@ThreadSafe @Generated(value="com.amazonaws:aws-java-sdk-code-generator") public class AWSShieldClient extends AmazonWebServiceClient implements AWSShield
This is the AWS Shield Advanced API Reference. This guide is for developers who need detailed information about the AWS Shield Advanced API actions, data types, and errors. For detailed information about AWS WAF and AWS Shield Advanced features and an overview of how to use the AWS WAF and AWS Shield Advanced APIs, see the AWS WAF and AWS Shield Developer Guide.
LOGGING_AWS_REQUEST_METRICENDPOINT_PREFIX| Constructor and Description |
|---|
AWSShieldClient()
Deprecated.
|
AWSShieldClient(AWSCredentials awsCredentials)
Deprecated.
use
AwsClientBuilder.withCredentials(AWSCredentialsProvider) for example:
AWSShieldClientBuilder.standard().withCredentials(new AWSStaticCredentialsProvider(awsCredentials)).build(); |
AWSShieldClient(AWSCredentials awsCredentials,
ClientConfiguration clientConfiguration)
|
AWSShieldClient(AWSCredentialsProvider awsCredentialsProvider)
Deprecated.
|
AWSShieldClient(AWSCredentialsProvider awsCredentialsProvider,
ClientConfiguration clientConfiguration)
|
AWSShieldClient(AWSCredentialsProvider awsCredentialsProvider,
ClientConfiguration clientConfiguration,
RequestMetricCollector requestMetricCollector)
|
AWSShieldClient(ClientConfiguration clientConfiguration)
Deprecated.
|
| Modifier and Type | Method and Description |
|---|---|
AssociateDRTLogBucketResult |
associateDRTLogBucket(AssociateDRTLogBucketRequest request)
Authorizes the DDoS Response team (DRT) to access the specified Amazon S3 bucket containing your flow logs.
|
AssociateDRTRoleResult |
associateDRTRole(AssociateDRTRoleRequest request)
Authorizes the DDoS Response team (DRT), using the specified role, to access your AWS account to assist with DDoS
attack mitigation during potential attacks.
|
static AWSShieldClientBuilder |
builder() |
CreateProtectionResult |
createProtection(CreateProtectionRequest request)
Enables AWS Shield Advanced for a specific AWS resource.
|
CreateSubscriptionResult |
createSubscription(CreateSubscriptionRequest request)
Activates AWS Shield Advanced for an account.
|
DeleteProtectionResult |
deleteProtection(DeleteProtectionRequest request)
Deletes an AWS Shield Advanced Protection.
|
DeleteSubscriptionResult |
deleteSubscription(DeleteSubscriptionRequest request)
Deprecated.
|
DescribeAttackResult |
describeAttack(DescribeAttackRequest request)
Describes the details of a DDoS attack.
|
DescribeDRTAccessResult |
describeDRTAccess(DescribeDRTAccessRequest request)
Returns the current role and list of Amazon S3 log buckets used by the DDoS Response team (DRT) to access your
AWS account while assisting with attack mitigation.
|
DescribeEmergencyContactSettingsResult |
describeEmergencyContactSettings(DescribeEmergencyContactSettingsRequest request)
Lists the email addresses that the DRT can use to contact you during a suspected attack.
|
DescribeProtectionResult |
describeProtection(DescribeProtectionRequest request)
Lists the details of a Protection object.
|
DescribeSubscriptionResult |
describeSubscription(DescribeSubscriptionRequest request)
Provides details about the AWS Shield Advanced subscription for an account.
|
DisassociateDRTLogBucketResult |
disassociateDRTLogBucket(DisassociateDRTLogBucketRequest request)
Removes the DDoS Response team's (DRT) access to the specified Amazon S3 bucket containing your flow logs.
|
DisassociateDRTRoleResult |
disassociateDRTRole(DisassociateDRTRoleRequest request)
Removes the DDoS Response team's (DRT) access to your AWS account.
|
ResponseMetadata |
getCachedResponseMetadata(AmazonWebServiceRequest request)
Returns additional metadata for a previously executed successful, request, typically used for debugging issues
where a service isn't acting as expected.
|
GetSubscriptionStateResult |
getSubscriptionState(GetSubscriptionStateRequest request)
Returns the
SubscriptionState, either Active or Inactive. |
ListAttacksResult |
listAttacks(ListAttacksRequest request)
Returns all ongoing DDoS attacks or all DDoS attacks during a specified time period.
