DeleteWebACLCommand

This is AWS WAF Classic documentation. For more information, see AWS WAF Classic  in the developer guide.

For the latest version of AWS WAF, use the AWS WAFV2 API and see the AWS WAF Developer Guide . With the latest version, AWS WAF has a single set of endpoints for regional and global use.

Permanently deletes a WebACL. You can't delete a WebACL if it still contains any Rules.

To delete a WebACL, perform the following steps:

  1. Update the WebACL to remove Rules, if any. For more information, see UpdateWebACL.

  2. Use GetChangeToken to get the change token that you provide in the ChangeToken parameter of a DeleteWebACL request.

  3. Submit a DeleteWebACL request.

Example Syntax

Use a bare-bones client and the command you need to make an API call.

import { WAFRegionalClient, DeleteWebACLCommand } from "@aws-sdk/client-waf-regional"; // ES Modules import
// const { WAFRegionalClient, DeleteWebACLCommand } = require("@aws-sdk/client-waf-regional"); // CommonJS import
const client = new WAFRegionalClient(config);
const input = { // DeleteWebACLRequest
  WebACLId: "STRING_VALUE", // required
  ChangeToken: "STRING_VALUE", // required
};
const command = new DeleteWebACLCommand(input);
const response = await client.send(command);
// { // DeleteWebACLResponse
//   ChangeToken: "STRING_VALUE",
// };

Example Usage

 Loading code editor

DeleteWebACLCommand Input

See DeleteWebACLCommandInput for more details

Parameter
Type
Description
ChangeToken
Required
string | undefined

The value returned by the most recent call to GetChangeToken.

WebACLId
Required
string | undefined

The WebACLId of the WebACL that you want to delete. WebACLId is returned by CreateWebACL and by ListWebACLs.

DeleteWebACLCommand Output

Parameter
Type
Description
$metadata
Required
ResponseMetadata
Metadata pertaining to this request.
ChangeToken
string | undefined

The ChangeToken that you used to submit the DeleteWebACL request. You can also use this value to query the status of the request. For more information, see GetChangeTokenStatus.

Throws

Name
Fault
Details
WAFInternalErrorException
server

The operation failed because of a system problem, even though the request was valid. Retry your request.

WAFInvalidAccountException
client

The operation failed because you tried to create, update, or delete an object by using an invalid account identifier.

WAFNonEmptyEntityException
client

The operation failed because you tried to delete an object that isn't empty. For example:

  • You tried to delete a WebACL that still contains one or more Rule objects.

  • You tried to delete a Rule that still contains one or more ByteMatchSet objects or other predicates.

  • You tried to delete a ByteMatchSet that contains one or more ByteMatchTuple objects.

  • You tried to delete an IPSet that references one or more IP addresses.

WAFNonexistentItemException
client

The operation failed because the referenced object doesn't exist.

WAFReferencedItemException
client

The operation failed because you tried to delete an object that is still in use. For example:

  • You tried to delete a ByteMatchSet that is still referenced by a Rule.

  • You tried to delete a Rule that is still referenced by a WebACL.

WAFStaleDataException
client

The operation failed because you tried to create, update, or delete an object by using a change token that has already been used.

WAFTagOperationException
client

WAFTagOperationInternalErrorException
server

WAFRegionalServiceException
Base exception class for all service exceptions from WAFRegional service.