Skip to content
AWS for Query.Farm

aws.wafv2.describe_managed_products_by_vendor

Example SQL Queries

SELECT * FROM
aws.wafv2.describe_managed_products_by_vendor
WHERE
"vendor_name" = 'VALUE'
AND "scope" = 'VALUE';

Description

Provides high-level information for the managed rule groups owned by a specific vendor.

Table Definition

Column NameColumn Data Type
scope Required Input Column

Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, an App Runner service, or an Amazon Web Services Verified Access instance.

To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:

  • CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1.

  • API and SDKs - For all calls, use the Region endpoint us-east-1. 

VARCHAR
vendor_name Required Input Column

The name of the managed rule group vendor. You use this, along with the rule group name, to identify a rule group.

VARCHAR
_aws_profile Input Column

The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role.

STRUCT(
    "type" VARCHAR,
    "name" VARCHAR,
    "account_id" VARCHAR,
    "via_profile_name" VARCHAR,
    "assumed_role_arn" VARCHAR,
    "organization" STRUCT(
        "account_name" VARCHAR,
        "id" VARCHAR,
        "tags" STRUCT(
            "key" VARCHAR,
            "value" VARCHAR
        )[],
        "master_account" STRUCT(
            "id" VARCHAR,
            "email" VARCHAR
        ),
        "parents" STRUCT(
            "type" VARCHAR,
            "id" VARCHAR,
            "name" VARCHAR,
            "tags" STRUCT(
                "key" VARCHAR,
                "value" VARCHAR
            )[]
        )[]
    )
)
Show child fields
_aws_profile.account_id

The AWS account id

_aws_profile.assumed_role_arn

The ARN of the assumed role

_aws_profile.name

The unique name of the profile.

_aws_profile.organization

Information about this profile's membership in the AWS organization.

Show child fields
_aws_profile.organization.account_name

The name of account speciifed by the organization

_aws_profile.organization.id

The organization id

_aws_profile.organization.master_account
Show child fields
_aws_profile.organization.master_account.email

The organization master account email address

_aws_profile.organization.master_account.id

The organization master account id

_aws_profile.organization.parents[]
Show child fields
_aws_profile.organization.parents[].id

The id of the parent

_aws_profile.organization.parents[].name

The name of the parent

_aws_profile.organization.parents[].tags[]
Show child fields
_aws_profile.organization.parents[].tags[].key
_aws_profile.organization.parents[].tags[].value
_aws_profile.organization.parents[].type

The type of parent can be an organization unit or a root

_aws_profile.organization.tags[]
Show child fields
_aws_profile.organization.tags[].key
_aws_profile.organization.tags[].value
_aws_profile.type

The type of profile, either 'credentials' or 'assumed_role'

_aws_profile.via_profile_name

This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.

_aws_region Input Column

The AWS region to use.

VARCHAR
managed_products

High-level information for the managed rule groups owned by the specified vendor. 

STRUCT(
    "vendor_name" VARCHAR,
    "managed_rule_set_name" VARCHAR,
    "product_id" VARCHAR,
    "product_link" VARCHAR,
    "product_title" VARCHAR,
    "product_description" VARCHAR,
    "sns_topic_arn" VARCHAR,
    "is_versioning_supported" BOOLEAN,
    "is_advanced_managed_rule_set" BOOLEAN
)[]
Show child fields
managed_products[]
Show child fields
managed_products[].is_advanced_managed_rule_set

Indicates whether the rule group provides an advanced set of protections, such as the the Amazon Web Services Managed Rules rule groups that are used for WAF intelligent threat mitigation.

managed_products[].is_versioning_supported

Indicates whether the rule group is versioned.

managed_products[].managed_rule_set_name

The name of the managed rule group. For example, AWSManagedRulesAnonymousIpList or AWSManagedRulesATPRuleSet.

managed_products[].product_description

A short description of the managed rule group.

managed_products[].product_id

A unique identifier for the rule group. This ID is returned in the responses to create and list commands. You provide it to operations like update and delete.

managed_products[].product_link

For Amazon Web Services Marketplace managed rule groups only, the link to the rule group product page.

managed_products[].product_title

The display name for the managed rule group. For example, Anonymous IP list or Account takeover prevention.

managed_products[].sns_topic_arn

The Amazon resource name (ARN) of the Amazon Simple Notification Service SNS topic that's used to provide notification of changes to the managed rule group. You can subscribe to the SNS topic to receive notifications when the managed rule group is modified, such as for new versions and for version expiration. For more information, see the Amazon Simple Notification Service Developer Guide.

managed_products[].vendor_name

The name of the managed rule group vendor. You use this, along with the rule group name, to identify a rule group.