Yandex Cloud
Search
Discuss with expertTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Terraform in Yandex Cloud
  • Getting started
  • Solution library
    • Overview
    • Release notes
          • sws_advanced_rate_limiter_profile
          • sws_security_profile
          • sws_waf_profile

In this article:

  • Example usage
  • Arguments & Attributes Reference
  • Import
  1. Terraform reference
  2. Resources
  3. Smart Web Security
  4. Resources
  5. sws_advanced_rate_limiter_profile

yandex_sws_advanced_rate_limiter_profile (Resource)

Written by
Yandex Cloud
Updated at May 15, 2026
  • Example usage
  • Arguments & Attributes Reference
  • Import

A AdvancedRateLimiterProfile (ARL) resource.

Example usageExample usage

//
// Create a new SWS Advanced Rate Limiter Profile.
//
resource "yandex_sws_advanced_rate_limiter_profile" "demo-profile" {
  name = "demo-profile"

  advanced_rate_limiter_rule {
    name        = "rule1"
    priority    = 10
    description = "First test rule"
    dry_run     = true

    static_quota {
      action = "DENY"
      limit  = 10000000
      period = 1
      condition {
        request_uri {
          path {
            exact_match = "/api"
          }
        }
      }
    }
  }
}

Arguments & Attributes ReferenceArguments & Attributes Reference

  • advanced_rate_limiter_profile_id (String). ID of the AdvancedRateLimiterProfile resource to return.
  • cloud_id (String). ID of the cloud that the ARL profile belongs to.
  • created_at (Read-Only) (String). Creation timestamp in RFC3339 text format.
  • description (String). Optional description of the ARL profile.
  • folder_id (String). ID of the folder that the ARL profile belongs to.
  • id (String). ID of the AdvancedRateLimiterProfile resource to return.
  • labels (Map Of String). Labels as key:value pairs. Maximum of 64 per resource.
  • name (Required)(String). Name of the ARL profile. The name is unique within the folder. 1-50 characters long.
  • advanced_rate_limiter_rule [Block]. List of rules.
    • description (String). Optional description of the rule. 0-512 characters long.
    • dry_run (Bool). This allows you to evaluate backend capabilities and find the optimum limit values.
      Requests will not be blocked in this mode.
    • name (Required)(String). Name of the rule. The name is unique within the ARL profile. 1-50 characters long.
    • priority (Number). Determines the priority in case there are several matched rules.
      Enter an integer within the range of 1 and 999999.
      The rule priority must be unique within the entire ARL profile.
      A lower numeric value means a higher priority.
    • dynamic_quota [Block]. Dynamic quota. Grouping requests by a certain attribute and limiting the number of groups.
      • action (Required)(String). Action in case of exceeding this quota.

      • limit (Number). Desired maximum number of requests per period.
        Enter an integer within the range of 1 and 9999999999999.

      • period (Number). Period of time in seconds.

      • characteristic [Block]. List of characteristics.

        • case_insensitive (Bool). Desired maximum number of requests per period.
          Enter an integer within the range of 1 and 9999999999999.

        • key_characteristic [Block]. The condition for matching the quota.

          • type (String). package: yandex.cloud.smartwebsecurity.v1.advanced_rate_limiter
            filename: yandex/cloud/smartwebsecurity/v1/advanced_rate_limiter/advanced_rate_limiter_profile.proto

          • value (String). package: yandex.cloud.smartwebsecurity.v1.advanced_rate_limiter
            filename: yandex/cloud/smartwebsecurity/v1/advanced_rate_limiter/advanced_rate_limiter_profile.proto

        • simple_characteristic [Block]. Action in case of exceeding this quota.

          • type (String). package: yandex.cloud.smartwebsecurity.v1.advanced_rate_limiter
            filename: yandex/cloud/smartwebsecurity/v1/advanced_rate_limiter/advanced_rate_limiter_profile.proto
      • condition [Block]. The condition for matching the quota.

