Fastly WAF Active Rules API

openapi: 3.2.0
info:
  title: Fastly Next-Gen WAF WAF Active Rules API
  description: The Fastly Next-Gen WAF API provides programmatic access to configure and manage web application firewall rules that protect applications delivered through Fastly's edge network.
  version: '1.0'
  contact:
    name: Fastly Support
    url: https://support.fastly.com
  termsOfService: https://www.fastly.com/terms
servers:
- url: https://api.fastly.com
  description: Fastly API Production Server
security:
- apiKeyAuth: []
tags:
- name: WAF Active Rules
  description: Operations for managing which WAF rules are actively enforced on a firewall.
paths:
  /waf/firewalls/{firewall_id}/versions/{firewall_version_number}/active-rules:
    get:
      operationId: listWafActiveRules
      summary: List active WAF rules
      description: Retrieves a list of all active WAF rules for a specific firewall version.
      tags:
      - WAF Active Rules
      parameters:
      - $ref: '#/components/parameters/firewallId'
      - $ref: '#/components/parameters/firewallVersionNumber'
      - name: page[number]
        in: query
        description: The page number to retrieve.
        schema:
          type: integer
      - name: page[size]
        in: query
        description: The number of items per page.
        schema:
          type: integer
      responses:
        '200':
          description: Successfully retrieved the list of active WAF rules.
          content:
            application/vnd.api+json:
              schema:
                type: object
                properties:
                  data:
                    type: array
                    items:
                      $ref: '#/components/schemas/WafActiveRule'
        '401':
          description: Unauthorized. The API token is missing or invalid.
    post:
      operationId: createWafActiveRule
      summary: Add an active WAF rule
      description: Adds a WAF rule to the active rule set for a specific firewall version.
      tags:
      - WAF Active Rules
      parameters:
      - $ref: '#/components/parameters/firewallId'
      - $ref: '#/components/parameters/firewallVersionNumber'
      requestBody:
        required: true
        content:
          application/vnd.api+json:
            schema:
              type: object
              properties:
                data:
                  type: object
                  properties:
                    type:
                      type: string
                      enum:
                      - waf_active_rule
                    attributes:
                      type: object
                      properties:
                        status:
                          type: string
                          description: The status of the active rule.
                          enum:
                          - log
                          - block
                        modsec_rule_id:
                          type: integer
                          description: The ModSecurity rule ID.
                        revision:
                          type: integer
                          description: The revision number of the rule.
                    relationships:
                      type: object
                      properties:
                        waf_rule_revision:
                          type: object
                          description: The WAF rule revision to activate.
      responses:
        '201':
          description: Successfully added the active WAF rule.
          content:
            application/vnd.api+json:
              schema:
                type: object
                properties:
                  data:
                    $ref: '#/components/schemas/WafActiveRule'
        '400':
          description: Bad request. Missing or invalid parameters.
        '401':
          description: Unauthorized. The API token is missing or invalid.
components:
  parameters:
    firewallVersionNumber:
      name: firewall_version_number
      in: path
      required: true
      description: The version number of the WAF firewall.
      schema:
        type: integer
    firewallId:
      name: firewall_id
      in: path
      required: true
      description: The alphanumeric string identifying the WAF firewall.
      schema:
        type: string
  schemas:
    WafActiveRule:
      type: object
      description: An active WAF rule that is currently enforced on a firewall.
      properties:
        id:
          type: string
          description: The alphanumeric string identifying the active rule.
        type:
          type: string
          description: The resource type.
          enum:
          - waf_active_rule
        attributes:
          type: object
          properties:
            status:
              type: string
              description: The enforcement status of the rule.
              enum:
              - log
              - block
            modsec_rule_id:
              type: integer
              description: The ModSecurity rule ID.
            revision:
              type: integer
              description: The revision number of the rule.
            created_at:
              type: string
              format: date-time
              description: The date and time the active rule was created.
            updated_at:
              type: string
              format: date-time
              description: The date and time the active rule was last updated.
  securitySchemes:
    apiKeyAuth:
      type: apiKey
      in: header
      name: Fastly-Key
      description: API token used to authenticate requests to the Fastly API.
externalDocs:
  description: Fastly Next-Gen WAF API Documentation
  url: https://www.fastly.com/documentation/reference/api/waf/