AWS cli medium security documentation change
Summary
Added documentation for new 'Monetize' action and '--monetization-config' option enabling payment requirement for access via WAF rules
Security assessment
The new 'Monetize' action blocks requests that don't complete payment (terminating action), which is an access control mechanism. This implements payment-based authorization, directly impacting security by restricting unpaid access to resources. The feature requires specific configuration (MonetizationConfig) and is security-relevant as it enforces financial authorization.
Diff
diff --git a/cli/latest/reference/wafv2/create-web-acl.md b/cli/latest/reference/wafv2/create-web-acl.md index fee95f764..821f5185d 100644 --- a//cli/latest/reference/wafv2/create-web-acl.md +++ b//cli/latest/reference/wafv2/create-web-acl.md @@ -15 +15 @@ - * [AWS CLI 2.35.3 Command Reference](../../index.html) » + * [AWS CLI 2.35.5 Command Reference](../../index.html) » @@ -84,0 +85 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/wafv2- + [--monetization-config <value>] @@ -3524,0 +3526,16 @@ JSON Syntax: +>>>>>>> +>>>>>>> Monetize -> (structure) +>>>>>>> +>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>> +>>>>>>>> PriceMultiplier -> (string) +>>>>>>>> +>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>> +>>>>>>>>> Constraints: +>>>>>>>>> +>>>>>>>>> * min: `1` +>>>>>>>>> * max: `3` +>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>> + @@ -7485,0 +7503,16 @@ JSON Syntax: +>>>>>>>>> +>>>>>>>>> Monetize -> (structure) +>>>>>>>>> +>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>> +>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>> +>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `1` +>>>>>>>>>>> * max: `3` +>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>> + @@ -10222,0 +10256,16 @@ JSON Syntax: +>>>>>>>>> +>>>>>>>>> Monetize -> (structure) +>>>>>>>>> +>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>> +>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>> +>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `1` +>>>>>>>>>>> * max: `3` +>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>> + @@ -14591,0 +14641,16 @@ JSON Syntax: +>>>>>>>>>> +>>>>>>>>>> Monetize -> (structure) +>>>>>>>>>> +>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>>> +>>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `3` +>>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>>> + @@ -17328,0 +17394,16 @@ JSON Syntax: +>>>>>>>>>> +>>>>>>>>>> Monetize -> (structure) +>>>>>>>>>> +>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>>> +>>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `3` +>>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>>> + @@ -21219,0 +21301,16 @@ JSON Syntax: +>>>>>>>>>> +>>>>>>>>>> Monetize -> (structure) +>>>>>>>>>> +>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>>> +>>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `3` +>>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>>> + @@ -23956,0 +24054,16 @@ JSON Syntax: +>>>>>>>>>> +>>>>>>>>>> Monetize -> (structure) +>>>>>>>>>> +>>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>>> +>>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `3` +>>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>>> + @@ -27841,0 +27955,16 @@ JSON Syntax: +>>>>>>>>> +>>>>>>>>> Monetize -> (structure) +>>>>>>>>> +>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>> +>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>> +>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `1` +>>>>>>>>>>> * max: `3` +>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>> + @@ -30578,0 +30708,16 @@ JSON Syntax: +>>>>>>>>> +>>>>>>>>> Monetize -> (structure) +>>>>>>>>> +>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>> +>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>> +>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `1` +>>>>>>>>>>> * max: `3` +>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>> + @@ -34539,0 +34685,16 @@ JSON Syntax: +>>>>>>>>> +>>>>>>>>> Monetize -> (structure) +>>>>>>>>> +>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>> +>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>> +>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `1` +>>>>>>>>>>> * max: `3` +>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>> + @@ -37276,0 +37438,16 @@ JSON Syntax: +>>>>>>>>> +>>>>>>>>> Monetize -> (structure) +>>>>>>>>> +>>>>>>>>>> Instructs WAF to return an HTTP 402 Payment Required response with a price manifest. The requesting client can complete payment and resubmit the request to gain access. This is a terminating action-requests that do not complete payment are blocked. This action is available only for web ACLs associated with Amazon CloudFront distributions and requires a `MonetizationConfig` on the web ACL. +>>>>>>>>>> +>>>>>>>>>> PriceMultiplier -> (string) +>>>>>>>>>> +>>>>>>>>>>> An integer multiplier applied to the base price defined in the web ACL’s `MonetizationConfig` . The effective price for the request is the base price multiplied by this value. Specify as a string. Valid values: 1 to 100. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `1` +>>>>>>>>>>> * max: `3` +>>>>>>>>>>> * pattern: `^([1-9][0-9]?|100)$` +>>>>>>>>>>> + @@ -39349,0 +39527,16 @@ JSON Syntax: +>>>>>>> +>>>>>>> Monetize -> (structure) +>>>>>>>