2021-06-05
42 updated actions, 1 updated condition
Updates
Actions
-
AssociateWebACL
Description
-
Old: Grants permission to associate a WebACL with a resource.
New: Grants permission to associate a WebACL with a resource
-
CheckCapacity
Description
-
Old: Grants permission to calculate web ACL capacity unit (WCU) requirements for a specified scope and set of rules.
New: Grants permission to calculate web ACL capacity unit (WCU) requirements for a specified scope and set of rules
-
CreateIPSet
Description
-
Old: Grants permission to create an IPSet.
New: Grants permission to create an IPSet
-
CreateRegexPatternSet
Description
-
Old: Grants permission to create a RegexPatternSet.
New: Grants permission to create a RegexPatternSet
-
CreateRuleGroup
Description
-
Old: Grants permission to create a RuleGroup.
New: Grants permission to create a RuleGroup
-
CreateWebACL
Description
-
Old: Grants permission to create a WebACL.
New: Grants permission to create a WebACL
-
DeleteFirewallManagerRuleGroups
Description
-
Old: Grants permission to delete specified FirewallManagedRulesGroups from the specified WebACL if not managed by Firewall Manager anymore.
New: Grants permission to delete FirewallManagedRulesGroups from a WebACL if not managed by Firewall Manager anymore
-
DeleteIPSet
Description
-
Old: Grants permission to delete the specified IPSet.
New: Grants permission to delete an IPSet
-
DeleteLoggingConfiguration
Description
-
Old: Grants permission to delete the LoggingConfiguration from the specified WebACL.
New: Grants permission to delete the LoggingConfiguration from a WebACL
-
DeletePermissionPolicy
Description
-
Old: Grants permission to delete the PermissionPolicy on the specified RuleGroup.
New: Grants permission to delete the PermissionPolicy on a RuleGroup
-
DeleteRegexPatternSet
Description
-
Old: Grants permission to delete the specified RegexPatternSet.
New: Grants permission to delete a RegexPatternSet
-
DeleteRuleGroup
Description
-
Old: Grants permission to delete the specified RuleGroup.
New: Grants permission to delete a RuleGroup
-
DeleteWebACL
Description
-
Old: Grants permission to delete the specified WebACL.
New: Grants permission to delete a WebACL
-
DescribeManagedRuleGroup
Description
-
Old: Grants permission to view high-level information for a managed rule group.
New: Grants permission to retrieve high-level information for a managed rule group
-
DisassociateFirewallManager
Description
-
Old: Grants permission to disassociate Firewall Manager from the specified WebACL.
New: Grants permission to disassociate Firewall Manager from a WebACL
-
DisassociateWebACL
Description
-
Old: Grants permission disassociate a WebACL from an application resource.
New: Grants permission disassociate a WebACL from an application resource
-
GetIPSet
Description
-
Old: Grants permission to view details about the specified IPSet.
New: Grants permission to retrieve details about an IPSet
-
GetLoggingConfiguration
Description
-
Old: Grants permission to view LoggingConfiguration about the specified WebACL.
New: Grants permission to retrieve LoggingConfiguration for a WebACL
-
GetPermissionPolicy
Description
-
Old: Grants permission to view PermissionPolicy on the specified RuleGroup.
New: Grants permission to retrieve a PermissionPolicy for a RuleGroup
-
GetRateBasedStatementManagedKeys
Description
-
Old: Grants permission to view the keys that are currently blocked by a rate-based rule.
New: Grants permission to retrieve the keys that are currently blocked by a rate-based rule
-
GetRegexPatternSet
Description
-
Old: Grants permission to view details about the specified RegexPatternSet.
New: Grants permission to retrieve details about a RegexPatternSet
-
GetRuleGroup
Description
-
Old: Grants permission to view details about the specified RuleGroup.
New: Grants permission to retrieve details about a RuleGroup
-
GetSampledRequests
Description
-
Old: Grants permission to view detailed information about a specified number of requests--a sample--that AWS WAF randomly selects from among the first 5,000 requests that your AWS resource received during a time range that you choose.
