openapi: 3.0.0
info:
  version: 2015-07-09
  x-release: v4
  title: APIs.io Engineering Platform Amazon API Gateway 2014 11 13 IP Access Rules for an Account API
  description: <fullname>Amazon API Gateway</fullname> <p>Amazon API Gateway helps developers deliver robust, secure, and scalable mobile and web application back ends. API Gateway allows developers to securely connect mobile and web applications to APIs that run on AWS Lambda, Amazon EC2, or other publicly addressable web services that are hosted outside of AWS.</p>
  x-logo:
    url: https://api.apis.guru/v2/cache/logo/https_twitter.com_awscloud_profile_image.png
    backgroundColor: '#FFFFFF'
  termsOfService: https://aws.amazon.com/service-terms/
  contact:
    name: Mike Ralphson
    email: mike.ralphson@gmail.com
    url: https://github.com/mermade/aws2openapi
    x-twitter: PermittedSoc
  license:
    name: Apache 2.0 License
    url: http://www.apache.org/licenses/
  x-providerName: amazonaws.com
  x-serviceName: apigateway
  x-origin:
  - contentType: application/json
    url: https://raw.githubusercontent.com/aws/aws-sdk-js/master/apis/apigateway-2015-07-09.normal.json
    converter:
      url: https://github.com/mermade/aws2openapi
      version: 1.0.0
    x-apisguru-driver: external
  x-apiClientRegistration:
    url: https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?nc2=h_ct
  x-apisguru-categories:
  - cloud
  x-preferred: true
servers:
- url: http://apigateway.{region}.amazonaws.com
  variables:
    region:
      description: The AWS region
      enum:
      - us-east-1
      - us-east-2
      - us-west-1
      - us-west-2
      - us-gov-west-1
      - us-gov-east-1
      - ca-central-1
      - eu-north-1
      - eu-west-1
      - eu-west-2
      - eu-west-3
      - eu-central-1
      - eu-south-1
      - af-south-1
      - ap-northeast-1
      - ap-northeast-2
      - ap-northeast-3
      - ap-southeast-1
      - ap-southeast-2
      - ap-east-1
      - ap-south-1
      - sa-east-1
      - me-south-1
      default: us-east-1
  description: The Amazon API Gateway multi-region endpoint
- url: https://apigateway.{region}.amazonaws.com
  variables:
    region:
      description: The AWS region
      enum:
      - us-east-1
      - us-east-2
      - us-west-1
      - us-west-2
      - us-gov-west-1
      - us-gov-east-1
      - ca-central-1
      - eu-north-1
      - eu-west-1
      - eu-west-2
      - eu-west-3
      - eu-central-1
      - eu-south-1
      - af-south-1
      - ap-northeast-1
      - ap-northeast-2
      - ap-northeast-3
      - ap-southeast-1
      - ap-southeast-2
      - ap-east-1
      - ap-south-1
      - sa-east-1
      - me-south-1
      default: us-east-1
  description: The Amazon API Gateway multi-region endpoint
- url: http://apigateway.{region}.amazonaws.com.cn
  variables:
    region:
      description: The AWS region
      enum:
      - cn-north-1
      - cn-northwest-1
      default: cn-north-1
  description: The Amazon API Gateway endpoint for China (Beijing) and China (Ningxia)
- url: https://apigateway.{region}.amazonaws.com.cn
  variables:
    region:
      description: The AWS region
      enum:
      - cn-north-1
      - cn-northwest-1
      default: cn-north-1
  description: The Amazon API Gateway endpoint for China (Beijing) and China (Ningxia)
security:
- hmac: []
tags:
- name: IP Access Rules for an Account
paths:
  /accounts/{account_identifier}/firewall/access_rules/rules:
    get:
      description: Fetches IP Access rules of an account. These rules apply to all the zones in the account. You can filter the results using several optional parameters.
      operationId: ip-access-rules-for-an-account-list-ip-access-rules
      parameters:
      - in: path
        name: account_identifier
        required: true
        schema:
          $ref: '#/components/schemas/firewall_account_identifier'
      - in: query
        name: mode
        schema:
          $ref: '#/components/schemas/firewall_schemas-mode'
      - in: query
        name: configuration.target
        schema:
          description: The target to search in existing rules.
          enum:
          - ip
          - ip_range
          - asn
          - country
          example: ip
          type: string
      - in: query
        name: configuration.value
        schema:
          description: 'The target value to search for in existing rules: an IP address, an IP address range, or a country code, depending on the provided `configuration.target`.

