@ThreadSafe @Generated(value="com.amazonaws:aws-java-sdk-code-generator") public class AWSShieldClient extends AmazonWebServiceClient implements AWSShield
This is the AWS Shield Advanced API Reference. This guide is for developers who need detailed information about the AWS Shield Advanced API actions, data types, and errors. For detailed information about AWS WAF and AWS Shield Advanced features and an overview of how to use the AWS WAF and AWS Shield Advanced APIs, see the AWS WAF and AWS Shield Developer Guide.
LOGGING_AWS_REQUEST_METRIC
ENDPOINT_PREFIX
Constructor and Description |
---|
AWSShieldClient()
Deprecated.
|
AWSShieldClient(AWSCredentials awsCredentials)
Deprecated.
use
AwsClientBuilder.withCredentials(AWSCredentialsProvider) for example:
AWSShieldClientBuilder.standard().withCredentials(new AWSStaticCredentialsProvider(awsCredentials)).build(); |
AWSShieldClient(AWSCredentials awsCredentials,
ClientConfiguration clientConfiguration)
|
AWSShieldClient(AWSCredentialsProvider awsCredentialsProvider)
Deprecated.
|
AWSShieldClient(AWSCredentialsProvider awsCredentialsProvider,
ClientConfiguration clientConfiguration)
|
AWSShieldClient(AWSCredentialsProvider awsCredentialsProvider,
ClientConfiguration clientConfiguration,
RequestMetricCollector requestMetricCollector)
|
AWSShieldClient(ClientConfiguration clientConfiguration)
Deprecated.
|
Modifier and Type | Method and Description |
---|---|
AssociateDRTLogBucketResult |
associateDRTLogBucket(AssociateDRTLogBucketRequest request)
Authorizes the DDoS Response team (DRT) to access the specified Amazon S3 bucket containing your flow logs.
|
AssociateDRTRoleResult |
associateDRTRole(AssociateDRTRoleRequest request)
Authorizes the DDoS Response team (DRT), using the specified role, to access your AWS account to assist with DDoS
attack mitigation during potential attacks.
|
static AWSShieldClientBuilder |
builder() |
CreateProtectionResult |
createProtection(CreateProtectionRequest request)
Enables AWS Shield Advanced for a specific AWS resource.
|
CreateSubscriptionResult |
createSubscription(CreateSubscriptionRequest request)
Activates AWS Shield Advanced for an account.
|
DeleteProtectionResult |
deleteProtection(DeleteProtectionRequest request)
Deletes an AWS Shield Advanced Protection.
|
DeleteSubscriptionResult |
deleteSubscription(DeleteSubscriptionRequest request)
Deprecated.
|
DescribeAttackResult |
describeAttack(DescribeAttackRequest request)
Describes the details of a DDoS attack.
|
DescribeDRTAccessResult |
describeDRTAccess(DescribeDRTAccessRequest request)
Returns the current role and list of Amazon S3 log buckets used by the DDoS Response team (DRT) to access your
AWS account while assisting with attack mitigation.
|
DescribeEmergencyContactSettingsResult |
describeEmergencyContactSettings(DescribeEmergencyContactSettingsRequest request)
Lists the email addresses that the DRT can use to contact you during a suspected attack.
|
DescribeProtectionResult |
describeProtection(DescribeProtectionRequest request)
Lists the details of a Protection object.
|
DescribeSubscriptionResult |
describeSubscription(DescribeSubscriptionRequest request)
Provides details about the AWS Shield Advanced subscription for an account.
|
DisassociateDRTLogBucketResult |
disassociateDRTLogBucket(DisassociateDRTLogBucketRequest request)
Removes the DDoS Response team's (DRT) access to the specified Amazon S3 bucket containing your flow logs.
|
DisassociateDRTRoleResult |
disassociateDRTRole(DisassociateDRTRoleRequest request)
Removes the DDoS Response team's (DRT) access to your AWS account.
|
ResponseMetadata |
getCachedResponseMetadata(AmazonWebServiceRequest request)
Returns additional metadata for a previously executed successful, request, typically used for debugging issues
where a service isn't acting as expected.
|
GetSubscriptionStateResult |
getSubscriptionState(GetSubscriptionStateRequest request)
Returns the
SubscriptionState , either Active or Inactive . |
ListAttacksResult |
listAttacks(ListAttacksRequest request)
Returns all ongoing DDoS attacks or all DDoS attacks during a specified time period.
