Inserts or deletes ActivatedRule objects in a RuleGroup
.
waf_update_rule_group(RuleGroupId, Updates, ChangeToken)
[required] The RuleGroupId
of the RuleGroup that you want to update.
RuleGroupId
is returned by CreateRuleGroup and by ListRuleGroups.
[required] An array of RuleGroupUpdate
objects that you want to insert into or
delete from a RuleGroup.
You can only insert REGULAR
rules into a rule group.
ActivatedRule|OverrideAction
applies only when updating or adding a
RuleGroup
to a WebACL
. In this case you do not use
ActivatedRule|Action
. For all other update requests,
ActivatedRule|Action
is used instead of
ActivatedRule|OverrideAction
.
[required] The value returned by the most recent call to GetChangeToken.
svc$update_rule_group( RuleGroupId = "string", Updates = list( list( Action = "INSERT"|"DELETE", ActivatedRule = list( Priority = 123, RuleId = "string", Action = list( Type = "BLOCK"|"ALLOW"|"COUNT" ), OverrideAction = list( Type = "NONE"|"COUNT" ), Type = "REGULAR"|"RATE_BASED"|"GROUP", ExcludedRules = list( list( RuleId = "string" ) ) ) ) ), ChangeToken = "string" )
You can only insert REGULAR
rules into a rule group.
You can have a maximum of ten rules per rule group.
To create and configure a RuleGroup
, perform the following steps:
Create and update the Rules
that you want to include in the
RuleGroup
. See CreateRule.
Use GetChangeToken
to get the change token that you provide in the
ChangeToken
parameter of an UpdateRuleGroup request.
Submit an UpdateRuleGroup
request to add Rules
to the
RuleGroup
.
Create and update a WebACL
that contains the RuleGroup
. See
CreateWebACL.
If you want to replace one Rule
with another, you delete the existing
one and add the new one.
For more information about how to use the AWS WAF API to allow or block HTTP requests, see the AWS WAF Developer Guide.