            Notes: You can search for a single IPv4 address, an IP address range with a subnet of ''/16'' or ''/24'', or a two-letter ISO-3166-1 alpha-2 country code.'
          example: 198.51.100.4
          type: string
      - in: query
        name: notes
        schema:
          description: 'The string to search for in the notes of existing IP Access rules.

            Notes: For example, the string ''attack'' would match IP Access rules with notes ''Attack 26/02'' and ''Attack 27/02''. The search is case insensitive.'
          example: my note
          type: string
      - in: query
        name: match
        schema:
          default: all
          description: When set to `all`, all the search requirements must match. When set to `any`, only one of the search requirements has to match.
          enum:
          - any
          - all
          type: string
      - in: query
        name: page
        schema:
          description: Requested page within paginated list of results.
          example: 1
          type: number
      - in: query
        name: per_page
        schema:
          description: Maximum number of results requested.
          example: 20
          type: number
      - in: query
        name: order
        schema:
          description: The field used to sort returned rules.
          enum:
          - configuration.target
          - configuration.value
          - mode
          example: mode
          type: string
      - in: query
        name: direction
        schema:
          description: The direction used to sort returned rules.
          enum:
          - asc
          - desc
          example: desc
          type: string
      responses:
        4XX:
          content:
            application/json:
              schema:
                allOf:
                - $ref: '#/components/schemas/firewall_response_collection'
                - $ref: '#/components/schemas/firewall_api-response-common-failure'
          description: List IP Access rules response failure
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/firewall_response_collection'
          description: List IP Access rules response
      security:
      - api_email: []
        api_key: []
      summary: APIs.io Engineering Platform List IP Access rules
      tags:
      - IP Access Rules for an Account
      x-api-token-group:
      - Account Firewall Access Rules Write
      - Account Firewall Access Rules Read
      x-cfPermissionsRequired:
        enum:
        - '#waf:read'
      x-cfPlanAvailability:
        business: true
        enterprise: true
        free: true
        pro: true
    post:
      description: 'Creates a new IP Access rule for an account. The rule will apply to all zones in the account.


        Note: To create an IP Access rule that applies to a single zone, refer to the [IP Access rules for a zone](#ip-access-rules-for-a-zone) endpoints.'
      operationId: ip-access-rules-for-an-account-create-an-ip-access-rule
      parameters:
      - in: path
        name: account_identifier
        required: true
        schema:
          $ref: '#/components/schemas/firewall_account_identifier'
      requestBody:
        content:
          application/json:
            schema:
              properties:
                configuration:
                  $ref: '#/components/schemas/firewall_configuration'
                mode:
                  $ref: '#/components/schemas/firewall_schemas-mode'
                notes:
                  $ref: '#/components/schemas/firewall_notes'
              required:
              - mode
              - configuration
        required: true
      responses:
        4XX:
          content:
            application/json:
              schema:
                allOf:
                - $ref: '#/components/schemas/firewall_response_single'
                - $ref: '#/components/schemas/firewall_api-response-common-failure'
          description: Create an IP Access rule response failure
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/firewall_response_single'
          description: Create an IP Access rule response
      security:
      - api_email: []
        api_key: []
      summary: APIs.io Engineering Platform Create an IP Access rule
      tags:
      - IP Access Rules for an Account
      x-api-token-group:
      - Account Firewall Access Rules Write
      x-cfPermissionsRequired:
        enum:
        - '#waf:edit'
      x-cfPlanAvailability:
        business: true
        enterprise: true
        free: true
        pro: true
  /accounts/{account_identifier}/firewall/access_rules/rules/{identifier}:
    delete:
      description: 'Deletes an existing IP Access rule defined at the account level.