|
ListProtectionsResult |
listProtections(ListProtectionsRequest request)
Lists all Protection objects for the account.
|
UpdateEmergencyContactSettingsResult |
updateEmergencyContactSettings(UpdateEmergencyContactSettingsRequest request)
Updates the details of the list of email addresses that the DRT can use to contact you during a suspected attack.
|
UpdateSubscriptionResult |
updateSubscription(UpdateSubscriptionRequest request)
Updates the details of an existing subscription.
|
addRequestHandler, addRequestHandler, configureRegion, getEndpointPrefix, getRequestMetricsCollector, getServiceName, getSignerByURI, getSignerOverride, getSignerRegionOverride, getTimeOffset, makeImmutable, removeRequestHandler, removeRequestHandler, setEndpoint, setEndpoint, setRegion, setServiceNameIntern, setSignerRegionOverride, setTimeOffset, shutdown, withEndpoint, withRegion, withRegion, withTimeOffset
equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
setEndpoint, setRegion, shutdown
@Deprecated public AWSShieldClient()
AWSShieldClientBuilder.defaultClient()
All service calls made using this new client object are blocking, and will not return until the service call completes.
DefaultAWSCredentialsProviderChain
@Deprecated public AWSShieldClient(ClientConfiguration clientConfiguration)
AwsClientBuilder.withClientConfiguration(ClientConfiguration)
All service calls made using this new client object are blocking, and will not return until the service call completes.
clientConfiguration
- The client configuration options controlling how this client connects to AWS Shield (ex: proxy settings,
retry counts, etc.).DefaultAWSCredentialsProviderChain
@Deprecated public AWSShieldClient(AWSCredentials awsCredentials)
AwsClientBuilder.withCredentials(AWSCredentialsProvider)
for example:
AWSShieldClientBuilder.standard().withCredentials(new AWSStaticCredentialsProvider(awsCredentials)).build();
All service calls made using this new client object are blocking, and will not return until the service call completes.
awsCredentials
- The AWS credentials (access key ID and secret key) to use when authenticating with AWS services.@Deprecated public AWSShieldClient(AWSCredentials awsCredentials, ClientConfiguration clientConfiguration)
AwsClientBuilder.withCredentials(AWSCredentialsProvider)
and
AwsClientBuilder.withClientConfiguration(ClientConfiguration)
All service calls made using this new client object are blocking, and will not return until the service call completes.
awsCredentials
- The AWS credentials (access key ID and secret key) to use when authenticating with AWS services.clientConfiguration
- The client configuration options controlling how this client connects to AWS Shield (ex: proxy settings,
retry counts, etc.).@Deprecated public AWSShieldClient(AWSCredentialsProvider awsCredentialsProvider)
AwsClientBuilder.withCredentials(AWSCredentialsProvider)
All service calls made using this new client object are blocking, and will not return until the service call completes.
awsCredentialsProvider
- The AWS credentials provider which will provide credentials to authenticate requests with AWS services.@Deprecated public AWSShieldClient(AWSCredentialsProvider awsCredentialsProvider, ClientConfiguration clientConfiguration)
AwsClientBuilder.withCredentials(AWSCredentialsProvider)
and
AwsClientBuilder.withClientConfiguration(ClientConfiguration)
All service calls made using this new client object are blocking, and will not return until the service call completes.
awsCredentialsProvider
- The AWS credentials provider which will provide credentials to authenticate requests with AWS services.clientConfiguration
- The client configuration options controlling how this client connects to AWS Shield (ex: proxy settings,
retry counts, etc.).@Deprecated public AWSShieldClient(AWSCredentialsProvider awsCredentialsProvider, ClientConfiguration clientConfiguration, RequestMetricCollector requestMetricCollector)
AwsClientBuilder.withCredentials(AWSCredentialsProvider)
and
AwsClientBuilder.withClientConfiguration(ClientConfiguration)
and
AwsClientBuilder.withMetricsCollector(RequestMetricCollector)
All service calls made using this new client object are blocking, and will not return until the service call completes.
awsCredentialsProvider
- The AWS credentials provider which will provide credentials to authenticate requests with AWS services.clientConfiguration
- The client configuration options controlling how this client connects to AWS Shield (ex: proxy settings,
retry counts, etc.).requestMetricCollector
- optional request metric collectorpublic static AWSShieldClientBuilder builder()
public AssociateDRTLogBucketResult associateDRTLogBucket(AssociateDRTLogBucketRequest request)
Authorizes the DDoS Response team (DRT) to access the specified Amazon S3 bucket containing your flow logs. You can associate up to 10 Amazon S3 buckets with your subscription.
