| waf:CreateByteMatchSet | Admin |
| waf:CreateGeoMatchSet | Admin |
| waf:CreateIPSet | Admin |
| waf:CreateRateBasedRule | Admin |
| waf:CreateRegexMatchSet | Admin |
| waf:CreateRegexPatternSet | Admin |
| waf:CreateRule | Admin |
| waf:CreateRuleGroup | Admin |
| waf:CreateSizeConstraintSet | Admin |
| waf:CreateSqlInjectionMatchSet | Admin |
| waf:CreateWebACL | Admin |
| waf:CreateWebACLMigrationStack | Admin |
| waf:CreateXssMatchSet | Admin |
| waf:DeleteByteMatchSet | Admin |
| waf:DeleteGeoMatchSet | Admin |
| waf:DeleteIPSet | Admin |
| waf:DeleteLoggingConfiguration | Admin |
| waf:DeletePermissionPolicy | Admin |
| waf:DeleteRateBasedRule | Admin |
| waf:DeleteRegexMatchSet | Admin |
| waf:DeleteRegexPatternSet | Admin |
| waf:DeleteRule | Admin |
| waf:DeleteRuleGroup | Admin |
| waf:DeleteSizeConstraintSet | Admin |
| waf:DeleteSqlInjectionMatchSet | Admin |
| waf:DeleteWebACL | Admin |
| waf:DeleteXssMatchSet | Admin |
| waf:PutLoggingConfiguration | Admin |
| waf:PutPermissionPolicy | Admin |
| waf:UpdateByteMatchSet | Admin |
| waf:UpdateGeoMatchSet | Admin |
| waf:UpdateIPSet | Admin |
| waf:UpdateRateBasedRule | Admin |
| waf:UpdateRegexMatchSet | Admin |
| waf:UpdateRegexPatternSet | Admin |
| waf:UpdateRule | Admin |
| waf:UpdateRuleGroup | Admin |
| waf:UpdateSizeConstraintSet | Admin |
| waf:UpdateSqlInjectionMatchSet | Admin |
| waf:UpdateWebACL | Admin |
| waf:UpdateXssMatchSet | Admin |
| wafv2:AssociateWebACL | Admin |
| wafv2:CreateIPSet | Admin |
| wafv2:CreateRegexPatternSet | Admin |
| wafv2:CreateRuleGroup | Admin |
| wafv2:CreateWebACL | Admin |
| wafv2:DeleteFirewallManagerRuleGroups | Admin |
| wafv2:DeleteIPSet | Admin |
| wafv2:DeleteLoggingConfiguration | Admin |
| wafv2:DeletePermissionPolicy | Admin |
| wafv2:DeleteRegexPatternSet | Admin |
| wafv2:DeleteRuleGroup | Admin |
| wafv2:DeleteWebACL | Admin |
| wafv2:DisassociateFirewallManager | Admin |
| wafv2:DisassociateWebACL | Admin |
| wafv2:ListRuleGroups | Admin |
| wafv2:PutFirewallManagerRuleGroups | Admin |
| wafv2:PutLoggingConfiguration | Admin |
| wafv2:PutManagedRuleSetVersions | Admin |
| wafv2:PutPermissionPolicy | Admin |
| wafv2:UpdateIPSet | Admin |
| wafv2:UpdateManagedRuleSetVersionExpiryDate | Admin |
| wafv2:UpdateRegexPatternSet | Admin |
| wafv2:UpdateRuleGroup | Admin |
| wafv2:UpdateWebACL | Admin |
| waf:TagResource | Operator |
| waf:UntagResource | Operator |
| wafv2:TagResource | Operator |
| wafv2:UntagResource | Operator |
| waf:GetIPSet | ReadOnly |
| waf:GetPermissionPolicy | ReadOnly |
| waf:GetRateBasedRule | ReadOnly |
| waf:GetRateBasedRuleManagedKeys | ReadOnly |
| waf:GetWebACL | ReadOnly |
| waf:GetByteMatchSet | Metadata |
| waf:GetChangeToken | Metadata |
| waf:GetChangeTokenStatus | Metadata |
| waf:GetGeoMatchSet | Metadata |
| waf:GetLoggingConfiguration | Metadata |
| waf:GetRegexMatchSet | Metadata |
| waf:GetRegexPatternSet | Metadata |
| waf:GetRule | Metadata |
| waf:GetRuleGroup | Metadata |
| waf:GetSampledRequests | Metadata |
| waf:GetSizeConstraintSet | Metadata |
| waf:GetSqlInjectionMatchSet | Metadata |
| waf:GetXssMatchSet | Metadata |
| waf:ListActivatedRulesInRuleGroup | Metadata |
| waf:ListByteMatchSets | Metadata |
| waf:ListGeoMatchSets | Metadata |
| waf:ListIPSets | Metadata |
| waf:ListLoggingConfigurations | Metadata |
| waf:ListRateBasedRules | Metadata |
| waf:ListRegexMatchSets | Metadata |
| waf:ListRegexPatternSets | Metadata |
| waf:ListRuleGroups | Metadata |
| waf:ListRules | Metadata |
| waf:ListSizeConstraintSets | Metadata |
| waf:ListSqlInjectionMatchSets | Metadata |
| waf:ListSubscribedRuleGroups | Metadata |
| waf:ListTagsForResource | Metadata |
| waf:ListWebACLs | Metadata |
| waf:ListXssMatchSets | Metadata |
| wafv2:CheckCapacity | Metadata |
| wafv2:DescribeManagedRuleGroup | Metadata |
| wafv2:GetIPSet | Metadata |
| wafv2:GetLoggingConfiguration | Metadata |
| wafv2:GetManagedRuleSet | Metadata |
| wafv2:GetPermissionPolicy | Metadata |
| wafv2:GetRateBasedStatementManagedKeys | Metadata |
| wafv2:GetRegexPatternSet | Metadata |
| wafv2:GetRuleGroup | Metadata |
| wafv2:GetSampledRequests | Metadata |
| wafv2:GetWebACL | Metadata |
| wafv2:GetWebACLForResource | Metadata |
| wafv2:ListAvailableManagedRuleGroups | Metadata |
| wafv2:ListIPSets | Metadata |
| wafv2:ListLoggingConfigurations | Metadata |
| wafv2:ListManagedRuleSets | Metadata |
| wafv2:ListRegexPatternSets | Metadata |
| wafv2:ListResourcesForWebACL | Metadata |
| wafv2:ListTagsForResource | Metadata |
| wafv2:ListWebACLs | Metadata |
