Amazon WAF

Amazon WAF Web ACLs API

The Web ACLs API from Amazon WAF — 3 operation(s) for web acls.

GitHub OpenAPI

Operations 3

POST /#CreateWebACL Amazon WAF Create a Web ACL #
POST /#GetWebACL Amazon WAF Get a Web ACL #
POST /#ListWebACLs Amazon WAF List Web ACLs #

Documentation

📖
Documentation
https://docs.aws.amazon.com/waf/latest/APIReference/
📖
GettingStarted
https://aws.amazon.com/waf/getting-started/
📖
Authentication
https://docs.aws.amazon.com/waf/latest/APIReference/CommonParameters.html
📖
APIReference
https://docs.aws.amazon.com/waf/latest/APIReference/Welcome.html

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/amazon-waf/refs/heads/main/openapi/amazon-waf-web-acls-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/amazon-waf/refs/heads/main/json-schema/amazon-waf-web-acl-schema.json

Other Resources

🔗
JSONLD
https://raw.githubusercontent.com/api-evangelist/amazon-waf/refs/heads/main/json-ld/amazon-waf-context.jsonld
🔗
Pricing
https://aws.amazon.com/waf/pricing/
🔗
SDKs
https://aws.amazon.com/tools/
🔗
StatusPage
https://status.aws.amazon.com/
🔗
FAQ
https://aws.amazon.com/waf/faqs/
🔗
ServiceLevelAgreement
https://aws.amazon.com/waf/sla/
🔗
User Guide
https://docs.aws.amazon.com/waf/latest/developerguide/what-is-aws-waf.html
🔗
Code Examples
https://docs.aws.amazon.com/waf/latest/developerguide/waf-examples.html
🔗
Security
https://docs.aws.amazon.com/waf/latest/developerguide/security.html

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/amazon-waf-web-acls-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

amazon-waf-web-acls-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Amazon WAF IP Sets Web ACLs API
  description: AWS WAF is a web application firewall that helps protect web applications and APIs against common web exploits and bots. The API provides operations for managing web ACLs, rule groups, IP sets, regex pattern sets, and logging configurations.
  version: '2019-07-29'
  contact:
    name: Amazon Web Services
    url: https://aws.amazon.com/waf/
  license:
    name: Apache 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0
  termsOfService: https://aws.amazon.com/service-terms/
  x-logo:
    url: https://a0.awsstatic.com/libra-css/images/logos/aws_logo_smile_1200x630.png
servers:
- url: https://wafv2.{region}.amazonaws.com
  description: AWS WAF regional endpoint
  variables:
    region:
      default: us-east-1
      description: AWS region
      enum:
      - us-east-1
      - us-east-2
      - us-west-1
      - us-west-2
      - eu-west-1
      - eu-west-2
      - eu-central-1
      - ap-northeast-1
      - ap-southeast-1
      - ap-southeast-2
      - ap-south-1
      - ca-central-1
security:
- aws_sig_v4: []
tags:
- name: Web ACLs
paths:
  /#CreateWebACL:
    post:
      operationId: CreateWebACL
      summary: Amazon WAF Create a Web ACL
      description: Creates a web ACL with the specified rules and default action for managing web traffic.
      tags:
      - Web ACLs
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              type: object
              required:
              - Name
              - Scope
              - DefaultAction
              - VisibilityConfig
              properties:
                Name:
                  type: string
                  description: The name of the web ACL.
                Scope:
                  type: string
                  enum:
                  - CLOUDFRONT
                  - REGIONAL
                DefaultAction:
                  type: object
                  properties:
                    Allow:
                      type: object
                    Block:
                      type: object
                Rules:
                  type: array
                  items:
                    $ref: '#/components/schemas/Rule'
                VisibilityConfig:
                  $ref: '#/components/schemas/VisibilityConfig'
      responses:
        '200':
          description: Successful response.
          content:
            application/json:
              schema:
                type: object
                properties:
                  Summary:
                    $ref: '#/components/schemas/WebACLSummary'
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  /#GetWebACL:
    post:
      operationId: GetWebACL
      summary: Amazon WAF Get a Web ACL
      description: Retrieves the specified web ACL.
      tags:
      - Web ACLs
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              type: object
              required:
              - Name
              - Scope
              - Id
              properties:
                Name:
                  type: string
                Scope:
                  type: string
                Id:
                  type: string
      responses:
        '200':
          description: Successful response.
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  /#ListWebACLs:
    post:
      operationId: ListWebACLs
      summary: Amazon WAF List Web ACLs
      description: Retrieves a list of web ACLs.
      tags:
      - Web ACLs
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              type: object
              required:
              - Scope
              properties:
                Scope:
                  type: string
                Limit:
                  type: integer
                NextMarker:
                  type: string
      responses:
        '200':
          description: Successful response.
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
components:
  schemas:
    Rule:
      type: object
      properties:
        Name:
          type: string
        Priority:
          type: integer
        Action:
          type: object
        VisibilityConfig:
          $ref: '#/components/schemas/VisibilityConfig'
      required:
      - Name
      - Priority
      - VisibilityConfig
    VisibilityConfig:
      type: object
      properties:
        SampledRequestsEnabled:
          type: boolean
        CloudWatchMetricsEnabled:
          type: boolean
        MetricName:
          type: string
      required:
      - SampledRequestsEnabled
      - CloudWatchMetricsEnabled
      - MetricName
    WebACLSummary:
      type: object
      properties:
        Name:
          type: string
        Id:
          type: string
        ARN:
          type: string
        LockToken:
          type: string
  securitySchemes:
    aws_sig_v4:
      type: apiKey
      name: Authorization
      in: header
      description: AWS Signature Version 4 authentication.
externalDocs:
  description: AWS WAF API Reference
  url: https://docs.aws.amazon.com/waf/latest/APIReference/Welcome.html