feat(client-wafv2): The targeted protection level of the Bot Control …

…managed rule group now provides optional, machine-learning analysis of traffic statistics to detect some bot-related activity. You can enable or disable the machine learning functionality through the API.
aws · Sep 6, 2023 · 3e035e3 · 3e035e3
1 parent 515ea2e
commit 3e035e3
Show file tree

Hide file tree

Showing 11 changed files with 230 additions and 221 deletions.
diff --git a/clients/client-wafv2/src/commands/CheckCapacityCommand.ts b/clients/client-wafv2/src/commands/CheckCapacityCommand.ts
@@ -601,6 +601,7 @@ export interface CheckCapacityCommandOutput extends CheckCapacityResponse, __Met
  *                   },
  *                   AWSManagedRulesBotControlRuleSet: { // AWSManagedRulesBotControlRuleSet
  *                     InspectionLevel: "COMMON" || "TARGETED", // required
+ *                     EnableMachineLearning: true || false,
  *                   },
  *                   AWSManagedRulesATPRuleSet: { // AWSManagedRulesATPRuleSet
  *                     LoginPath: "STRING_VALUE", // required
@@ -817,6 +818,7 @@ export interface CheckCapacityCommandOutput extends CheckCapacityResponse, __Met
  *               PasswordField: "<PasswordField>",
  *               AWSManagedRulesBotControlRuleSet: {
  *                 InspectionLevel: "COMMON" || "TARGETED", // required
+ *                 EnableMachineLearning: true || false,
  *               },
  *               AWSManagedRulesATPRuleSet: {
  *                 LoginPath: "STRING_VALUE", // required

diff --git a/clients/client-wafv2/src/commands/CreateRuleGroupCommand.ts b/clients/client-wafv2/src/commands/CreateRuleGroupCommand.ts
@@ -594,6 +594,7 @@ export interface CreateRuleGroupCommandOutput extends CreateRuleGroupResponse, _
  *                   },
  *                   AWSManagedRulesBotControlRuleSet: { // AWSManagedRulesBotControlRuleSet
  *                     InspectionLevel: "COMMON" || "TARGETED", // required
+ *                     EnableMachineLearning: true || false,
  *                   },
  *                   AWSManagedRulesATPRuleSet: { // AWSManagedRulesATPRuleSet
  *                     LoginPath: "STRING_VALUE", // required
@@ -810,6 +811,7 @@ export interface CreateRuleGroupCommandOutput extends CreateRuleGroupResponse, _
  *               PasswordField: "<PasswordField>",
  *               AWSManagedRulesBotControlRuleSet: {
  *                 InspectionLevel: "COMMON" || "TARGETED", // required
+ *                 EnableMachineLearning: true || false,
  *               },
  *               AWSManagedRulesATPRuleSet: {
  *                 LoginPath: "STRING_VALUE", // required

diff --git a/clients/client-wafv2/src/commands/CreateWebACLCommand.ts b/clients/client-wafv2/src/commands/CreateWebACLCommand.ts
@@ -597,6 +597,7 @@ export interface CreateWebACLCommandOutput extends CreateWebACLResponse, __Metad
  *                   },
  *                   AWSManagedRulesBotControlRuleSet: { // AWSManagedRulesBotControlRuleSet
  *                     InspectionLevel: "COMMON" || "TARGETED", // required
+ *                     EnableMachineLearning: true || false,
  *                   },
  *                   AWSManagedRulesATPRuleSet: { // AWSManagedRulesATPRuleSet
  *                     LoginPath: "STRING_VALUE", // required
@@ -805,6 +806,7 @@ export interface CreateWebACLCommandOutput extends CreateWebACLResponse, __Metad
  *               PasswordField: "<PasswordField>",
  *               AWSManagedRulesBotControlRuleSet: {
  *                 InspectionLevel: "COMMON" || "TARGETED", // required
+ *                 EnableMachineLearning: true || false,
  *               },
  *               AWSManagedRulesATPRuleSet: {
  *                 LoginPath: "STRING_VALUE", // required