        Note: This operation will affect all zones in the account.'
      operationId: ip-access-rules-for-an-account-delete-an-ip-access-rule
      parameters:
      - in: path
        name: identifier
        required: true
        schema:
          $ref: '#/components/schemas/firewall_components-schemas-identifier'
      - in: path
        name: account_identifier
        required: true
        schema:
          $ref: '#/components/schemas/firewall_account_identifier'
      requestBody:
        content:
          application/json: {}
        required: true
      responses:
        4XX:
          content:
            application/json:
              schema:
                allOf:
                - $ref: '#/components/schemas/firewall_api-response-single-id'
                - $ref: '#/components/schemas/firewall_api-response-common-failure'
          description: Delete an IP Access rule response failure
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/firewall_api-response-single-id'
          description: Delete an IP Access rule response
      security:
      - api_email: []
        api_key: []
      summary: APIs.io Engineering Platform Delete an IP Access rule
      tags:
      - IP Access Rules for an Account
      x-api-token-group:
      - Account Firewall Access Rules Write
      x-cfPermissionsRequired:
        enum:
        - '#waf:edit'
      x-cfPlanAvailability:
        business: true
        enterprise: true
        free: true
        pro: true
    get:
      description: Fetches the details of an IP Access rule defined at the account level.
      operationId: ip-access-rules-for-an-account-get-an-ip-access-rule
      parameters:
      - in: path
        name: identifier
        required: true
        schema:
          $ref: '#/components/schemas/firewall_components-schemas-identifier'
      - in: path
        name: account_identifier
        required: true
        schema:
          $ref: '#/components/schemas/firewall_account_identifier'
      responses:
        4XX:
          content:
            application/json:
              schema:
                allOf:
                - $ref: '#/components/schemas/firewall_response_single'
                - $ref: '#/components/schemas/firewall_api-response-common-failure'
          description: Get an IP Access rule response failure
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/firewall_response_single'
          description: Get an IP Access rule response
      security:
      - api_email: []
        api_key: []
      summary: APIs.io Engineering Platform Get an IP Access rule
      tags:
      - IP Access Rules for an Account
      x-api-token-group:
      - Account Firewall Access Rules Write
      - Account Firewall Access Rules Read
      x-cfPermissionsRequired:
        enum:
        - '#waf:read'
      x-cfPlanAvailability:
        business: true
        enterprise: true
        free: true
        pro: true
    patch:
      description: 'Updates an IP Access rule defined at the account level.


        Note: This operation will affect all zones in the account.'
      operationId: ip-access-rules-for-an-account-update-an-ip-access-rule
      parameters:
      - in: path
        name: identifier
        required: true
        schema:
          $ref: '#/components/schemas/firewall_components-schemas-identifier'
      - in: path
        name: account_identifier
        required: true
        schema:
          $ref: '#/components/schemas/firewall_account_identifier'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/firewall_schemas-rule'
        required: true
      responses:
        4XX:
          content:
            application/json:
              schema:
                allOf:
                - $ref: '#/components/schemas/firewall_response_single'
                - $ref: '#/components/schemas/firewall_api-response-common-failure'
          description: Update an IP Access rule response failure
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/firewall_response_single'
          description: Update an IP Access rule response
      security:
      - api_email: []
        api_key: []
      summary: APIs.io Engineering Platform Update an IP Access rule
      tags:
      - IP Access Rules for an Account
      x-api-token-group:
      - Account Firewall Access Rules Write
      x-cfPermissionsRequired:
        enum:
        - '#waf:edit'
      x-cfPlanAvailability:
        business: true
        enterprise: true
        free: true
        pro: true
components:
  schemas:
    firewall_ip_configuration:
      properties:
        target:
          description: The configuration target. You must set the target to `ip` when specifying an IP address in the rule.
