Yandex Cloud
Search
Contact UsGet started
  • Blog
  • Pricing
  • Documentation
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • Containers
    • Developer tools
    • Serverless
    • Security
    • Monitoring & Resources
    • ML & AI
    • Business tools
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Customer Stories
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Education and Science
    • Yandex Cloud Partner program
  • Blog
  • Pricing
  • Documentation
© 2025 Direct Cursus Technology L.L.C.
Yandex Smart Web Security
  • Getting started
    • Overview
    • Security profiles
    • WAF
    • ARL (request limit)
    • Rules
    • Conditions
    • Lists
    • Quotas and limits
  • Access management
  • Pricing policy
  • Terraform reference
    • Authentication with the API
      • Overview
        • Overview
          • Overview
          • Get
          • List
          • Create
          • Update
          • Delete
  • Monitoring metrics
  • Audit Trails events
  • Release notes

In this article:

  • HTTP request
  • Query parameters
  • Response
  • AdvancedRateLimiterProfile
  • AdvancedRateLimiterRule
  • StaticQuota
  • Condition
  • AuthorityMatcher
  • StringMatcher
  • HttpMethodMatcher
  • RequestUriMatcher
  • QueryMatcher
  • HeaderMatcher
  • IpMatcher
  • IpRangesMatcher
  • GeoIpMatcher
  • DynamicQuota
  • Characteristic
  • SimpleCharacteristic
  • KeyCharacteristic
  1. API reference
  2. REST
  3. SmartWebSecurity ARL API
  4. AdvancedRateLimiterProfile
  5. List

SmartWebSecurity ARL API, REST: AdvancedRateLimiterProfile.List

Written by
Yandex Cloud
Updated at December 17, 2024
  • HTTP request
  • Query parameters
  • Response
  • AdvancedRateLimiterProfile
  • AdvancedRateLimiterRule
  • StaticQuota
  • Condition
  • AuthorityMatcher
  • StringMatcher
  • HttpMethodMatcher
  • RequestUriMatcher
  • QueryMatcher
  • HeaderMatcher
  • IpMatcher
  • IpRangesMatcher
  • GeoIpMatcher
  • DynamicQuota
  • Characteristic
  • SimpleCharacteristic
  • KeyCharacteristic

Retrieves the list of AdvancedRateLimiterProfile resources in the specified folder.

HTTP requestHTTP request

GET https://smartwebsecurity.api.cloud.yandex.net/smartwebsecurity/v1/advancedRateLimiterProfiles

Query parametersQuery parameters

Field

Description

folderId

string

Required field. ID of the folder that the ARL profile belongs to.
Currently page_size, page_token, filter and order_by are not supported and List method will return all ARL profiles in the folder.

