API Reference
Getting Started
Core Concepts
Backend API — Guides
Frontend API — Guides
OAuth & OpenID Connect — Guides
Enterprise: SSO & SCIM — Guides
Webhooks — Guides
SDKs
Backend API (BAPI)
Frontend API (FAPI)
Dashboard API
Public API
SCIM
OIDC
Platform

Managed Waf

AdminUpdated Sep 11, 2026

Managed Waf

Dashboard API — authenticated by an Atlas console (platform-instance) session, not a key.

5 routes. Each row is one endpoint with its explanation and whether it honours the Idempotency-Key header.

Method & path

Idem

Explanation

GET /v1/dashboard/accounts/:accountId/instances/:instanceId/managed_waf

Managed AWS WAF config + provisioning state. Secrets are never returned, only has_* markers.

GET /v1/dashboard/accounts/:accountId/instances/:instanceId/managed_waf/status

The lean managed WAF provisioning status (enabled, status, WebACL, last error).

PUT /v1/dashboard/accounts/:accountId/instances/:instanceId/managed_waf

Set managed WAF config + write-only AWS credentials. Enabling points captcha at awswaf. Owner or admin.

POST /v1/dashboard/accounts/:accountId/instances/:instanceId/managed_waf/provision

Provision the WebACL (idempotent create/update + associate). Fail-safe. Owner or admin.

POST /v1/dashboard/accounts/:accountId/instances/:instanceId/managed_waf/deprovision

Disassociate and delete the WebACL. Fail-safe. Owner or admin.

Was this page helpful?