|
ListProtectionsResult |
listProtections(ListProtectionsRequest request)
Lists all Protection objects for the account.
|
UpdateEmergencyContactSettingsResult |
updateEmergencyContactSettings(UpdateEmergencyContactSettingsRequest request)
Updates the details of the list of email addresses that the DRT can use to contact you during a suspected attack.
|
UpdateSubscriptionResult |
updateSubscription(UpdateSubscriptionRequest request)
Updates the details of an existing subscription.
|
addRequestHandler, addRequestHandler, configureRegion, getClientConfiguration, getEndpointPrefix, getMonitoringListeners, getRequestMetricsCollector, getServiceName, getSignerByURI, getSignerOverride, getSignerRegionOverride, getTimeOffset, makeImmutable, removeRequestHandler, removeRequestHandler, setEndpoint, setEndpoint, setRegion, setServiceNameIntern, setSignerRegionOverride, setTimeOffset, shutdown, withEndpoint, withRegion, withRegion, withTimeOffsetequals, getClass, hashCode, notify, notifyAll, toString, wait, wait, waitsetEndpoint, setRegion, shutdown@Deprecated public AWSShieldClient()
AWSShieldClientBuilder.defaultClient()All service calls made using this new client object are blocking, and will not return until the service call completes.
DefaultAWSCredentialsProviderChain@Deprecated public AWSShieldClient(ClientConfiguration clientConfiguration)
AwsClientBuilder.withClientConfiguration(ClientConfiguration)All service calls made using this new client object are blocking, and will not return until the service call completes.
clientConfiguration - The client configuration options controlling how this client connects to AWS Shield (ex: proxy settings,
retry counts, etc.).DefaultAWSCredentialsProviderChain@Deprecated public AWSShieldClient(AWSCredentials awsCredentials)
AwsClientBuilder.withCredentials(AWSCredentialsProvider) for example:
AWSShieldClientBuilder.standard().withCredentials(new AWSStaticCredentialsProvider(awsCredentials)).build();All service calls made using this new client object are blocking, and will not return until the service call completes.
awsCredentials - The AWS credentials (access key ID and secret key) to use when authenticating with AWS services.@Deprecated public AWSShieldClient(AWSCredentials awsCredentials, ClientConfiguration clientConfiguration)
AwsClientBuilder.withCredentials(AWSCredentialsProvider) and
AwsClientBuilder.withClientConfiguration(ClientConfiguration)All service calls made using this new client object are blocking, and will not return until the service call completes.
awsCredentials - The AWS credentials (access key ID and secret key) to use when authenticating with AWS services.clientConfiguration - The client configuration options controlling how this client connects to AWS Shield (ex: proxy settings,
retry counts, etc.).@Deprecated public AWSShieldClient(AWSCredentialsProvider awsCredentialsProvider)
AwsClientBuilder.withCredentials(AWSCredentialsProvider)All service calls made using this new client object are blocking, and will not return until the service call completes.
awsCredentialsProvider - The AWS credentials provider which will provide credentials to authenticate requests with AWS services.@Deprecated public AWSShieldClient(AWSCredentialsProvider awsCredentialsProvider, ClientConfiguration clientConfiguration)
AwsClientBuilder.withCredentials(AWSCredentialsProvider) and
AwsClientBuilder.withClientConfiguration(ClientConfiguration)All service calls made using this new client object are blocking, and will not return until the service call completes.
awsCredentialsProvider - The AWS credentials provider which will provide credentials to authenticate requests with AWS services.clientConfiguration - The client configuration options controlling how this client connects to AWS Shield (ex: proxy settings,
retry counts, etc.).@Deprecated public AWSShieldClient(AWSCredentialsProvider awsCredentialsProvider, ClientConfiguration clientConfiguration, RequestMetricCollector requestMetricCollector)
AwsClientBuilder.withCredentials(AWSCredentialsProvider) and
AwsClientBuilder.withClientConfiguration(ClientConfiguration) and
AwsClientBuilder.withMetricsCollector(RequestMetricCollector)All service calls made using this new client object are blocking, and will not return until the service call completes.
awsCredentialsProvider - The AWS credentials provider which will provide credentials to authenticate requests with AWS services.clientConfiguration - The client configuration options controlling how this client connects to AWS Shield (ex: proxy settings,
retry counts, etc.).requestMetricCollector - optional request metric collectorpublic static AWSShieldClientBuilder builder()
public AssociateDRTLogBucketResult associateDRTLogBucket(AssociateDRTLogBucketRequest request)
Authorizes the DDoS Response team (DRT) to access the specified Amazon S3 bucket containing your flow logs. You can associate up to 10 Amazon S3 buckets with your subscription.