          enum:
          - ip
          example: ip
        value:
          description: The IP address to match. This address will be compared to the IP address of incoming requests.
          example: 198.51.100.4
          type: string
      title: An IP address configuration.
    firewall_components-schemas-identifier:
      description: The unique identifier of the resource.
      example: de677e5818985db1285d0e80225f06e5
      maxLength: 32
      readOnly: true
      type: string
    firewall_identifier:
      description: Identifier
      example: 023e105f4ecef8ad9ca31a8372d0c353
      maxLength: 32
      readOnly: true
      type: string
    firewall_notes:
      description: An informative summary of the rule, typically used as a reminder or explanation.
      example: This rule is enabled because of an event that occurred on date X.
      type: string
    firewall_ipv6_configuration:
      properties:
        target:
          description: The configuration target. You must set the target to `ip6` when specifying an IPv6 address in the rule.
          enum:
          - ip6
          example: ip6
        value:
          description: The IPv6 address to match.
          example: 2001:DB8:100::CF
          type: string
      title: An IPv6 address configuration.
    firewall_schemas-rule:
      allOf:
      - $ref: '#/components/schemas/firewall_rule'
      - properties:
          scope:
            description: All zones owned by the user will have the rule applied.
            properties:
              email:
                $ref: '#/components/schemas/firewall_email'
              id:
                $ref: '#/components/schemas/firewall_identifier'
              type:
                description: The scope of the rule.
                enum:
                - user
                - organization
                example: user
                readOnly: true
            readOnly: true
            type: object
      required:
      - id
      - mode
      - allowed_modes
      - configuration
      - scope
      type: object
    firewall_response_single:
      allOf:
      - $ref: '#/components/schemas/firewall_api-response-single'
      - properties:
          result:
            type: object
        type: object
    firewall_rule:
      properties:
        allowed_modes:
          description: The available actions that a rule can apply to a matched request.
          example:
          - whitelist
          - block
          - challenge
          - js_challenge
          - managed_challenge
          items:
            $ref: '#/components/schemas/firewall_schemas-mode'
          readOnly: true
          type: array
        configuration:
          $ref: '#/components/schemas/firewall_configuration'
        created_on:
          description: The timestamp of when the rule was created.
          example: '2014-01-01T05:20:00.12345Z'
          format: date-time
          readOnly: true
          type: string
        id:
          $ref: '#/components/schemas/firewall_schemas-identifier'
        mode:
          $ref: '#/components/schemas/firewall_schemas-mode'
        modified_on:
          description: The timestamp of when the rule was last modified.
          example: '2014-01-01T05:20:00.12345Z'
          format: date-time
          readOnly: true
          type: string
        notes:
          $ref: '#/components/schemas/firewall_notes'
      required:
      - id
      - mode
      - allowed_modes
      - configuration
      type: object
    firewall_api-response-common:
      properties:
        errors:
          $ref: '#/components/schemas/firewall_messages'
        messages:
          $ref: '#/components/schemas/firewall_messages'
        result:
          anyOf:
          - type: object
          - items: {}
            type: array
          - type: string
        success:
          description: Whether the API call was successful
          enum:
          - true
          example: true
          type: boolean
      required:
      - success
      - errors
      - messages
      - result
      type: object
    firewall_schemas-mode:
      description: The action to apply to a matched request.
      enum:
      - block
      - challenge
      - whitelist
      - js_challenge
      - managed_challenge
      example: challenge
      type: string
    firewall_country_configuration:
      properties:
        target:
          description: The configuration target. You must set the target to `country` when specifying a country code in the rule.
          enum:
          - country
          example: country
        value:
          description: 'The two-letter ISO-3166-1 alpha-2 code to match. For more information, refer to [IP Access rules: Parameters](https://developers.cloudflare.com/waf/tools/ip-access-rules/parameters/#country).'
          example: US
          type: string
      title: A country configuration.
