WAFv2
Web ACLs, IP sets, regex pattern sets, rule groups.
Quick start
import boto3
waf = boto3.client("wafv2", endpoint_url="http://localhost:4566",
region_name="us-east-1",
aws_access_key_id="test", aws_secret_access_key="test")
waf.create_web_acl(Name="acl", Scope="REGIONAL",
DefaultAction={"Allow":{}}, Rules=[],
VisibilityConfig={"SampledRequestsEnabled":False,
"CloudWatchMetricsEnabled":False,"MetricName":"m"})
Supported operations
39 operations exposed by this service as of MiniStack 1.4.6. Extracted directly from the handler dispatch in the source module.
AssociateWebACL
CheckCapacity
CreateIPSet
CreateRuleGroup
CreateWebACL
DeleteIPSet
DeleteRuleGroup
DeleteWebACL
DescribeManagedRuleGroup
DisassociateWebACL
GetChangeToken
GetChangeTokenStatus
GetIPSet
GetPermissionPolicy
GetRuleGroup
GetWebACL
GetWebACLForResource
ListActivatedRulesInRuleGroup
ListByteMatchSets
ListGeoMatchSets
ListIPSets
ListLoggingConfigurations
ListRateBasedRules
ListRegexMatchSets
ListRegexPatternSets
ListResourcesForWebACL
ListRuleGroups
ListRules
ListSizeConstraintSets
ListSqlInjectionMatchSets
ListSubscribedRuleGroups
ListTagsForResource
ListWebACLs
ListXssMatchSets
TagResource
UntagResource
UpdateIPSet
UpdateRuleGroup
UpdateWebACL
CloudFormation
The CloudFormation engine provisions these resource types via this service:
AWS::WAFv2::WebACL
See CloudFormation engine for intrinsic support and lifecycle details.
Known limitations
- Rules are stored but not enforced — incoming traffic is never filtered.
- Sampled-requests and CloudWatch metrics are not populated.
Source
ministack/services/waf.py
Read the source to verify the ops list above — dispatch tables and handler functions are the ground truth.