Skip to main content

web_acl_tags

Expands all tag keys and values for web_acls in a region

Overview

Nameweb_acl_tags
TypeResource
DescriptionContains the Rules that identify the requests that you want to allow, block, or count. In a WebACL, you also specify a default action (ALLOW or BLOCK), and the action for each Rule that you add to a WebACL, for example, block requests from specified IP addresses or block requests from specified referrers. You also associate the WebACL with a CloudFront distribution to identify the requests that you want AWS WAF to filter. If you add more than one Rule to a WebACL, a request needs to match only one of the specifications to be allowed, blocked, or counted.
Idaws.wafv2.web_acl_tags

Fields

NameDatatypeDescription
arnstring
capacityinteger
default_actionobjectDefault Action WebACL will take against ingress traffic when there is no matching Rule.
descriptionstringDescription of the entity.
namestringName of the WebACL.
idstringId of the WebACL
scopestringUse CLOUDFRONT for CloudFront WebACL, use REGIONAL for Application Load Balancer and API Gateway.
rulesarrayCollection of Rules.
visibility_configobjectVisibility Metric of the WebACL.
label_namespacestringName of the Label.
custom_response_bodiesobjectCustom response key and body map.
captcha_configobject
challenge_configobject
token_domainsarrayList of domains to accept in web request tokens, in addition to the domain of the protected resource.
association_configobjectAssociationConfig for body inspection
tag_keystringTag key.
tag_valuestringTag value.
regionstringAWS region.

Methods

NameAccessible byRequired Params
list_resourcesSELECTregion

SELECT examples

Expands tags for all web_acls in a region.

SELECT
region,
arn,
capacity,
default_action,
description,
name,
id,
scope,
rules,
visibility_config,
label_namespace,
custom_response_bodies,
captcha_config,
challenge_config,
token_domains,
association_config,
tag_key,
tag_value
FROM aws.wafv2.web_acl_tags
;

Permissions

For permissions required to operate on the web_acl_tags resource, see web_acls