To use the services of the DRT and make an AssociateDRTLogBucket request, you must be subscribed to
the Business Support plan or the Enterprise Support plan.
associateDRTLogBucket in interface AWSShieldassociateDRTLogBucketRequest - InternalErrorException - Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.InvalidOperationException - Exception that indicates that the operation would not cause any change to occur.NoAssociatedRoleException - The ARN of the role that you specifed does not exist.LimitsExceededException - Exception that indicates that the operation would exceed a limit.
Type is the type of limit that would be exceeded.
Limit is the threshold that would be exceeded.
InvalidParameterException - Exception that indicates that the parameters passed to the API are invalid.AccessDeniedForDependencyException - In order to grant the necessary access to the DDoS Response Team, the user submitting
AssociateDRTRole must have the iam:PassRole permission. This error indicates
the user did not have the appropriate permissions. For more information, see Granting a User
Permissions to Pass a Role to an AWS Service.OptimisticLockException - Exception that indicates that the protection state has been modified by another client. You can retry the
request.ResourceNotFoundException - Exception indicating the specified resource does not exist.public AssociateDRTRoleResult associateDRTRole(AssociateDRTRoleRequest request)
Authorizes the DDoS Response team (DRT), using the specified role, to access your AWS account to assist with DDoS attack mitigation during potential attacks. This enables the DRT to inspect your AWS WAF configuration and create or update AWS WAF rules and web ACLs.
You can associate only one RoleArn with your subscription. If you submit an
AssociateDRTRole request for an account that already has an associated role, the new
RoleArn will replace the existing RoleArn.
Prior to making the AssociateDRTRole request, you must attach the AWSShieldDRTAccessPolicy managed policy to the role you will specify in the request. For more information
see Attaching and
Detaching IAM Policies. The role must also trust the service principal drt.shield.amazonaws.com
. For more information, see IAM JSON
Policy Elements: Principal.
The DRT will have access only to your AWS WAF and Shield resources. By submitting this request, you authorize the DRT to inspect your AWS WAF and Shield configuration and create and update AWS WAF rules and web ACLs on your behalf. The DRT takes these actions only if explicitly authorized by you.
You must have the iam:PassRole permission to make an AssociateDRTRole request. For more
information, see Granting a
User Permissions to Pass a Role to an AWS Service.
To use the services of the DRT and make an AssociateDRTRole request, you must be subscribed to the
Business Support plan or the Enterprise Support plan.
associateDRTRole in interface AWSShieldassociateDRTRoleRequest - InternalErrorException - Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.InvalidOperationException - Exception that indicates that the operation would not cause any change to occur.InvalidParameterException - Exception that indicates that the parameters passed to the API are invalid.AccessDeniedForDependencyException - In order to grant the necessary access to the DDoS Response Team, the user submitting
AssociateDRTRole must have the iam:PassRole permission. This error indicates
the user did not have the appropriate permissions. For more information, see Granting a User
Permissions to Pass a Role to an AWS Service.OptimisticLockException - Exception that indicates that the protection state has been modified by another client. You can retry the
request.ResourceNotFoundException - Exception indicating the specified resource does not exist.public CreateProtectionResult createProtection(CreateProtectionRequest request)
Enables AWS Shield Advanced for a specific AWS resource. The resource can be an Amazon CloudFront distribution, Elastic Load Balancing load balancer, AWS Global Accelerator accelerator, Elastic IP Address, or an Amazon Route 53 hosted zone.
You can add protection to only a single resource with each CreateProtection request. If you want to add protection to multiple resources at once, use the AWS WAF console. For more information see Getting Started with AWS Shield Advanced and Add AWS Shield Advanced Protection to more AWS Resources.
createProtection in interface AWSShieldcreateProtectionRequest - InternalErrorException - Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.InvalidResourceException - Exception that indicates that the resource is invalid. You might not have access to the resource, or the
resource might not exist.InvalidOperationException - Exception that indicates that the operation would not cause any change to occur.LimitsExceededException - Exception that indicates that the operation would exceed a limit.