diff --git a/clients/client-wafv2/src/commands/GetRuleGroupCommand.ts b/clients/client-wafv2/src/commands/GetRuleGroupCommand.ts
@@ -603,6 +603,7 @@ export interface GetRuleGroupCommandOutput extends GetRuleGroupResponse, __Metad
  * //                     },
  * //                     AWSManagedRulesBotControlRuleSet: { // AWSManagedRulesBotControlRuleSet
  * //                       InspectionLevel: "COMMON" || "TARGETED", // required
+ * //                       EnableMachineLearning: true || false,
  * //                     },
  * //                     AWSManagedRulesATPRuleSet: { // AWSManagedRulesATPRuleSet
  * //                       LoginPath: "STRING_VALUE", // required
@@ -819,6 +820,7 @@ export interface GetRuleGroupCommandOutput extends GetRuleGroupResponse, __Metad
  * //                 PasswordField: "<PasswordField>",
  * //                 AWSManagedRulesBotControlRuleSet: {
  * //                   InspectionLevel: "COMMON" || "TARGETED", // required
+ * //                   EnableMachineLearning: true || false,
  * //                 },
  * //                 AWSManagedRulesATPRuleSet: {
  * //                   LoginPath: "STRING_VALUE", // required

diff --git a/clients/client-wafv2/src/commands/GetWebACLCommand.ts b/clients/client-wafv2/src/commands/GetWebACLCommand.ts
@@ -605,6 +605,7 @@ export interface GetWebACLCommandOutput extends GetWebACLResponse, __MetadataBea
  * //                     },
  * //                     AWSManagedRulesBotControlRuleSet: { // AWSManagedRulesBotControlRuleSet
  * //                       InspectionLevel: "COMMON" || "TARGETED", // required
+ * //                       EnableMachineLearning: true || false,
  * //                     },
  * //                     AWSManagedRulesATPRuleSet: { // AWSManagedRulesATPRuleSet
  * //                       LoginPath: "STRING_VALUE", // required
@@ -813,6 +814,7 @@ export interface GetWebACLCommandOutput extends GetWebACLResponse, __MetadataBea
  * //                 PasswordField: "<PasswordField>",
  * //                 AWSManagedRulesBotControlRuleSet: {
  * //                   InspectionLevel: "COMMON" || "TARGETED", // required
+ * //                   EnableMachineLearning: true || false,
  * //                 },
  * //                 AWSManagedRulesATPRuleSet: {
  * //                   LoginPath: "STRING_VALUE", // required
@@ -1005,6 +1007,7 @@ export interface GetWebACLCommandOutput extends GetWebACLResponse, __MetadataBea
  * //                 PasswordField: "<PasswordField>",
  * //                 AWSManagedRulesBotControlRuleSet: {
  * //                   InspectionLevel: "COMMON" || "TARGETED", // required
+ * //                   EnableMachineLearning: true || false,
  * //                 },
  * //                 AWSManagedRulesATPRuleSet: {
  * //                   LoginPath: "STRING_VALUE", // required
@@ -1120,6 +1123,7 @@ export interface GetWebACLCommandOutput extends GetWebACLResponse, __MetadataBea
  * //                 PasswordField: "<PasswordField>",
  * //                 AWSManagedRulesBotControlRuleSet: {
  * //                   InspectionLevel: "COMMON" || "TARGETED", // required
+ * //                   EnableMachineLearning: true || false,
  * //                 },
  * //                 AWSManagedRulesATPRuleSet: {
  * //                   LoginPath: "STRING_VALUE", // required

