Request Syntax Request Parameters Response Syntax Response Elements Errors See Also

ListLoggingConfigurations

Retrieves an array of your LoggingConfiguration objects.

Request Syntax


{
   "Limit": number,
   "LogScope": "string",
   "NextMarker": "string",
   "Scope": "string"
}

Request Parameters

For information about the parameters that are common to all actions, see Common Parameters.

The request accepts the following data in JSON format.

Limit

The maximum number of objects that you want AWS WAF to return for this request. If more objects are available, in the response, AWS WAF provides a NextMarker value that you can use in a subsequent call to get the next batch of objects.

Type: Integer

Valid Range: Minimum value of 1. Maximum value of 100.

Required: No

LogScope

The owner of the logging configuration, which must be set to CUSTOMER for the configurations that you manage.

The log scope SECURITY_LAKE indicates a configuration that is managed through Amazon Security Lake. You can use Security Lake to collect log and event data from various sources for normalization, analysis, and management. For information, see Collecting data from AWS services in the Amazon Security Lake user guide.

Default: CUSTOMER

Type: String

Valid Values: CUSTOMER | SECURITY_LAKE

Required: No

NextMarker

When you request a list of objects with a Limit setting, if the number of objects that are still available for retrieval exceeds the limit, AWS WAF returns a NextMarker value in the response. To retrieve the next batch of objects, provide the marker from the prior call in your next request.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 256.

Pattern: .*\S.*

Required: No

Scope

Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance.

To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:

CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1.
API and SDKs - For all calls, use the Region endpoint us-east-1.

Type: String

Valid Values: CLOUDFRONT | REGIONAL

Required: Yes

Response Syntax


{
   "LoggingConfigurations": [ 
      { 
         "LogDestinationConfigs": [ "string" ],
         "LoggingFilter": { 
            "DefaultBehavior": "string",
            "Filters": [ 
               { 
                  "Behavior": "string",
                  "Conditions": [ 
                     { 
                        "ActionCondition": { 
                           "Action": "string"
                        },
                        "LabelNameCondition": { 
                           "LabelName": "string"
                        }
                     }
                  ],
                  "Requirement": "string"
               }
            ]
         },
         "LogScope": "string",
         "LogType": "string",
         "ManagedByFirewallManager": boolean,
         "RedactedFields": [ 
            { 
               "AllQueryArguments": { 
               },
               "Body": { 
                  "OversizeHandling": "string"
               },
               "Cookies": { 
                  "MatchPattern": { 
                     "All": { 
                     },
                     "ExcludedCookies": [ "string" ],
                     "IncludedCookies": [ "string" ]
                  },
                  "MatchScope": "string",
                  "OversizeHandling": "string"
               },
               "HeaderOrder": { 
                  "OversizeHandling": "string"
               },
               "Headers": { 
                  "MatchPattern": { 
                     "All": { 
                     },
                     "ExcludedHeaders": [ "string" ],
                     "IncludedHeaders": [ "string" ]
                  },
                  "MatchScope": "string",
                  "OversizeHandling": "string"
               },
               "JA3Fingerprint": { 
                  "FallbackBehavior": "string"
               },
               "JsonBody": { 
                  "InvalidFallbackBehavior": "string",
                  "MatchPattern": { 
                     "All": { 
                     },
                     "IncludedPaths": [ "string" ]
                  },
                  "MatchScope": "string",
                  "OversizeHandling": "string"
               },
               "Method": { 
               },
               "QueryString": { 
               },
               "SingleHeader": { 
                  "Name": "string"
               },
               "SingleQueryArgument": { 
                  "Name": "string"
               },
               "UriPath": { 
               }
            }
         ],
         "ResourceArn": "string"
      }
   ],
   "NextMarker": "string"
}

Response Elements

If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

LoggingConfigurations

Array of logging configurations. If you specified a Limit in your request, this might not be the full list.

Type: Array of LoggingConfiguration objects

NextMarker

Type: String

Length Constraints: Minimum length of 1. Maximum length of 256.

Pattern: .*\S.*

Errors

For information about the errors that are common to all actions, see Common Errors.

WAFInternalErrorException

Your request is valid, but AWS WAF couldn’t perform the operation because of a system problem. Retry your request.

HTTP Status Code: 500

WAFInvalidOperationException

The operation isn't valid.

HTTP Status Code: 400

WAFInvalidParameterException

The operation failed because AWS WAF didn't recognize a parameter in the request. For example:

You specified a parameter name or value that isn't valid.
Your nested statement isn't valid. You might have tried to nest a statement that can’t be nested.
You tried to update a WebACL with a DefaultAction that isn't among the types available at DefaultAction.
Your request references an ARN that is malformed, or corresponds to a resource with which a web ACL can't be associated.

HTTP Status Code: 400