To use the services of the DRT and make an AssociateDRTLogBucket
request, you must be subscribed to
the Business Support plan or the Enterprise Support plan.
associateDRTLogBucket
in interface AWSShield
associateDRTLogBucketRequest
- InternalErrorException
- Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.InvalidOperationException
- Exception that indicates that the operation would not cause any change to occur.NoAssociatedRoleException
- The ARN of the role that you specifed does not exist.LimitsExceededException
- Exception that indicates that the operation would exceed a limit.
Type
is the type of limit that would be exceeded.
Limit
is the threshold that would be exceeded.
InvalidParameterException
- Exception that indicates that the parameters passed to the API are invalid.AccessDeniedForDependencyException
- In order to grant the necessary access to the DDoS Response Team, the user submitting
AssociateDRTRole
must have the iam:PassRole
permission. This error indicates
the user did not have the appropriate permissions. For more information, see Granting a User
Permissions to Pass a Role to an AWS Service.OptimisticLockException
- Exception that indicates that the protection state has been modified by another client. You can retry the
request.ResourceNotFoundException
- Exception indicating the specified resource does not exist.public AssociateDRTRoleResult associateDRTRole(AssociateDRTRoleRequest request)
Authorizes the DDoS Response team (DRT), using the specified role, to access your AWS account to assist with DDoS attack mitigation during potential attacks. This enables the DRT to inspect your AWS WAF configuration and create or update AWS WAF rules and web ACLs.
You can associate only one RoleArn
with your subscription. If you submit an
AssociateDRTRole
request for an account that already has an associated role, the new
RoleArn
will replace the existing RoleArn
.
Prior to making the AssociateDRTRole
request, you must attach the AWSShieldDRTAccessPolicy managed policy to the role you will specify in the request. For more information
see Attaching and
Detaching IAM Policies. The role must also trust the service principal drt.shield.amazonaws.com
. For more information, see IAM JSON
Policy Elements: Principal.
The DRT will have access only to your AWS WAF and Shield resources. By submitting this request, you authorize the DRT to inspect your AWS WAF and Shield configuration and create and update AWS WAF rules and web ACLs on your behalf. The DRT takes these actions only if explicitly authorized by you.
You must have the iam:PassRole
permission to make an AssociateDRTRole
request. For more
information, see Granting a
User Permissions to Pass a Role to an AWS Service.
To use the services of the DRT and make an AssociateDRTRole
request, you must be subscribed to the
Business Support plan or the Enterprise Support plan.
associateDRTRole
in interface AWSShield
associateDRTRoleRequest
- InternalErrorException
- Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.InvalidOperationException
- Exception that indicates that the operation would not cause any change to occur.InvalidParameterException
- Exception that indicates that the parameters passed to the API are invalid.AccessDeniedForDependencyException
- In order to grant the necessary access to the DDoS Response Team, the user submitting
AssociateDRTRole
must have the iam:PassRole
permission. This error indicates
the user did not have the appropriate permissions. For more information, see Granting a User
Permissions to Pass a Role to an AWS Service.OptimisticLockException
- Exception that indicates that the protection state has been modified by another client. You can retry the
request.ResourceNotFoundException
- Exception indicating the specified resource does not exist.public CreateProtectionResult createProtection(CreateProtectionRequest request)
Enables AWS Shield Advanced for a specific AWS resource. The resource can be an Amazon CloudFront distribution, Elastic Load Balancing load balancer, Elastic IP Address, or an Amazon Route 53 hosted zone.
You can add protection to only a single resource with each CreateProtection request. If you want to add protection to multiple resources at once, use the AWS WAF console. For more information see Getting Started with AWS Shield Advanced and Add AWS Shield Advanced Protection to more AWS Resources.
createProtection
in interface AWSShield
createProtectionRequest
- InternalErrorException
- Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.InvalidResourceException
- Exception that indicates that the resource is invalid. You might not have access to the resource, or the
resource might not exist.InvalidOperationException
- Exception that indicates that the operation would not cause any change to occur.LimitsExceededException
- Exception that indicates that the operation would exceed a limit.