    firewall_messages:
      example: []
      items:
        properties:
          code:
            minimum: 1000
            type: integer
          message:
            type: string
        required:
        - code
        - message
        type: object
        uniqueItems: true
      type: array
    firewall_asn_configuration:
      properties:
        target:
          description: The configuration target. You must set the target to `asn` when specifying an Autonomous System Number (ASN) in the rule.
          enum:
          - asn
          example: asn
        value:
          description: The AS number to match.
          example: AS12345
          type: string
      title: An ASN configuration.
    firewall_api-response-single-id:
      allOf:
      - $ref: '#/components/schemas/firewall_api-response-common'
      - properties:
          result:
            nullable: true
            properties:
              id:
                $ref: '#/components/schemas/firewall_identifier'
            required:
            - id
            type: object
      type: object
    firewall_schemas-identifier:
      description: The unique identifier of the IP Access rule.
      example: 92f17202ed8bd63d69a66b86a49a8f6b
      maxLength: 32
      readOnly: true
      type: string
    firewall_cidr_configuration:
      properties:
        target:
          description: The configuration target. You must set the target to `ip_range` when specifying an IP address range in the rule.
          enum:
          - ip_range
          example: ip_range
        value:
          description: The IP address range to match. You can only use prefix lengths `/16` and `/24` for IPv4 ranges, and prefix lengths `/32`, `/48`, and `/64` for IPv6 ranges.
          example: 198.51.100.4/16
          type: string
      title: An IP address range configuration.
    firewall_email:
      description: The contact email address of the user.
      example: user@example.com
      maxLength: 90
      type: string
    firewall_result_info:
      properties:
        count:
          description: Total number of results for the requested service
          example: 1
          type: number
        page:
          description: Current page within paginated list of results
          example: 1
          type: number
        per_page:
          description: Number of results per page of results
          example: 20
          type: number
        total_count:
          description: Total results available without any search parameters
          example: 2000
          type: number
      type: object
    firewall_configuration:
      description: The rule configuration.
      oneOf:
      - $ref: '#/components/schemas/firewall_ip_configuration'
      - $ref: '#/components/schemas/firewall_ipv6_configuration'
      - $ref: '#/components/schemas/firewall_cidr_configuration'
      - $ref: '#/components/schemas/firewall_asn_configuration'
      - $ref: '#/components/schemas/firewall_country_configuration'
      type: object
    firewall_account_identifier:
      description: Identifier
      example: 023e105f4ecef8ad9ca31a8372d0c353
      maxLength: 32
      type: string
    firewall_api-response-single:
      allOf:
      - $ref: '#/components/schemas/firewall_api-response-common'
      - properties:
          result:
            anyOf:
            - nullable: true
              type: object
            - nullable: true
              type: string
      type: object
    firewall_response_collection:
      allOf:
      - $ref: '#/components/schemas/firewall_api-response-collection'
      - properties:
          result:
            items:
              type: object
            type: array
        type: object
    firewall_api-response-collection:
      allOf:
      - $ref: '#/components/schemas/firewall_api-response-common'
      - properties:
          result:
            items: {}
            nullable: true
            type: array
          result_info:
            $ref: '#/components/schemas/firewall_result_info'
      type: object
    firewall_api-response-common-failure:
      properties:
        errors:
          allOf:
          - $ref: '#/components/schemas/firewall_messages'
          example:
          - code: 7003
            message: No route for the URI
          minLength: 1
        messages:
          allOf:
          - $ref: '#/components/schemas/firewall_messages'
          example: []
        result:
          enum:
          - null
          nullable: true
          type: object
        success:
          description: Whether the API call was successful
          enum:
          - false
          example: false
          type: boolean
      required:
      - success
      - errors
      - messages
      - result
      type: object
  securitySchemes:
    hmac:
      type: apiKey
      name: Authorization
      in: header
      description: Amazon Signature authorization v4
      x-amazon-apigateway-authtype: awsSigv4
externalDocs:
  description: Amazon Web Services documentation
  url: https://docs.aws.amazon.com/apigateway/
x-hasEquivalentPaths: true