| waf-regional:AssociateWebACL | Admin |
| waf-regional:CreateByteMatchSet | Admin |
| waf-regional:CreateGeoMatchSet | Admin |
| waf-regional:CreateIPSet | Admin |
| waf-regional:CreateRateBasedRule | Admin |
| waf-regional:CreateRegexMatchSet | Admin |
| waf-regional:CreateRegexPatternSet | Admin |
| waf-regional:CreateRule | Admin |
| waf-regional:CreateRuleGroup | Admin |
| waf-regional:CreateSizeConstraintSet | Admin |
| waf-regional:CreateSqlInjectionMatchSet | Admin |
| waf-regional:CreateWebACL | Admin |
| waf-regional:CreateWebACLMigrationStack | Admin |
| waf-regional:CreateXssMatchSet | Admin |
| waf-regional:DeleteByteMatchSet | Admin |
| waf-regional:DeleteGeoMatchSet | Admin |
| waf-regional:DeleteIPSet | Admin |
| waf-regional:DeleteLoggingConfiguration | Admin |
| waf-regional:DeletePermissionPolicy | Admin |
| waf-regional:DeleteRateBasedRule | Admin |
| waf-regional:DeleteRegexMatchSet | Admin |
| waf-regional:DeleteRegexPatternSet | Admin |
| waf-regional:DeleteRule | Admin |
| waf-regional:DeleteRuleGroup | Admin |
| waf-regional:DeleteSizeConstraintSet | Admin |
| waf-regional:DeleteSqlInjectionMatchSet | Admin |
| waf-regional:DeleteWebACL | Admin |
| waf-regional:DeleteXssMatchSet | Admin |
| waf-regional:DisassociateWebACL | Admin |
| waf-regional:PutLoggingConfiguration | Admin |
| waf-regional:PutPermissionPolicy | Admin |
| waf-regional:UpdateByteMatchSet | Admin |
| waf-regional:UpdateGeoMatchSet | Admin |
| waf-regional:UpdateIPSet | Admin |
| waf-regional:UpdateRateBasedRule | Admin |
| waf-regional:UpdateRegexMatchSet | Admin |
| waf-regional:UpdateRegexPatternSet | Admin |
| waf-regional:UpdateRule | Admin |
| waf-regional:UpdateRuleGroup | Admin |
| waf-regional:UpdateSizeConstraintSet | Admin |
| waf-regional:UpdateSqlInjectionMatchSet | Admin |
| waf-regional:UpdateWebACL | Admin |
| waf-regional:UpdateXssMatchSet | Admin |
| waf-regional:TagResource | Operator |
| waf-regional:UntagResource | Operator |
| waf-regional:GetIPSet | ReadOnly |
| waf-regional:GetRateBasedRule | ReadOnly |
| waf-regional:GetRateBasedRuleManagedKeys | ReadOnly |
| waf-regional:GetWebACL | ReadOnly |
| waf-regional:GetWebACLForResource | ReadOnly |
| waf-regional:GetByteMatchSet | Metadata |
| waf-regional:GetChangeToken | Metadata |
| waf-regional:GetChangeTokenStatus | Metadata |
| waf-regional:GetGeoMatchSet | Metadata |
| waf-regional:GetLoggingConfiguration | Metadata |
| waf-regional:GetPermissionPolicy | Metadata |
| waf-regional:GetRegexMatchSet | Metadata |
| waf-regional:GetRegexPatternSet | Metadata |
| waf-regional:GetRule | Metadata |
| waf-regional:GetRuleGroup | Metadata |
| waf-regional:GetSampledRequests | Metadata |
| waf-regional:GetSizeConstraintSet | Metadata |
| waf-regional:GetSqlInjectionMatchSet | Metadata |
| waf-regional:GetXssMatchSet | Metadata |
| waf-regional:ListActivatedRulesInRuleGroup | Metadata |
| waf-regional:ListByteMatchSets | Metadata |
| waf-regional:ListGeoMatchSets | Metadata |
| waf-regional:ListIPSets | Metadata |
| waf-regional:ListLoggingConfigurations | Metadata |
| waf-regional:ListRateBasedRules | Metadata |
| waf-regional:ListRegexMatchSets | Metadata |
| waf-regional:ListRegexPatternSets | Metadata |
| waf-regional:ListResourcesForWebACL | Metadata |
| waf-regional:ListRuleGroups | Metadata |
| waf-regional:ListRules | Metadata |
| waf-regional:ListSizeConstraintSets | Metadata |
| waf-regional:ListSqlInjectionMatchSets | Metadata |
| waf-regional:ListSubscribedRuleGroups | Metadata |
| waf-regional:ListTagsForResource | Metadata |
| waf-regional:ListWebACLs | Metadata |
| waf-regional:ListXssMatchSets | Metadata |
