Skip to content

Service: waf

Attached Policies

Policy ARN Policy Name
arn:aws:iam::aws:policy/ReadOnlyAccess ReadOnlyAccess
arn:aws:iam::aws:policy/CloudFrontFullAccess CloudFrontFullAccess
arn:aws:iam::aws:policy/CloudFrontReadOnlyAccess CloudFrontReadOnlyAccess
arn:aws:iam::aws:policy/SecurityAudit SecurityAudit
arn:aws:iam::aws:policy/AWSWAFReadOnlyAccess AWSWAFReadOnlyAccess
arn:aws:iam::aws:policy/AWSWAFFullAccess AWSWAFFullAccess
arn:aws:iam::aws:policy/job-function/ViewOnlyAccess ViewOnlyAccess
arn:aws:iam::aws:policy/job-function/SupportUser SupportUser
arn:aws:iam::aws:policy/aws-service-role/FMSServiceRolePolicy FMSServiceRolePolicy
arn:aws:iam::aws:policy/AWSFMAdminFullAccess AWSFMAdminFullAccess
arn:aws:iam::aws:policy/AWSFMAdminReadOnlyAccess AWSFMAdminReadOnlyAccess
arn:aws:iam::aws:policy/AWSFMMemberReadOnlyAccess AWSFMMemberReadOnlyAccess
arn:aws:iam::aws:policy/aws-service-role/AWSConfigServiceRolePolicy AWSConfigServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AWSShieldDRTAccessPolicy AWSShieldDRTAccessPolicy
arn:aws:iam::aws:policy/AWSWAFConsoleFullAccess AWSWAFConsoleFullAccess
arn:aws:iam::aws:policy/AWSWAFConsoleReadOnlyAccess AWSWAFConsoleReadOnlyAccess
arn:aws:iam::aws:policy/service-role/AWS_ConfigRole AWS_ConfigRole
arn:aws:iam::aws:policy/aws-service-role/AWSSupportServiceRolePolicy AWSSupportServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSAuditManagerServiceRolePolicy AWSAuditManagerServiceRolePolicy
arn:aws:iam::aws:policy/ResourceGroupsTaggingAPITagUntagSupportedResources ResourceGroupsTaggingAPITagUntagSupportedResources
arn:aws:iam::aws:policy/AWSPartnerLedSupportReadOnlyAccess AWSPartnerLedSupportReadOnlyAccess

Allowed Actions

Action Service
waf:* waf
waf:CreateWebACL waf
waf:DeletePermissionPolicy waf
waf:DeleteWebACL waf
waf:Get* waf
waf:GetChangeToken waf
waf:GetLoggingConfiguration waf
waf:GetPermissionPolicy waf
waf:GetRule waf
waf:GetRuleGroup waf
waf:GetWebACL waf
waf:List* waf
waf:ListActivatedRulesInRuleGroup waf
waf:ListRuleGroups waf
waf:ListRules waf
waf:ListSubscribedRuleGroups waf
waf:ListTagsForResource waf
waf:ListWebACLs waf
waf:ListWebAcls waf
waf:PutPermissionPolicy waf
waf:TagResource waf
waf:UntagResource waf
waf:UpdateWebACL waf
waf:getByteMatchSet waf
waf:getChangeTokenStatus waf
waf:getGeoMatchSet waf
waf:getIPSet waf
waf:getLoggingConfiguration waf
waf:getRateBasedRule waf
waf:getRegexMatchSet waf
waf:getRegexPatternSet waf
waf:getRule waf
waf:getRuleGroup waf
waf:getSampledRequests waf
waf:getSizeConstraintSet waf
waf:getSqlInjectionMatchSet waf
waf:getWebACL waf
waf:getXssMatchSet waf
waf:listActivatedRulesInRuleGroup waf
waf:listByteMatchSets waf
waf:listGeoMatchSets waf
waf:listIPSets waf
waf:listLoggingConfigurations waf
waf:listRateBasedRules waf
waf:listRegexMatchSets waf
waf:listRegexPatternSets waf
waf:listRuleGroups waf
waf:listRules waf
waf:listSizeConstraintSets waf
waf:listSqlInjectionMatchSets waf
waf:listWebACLs waf
waf:listXssMatchSets waf