Copyright | (c) 2013-2023 Brendan Hay |
---|---|
License | Mozilla Public License, v. 2.0. |
Maintainer | Brendan Hay |
Stability | auto-generated |
Portability | non-portable (GHC extensions) |
Safe Haskell | Safe-Inferred |
Language | Haskell2010 |
Associates a web ACL with a regional application resource, to protect the resource. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, or an Amazon Cognito user pool.
For Amazon CloudFront, don't use this call. Instead, use your
CloudFront distribution configuration. To associate a web ACL, in the
CloudFront call UpdateDistribution
, set the web ACL ID to the Amazon
Resource Name (ARN) of the web ACL. For information, see
UpdateDistribution.
When you make changes to web ACLs or web ACL components, like rules and rule groups, WAF propagates the changes everywhere that the web ACL and its components are stored and used. Your changes are applied within seconds, but there might be a brief period of inconsistency when the changes have arrived in some places and not in others. So, for example, if you change a rule action setting, the action might be the old action in one area and the new action in another area. Or if you add an IP address to an IP set used in a blocking rule, the new address might briefly be blocked in one area while still allowed in another. This temporary inconsistency can occur when you first associate a web ACL with an Amazon Web Services resource and when you change a web ACL that is already associated with a resource. Generally, any inconsistencies of this type last only a few seconds.
Synopsis
- data AssociateWebACL = AssociateWebACL' {
- webACLArn :: Text
- resourceArn :: Text
- newAssociateWebACL :: Text -> Text -> AssociateWebACL
- associateWebACL_webACLArn :: Lens' AssociateWebACL Text
- associateWebACL_resourceArn :: Lens' AssociateWebACL Text
- data AssociateWebACLResponse = AssociateWebACLResponse' {
- httpStatus :: Int
- newAssociateWebACLResponse :: Int -> AssociateWebACLResponse
- associateWebACLResponse_httpStatus :: Lens' AssociateWebACLResponse Int
Creating a Request
data AssociateWebACL Source #
See: newAssociateWebACL
smart constructor.
AssociateWebACL' | |
|
Instances
Create a value of AssociateWebACL
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:webACLArn:AssociateWebACL'
, associateWebACL_webACLArn
- The Amazon Resource Name (ARN) of the web ACL that you want to associate
with the resource.
AssociateWebACL
, associateWebACL_resourceArn
- The Amazon Resource Name (ARN) of the resource to associate with the web
ACL.
The ARN must be in one of the following formats:
- For an Application Load Balancer:
arn:aws:elasticloadbalancing:
region
:
account-id
:loadbalancer/app/
load-balancer-name
/
load-balancer-id
- For an Amazon API Gateway REST API:
arn:aws:apigateway:
region
::/restapis/
api-id
/stages/
stage-name
- For an AppSync GraphQL API:
arn:aws:appsync:
region
:
account-id
:apis/
GraphQLApiId
- For an Amazon Cognito user pool:
arn:aws:cognito-idp:
region
:
account-id
:userpool/
user-pool-id
Request Lenses
associateWebACL_webACLArn :: Lens' AssociateWebACL Text Source #
The Amazon Resource Name (ARN) of the web ACL that you want to associate with the resource.
associateWebACL_resourceArn :: Lens' AssociateWebACL Text Source #
The Amazon Resource Name (ARN) of the resource to associate with the web ACL.
The ARN must be in one of the following formats:
- For an Application Load Balancer:
arn:aws:elasticloadbalancing:
region
:
account-id
:loadbalancer/app/
load-balancer-name
/
load-balancer-id
- For an Amazon API Gateway REST API:
arn:aws:apigateway:
region
::/restapis/
api-id
/stages/
stage-name
- For an AppSync GraphQL API:
arn:aws:appsync:
region
:
account-id
:apis/
GraphQLApiId
- For an Amazon Cognito user pool:
arn:aws:cognito-idp:
region
:
account-id
:userpool/
user-pool-id
Destructuring the Response
data AssociateWebACLResponse Source #
See: newAssociateWebACLResponse
smart constructor.
AssociateWebACLResponse' | |
|
Instances
newAssociateWebACLResponse Source #
Create a value of AssociateWebACLResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:AssociateWebACLResponse'
, associateWebACLResponse_httpStatus
- The response's http status code.
Response Lenses
associateWebACLResponse_httpStatus :: Lens' AssociateWebACLResponse Int Source #
The response's http status code.