Service: AWS WAF V2
Short Name:
wafv2
ARN Format:
arn:aws:wafv2:${Region}:${Account}:${Scope}/${ResourceType}/${ResourceName}/${ResourceId}
ARN Regex:
^arn:aws:wafv2:.+:.+:.+/.+/.+/.+
CloudFrontFullAccess
…
AWSConfigRoleAction | Access | Reference | Description |
---|---|---|---|
wafv2:ListAPIKeys | Docs | Grants permission to retrieve a list of the API keys that you've defined for the specified scope | |
wafv2:ListAvailableManagedRuleGroups | Docs | Grants permission to retrieve an array of managed rule groups that are available for you to use | |
wafv2:ListAvailableManagedRuleGroupVersions | Docs | Grants permission to retrieve an array of managed rule group versions that are available for you to use | |
wafv2:ListIPSets | Docs | Grants permission to retrieve an array of IPSetSummary objects for the IP sets that you manage | |
wafv2:ListLoggingConfigurations | Docs | Grants permission to retrieve an array of your LoggingConfiguration objects | |
wafv2:ListManagedRuleSets | Docs | Grants permission to retrieve an array of your ManagedRuleSet objects | |
wafv2:ListMobileSdkReleases | Docs | Grants permission to retrieve a list of the available releases for the mobile SDK and the specified device platform | |
wafv2:ListRegexPatternSets | Docs | Grants permission to retrieve an array of RegexPatternSetSummary objects for the regex pattern sets that you manage | |
wafv2:ListResourcesForWebACL | Docs | Grants permission to retrieve an array of the Amazon Resource Names (ARNs) for the resources that are associated with a web ACL | |
wafv2:ListRuleGroups | Docs | Grants permission to retrieve an array of RuleGroupSummary objects for the rule groups that you manage | |
wafv2:ListWebACLs | Docs | Grants permission to retrieve an array of WebACLSummary objects for the web ACLs that you manage | |
wafv2:DeletePermissionPolicy | Docs | Grants permission to delete the PermissionPolicy on a RuleGroup | |
wafv2:PutPermissionPolicy | Docs | Grants permission to attach an IAM policy to a resource, used to share rule groups between accounts | |
wafv2:CheckCapacity | Docs | Grants permission to calculate web ACL capacity unit (WCU) requirements for a specified scope and set of rules | |
wafv2:DescribeAllManagedProducts | Docs | Grants permission to retrieve product information for a managed rule group | |
wafv2:DescribeManagedProductsByVendor | Docs | Grants permission to retrieve product information for a managed rule group by a given vendor | |
wafv2:DescribeManagedRuleGroup | Docs | Grants permission to retrieve high-level information for a managed rule group | |
wafv2:GenerateMobileSdkReleaseUrl | Docs | Grants permission to generate a presigned download URL for the specified release of the mobile SDK | |
wafv2:GetDecryptedAPIKey | Docs | Grants permission to return your API key in decrypted form. Use this to check the token domains that you have defined for the key | |
wafv2:GetIPSet | Docs | Grants permission to retrieve details about an IPSet | |
wafv2:GetLoggingConfiguration | Docs | Grants permission to retrieve LoggingConfiguration for a WebACL | |
wafv2:GetManagedRuleSet | Docs | Grants permission to retrieve details about a ManagedRuleSet | |
wafv2:GetMobileSdkRelease | Docs | Grants permission to retrieve information for the specified mobile SDK release, including release notes and tags | |
wafv2:GetPermissionPolicy | Docs | Grants permission to retrieve a PermissionPolicy for a RuleGroup | |
wafv2:GetRateBasedStatementManagedKeys | Docs | Grants permission to retrieve the keys that are currently blocked by a rate-based rule | |
wafv2:GetRegexPatternSet | Docs | Grants permission to retrieve details about a RegexPatternSet | |
wafv2:GetRuleGroup | Docs | Grants permission to retrieve details about a RuleGroup | |
wafv2:GetSampledRequests | Docs | Grants permission to retrieve detailed information about a sampling of web requests | |
wafv2:GetWebACL | Docs | Grants permission to retrieve details about a WebACL | |
wafv2:GetWebACLForResource | Docs | Grants permission to retrieve the WebACL that's associated with a resource | |
wafv2:ListTagsForResource | Docs | Grants permission to list tags for a resource | |
wafv2:TagResource | Docs | Grants permission to associate tags with a AWS resource | |
wafv2:UntagResource | Docs | Grants permission to disassociate tags from an AWS resource | |
wafv2:AssociateWebACL | Docs | Grants permission to associate a WebACL with a resource | |
wafv2:CreateAPIKey | Docs | Grants permission to create an API key for use in the integration of the CAPTCHA API in your JavaScript client applications | |
wafv2:CreateIPSet | Docs | Grants permission to create an IPSet | |
wafv2:CreateRegexPatternSet | Docs | Grants permission to create a RegexPatternSet | |
wafv2:CreateRuleGroup | Docs | Grants permission to create a RuleGroup | |
wafv2:CreateWebACL | Docs | Grants permission to create a WebACL | |
wafv2:DeleteFirewallManagerRuleGroups | Docs | Grants permission to delete FirewallManagedRulesGroups from a WebACL if not managed by Firewall Manager anymore | |
wafv2:DeleteIPSet | Docs | Grants permission to delete an IPSet | |
wafv2:DeleteLoggingConfiguration | Docs | Grants permission to delete the LoggingConfiguration from a WebACL | |
wafv2:DeleteRegexPatternSet | Docs | Grants permission to delete a RegexPatternSet | |
wafv2:DeleteRuleGroup | Docs | Grants permission to delete a RuleGroup | |
wafv2:DeleteWebACL | Docs | Grants permission to delete a WebACL | |
wafv2:DisassociateFirewallManager | Docs | Grants permission to disassociate Firewall Manager from a WebACL | |
wafv2:DisassociateWebACL | Docs | Grants permission to disassociate a WebACL from an application resource | |
wafv2:PutFirewallManagerRuleGroups | Docs | Grants permission to create FirewallManagedRulesGroups in a WebACL | |
wafv2:PutLoggingConfiguration | Docs | Grants permission to enable a LoggingConfiguration, to start logging for a web ACL | |
wafv2:PutManagedRuleSetVersions | Docs | Grants permission to enable create a new or update an existing version of a ManagedRuleSet | |
wafv2:UpdateIPSet | Docs | Grants permission to update an IPSet | |
wafv2:UpdateManagedRuleSetVersionExpiryDate | Docs | Grants permission to update the expiry date of a version in ManagedRuleSet | |
wafv2:UpdateRegexPatternSet | Docs | Grants permission to update a RegexPatternSet | |
wafv2:UpdateRuleGroup | Docs | Grants permission to update a RuleGroup | |
wafv2:UpdateWebACL | Docs | Grants permission to update a WebACL |
aws:RequestTag/${TagKey}
aws:ResourceTag/${TagKey}
aws:TagKeys