Skip to content
Sencai Logo Sencai Logo Sencai Docs

Create a waf-acl

POST
/waf-acls

Authorizations

Section titled “Authorizations ”

Request Body required

Section titled “Request Body required ”
object
data
object
provider
required
string
Allowed values: aws azure cloudflare
name
required

Human-readable ACL name.

string
scope

WAF scope: CLOUDFRONT (AWS global), REGIONAL (AWS/Azure), GLOBAL (Cloudflare).

string
Allowed values: CLOUDFRONT REGIONAL GLOBAL
default_action

Default action for requests that do not match any rule.

string
Allowed values: allow block
rules

WAF rules array (WafRule[]) — synced from provider.

capacity

WCU capacity consumed by this ACL (AWS-specific).

integer
status
string
Allowed values: active error importing
provider_acl_id
required

Provider-side ACL identifier (AWS WebACL ID, Azure ARM resource path, Cloudflare zone ID).

string
organisation
One of:

DocumentId reference to api::organisation.organisation

string
credential
One of:

DocumentId reference to api::cloud-credential.cloud-credential

string

Responses

Section titled “ Responses ”

200

Section titled “200 ”

Created

object
data
object
provider
required
string
Allowed values: aws azure cloudflare
name
required

Human-readable ACL name.

string
scope

WAF scope: CLOUDFRONT (AWS global), REGIONAL (AWS/Azure), GLOBAL (Cloudflare).

string
Allowed values: CLOUDFRONT REGIONAL GLOBAL
default_action

Default action for requests that do not match any rule.

string
Allowed values: allow block
rules

WAF rules array (WafRule[]) — synced from provider.

capacity

WCU capacity consumed by this ACL (AWS-specific).

integer
status
string
Allowed values: active error importing
provider_acl_id
required

Provider-side ACL identifier (AWS WebACL ID, Azure ARM resource path, Cloudflare zone ID).

string
organisation
One of:

DocumentId reference to api::organisation.organisation

string
credential
One of:

DocumentId reference to api::cloud-credential.cloud-credential

string
documentId
string
id
integer
createdAt
string format: date-time
updatedAt
string format: date-time
publishedAt
string format: date-time
nullable

400

Section titled “400 ”

Validation error

401

Section titled “401 ”

Missing or invalid authentication

403

Section titled “403 ”

Not authorized (tenant scope or capability)