Type
is the type of limit that would be exceeded.
Limit
is the threshold that would be exceeded.
ResourceAlreadyExistsException
- Exception indicating the specified resource already exists.OptimisticLockException
- Exception that indicates that the protection state has been modified by another client. You can retry the
request.ResourceNotFoundException
- Exception indicating the specified resource does not exist.public CreateSubscriptionResult createSubscription(CreateSubscriptionRequest request)
Activates AWS Shield Advanced for an account.
As part of this request you can specify EmergencySettings
that automaticaly grant the DDoS response
team (DRT) needed permissions to assist you during a suspected DDoS attack. For more information see Authorize the DDoS Response Team
to Create Rules and Web ACLs on Your Behalf.
When you initally create a subscription, your subscription is set to be automatically renewed at the end of the
existing subscription period. You can change this by submitting an UpdateSubscription
request.
createSubscription
in interface AWSShield
createSubscriptionRequest
- InternalErrorException
- Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.ResourceAlreadyExistsException
- Exception indicating the specified resource already exists.public DeleteProtectionResult deleteProtection(DeleteProtectionRequest request)
Deletes an AWS Shield Advanced Protection.
deleteProtection
in interface AWSShield
deleteProtectionRequest
- InternalErrorException
- Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.ResourceNotFoundException
- Exception indicating the specified resource does not exist.OptimisticLockException
- Exception that indicates that the protection state has been modified by another client. You can retry the
request.@Deprecated public DeleteSubscriptionResult deleteSubscription(DeleteSubscriptionRequest request)
Removes AWS Shield Advanced from an account. AWS Shield Advanced requires a 1-year subscription commitment. You cannot delete a subscription prior to the completion of that commitment.
deleteSubscription
in interface AWSShield
deleteSubscriptionRequest
- InternalErrorException
- Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.LockedSubscriptionException
- You are trying to update a subscription that has not yet completed the 1-year commitment. You can change
the AutoRenew
parameter during the last 30 days of your subscription. This exception
indicates that you are attempting to change AutoRenew
prior to that period.ResourceNotFoundException
- Exception indicating the specified resource does not exist.public DescribeAttackResult describeAttack(DescribeAttackRequest request)
Describes the details of a DDoS attack.
describeAttack
in interface AWSShield
describeAttackRequest
- InternalErrorException
- Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.InvalidParameterException
- Exception that indicates that the parameters passed to the API are invalid.public DescribeDRTAccessResult describeDRTAccess(DescribeDRTAccessRequest request)
Returns the current role and list of Amazon S3 log buckets used by the DDoS Response team (DRT) to access your AWS account while assisting with attack mitigation.
describeDRTAccess
in interface AWSShield
describeDRTAccessRequest
- InternalErrorException
- Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.ResourceNotFoundException
- Exception indicating the specified resource does not exist.public DescribeEmergencyContactSettingsResult describeEmergencyContactSettings(DescribeEmergencyContactSettingsRequest request)
Lists the email addresses that the DRT can use to contact you during a suspected attack.
describeEmergencyContactSettings
in interface AWSShield
describeEmergencyContactSettingsRequest
- InternalErrorException
- Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.ResourceNotFoundException
- Exception indicating the specified resource does not exist.public DescribeProtectionResult describeProtection(DescribeProtectionRequest request)
Lists the details of a Protection object.
describeProtection
in interface AWSShield
describeProtectionRequest
- InternalErrorException
- Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.ResourceNotFoundException
- Exception indicating the specified resource does not exist.public DescribeSubscriptionResult describeSubscription(DescribeSubscriptionRequest request)
Provides details about the AWS Shield Advanced subscription for an account.
describeSubscription
in interface AWSShield
describeSubscriptionRequest
- InternalErrorException
- Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.ResourceNotFoundException
- Exception indicating the specified resource does not exist.public DisassociateDRTLogBucketResult disassociateDRTLogBucket(DisassociateDRTLogBucketRequest request)
Removes the DDoS Response team's (DRT) access to the specified Amazon S3 bucket containing your flow logs.