ResponseResponse

HTTP Code: 200 - OK

{
  "advancedRateLimiterProfiles": [
    {
      "id": "string",
      "folderId": "string",
      "labels": "object",
      "name": "string",
      "description": "string",
      "advancedRateLimiterRules": [
        {
          "name": "string",
          "priority": "string",
          "description": "string",
          "dryRun": "boolean",
          // Includes only one of the fields `staticQuota`, `dynamicQuota`
          "staticQuota": {
            "action": "string",
            "condition": {
              "authority": {
                "authorities": [
                  {
                    // Includes only one of the fields `exactMatch`, `exactNotMatch`, `prefixMatch`, `prefixNotMatch`, `pireRegexMatch`, `pireRegexNotMatch`
                    "exactMatch": "string",
                    "exactNotMatch": "string",
                    "prefixMatch": "string",
                    "prefixNotMatch": "string",
                    "pireRegexMatch": "string",
                    "pireRegexNotMatch": "string"
                    // end of the list of possible fields
                  }
                ]
              },
              "httpMethod": {
                "httpMethods": [
                  {
                    // Includes only one of the fields `exactMatch`, `exactNotMatch`, `prefixMatch`, `prefixNotMatch`, `pireRegexMatch`, `pireRegexNotMatch`
                    "exactMatch": "string",
                    "exactNotMatch": "string",
                    "prefixMatch": "string",
                    "prefixNotMatch": "string",
                    "pireRegexMatch": "string",
                    "pireRegexNotMatch": "string"
                    // end of the list of possible fields
                  }
                ]
              },
              "requestUri": {
                "path": {
                  // Includes only one of the fields `exactMatch`, `exactNotMatch`, `prefixMatch`, `prefixNotMatch`, `pireRegexMatch`, `pireRegexNotMatch`
                  "exactMatch": "string",
                  "exactNotMatch": "string",
                  "prefixMatch": "string",
                  "prefixNotMatch": "string",
                  "pireRegexMatch": "string",
                  "pireRegexNotMatch": "string"
                  // end of the list of possible fields
                },
                "queries": [
                  {
                    "key": "string",
                    "value": {
                      // Includes only one of the fields `exactMatch`, `exactNotMatch`, `prefixMatch`, `prefixNotMatch`, `pireRegexMatch`, `pireRegexNotMatch`
                      "exactMatch": "string",
                      "exactNotMatch": "string",
                      "prefixMatch": "string",
                      "prefixNotMatch": "string",
                      "pireRegexMatch": "string",
                      "pireRegexNotMatch": "string"
                      // end of the list of possible fields
                    }
                  }
                ]
              },
              "headers": [
                {
                  "name": "string",
                  "value": {
                    // Includes only one of the fields `exactMatch`, `exactNotMatch`, `prefixMatch`, `prefixNotMatch`, `pireRegexMatch`, `pireRegexNotMatch`
                    "exactMatch": "string",
                    "exactNotMatch": "string",
                    "prefixMatch": "string",
                    "prefixNotMatch": "string",
                    "pireRegexMatch": "string",
                    "pireRegexNotMatch": "string"
                    // end of the list of possible fields
                  }
                }
              ],
              "sourceIp": {
                "ipRangesMatch": {
                  "ipRanges": [
                    "string"
                  ]
                },
                "ipRangesNotMatch": {
                  "ipRanges": [
                    "string"
                  ]
                },
                "geoIpMatch": {
                  "locations": [
                    "string"
                  ]
                },
                "geoIpNotMatch": {
                  "locations": [
                    "string"
                  ]
                }
              }
            },
            "limit": "string",
            "period": "string"
          },
          "dynamicQuota": {
            "action": "string",
            "condition": {
              "authority": {
                "authorities": [
                  {
                    // Includes only one of the fields `exactMatch`, `exactNotMatch`, `prefixMatch`, `prefixNotMatch`, `pireRegexMatch`, `pireRegexNotMatch`
                    "exactMatch": "string",
                    "exactNotMatch": "string",
                    "prefixMatch": "string",
                    "prefixNotMatch": "string",
                    "pireRegexMatch": "string",
                    "pireRegexNotMatch": "string"
                    // end of the list of possible fields
                  }
                ]
              },
              "httpMethod": {
                "httpMethods": [
                  {
                    // Includes only one of the fields `exactMatch`, `exactNotMatch`, `prefixMatch`, `prefixNotMatch`, `pireRegexMatch`, `pireRegexNotMatch`
                    "exactMatch": "string",
                    "exactNotMatch": "string",
                    "prefixMatch": "string",
                    "prefixNotMatch": "string",
                    "pireRegexMatch": "string",
                    "pireRegexNotMatch": "string"
                    // end of the list of possible fields
                  }
                ]
              },
              "requestUri": {
                "path": {
                  // Includes only one of the fields `exactMatch`, `exactNotMatch`, `prefixMatch`, `prefixNotMatch`, `pireRegexMatch`, `pireRegexNotMatch`
                  "exactMatch": "string",
                  "exactNotMatch": "string",
                  "prefixMatch": "string",
                  "prefixNotMatch": "string",
                  "pireRegexMatch": "string",
                  "pireRegexNotMatch": "string"
                  // end of the list of possible fields
                },
                "queries": [
                  {
                    "key": "string",
                    "value": {
                      // Includes only one of the fields `exactMatch`, `exactNotMatch`, `prefixMatch`, `prefixNotMatch`, `pireRegexMatch`, `pireRegexNotMatch`
                      "exactMatch": "string",
                      "exactNotMatch": "string",
                      "prefixMatch": "string",
                      "prefixNotMatch": "string",
                      "pireRegexMatch": "string",
                      "pireRegexNotMatch": "string"
                      // end of the list of possible fields
                    }
                  }
                ]
              },
              "headers": [
                {
                  "name": "string",
                  "value": {
                    // Includes only one of the fields `exactMatch`, `exactNotMatch`, `prefixMatch`, `prefixNotMatch`, `pireRegexMatch`, `pireRegexNotMatch`
                    "exactMatch": "string",
                    "exactNotMatch": "string",
                    "prefixMatch": "string",
                    "prefixNotMatch": "string",
                    "pireRegexMatch": "string",
                    "pireRegexNotMatch": "string"
                    // end of the list of possible fields
                  }
                }
              ],
              "sourceIp": {
                "ipRangesMatch": {
                  "ipRanges": [
                    "string"
                  ]
                },
                "ipRangesNotMatch": {
                  "ipRanges": [
                    "string"
                  ]
                },
                "geoIpMatch": {
                  "locations": [
                    "string"
                  ]
                },
                "geoIpNotMatch": {
                  "locations": [
                    "string"
                  ]
                }
              }
            },
            "limit": "string",
            "period": "string",
            "characteristics": [
              {
                // Includes only one of the fields `simpleCharacteristic`, `keyCharacteristic`
                "simpleCharacteristic": {
                  "type": "string"
                },
                "keyCharacteristic": {
                  "type": "string",
                  "value": "string"
                },
                // end of the list of possible fields
                "caseInsensitive": "boolean"
              }
            ]
          }
          // end of the list of possible fields
        }
      ],
      "createdAt": "string",
      "cloudId": "string"
    }
  ]
}

