| waf-regional:TagResource | Operator |
| waf-regional:UntagResource | Operator |
| waf-regional:GetIPSet | ReadOnly |
| waf-regional:GetRateBasedRule | ReadOnly |
| waf-regional:GetRateBasedRuleManagedKeys | ReadOnly |
| waf-regional:GetWebACL | ReadOnly |
| waf-regional:GetWebACLForResource | ReadOnly |
| waf-regional:GetByteMatchSet | Metadata |
| waf-regional:GetChangeToken | Metadata |
| waf-regional:GetChangeTokenStatus | Metadata |
| waf-regional:GetGeoMatchSet | Metadata |
| waf-regional:GetLoggingConfiguration | Metadata |
| waf-regional:GetPermissionPolicy | Metadata |
| waf-regional:GetRegexMatchSet | Metadata |
| waf-regional:GetRegexPatternSet | Metadata |
| waf-regional:GetRule | Metadata |
| waf-regional:GetRuleGroup | Metadata |
| waf-regional:GetSampledRequests | Metadata |
| waf-regional:GetSizeConstraintSet | Metadata |
| waf-regional:GetSqlInjectionMatchSet | Metadata |
| waf-regional:GetXssMatchSet | Metadata |
| waf-regional:ListActivatedRulesInRuleGroup | Metadata |
| waf-regional:ListByteMatchSets | Metadata |
| waf-regional:ListGeoMatchSets | Metadata |
| waf-regional:ListIPSets | Metadata |
| waf-regional:ListLoggingConfigurations | Metadata |
| waf-regional:ListRateBasedRules | Metadata |
| waf-regional:ListRegexMatchSets | Metadata |
| waf-regional:ListRegexPatternSets | Metadata |
| waf-regional:ListResourcesForWebACL | Metadata |
| waf-regional:ListRuleGroups | Metadata |
| waf-regional:ListRules | Metadata |
| waf-regional:ListSizeConstraintSets | Metadata |
| waf-regional:ListSqlInjectionMatchSets | Metadata |
| waf-regional:ListSubscribedRuleGroups | Metadata |
| waf-regional:ListTagsForResource | Metadata |
| waf-regional:ListWebACLs | Metadata |
| waf-regional:ListXssMatchSets | Metadata |