Type is the type of limit that would be exceeded.
Limit is the threshold that would be exceeded.
ResourceAlreadyExistsException - Exception indicating the specified resource already exists.OptimisticLockException - Exception that indicates that the protection state has been modified by another client. You can retry the
request.ResourceNotFoundException - Exception indicating the specified resource does not exist.public CreateSubscriptionResult createSubscription(CreateSubscriptionRequest request)
Activates AWS Shield Advanced for an account.
As part of this request you can specify EmergencySettings that automaticaly grant the DDoS response
team (DRT) needed permissions to assist you during a suspected DDoS attack. For more information see Authorize the DDoS Response Team
to Create Rules and Web ACLs on Your Behalf.
When you initally create a subscription, your subscription is set to be automatically renewed at the end of the
existing subscription period. You can change this by submitting an UpdateSubscription request.
createSubscription in interface AWSShieldcreateSubscriptionRequest - InternalErrorException - Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.ResourceAlreadyExistsException - Exception indicating the specified resource already exists.public DeleteProtectionResult deleteProtection(DeleteProtectionRequest request)
Deletes an AWS Shield Advanced Protection.
deleteProtection in interface AWSShielddeleteProtectionRequest - InternalErrorException - Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.ResourceNotFoundException - Exception indicating the specified resource does not exist.OptimisticLockException - Exception that indicates that the protection state has been modified by another client. You can retry the
request.@Deprecated public DeleteSubscriptionResult deleteSubscription(DeleteSubscriptionRequest request)
Removes AWS Shield Advanced from an account. AWS Shield Advanced requires a 1-year subscription commitment. You cannot delete a subscription prior to the completion of that commitment.
deleteSubscription in interface AWSShielddeleteSubscriptionRequest - InternalErrorException - Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.LockedSubscriptionException - You are trying to update a subscription that has not yet completed the 1-year commitment. You can change
the AutoRenew parameter during the last 30 days of your subscription. This exception
indicates that you are attempting to change AutoRenew prior to that period.ResourceNotFoundException - Exception indicating the specified resource does not exist.public DescribeAttackResult describeAttack(DescribeAttackRequest request)
Describes the details of a DDoS attack.
describeAttack in interface AWSShielddescribeAttackRequest - InternalErrorException - Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.AccessDeniedException - Exception that indicates the specified AttackId does not exist, or the requester does not
have the appropriate permissions to access the AttackId.public DescribeDRTAccessResult describeDRTAccess(DescribeDRTAccessRequest request)
Returns the current role and list of Amazon S3 log buckets used by the DDoS Response team (DRT) to access your AWS account while assisting with attack mitigation.
describeDRTAccess in interface AWSShielddescribeDRTAccessRequest - InternalErrorException - Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.ResourceNotFoundException - Exception indicating the specified resource does not exist.public DescribeEmergencyContactSettingsResult describeEmergencyContactSettings(DescribeEmergencyContactSettingsRequest request)
Lists the email addresses that the DRT can use to contact you during a suspected attack.
describeEmergencyContactSettings in interface AWSShielddescribeEmergencyContactSettingsRequest - InternalErrorException - Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.ResourceNotFoundException - Exception indicating the specified resource does not exist.public DescribeProtectionResult describeProtection(DescribeProtectionRequest request)
Lists the details of a Protection object.
describeProtection in interface AWSShielddescribeProtectionRequest - InternalErrorException - Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.InvalidParameterException - Exception that indicates that the parameters passed to the API are invalid.ResourceNotFoundException - Exception indicating the specified resource does not exist.public DescribeSubscriptionResult describeSubscription(DescribeSubscriptionRequest request)
Provides details about the AWS Shield Advanced subscription for an account.
describeSubscription in interface AWSShielddescribeSubscriptionRequest - InternalErrorException - Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.ResourceNotFoundException - Exception indicating the specified resource does not exist.public DisassociateDRTLogBucketResult disassociateDRTLogBucket(DisassociateDRTLogBucketRequest request)
Removes the DDoS Response team's (DRT) access to the specified Amazon S3 bucket containing your flow logs.