Field

Description

advancedRateLimiterProfiles[]

AdvancedRateLimiterProfile

List of AdvancedRateLimiterProfile resources.
Currently next_page_token is not supported and List method will return all ARL profiles in the folder.

AdvancedRateLimiterProfileAdvancedRateLimiterProfile

A AdvancedRateLimiterProfile (ARL) resource.

Field

Description

id

string

ID of the ARL profile.

folderId

string

ID of the folder that the ARL profile belongs to.

labels

object (map<string, string>)

Labels as key:value pairs. Maximum of 64 per resource.

name

string

Required field. Name of the ARL profile. The name is unique within the folder. 1-50 characters long.

description

string

Optional description of the ARL profile.

advancedRateLimiterRules[]

AdvancedRateLimiterRule

List of rules.

createdAt

string (date-time)

Creation timestamp in RFC3339 text format.

String in RFC3339 text format. The range of possible values is from
0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z, i.e. from 0 to 9 digits for fractions of a second.

To work with values in this field, use the APIs described in the
Protocol Buffers reference.
In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).

cloudId

string

ID of the cloud that the ARL profile belongs to.

AdvancedRateLimiterRuleAdvancedRateLimiterRule

A AdvancedRateLimiterRule object, see Rules.

Field

Description

name

string

Required field. Name of the rule. The name is unique within the ARL profile. 1-50 characters long.

priority

string (int64)

Determines the priority in case there are several matched rules.
Enter an integer within the range of 1 and 999999.
The rule priority must be unique within the entire ARL profile.
A lower numeric value means a higher priority.

description

string

Optional description of the rule. 0-512 characters long.

dryRun

boolean

This allows you to evaluate backend capabilities and find the optimum limit values.
Requests will not be blocked in this mode.

staticQuota

StaticQuota

Static quota. Counting each request individually.

Includes only one of the fields staticQuota, dynamicQuota.

dynamicQuota

DynamicQuota

Dynamic quota. Grouping requests by a certain attribute and limiting the number of groups.

Includes only one of the fields staticQuota, dynamicQuota.

StaticQuotaStaticQuota

StaticQuota object.

Field

Description

action

enum (Action)

Action in case of exceeding this quota.

  • ACTION_UNSPECIFIED
  • DENY: Deny request.

condition

Condition

The condition for matching the quota.

limit

string (int64)

Desired maximum number of requests per period.
Enter an integer within the range of 1 and 9999999999999.

period

string (int64)

Period of time in seconds.

ConditionCondition

Condition object. AND semantics implied.
See documentation for matchers description.

Field

Description

authority

AuthorityMatcher

Match authority (Host header).

httpMethod

HttpMethodMatcher

Match HTTP method.

requestUri

RequestUriMatcher

Match Request URI.

headers[]

HeaderMatcher

Match HTTP headers.

sourceIp

IpMatcher

Match IP.

AuthorityMatcherAuthorityMatcher

AuthorityMatcher object.

Field

Description

authorities[]

StringMatcher

List of authorities. OR semantics implied.

StringMatcherStringMatcher

StringMatcher object.

