Table Of Contents

Feedback

User Guide

First time using the AWS CLI? See the User Guide for help getting started.

[ aws . waf ]

get-ip-set

Description

Returns the IPSet that is specified by IPSetId .

See also: AWS API Documentation

Synopsis

  get-ip-set
--ip-set-id <value>
[--cli-input-json <value>]
[--generate-cli-skeleton <value>]

Options

--ip-set-id (string)

The IPSetId of the IPSet that you want to get. IPSetId is returned by create-ip-set and by list-ip-sets .

--cli-input-json (string) Performs service operation based on the JSON string provided. The JSON string follows the format provided by --generate-cli-skeleton. If other arguments are provided on the command line, the CLI values will override the JSON-provided values.

--generate-cli-skeleton (string) Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value input, prints a sample input JSON that can be used as an argument for --cli-input-json. If provided with the value output, it validates the command inputs and returns a sample output JSON for that command.

Output

IPSet -> (structure)

Information about the IPSet that you specified in the get-ip-set request. For more information, see the following topics:

  • IPSet : Contains IPSetDescriptors , IPSetId , and Name
  • IPSetDescriptors : Contains an array of IPSetDescriptor objects. Each IPSetDescriptor object contains Type and Value

IPSetId -> (string)

The IPSetId for an IPSet . You use IPSetId to get information about an IPSet (see get-ip-set ), update an IPSet (see update-ip-set ), insert an IPSet into a Rule or delete one from a Rule (see update-rule ), and delete an IPSet from AWS WAF (see delete-ip-set ).

IPSetId is returned by create-ip-set and by list-ip-sets .

Name -> (string)

A friendly name or description of the IPSet . You can't change the name of an IPSet after you create it.

IPSetDescriptors -> (list)

The IP address type (IPV4 or IPV6 ) and the IP address range (in CIDR notation) that web requests originate from. If the WebACL is associated with a CloudFront distribution and the viewer did not use an HTTP proxy or a load balancer to send the request, this is the value of the c-ip field in the CloudFront access logs.

(structure)

Specifies the IP address type (IPV4 or IPV6 ) and the IP address range (in CIDR format) that web requests originate from.

Type -> (string)

Specify IPV4 or IPV6 .

Value -> (string)

Specify an IPv4 address by using CIDR notation. For example:

  • To configure AWS WAF to allow, block, or count requests that originated from the IP address 192.0.2.44, specify 192.0.2.44/32 .
  • To configure AWS WAF to allow, block, or count requests that originated from IP addresses from 192.0.2.0 to 192.0.2.255, specify 192.0.2.0/24 .

For more information about CIDR notation, see the Wikipedia entry Classless Inter-Domain Routing .

Specify an IPv6 address by using CIDR notation. For example:

  • To configure AWS WAF to allow, block, or count requests that originated from the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify 1111:0000:0000:0000:0000:0000:0000:0111/128 .
  • To configure AWS WAF to allow, block, or count requests that originated from IP addresses 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify 1111:0000:0000:0000:0000:0000:0000:0000/64 .