diff --git a/clients/client-wafv2/src/commands/GetWebACLForResourceCommand.ts b/clients/client-wafv2/src/commands/GetWebACLForResourceCommand.ts
@@ -603,6 +603,7 @@ export interface GetWebACLForResourceCommandOutput extends GetWebACLForResourceR
  * //                     },
  * //                     AWSManagedRulesBotControlRuleSet: { // AWSManagedRulesBotControlRuleSet
  * //                       InspectionLevel: "COMMON" || "TARGETED", // required
+ * //                       EnableMachineLearning: true || false,
  * //                     },
  * //                     AWSManagedRulesATPRuleSet: { // AWSManagedRulesATPRuleSet
  * //                       LoginPath: "STRING_VALUE", // required
@@ -811,6 +812,7 @@ export interface GetWebACLForResourceCommandOutput extends GetWebACLForResourceR
  * //                 PasswordField: "<PasswordField>",
  * //                 AWSManagedRulesBotControlRuleSet: {
  * //                   InspectionLevel: "COMMON" || "TARGETED", // required
+ * //                   EnableMachineLearning: true || false,
  * //                 },
  * //                 AWSManagedRulesATPRuleSet: {
  * //                   LoginPath: "STRING_VALUE", // required
@@ -1003,6 +1005,7 @@ export interface GetWebACLForResourceCommandOutput extends GetWebACLForResourceR
  * //                 PasswordField: "<PasswordField>",
  * //                 AWSManagedRulesBotControlRuleSet: {
  * //                   InspectionLevel: "COMMON" || "TARGETED", // required
+ * //                   EnableMachineLearning: true || false,
  * //                 },
  * //                 AWSManagedRulesATPRuleSet: {
  * //                   LoginPath: "STRING_VALUE", // required
@@ -1118,6 +1121,7 @@ export interface GetWebACLForResourceCommandOutput extends GetWebACLForResourceR
  * //                 PasswordField: "<PasswordField>",
  * //                 AWSManagedRulesBotControlRuleSet: {
  * //                   InspectionLevel: "COMMON" || "TARGETED", // required
+ * //                   EnableMachineLearning: true || false,
  * //                 },
  * //                 AWSManagedRulesATPRuleSet: {
  * //                   LoginPath: "STRING_VALUE", // required

diff --git a/clients/client-wafv2/src/commands/UpdateRuleGroupCommand.ts b/clients/client-wafv2/src/commands/UpdateRuleGroupCommand.ts
@@ -611,6 +611,7 @@ export interface UpdateRuleGroupCommandOutput extends UpdateRuleGroupResponse, _
  *                   },
  *                   AWSManagedRulesBotControlRuleSet: { // AWSManagedRulesBotControlRuleSet
  *                     InspectionLevel: "COMMON" || "TARGETED", // required
+ *                     EnableMachineLearning: true || false,
  *                   },
  *                   AWSManagedRulesATPRuleSet: { // AWSManagedRulesATPRuleSet
  *                     LoginPath: "STRING_VALUE", // required
@@ -827,6 +828,7 @@ export interface UpdateRuleGroupCommandOutput extends UpdateRuleGroupResponse, _
  *               PasswordField: "<PasswordField>",
  *               AWSManagedRulesBotControlRuleSet: {
  *                 InspectionLevel: "COMMON" || "TARGETED", // required
+ *                 EnableMachineLearning: true || false,
  *               },
  *               AWSManagedRulesATPRuleSet: {
  *                 LoginPath: "STRING_VALUE", // required

diff --git a/clients/client-wafv2/src/commands/UpdateWebACLCommand.ts b/clients/client-wafv2/src/commands/UpdateWebACLCommand.ts
@@ -616,6 +616,7 @@ export interface UpdateWebACLCommandOutput extends UpdateWebACLResponse, __Metad
  *                   },
  *                   AWSManagedRulesBotControlRuleSet: { // AWSManagedRulesBotControlRuleSet
  *                     InspectionLevel: "COMMON" || "TARGETED", // required
+ *                     EnableMachineLearning: true || false,
  *                   },
  *                   AWSManagedRulesATPRuleSet: { // AWSManagedRulesATPRuleSet
  *                     LoginPath: "STRING_VALUE", // required
@@ -824,6 +825,7 @@ export interface UpdateWebACLCommandOutput extends UpdateWebACLResponse, __Metad
  *               PasswordField: "<PasswordField>",
  *               AWSManagedRulesBotControlRuleSet: {
  *                 InspectionLevel: "COMMON" || "TARGETED", // required
+ *                 EnableMachineLearning: true || false,
  *               },
  *               AWSManagedRulesATPRuleSet: {
  *                 LoginPath: "STRING_VALUE", // required

