AWS Managed Policies Explorer

Home About

AWS Managed Policies. A maze of twisty passages all alike. Explore them here. If it looks like a button, it's clickable. Always up to date.

Service: AWS WAF Regional

Short Name:

waf-regional

ARN Format:arn:aws:waf-regional:${Region}:${Account}:${ResourceId}/${Id}

ARN Regex:^arn:aws:waf-regional:.+:[0-9]+:.+/.+

ReadOnlyAccess

…

AWSConfigRole

Action	Reference	Description
waf-regional:ListActivatedRulesInRuleGroup	Docs	Grants permission to retrieve an array of ActivatedRule objects
waf-regional:ListByteMatchSets	Docs	Grants permission to retrieve an array of ByteMatchSetSummary objects
waf-regional:ListGeoMatchSets	Docs	Grants permission to retrieve an array of GeoMatchSetSummary objects
waf-regional:ListIPSets	Docs	Grants permission to retrieve an array of IPSetSummary objects
waf-regional:ListLoggingConfigurations	Docs	Grants permission to retrieve an array of LoggingConfiguration objects
waf-regional:ListRateBasedRules	Docs	Grants permission to retrieve an array of RuleSummary objects
waf-regional:ListRegexMatchSets	Docs	Grants permission to retrieve an array of RegexMatchSetSummary objects
waf-regional:ListRegexPatternSets	Docs	Grants permission to retrieve an array of RegexPatternSetSummary objects
waf-regional:ListResourcesForWebACL	Docs	Grants permission to retrieve an array of resources associated with a specified WebACL
waf-regional:ListRuleGroups	Docs	Grants permission to retrieve an array of RuleGroup objects
waf-regional:ListRules	Docs	Grants permission to retrieve an array of RuleSummary objects
waf-regional:ListSizeConstraintSets	Docs	Grants permission to retrieve an array of SizeConstraintSetSummary objects
waf-regional:ListSqlInjectionMatchSets	Docs	Grants permission to retrieve an array of SqlInjectionMatchSet objects
waf-regional:ListSubscribedRuleGroups	Docs	Grants permission to retrieve an array of RuleGroup objects that you are subscribed to
waf-regional:ListWebACLs	Docs	Grants permission to retrieve an array of WebACLSummary objects
waf-regional:ListXssMatchSets	Docs	Grants permission to retrieve an array of XssMatchSet objects
waf-regional:CreateWebACL	Docs	Grants permission to create a WebACL
waf-regional:DeletePermissionPolicy	Docs	Grants permission to delete an IAM policy from a rule group
waf-regional:DeleteWebACL	Docs	Grants permission to delete a WebACL
waf-regional:PutPermissionPolicy	Docs	Grants permission to attach an IAM policy to a specified rule group, to support rule group sharing between accounts
waf-regional:UpdateWebACL	Docs	Grants permission to insert or delete ActivatedRule objects in a WebACL
waf-regional:GetByteMatchSet	Docs	Grants permission to retrieve a ByteMatchSet
waf-regional:GetChangeToken	Docs	Grants permission to retrieve a change token to use in create, update, and delete requests
waf-regional:GetChangeTokenStatus	Docs	Grants permission to retrieve the status of a change token
waf-regional:GetGeoMatchSet	Docs	Grants permission to retrieve a GeoMatchSet
waf-regional:GetIPSet	Docs	Grants permission to retrieve an IPSet
waf-regional:GetLoggingConfiguration	Docs	Grants permission to retrieve a LoggingConfiguration
waf-regional:GetPermissionPolicy	Docs	Grants permission to retrieve an IAM policy attached to a RuleGroup
waf-regional:GetRateBasedRule	Docs	Grants permission to retrieve a RateBasedRule
waf-regional:GetRateBasedRuleManagedKeys	Docs	Grants permission to retrieve the array of IP addresses that are currently being blocked by a RateBasedRule
waf-regional:GetRegexMatchSet	Docs	Grants permission to retrieve a RegexMatchSet
waf-regional:GetRegexPatternSet	Docs	Grants permission to retrieve a RegexPatternSet
waf-regional:GetRule	Docs	Grants permission to retrieve a Rule
waf-regional:GetRuleGroup	Docs	Grants permission to retrieve a RuleGroup
waf-regional:GetSampledRequests	Docs	Grants permission to retrieve detailed information for a sample set of web requests
waf-regional:GetSizeConstraintSet	Docs	Grants permission to retrieve a SizeConstraintSet
waf-regional:GetSqlInjectionMatchSet	Docs	Grants permission to retrieve an SqlInjectionMatchSet
waf-regional:GetWebACL	Docs	Grants permission to retrieve a WebACL
