Class WafException
- Exception
-
RuntimeException
-
Aws\Exception\AwsException
implements
Aws\MonitoringEventsInterface,
Aws\ResponseContainerInterface,
ArrayAccess
uses
Aws\HasDataTrait,
Aws\HasMonitoringEventsTrait
-
Aws\Waf\Exception\WafException
- Namespace: Aws\Waf\Exception
- Located at Waf/Exception/WafException.php
Represents an error interacting with the AWS WAF service.
Methods Summary
Methods inherited from Aws\Exception\AwsException
__construct(),
__toString(),
get(),
getAwsErrorCode(),
getAwsErrorMessage(),
getAwsErrorShape(),
getAwsErrorType(),
getAwsRequestId(),
getCommand(),
getRequest(),
getResponse(),
getResult(),
getStatusCode(),
getTransferInfo(),
hasKey(),
isConnectionError(),
isMaxRetriesExceeded(),
search(),
setMaxRetriesExceeded(),
setTransferInfo()
Methods inherited from Exception
__wakeup(),
getCode(),
getFile(),
getLine(),
getMessage(),
getPrevious(),
getTrace(),
getTraceAsString()
Methods inherited from ArrayAccess
offsetExists(),
offsetGet(),
offsetSet(),
offsetUnset()
Methods inherited from Aws\MonitoringEventsInterface
Methods used from Aws\HasDataTrait
Methods used from Aws\HasMonitoringEventsTrait
Expected Exception Codes
WAFBadRequestException
[
'message' => '<string>',
]
WAFDisallowedNameException
[
'message' => '<string>',
]
WAFEntityMigrationException
[
'MigrationErrorReason' => '<string>',
'MigrationErrorType' => 'ENTITY_NOT_SUPPORTED|ENTITY_NOT_FOUND|S3_BUCKET_NO_PERMISSION|S3_BUCKET_NOT_ACCESSIBLE|S3_BUCKET_NOT_FOUND|S3_BUCKET_INVALID_REGION|S3_INTERNAL_ERROR',
'message' => '<string>',
]
Description
The operation failed due to a problem with the migration. The failure cause is provided in the exception, in the MigrationErrorType:
-
ENTITY_NOT_SUPPORTED- The web ACL has an unsupported entity but theIgnoreUnsupportedTypeis not set to true. -
ENTITY_NOT_FOUND- The web ACL doesn't exist. -
S3_BUCKET_NO_PERMISSION- You don't have permission to perform thePutObjectaction to the specified Amazon S3 bucket. -
S3_BUCKET_NOT_ACCESSIBLE- The bucket policy doesn't allow AWS WAF to perform thePutObjectaction in the bucket. -
S3_BUCKET_NOT_FOUND- The S3 bucket doesn't exist. -
S3_BUCKET_INVALID_REGION- The S3 bucket is not in the same Region as the web ACL. -
S3_INTERNAL_ERROR- AWS WAF failed to create the template in the S3 bucket for another reason.
Members
WAFInternalErrorException
[
'message' => '<string>',
]
Description
The operation failed because of a system problem, even though the request was valid. Retry your request.
Members
WAFInvalidAccountException
[ ]
Description
The operation failed because you tried to create, update, or delete an object by using an invalid account identifier.
Members
WAFInvalidOperationException
[
'message' => '<string>',
]
Description
The operation failed because there was nothing to do. For example:
-
You tried to remove a
Rulefrom aWebACL, but theRuleisn't in the specifiedWebACL. -
You tried to remove an IP address from an
IPSet, but the IP address isn't in the specifiedIPSet. -
You tried to remove a
ByteMatchTuplefrom aByteMatchSet, but theByteMatchTupleisn't in the specifiedWebACL. -
You tried to add a
Ruleto aWebACL, but theRulealready exists in the specifiedWebACL. -
You tried to add a
ByteMatchTupleto aByteMatchSet, but theByteMatchTuplealready exists in the specifiedWebACL.
Members
WAFInvalidParameterException
[
'field' => 'CHANGE_ACTION|WAF_ACTION|WAF_OVERRIDE_ACTION|PREDICATE_TYPE|IPSET_TYPE|BYTE_MATCH_FIELD_TYPE|SQL_INJECTION_MATCH_FIELD_TYPE|BYTE_MATCH_TEXT_TRANSFORMATION|BYTE_MATCH_POSITIONAL_CONSTRAINT|SIZE_CONSTRAINT_COMPARISON_OPERATOR|GEO_MATCH_LOCATION_TYPE|GEO_MATCH_LOCATION_VALUE|RATE_KEY|RULE_TYPE|NEXT_MARKER|RESOURCE_ARN|TAGS|TAG_KEYS',
'parameter' => '<string>',
'reason' => 'INVALID_OPTION|ILLEGAL_COMBINATION|ILLEGAL_ARGUMENT|INVALID_TAG_KEY',
]
Description
The operation failed because AWS WAF didn't recognize a parameter in the request. For example:
-
You specified an invalid parameter name.