diff --git a/clients/client-wafv2/src/endpoint/ruleset.ts b/clients/client-wafv2/src/endpoint/ruleset.ts
@@ -26,5 +26,5 @@ m={[r]:"booleanEquals",[s]:[true,{[r]:"getAttr",[s]:[{[t]:e},"supportsDualStack"
 n=[i],
 o=[j],
 p=[{[t]:"Region"}];
-const _data={version:"1.0",parameters:{Region:f,UseDualStack:g,UseFIPS:g,Endpoint:f},rules:[{conditions:[{[r]:a,[s]:[h]}],type:b,rules:[{conditions:n,error:"Invalid Configuration: FIPS and custom endpoint are not supported",type:c},{type:b,rules:[{conditions:o,error:"Invalid Configuration: Dualstack and custom endpoint are not supported",type:c},{endpoint:{url:h,properties:k,headers:k},type:d}]}]},{type:b,rules:[{conditions:[{[r]:a,[s]:p}],type:b,rules:[{conditions:[{[r]:"aws.partition",[s]:p,assign:e}],type:b,rules:[{conditions:[i,j],type:b,rules:[{conditions:[l,m],type:b,rules:[{type:b,rules:[{endpoint:{url:"https://wafv2-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:k,headers:k},type:d}]}]},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",type:c}]},{conditions:n,type:b,rules:[{conditions:[l],type:b,rules:[{type:b,rules:[{endpoint:{url:"https://wafv2-fips.{Region}.{PartitionResult#dnsSuffix}",properties:k,headers:k},type:d}]}]},{error:"FIPS is enabled but this partition does not support FIPS",type:c}]},{conditions:o,type:b,rules:[{conditions:[m],type:b,rules:[{type:b,rules:[{endpoint:{url:"https://wafv2.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:k,headers:k},type:d}]}]},{error:"DualStack is enabled but this partition does not support DualStack",type:c}]},{type:b,rules:[{endpoint:{url:"https://wafv2.{Region}.{PartitionResult#dnsSuffix}",properties:k,headers:k},type:d}]}]}]},{error:"Invalid Configuration: Missing Region",type:c}]}]};
+const _data={version:"1.0",parameters:{Region:f,UseDualStack:g,UseFIPS:g,Endpoint:f},rules:[{conditions:[{[r]:a,[s]:[h]}],type:b,rules:[{conditions:n,error:"Invalid Configuration: FIPS and custom endpoint are not supported",type:c},{conditions:o,error:"Invalid Configuration: Dualstack and custom endpoint are not supported",type:c},{endpoint:{url:h,properties:k,headers:k},type:d}]},{conditions:[{[r]:a,[s]:p}],type:b,rules:[{conditions:[{[r]:"aws.partition",[s]:p,assign:e}],type:b,rules:[{conditions:[i,j],type:b,rules:[{conditions:[l,m],type:b,rules:[{endpoint:{url:"https://wafv2-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:k,headers:k},type:d}]},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",type:c}]},{conditions:n,type:b,rules:[{conditions:[l],type:b,rules:[{endpoint:{url:"https://wafv2-fips.{Region}.{PartitionResult#dnsSuffix}",properties:k,headers:k},type:d}]},{error:"FIPS is enabled but this partition does not support FIPS",type:c}]},{conditions:o,type:b,rules:[{conditions:[m],type:b,rules:[{endpoint:{url:"https://wafv2.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:k,headers:k},type:d}]},{error:"DualStack is enabled but this partition does not support DualStack",type:c}]},{endpoint:{url:"https://wafv2.{Region}.{PartitionResult#dnsSuffix}",properties:k,headers:k},type:d}]}]},{error:"Invalid Configuration: Missing Region",type:c}]};
 export const ruleSet: RuleSetObject = _data;