waf-regional:GetWebACLForResource	Docs	Grants permission to retrieve a WebACL that's associated with a specified resource
waf-regional:GetXssMatchSet	Docs	Grants permission to retrieve an XssMatchSet
waf-regional:ListTagsForResource	Docs	Grants permission to lists the Tags for a resource
waf-regional:TagResource	Docs	Grants permission to add a Tag to a resource
waf-regional:UntagResource	Docs	Grants permission to remove a Tag from a resource
waf-regional:AssociateWebACL	Docs	Grants permission to associate a web ACL with a resource
waf-regional:CreateByteMatchSet	Docs	Grants permission to create a ByteMatchSet
waf-regional:CreateGeoMatchSet	Docs	Grants permission to create a GeoMatchSet
waf-regional:CreateIPSet	Docs	Grants permission to create an IPSet
waf-regional:CreateRateBasedRule	Docs	Grants permission to create a RateBasedRule
waf-regional:CreateRegexMatchSet	Docs	Grants permission to create a RegexMatchSet
waf-regional:CreateRegexPatternSet	Docs	Grants permission to create a RegexPatternSet
waf-regional:CreateRule	Docs	Grants permission to create a Rule
waf-regional:CreateRuleGroup	Docs	Grants permission to create a RuleGroup
waf-regional:CreateSizeConstraintSet	Docs	Grants permission to create a SizeConstraintSet
waf-regional:CreateSqlInjectionMatchSet	Docs	Grants permission to create an SqlInjectionMatchSet
waf-regional:CreateWebACLMigrationStack	Docs	Grants permission to create a CloudFormation web ACL template in an S3 bucket for the purposes of migrating the web ACL from AWS WAF Classic to AWS WAF v2
waf-regional:CreateXssMatchSet	Docs	Grants permission to create an XssMatchSet
waf-regional:DeleteByteMatchSet	Docs	Grants permission to delete a ByteMatchSet
waf-regional:DeleteGeoMatchSet	Docs	Grants permission to delete a GeoMatchSet
waf-regional:DeleteIPSet	Docs	Grants permission to delete an IPSet
waf-regional:DeleteLoggingConfiguration	Docs	Grants permission to delete a LoggingConfiguration from a web ACL
waf-regional:DeleteRateBasedRule	Docs	Grants permission to delete a RateBasedRule
waf-regional:DeleteRegexMatchSet	Docs	Grants permission to delete a RegexMatchSet
waf-regional:DeleteRegexPatternSet	Docs	Grants permission to delete a RegexPatternSet
waf-regional:DeleteRule	Docs	Grants permission to delete a Rule
waf-regional:DeleteRuleGroup	Docs	Grants permission to delete a RuleGroup
waf-regional:DeleteSizeConstraintSet	Docs	Grants permission to delete a SizeConstraintSet
waf-regional:DeleteSqlInjectionMatchSet	Docs	Grants permission to delete an SqlInjectionMatchSet
waf-regional:DeleteXssMatchSet	Docs	Grants permission to delete an XssMatchSet
waf-regional:DisassociateWebACL	Docs	Grants permission to delete an association between a web ACL and a resource
waf-regional:PutLoggingConfiguration	Docs	Grants permission to associates a LoggingConfiguration with a web ACL
waf-regional:UpdateByteMatchSet	Docs	Grants permission to insert or delete ByteMatchTuple objects in a ByteMatchSet
waf-regional:UpdateGeoMatchSet	Docs	Grants permission to insert or delete GeoMatchConstraint objects in a GeoMatchSet
waf-regional:UpdateIPSet	Docs	Grants permission to insert or delete IPSetDescriptor objects in an IPSet
waf-regional:UpdateRateBasedRule	Docs	Grants permission to insert or delete predicate objects in a rate based rule and update the RateLimit in the rule
waf-regional:UpdateRegexMatchSet	Docs	Grants permission to insert or delete RegexMatchTuple objects in a RegexMatchSet
waf-regional:UpdateRegexPatternSet	Docs	Grants permission to insert or delete RegexPatternStrings in a RegexPatternSet
waf-regional:UpdateRule	Docs	Grants permission to insert or delete predicate objects in a Rule
waf-regional:UpdateRuleGroup	Docs	Grants permission to insert or delete ActivatedRule objects in a RuleGroup
waf-regional:UpdateSizeConstraintSet	Docs	Grants permission to insert or delete SizeConstraint objects in a SizeConstraintSet
waf-regional:UpdateSqlInjectionMatchSet	Docs	Grants permission to insert or delete SqlInjectionMatchTuple objects in an SqlInjectionMatchSet
waf-regional:UpdateXssMatchSet	Docs	Grants permission to insert or delete XssMatchTuple objects in an XssMatchSet

aws:RequestTag/${TagKey}aws:ResourceTag/${TagKey}aws:TagKeys