To make a DisassociateDRTLogBucket request, you must be subscribed to the Business Support plan or the Enterprise Support plan. However, if you are
not subscribed to one of these support plans, but had been previously and had granted the DRT access to your
account, you can submit a DisassociateDRTLogBucket request to remove this access.
disassociateDRTLogBucket in interface AWSShielddisassociateDRTLogBucketRequest - InternalErrorException - Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.InvalidOperationException - Exception that indicates that the operation would not cause any change to occur.NoAssociatedRoleException - The ARN of the role that you specifed does not exist.AccessDeniedForDependencyException - In order to grant the necessary access to the DDoS Response Team, the user submitting
AssociateDRTRole must have the iam:PassRole permission. This error indicates
the user did not have the appropriate permissions. For more information, see Granting a User
Permissions to Pass a Role to an AWS Service.OptimisticLockException - Exception that indicates that the protection state has been modified by another client. You can retry the
request.ResourceNotFoundException - Exception indicating the specified resource does not exist.public DisassociateDRTRoleResult disassociateDRTRole(DisassociateDRTRoleRequest request)
Removes the DDoS Response team's (DRT) access to your AWS account.
To make a DisassociateDRTRole request, you must be subscribed to the Business Support plan or the Enterprise Support plan. However, if you are
not subscribed to one of these support plans, but had been previously and had granted the DRT access to your
account, you can submit a DisassociateDRTRole request to remove this access.
disassociateDRTRole in interface AWSShielddisassociateDRTRoleRequest - InternalErrorException - Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.InvalidOperationException - Exception that indicates that the operation would not cause any change to occur.OptimisticLockException - Exception that indicates that the protection state has been modified by another client. You can retry the
request.ResourceNotFoundException - Exception indicating the specified resource does not exist.public GetSubscriptionStateResult getSubscriptionState(GetSubscriptionStateRequest request)
Returns the SubscriptionState, either Active or Inactive.
getSubscriptionState in interface AWSShieldgetSubscriptionStateRequest - InternalErrorException - Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.public ListAttacksResult listAttacks(ListAttacksRequest request)
Returns all ongoing DDoS attacks or all DDoS attacks during a specified time period.
listAttacks in interface AWSShieldlistAttacksRequest - InternalErrorException - Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.InvalidParameterException - Exception that indicates that the parameters passed to the API are invalid.InvalidOperationException - Exception that indicates that the operation would not cause any change to occur.public ListProtectionsResult listProtections(ListProtectionsRequest request)
Lists all Protection objects for the account.
listProtections in interface AWSShieldlistProtectionsRequest - InternalErrorException - Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.ResourceNotFoundException - Exception indicating the specified resource does not exist.InvalidPaginationTokenException - Exception that indicates that the NextToken specified in the request is invalid. Submit the request using
the NextToken value that was returned in the response.public UpdateEmergencyContactSettingsResult updateEmergencyContactSettings(UpdateEmergencyContactSettingsRequest request)
Updates the details of the list of email addresses that the DRT can use to contact you during a suspected attack.
updateEmergencyContactSettings in interface AWSShieldupdateEmergencyContactSettingsRequest - InternalErrorException - Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.InvalidParameterException - Exception that indicates that the parameters passed to the API are invalid.OptimisticLockException - Exception that indicates that the protection state has been modified by another client. You can retry the
request.ResourceNotFoundException - Exception indicating the specified resource does not exist.public UpdateSubscriptionResult updateSubscription(UpdateSubscriptionRequest request)
Updates the details of an existing subscription. Only enter values for parameters you want to change. Empty parameters are not updated.
updateSubscription in interface AWSShieldupdateSubscriptionRequest - InternalErrorException - Exception that indicates that a problem occurred with the service infrastructure. You can retry the
request.LockedSubscriptionException - You are trying to update a subscription that has not yet completed the 1-year commitment. You can change
the AutoRenew parameter during the last 30 days of your subscription. This exception
indicates that you are attempting to change AutoRenew prior to that period.ResourceNotFoundException - Exception indicating the specified resource does not exist.InvalidParameterException - Exception that indicates that the parameters passed to the API are invalid.OptimisticLockException - Exception that indicates that the protection state has been modified by another client. You can retry the
request.public ResponseMetadata getCachedResponseMetadata(AmazonWebServiceRequest request)
Response metadata is only cached for a limited period of time, so if you need to access this extra diagnostic information for an executed request, you should use this method to retrieve it as soon as possible after executing the request.
getCachedResponseMetadata in interface AWSShieldrequest - The originally executed requestCopyright © 2013 Amazon Web Services, Inc. All Rights Reserved.