Field

Description

exactMatch

string

Includes only one of the fields exactMatch, exactNotMatch, prefixMatch, prefixNotMatch, pireRegexMatch, pireRegexNotMatch.

exactNotMatch

string

Includes only one of the fields exactMatch, exactNotMatch, prefixMatch, prefixNotMatch, pireRegexMatch, pireRegexNotMatch.

prefixMatch

string

Includes only one of the fields exactMatch, exactNotMatch, prefixMatch, prefixNotMatch, pireRegexMatch, pireRegexNotMatch.

prefixNotMatch

string

Includes only one of the fields exactMatch, exactNotMatch, prefixMatch, prefixNotMatch, pireRegexMatch, pireRegexNotMatch.

pireRegexMatch

string

Includes only one of the fields exactMatch, exactNotMatch, prefixMatch, prefixNotMatch, pireRegexMatch, pireRegexNotMatch.

pireRegexNotMatch

string

Includes only one of the fields exactMatch, exactNotMatch, prefixMatch, prefixNotMatch, pireRegexMatch, pireRegexNotMatch.

HttpMethodMatcherHttpMethodMatcher

HttpMethodMatcher object.

Field

Description

httpMethods[]

StringMatcher

List of HTTP methods. OR semantics implied.

RequestUriMatcherRequestUriMatcher

RequestUriMatcher object. AND semantics implied.

Field

Description

path

StringMatcher

Path of the URI RFC3986.

queries[]

QueryMatcher

List of query matchers. AND semantics implied.

QueryMatcherQueryMatcher

QueryMatcher object.

Field

Description

key

string

Required field. Key of the query parameter.

value

StringMatcher

Required field. Value of the query parameter.

HeaderMatcherHeaderMatcher

HeaderMatcher object.

Field

Description

name

string

Required field. Name of header (case insensitive).

value

StringMatcher

Required field. Value of the header.

IpMatcherIpMatcher

IpMatcher object. AND semantics implied.

Field

Description

ipRangesMatch

IpRangesMatcher

ipRangesNotMatch

IpRangesMatcher

geoIpMatch

GeoIpMatcher

geoIpNotMatch

GeoIpMatcher

IpRangesMatcherIpRangesMatcher

IpRangesMatcher object.

Field

Description

ipRanges[]

string

List of IP ranges. OR semantics implied.

GeoIpMatcherGeoIpMatcher

GeoIpMatcher object.

Field

Description

locations[]

string

ISO 3166-1 alpha 2. OR semantics implied.

DynamicQuotaDynamicQuota

DynamicQuota object.

Field

Description

action

enum (Action)

Action in case of exceeding this quota.

  • ACTION_UNSPECIFIED
  • DENY: Deny request.

condition

Condition

The condition for matching the quota.

limit

string (int64)

Desired maximum number of requests per period.
Enter an integer within the range of 1 and 9999999999999.

period

string (int64)

Period of time in seconds.

characteristics[]

Characteristic

List of characteristics.

CharacteristicCharacteristic

Field

Description

simpleCharacteristic

SimpleCharacteristic

Characteristic automatically based on the Request path, HTTP method, IP address, Region, and Host attributes.
See Rules for more details.

Includes only one of the fields simpleCharacteristic, keyCharacteristic.

keyCharacteristic

KeyCharacteristic

Characteristic based on key match in the Query params, HTTP header, and HTTP cookie attributes.
See Rules for more details.

Includes only one of the fields simpleCharacteristic, keyCharacteristic.

caseInsensitive

boolean

Determines case-sensitive or case-insensitive keys matching.

SimpleCharacteristicSimpleCharacteristic

Field

Description

type

enum (Type)

Type of simple characteristic.

  • TYPE_UNSPECIFIED
  • REQUEST_PATH: HTTP Request path.
  • HTTP_METHOD: HTTP Method.
  • IP: IP address.
  • GEO: Region.
  • HOST: Host.

KeyCharacteristicKeyCharacteristic

Field

Description

type

enum (Type)

Type of key characteristic.

  • TYPE_UNSPECIFIED
  • COOKIE_KEY: HTTP cookie key.
  • HEADER_KEY: HTTP header key.
  • QUERY_KEY: Query params key.

value

string

String value of the key.

Was the article helpful?

Previous
Get
Next
Create
© 2025 Direct Cursus Technology L.L.C.