-
You specified an invalid value.
-
You tried to update an object (
ByteMatchSet,IPSet,Rule, orWebACL) using an action other thanINSERTorDELETE. -
You tried to create a
WebACLwith aDefaultActionTypeother thanALLOW,BLOCK, orCOUNT. -
You tried to create a
RateBasedRulewith aRateKeyvalue other thanIP. -
You tried to update a
WebACLwith aWafActionTypeother thanALLOW,BLOCK, orCOUNT. -
You tried to update a
ByteMatchSetwith aFieldToMatchTypeother than HEADER, METHOD, QUERY_STRING, URI, or BODY. -
You tried to update a
ByteMatchSetwith aFieldofHEADERbut no value forData. -
Your request references an ARN that is malformed, or corresponds to a resource with which a web ACL cannot be associated.
Members
WAFInvalidPermissionPolicyException
[
'message' => '<string>',
]
Description
The operation failed because the specified policy is not in the proper format.
The policy is subject to the following restrictions:
-
You can attach only one policy with each
PutPermissionPolicyrequest. -
The policy must include an
Effect,ActionandPrincipal. -
Effectmust specifyAllow. -
The
Actionin the policy must bewaf:UpdateWebACL,waf-regional:UpdateWebACL,waf:GetRuleGroupandwaf-regional:GetRuleGroup. Any extra or wildcard actions in the policy will be rejected. -
The policy cannot include a
Resourceparameter. -
The ARN in the request must be a valid WAF RuleGroup ARN and the RuleGroup must exist in the same region.
-
The user making the request must be the owner of the RuleGroup.
-
Your policy must be composed using IAM Policy version 2012-10-17.
Members
WAFInvalidRegexPatternException
[
'message' => '<string>',
]
Description
The regular expression (regex) you specified in RegexPatternString is invalid.
Members
WAFLimitsExceededException
[
'message' => '<string>',
]
Description
The operation exceeds a resource limit, for example, the maximum number of WebACL objects that you can create for an AWS account. For more information, see Limits in the AWS WAF Developer Guide.
Members
WAFNonEmptyEntityException
[
'message' => '<string>',
]
Description
The operation failed because you tried to delete an object that isn't empty. For example:
-
You tried to delete a
WebACLthat still contains one or moreRuleobjects. -
You tried to delete a
Rulethat still contains one or moreByteMatchSetobjects or other predicates. -
You tried to delete a
ByteMatchSetthat contains one or moreByteMatchTupleobjects. -
You tried to delete an
IPSetthat references one or more IP addresses.
Members
WAFNonexistentContainerException
[
'message' => '<string>',
]
Description
The operation failed because you tried to add an object to or delete an object from another object that doesn't exist. For example:
-
You tried to add a
Ruleto or delete aRulefrom aWebACLthat doesn't exist. -
You tried to add a
ByteMatchSetto or delete aByteMatchSetfrom aRulethat doesn't exist. -
You tried to add an IP address to or delete an IP address from an
IPSetthat doesn't exist. -
You tried to add a
ByteMatchTupleto or delete aByteMatchTuplefrom aByteMatchSetthat doesn't exist.
Members
WAFNonexistentItemException
[
'message' => '<string>',
]
Description
The operation failed because the referenced object doesn't exist.
Members
WAFReferencedItemException
[
'message' => '<string>',
]
Description
The operation failed because you tried to delete an object that is still in use. For example:
-
You tried to delete a
ByteMatchSetthat is still referenced by aRule. -
You tried to delete a
Rulethat is still referenced by aWebACL.
Members
WAFServiceLinkedRoleErrorException
[
'message' => '<string>',
]
Description
AWS WAF is not able to access the service linked role. This can be caused by a previous PutLoggingConfiguration request, which can lock the service linked role for about 20 seconds. Please try your request again. The service linked role can also be locked by a previous DeleteServiceLinkedRole request, which can lock the role for 15 minutes or more. If you recently made a DeleteServiceLinkedRole, wait at least 15 minutes and try the request again. If you receive this same exception again, you will have to wait additional time until the role is unlocked.
Members
WAFStaleDataException
[
'message' => '<string>',
]
Description
The operation failed because you tried to create, update, or delete an object by using a change token that has already been used.
Members
WAFSubscriptionNotFoundException
[
'message' => '<string>',
]
WAFTagOperationException
[
'message' => '<string>',
]
WAFTagOperationInternalErrorException
[
'message' => '<string>',
]