CfnWebACLAssociationPropsMixin

class aws_cdk.mixins_preview.aws_wafv2.mixins.CfnWebACLAssociationPropsMixin(props, *, strategy=None)

Bases: Mixin

This is the latest version of AWS WAF , named AWS WAF V2, released in November, 2019.

For information, including how to migrate your AWS WAF resources from the prior release, see the AWS WAF developer guide .

Use a web ACL association to define an association between a web ACL and a regional application resource, to protect the resource. A regional application can be an Application Load Balancer (ALB), an REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, an AWS Amplify application, or an AWS Verified Access instance.

For Amazon CloudFront , don’t use this resource. Instead, use your CloudFront distribution configuration. To associate a web ACL with a distribution, provide the Amazon Resource Name (ARN) of the WebACL to your CloudFront distribution configuration. To disassociate a web ACL, provide an empty ARN. For information, see AWS::CloudFront::Distribution .

Required permissions for customer-managed IAM policies

This call requires permissions that are specific to the protected resource type. For details, see Permissions for AssociateWebACL in the AWS WAF Developer Guide .

Temporary inconsistencies during updates

When you create or change a web ACL or other AWS WAF resources, the changes take a small amount of time to propagate to all areas where the resources are stored. The propagation time can be from a few seconds to a number of minutes.

The following are examples of the temporary inconsistencies that you might notice during change propagation:

After you create a web ACL, if you try to associate it with a resource, you might get an exception indicating that the web ACL is unavailable.

After you add a rule group to a web ACL, the new rule group rules might be in effect in one area where the web ACL is used and not in another.

After you change a rule action setting, you might see the old action in some places and the new action in others.

After you add an IP address to an IP set that is in use in a blocking rule, the new address might be blocked in one area while still allowed in another.

see:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webaclassociation.html

cloudformationResource:

AWS::WAFv2::WebACLAssociation

mixin:

true

exampleMetadata:

fixture=_generated

Example:
# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview import mixins
from aws_cdk.mixins_preview.aws_wafv2 import mixins as wafv2_mixins

cfn_web_aCLAssociation_props_mixin = wafv2_mixins.CfnWebACLAssociationPropsMixin(wafv2_mixins.CfnWebACLAssociationMixinProps(
    resource_arn="resourceArn",
    web_acl_arn="webAclArn"
),
    strategy=mixins.PropertyMergeStrategy.OVERRIDE
)

Create a mixin to apply properties to AWS::WAFv2::WebACLAssociation.

Parameters:

props (Union[CfnWebACLAssociationMixinProps, Dict[str, Any]]) – L1 properties to apply.
strategy (Optional[PropertyMergeStrategy]) – (experimental) Strategy for merging nested properties. Default: - PropertyMergeStrategy.MERGE

Methods

apply_to(construct)

Apply the mixin properties to the construct.

Parameters:: construct (IConstruct)
Return type:: IConstruct

supports(construct)

Check if this mixin supports the given construct.

Parameters:: construct (IConstruct)
Return type:: bool

Attributes

CFN_PROPERTY_KEYS = ['resourceArn', 'webAclArn']

Static Methods

classmethod is_mixin(x)

(experimental) Checks if x is a Mixin.

Parameters:: x (Any) – Any object.
Return type:: bool
Returns:: true if x is an object created from a class which extends Mixin.
Stability:: experimental