New: Grants permission to retrieve detailed information about a sampling of web requests
-
GetWebACL
Description
-
Old: Grants permission to view details about the specified GetWebACL.
New: Grants permission to retrieve details about a WebACL
-
GetWebACLForResource
Description
-
Old: Grants permission to view the WebACL for the specified resource.
New: Grants permission to retrieve the WebACL that's associated with a resource
-
ListAvailableManagedRuleGroups
Description
-
Old: Grants permission to view an array of managed rule groups that are available for you to use.
New: Grants permission to retrieve an array of managed rule groups that are available for you to use
-
ListIPSets
Description
-
Old: Grants permission to view an array of IPSetSummary objects for the IP sets that you manage.
New: Grants permission to retrieve an array of IPSetSummary objects for the IP sets that you manage
-
ListLoggingConfigurations
Description
-
Old: Grants permission to view an array of your LoggingConfiguration objects.
New: Grants permission to retrieve an array of your LoggingConfiguration objects
-
ListRegexPatternSets
Description
-
Old: Grants permission to view an array of RegexPatternSetSummary objects for the regex pattern sets that you manage.
New: Grants permission to retrieve an array of RegexPatternSetSummary objects for the regex pattern sets that you manage
-
ListResourcesForWebACL
Description
-
Old: Grants permission to view an array of the Amazon Resource Names (ARNs) for the resources that are associated with the specified web ACL.
New: Grants permission to retrieve an array of the Amazon Resource Names (ARNs) for the resources that are associated with a web ACL
-
ListRuleGroups
Description
-
Old: Grants permission to view an array of RuleGroupSummary objects for the rule groups that you manage.
New: Grants permission to retrieve an array of RuleGroupSummary objects for the rule groups that you manage
-
ListTagsForResource
Description
-
Old: Grants permission to lists tag for the specified resource.
New: Grants permission to list tags for a resource
-
ListWebACLs
Description
-
Old: Grants permission to view an array of WebACLSummary objects for the web ACLs that you manage.
New: Grants permission to retrieve an array of WebACLSummary objects for the web ACLs that you manage
-
PutFirewallManagerRuleGroups
Description
-
Old: Grants permission to create FirewallManagedRulesGroups in the specified WebACL.
New: Grants permission to create FirewallManagedRulesGroups in a WebACL
-
PutLoggingConfiguration
Description
-
Old: Grants permission to enables the specified LoggingConfiguration, to start logging from a web ACL.
New: Grants permission to enable a LoggingConfiguration, to start logging for a web ACL
-
PutPermissionPolicy
Description
-
Old: Grants permission to attach the specified IAM policy to the specified resource. The only supported use for this action is to share a RuleGroup across accounts.
New: Grants permission to attach an IAM policy to a resource, used to share rule groups between accounts
-
TagResource
Description
-
Old: Grants permission to associates tags with the specified AWS resource.
New: Grants permission to associate tags with a AWS resource
-
UntagResource
Description
-
Old: Grants permission to disassociates tags from an AWS resource.
New: Grants permission to disassociate tags from an AWS resource
-
UpdateIPSet
Description
-
Old: Grants permission to update the specified IPSet.
New: Grants permission to update an IPSet
-
UpdateRegexPatternSet
Description
-
Old: Grants permission to update the specified RegexPatternSet.
New: Grants permission to update a RegexPatternSet
-
UpdateRuleGroup
Description
-
Old: Grants permission to update the specified RuleGroup.
New: Grants permission to update a RuleGroup
-
UpdateWebACL
Description
-
Old: Grants permission to update the specified WebACL.
New: Grants permission to update a WebACL
Conditions
-
aws:ResourceTag/${TagKey}
Description
-
Old: Filters actions based on tag-value assoicated with the resource
New: Filters actions based on tag-value associated with the resource