggingConfigurationCommandOutput extends PutLoggingConfigur
  * //         HeaderOrder: { // HeaderOrder
  * //           OversizeHandling: "CONTINUE" || "MATCH" || "NO_MATCH", // required
  * //         },
+ * //         JA3Fingerprint: { // JA3Fingerprint
+ * //           FallbackBehavior: "MATCH" || "NO_MATCH", // required
+ * //         },
  * //       },
  * //     ],
  * //     ManagedByFirewallManager: true || false,