The following tables list API operations available for use in Web Application Firewall (WAF).

Instance management

APIDescription
DescribeInstanceInfoQueries the basic information about the WAF instance that you purchase. The information includes the ID, type, and status of the WAF instance.
DescribeInstanceSpecInfoQueries the specification information about the WAF instance that you purchase.
DeleteInstanceReleases a subscription WAF instance that expires.

Domain name configurations

APIDescription
DescribeDomainNamesQueries all the domain names that are added to WAF.
Note This operation returns all the domain names at a time. We recommend that you call the DescribeDomainList operation, which returns domain names by page.
DescribeDomainListQueries the domain names that are added to WAF by page.
Note This operation allows you to specify different conditions for the query and returns query results by page. If you want to query a large number of domain names, we recommend that you call the operation.
DescribeDomainQueries the configuration of a specific domain name that is added to WAF.
CreateDomainAdds a domain name to WAF.
ModifyDomainModifies the configuration of a specific domain name.
DeleteDomainRemoves a domain name from WAF.
DescribeCertificatesQueries the certificates that are associated with a specific domain name. The certificates are managed by SSL Certificates Service.
DescribeCertMatchStatusChecks whether the certificate and the private key that you upload for a specific domain name match each other.
CreateCertificateUploads the certificate and private key for a domain name that is added to WAF.
CreateCertificateByCertificateIdUploads the certificate for a specific domain name based on the certificate ID.
DescribeDomainBasicConfigsQueries the protection status of a domain name that is added to WAF.
DescribeDomainAdvanceConfigsQueries the configuration details of a domain name that is added to WAF.

Protection configuration

APIDescription
ModifyDomainIpv6StatusEnables or disables IPv6 traffic protection for a domain name.
DescribeProtectionModuleStatusQueries whether a specific WAF protection module is enabled. The WAF protection modules include web intrusion prevention, data security, advanced protection, bot management, and access control or throttling.
ModifyProtectionModuleStatusEnables or disables a specific WAF protection module. The WAF protection modules include web intrusion prevention, data security, advanced protection, bot management, and access control or throttling.
DescribeProtectionModuleModeQueries the protection mode of a specific WAF protection module. The WAF protection modules include the protection rules engine, big data deep learning engine, HTTP flood protection, data risk control, and positive security model.
ModifyProtectionModuleModeModifies the protection mode of a specific WAF protection module. The WAF protection modules include the protection rules engine, big data deep learning engine, HTTP flood protection, data risk control, and positive security model.
DescribeProtectionModuleRulesQueries the rules that are created for a specific WAF protection module. The WAF protection modules include web intrusion prevention, data security, bot management, access control or throttling, and website whitelist.
CreateProtectionModuleRuleCreates rules for a specific WAF protection module. The WAF protection modules include web intrusion prevention, data security, bot management, access control or throttling, and whitelist.
ModifyProtectionModuleRuleModifies the rules that are created for a specific WAF protection module. The WAF protection modules include web intrusion prevention, data security, advanced protection, bot management, access control or throttling, and website whitelist.
ModifyProtectionRuleStatusEnables or disables the rules that are created for a specific WAF protection module. The WAF protection modules include website tamper-proofing, allowed crawlers, bot threat intelligence, custom protection policy, and website whitelist.
DescribeDomainRuleGroupQueries the ID of the protection rule group that is provided by the protection rules engine module for a specific domain name.
SetDomainRuleGroupConfigures the protection rule group that is provided by the protection rules engine module for a specific domain name. WAF provides three default protection rule groups. You can also configure a custom protection rule group.
ModifyProtectionRuleCacheStatusUpdates the cached pages of a domain name that is protected by a specific website tamper-proofing rule.
DeleteProtectionModuleRuleDeletes the rule that is created for a specific WAF protection module
DescribeProtectionModuleCodeConfigQueries the codes of regions that can be configured in the WAF region blacklist.

Log management

APIDescription
ModifyLogServiceStatusEnables or disables the log collection feature for a domain name.
ModifyLogRetrievalStatusEnables or disables the log retrieval feature for a domain name.
DescribeLogServiceStatusQueries whether the log collection feature is enabled for the domain names that are added to WAF.

System management

APIDescription
DescribeWafSourceIpSegmentQueries the back-to-origin CIDR blocks that are used by the WAF protection cluster.

Resource operations

APIDescription
MoveResourceGroupTransfers a WAF resource to another resource group.