Policy: AWSWAFFullAccess

ARN: arn:aws:iam::aws:policy/AWSWAFFullAccess

Allowed Actions

Actions	Services
apigateway:SetWebACL	apigateway
apprunner:AssociateWebAcl	apprunner
apprunner:DescribeWebAclForService	apprunner
apprunner:DisassociateWebAcl	apprunner
apprunner:ListAssociatedServicesForWebAcl	apprunner
apprunner:ListServices	apprunner
appsync:SetWebACL	appsync
cognito-idp:AssociateWebACL	cognito-idp
cognito-idp:DisassociateWebACL	cognito-idp
cognito-idp:GetWebACLForResource	cognito-idp
cognito-idp:ListResourcesForWebACL	cognito-idp
ec2:AssociateVerifiedAccessInstanceWebAcl	ec2
ec2:DescribeVerifiedAccessInstanceWebAclAssociations	ec2
ec2:DisassociateVerifiedAccessInstanceWebAcl	ec2
ec2:GetVerifiedAccessInstanceWebAcl	ec2
elasticloadbalancing:SetWebACL	elasticloadbalancing
logs:CreateLogDelivery	logs
logs:DeleteLogDelivery	logs
logs:DescribeLogGroups	logs
logs:DescribeResourcePolicies	logs
logs:PutResourcePolicy	logs
s3:GetBucketPolicy	s3
s3:PutBucketPolicy	s3
waf:*	waf
waf-regional:*	waf-regional
wafv2:*	wafv2