To make a DisassociateDRTLogBucket
request, you must be subscribed to the Business Support plan or the Enterprise Support plan. However, if you are
not subscribed to one of these support plans, but had been previously and had granted the DRT access to your
account, you can submit a DisassociateDRTLogBucket
request to remove this access.
disassociateDRTLogBucket
in interface AWSShield
disassociateDRTLogBucketRequest
- InternalErrorException
- Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.InvalidOperationException
- Exception that indicates that the operation would not cause any change to occur.NoAssociatedRoleException
- The ARN of the role that you specifed does not exist.AccessDeniedForDependencyException
- In order to grant the necessary access to the DDoS Response Team, the user submitting
AssociateDRTRole
must have the iam:PassRole
permission. This error indicates
the user did not have the appropriate permissions. For more information, see Granting a User
Permissions to Pass a Role to an AWS Service.OptimisticLockException
- Exception that indicates that the protection state has been modified by another client. You can retry the
request.ResourceNotFoundException
- Exception indicating the specified resource does not exist.public DisassociateDRTRoleResult disassociateDRTRole(DisassociateDRTRoleRequest request)
Removes the DDoS Response team's (DRT) access to your AWS account.
To make a DisassociateDRTRole
request, you must be subscribed to the Business Support plan or the Enterprise Support plan. However, if you are
not subscribed to one of these support plans, but had been previously and had granted the DRT access to your
account, you can submit a DisassociateDRTRole
request to remove this access.
disassociateDRTRole
in interface AWSShield
disassociateDRTRoleRequest
- InternalErrorException
- Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.InvalidOperationException
- Exception that indicates that the operation would not cause any change to occur.OptimisticLockException
- Exception that indicates that the protection state has been modified by another client. You can retry the
request.ResourceNotFoundException
- Exception indicating the specified resource does not exist.public GetSubscriptionStateResult getSubscriptionState(GetSubscriptionStateRequest request)
Returns the SubscriptionState
, either Active
or Inactive
.
getSubscriptionState
in interface AWSShield
getSubscriptionStateRequest
- InternalErrorException
- Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.public ListAttacksResult listAttacks(ListAttacksRequest request)
Returns all ongoing DDoS attacks or all DDoS attacks during a specified time period.
listAttacks
in interface AWSShield
listAttacksRequest
- InternalErrorException
- Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.InvalidParameterException
- Exception that indicates that the parameters passed to the API are invalid.InvalidOperationException
- Exception that indicates that the operation would not cause any change to occur.public ListProtectionsResult listProtections(ListProtectionsRequest request)
Lists all Protection objects for the account.
listProtections
in interface AWSShield
listProtectionsRequest
- InternalErrorException
- Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.ResourceNotFoundException
- Exception indicating the specified resource does not exist.InvalidPaginationTokenException
- Exception that indicates that the NextToken specified in the request is invalid. Submit the request using
the NextToken value that was returned in the response.public UpdateEmergencyContactSettingsResult updateEmergencyContactSettings(UpdateEmergencyContactSettingsRequest request)
Updates the details of the list of email addresses that the DRT can use to contact you during a suspected attack.
updateEmergencyContactSettings
in interface AWSShield
updateEmergencyContactSettingsRequest
- InternalErrorException
- Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.InvalidParameterException
- Exception that indicates that the parameters passed to the API are invalid.OptimisticLockException
- Exception that indicates that the protection state has been modified by another client. You can retry the
request.ResourceNotFoundException
- Exception indicating the specified resource does not exist.public UpdateSubscriptionResult updateSubscription(UpdateSubscriptionRequest request)
Updates the details of an existing subscription. Only enter values for parameters you want to change. Empty parameters are not updated.
updateSubscription
in interface AWSShield
updateSubscriptionRequest
- InternalErrorException
- Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.LockedSubscriptionException
- You are trying to update a subscription that has not yet completed the 1-year commitment. You can change
the AutoRenew
parameter during the last 30 days of your subscription. This exception
indicates that you are attempting to change AutoRenew
prior to that period.ResourceNotFoundException
- Exception indicating the specified resource does not exist.InvalidParameterException
- Exception that indicates that the parameters passed to the API are invalid.OptimisticLockException
- Exception that indicates that the protection state has been modified by another client. You can retry the
request.public ResponseMetadata getCachedResponseMetadata(AmazonWebServiceRequest request)
Response metadata is only cached for a limited period of time, so if you need to access this extra diagnostic information for an executed request, you should use this method to retrieve it as soon as possible after executing the request.
getCachedResponseMetadata
in interface AWSShield
request
- The originally executed requestCopyright © 2013 Amazon Web Services, Inc. All Rights Reserved.