        • authority [Block]. Match authority (Host header).
          • authorities [Block]. List of authorities. OR semantics implied.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • authority_matcher [Block]. Authority matcher.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
        • bot_category [Block]. Match bot category.
          • bot_category_lists_match [Block]. Bot category lists to match with.
            • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • bot_category_lists_not_match [Block]. Bot category lists to not match with.
            • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
        • bot_name [Block]. Match bot name.
          • bot_name_lists_match [Block]. Bot name lists to match with.
            • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • bot_name_lists_not_match [Block]. Bot name lists to not match with.
            • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
        • bot_score [Block]. Match bot score.
          • value [Block]. List of integer matchers for bot score. OR semantics implied.
            • eq_match [Block]. Equal condition.
              • value (Number). Value to match against.
            • ge_match [Block]. Greater than or equal condition.
              • value (Number). Lower bound value (inclusive).
            • le_match [Block]. Less than or equal condition.
              • value (Number). Upper bound value (inclusive).
            • ne_match [Block]. Not equal condition.
              • value (Number). Value to not match against.
        • cookies [Block]. Match cookies.
          • name (Required)(String). Name of the cookie parametr.
          • value [Block]. Value of the cookie parametr.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
        • finger_print [Block]. Match fingerprint.
          • ja3_matcher [Block]. JA3 fingerprint matcher.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • ja3_ranges [Block]. List of JA3 fingerprint matchers. OR semantics implied.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • ja4_matcher [Block]. JA4 fingerprint matcher.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • ja4_ranges [Block]. List of JA4 fingerprint matchers. OR semantics implied.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
        • headers [Block]. Match HTTP headers.
          • name (Required)(String). Name of header (case insensitive).
          • value [Block]. Value of the header.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
        • http_method [Block]. Match HTTP method.
          • http_method_matcher [Block]. HTTP method matcher.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • http_methods [Block]. List of HTTP methods. OR semantics implied.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
        • request_uri [Block]. Match Request URI.
          • path [Block]. Path of the URI RFC3986.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • queries [Block]. List of query matchers. AND semantics implied.
            • key (Required)(String). Key of the query parameter.
            • value [Block]. Value of the query parameter.
              • defined (Bool). Matches if the field is defined.
              • exact_match (String). Exact match condition.
              • exact_not_match (String). Exact not match condition.
              • pire_regex_match (String). PIRE regex match condition.
              • pire_regex_not_match (String). PIRE regex not match condition.
              • prefix_match (String). Prefix match condition.
              • prefix_not_match (String). Prefix not match condition.
              • lists_matchers [Block]. Matches against string and regular expression lists.
                • reg_exp_lists_match [Block]. Regular expression lists to match with.
                  • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
                • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                  • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
                • str_lists_match [Block]. String lists to match with.
                  • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
                • str_lists_not_match [Block]. String lists to not match with.
                  • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
        • source_ip [Block]. Match IP.
          • asn_lists_match [Block]. ASN lists to match with.
            • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • asn_lists_not_match [Block]. ASN lists to not match with.
            • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • asn_ranges_match [Block]. ASN ranges to match with.
            • asn_ranges (List Of Number). List of ASN values to match against. OR semantics implied.
          • asn_ranges_not_match [Block]. ASN ranges to not match with.
            • asn_ranges (List Of Number). List of ASN values to match against. OR semantics implied.
          • geo_ip_match [Block]. Geo locations to match with.
            • locations (List Of String). ISO 3166-1 alpha 2. OR semantics implied.
          • geo_ip_not_match [Block]. Geo locations to not match with.
            • locations (List Of String). ISO 3166-1 alpha 2. OR semantics implied.
          • ip_lists_match [Block]. IP lists to match with.
            • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • ip_lists_not_match [Block]. IP lists to not match with.
            • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • ip_ranges_match [Block]. IP ranges to match with.
            • ip_ranges (List Of String). List of IP ranges. OR semantics implied.
          • ip_ranges_not_match [Block]. IP ranges to not match with.
            • ip_ranges (List Of String). List of IP ranges. OR semantics implied.
        • verified_bot [Block]. Match verified bot.
          • verified [Block]. Matches if the bot is verified or not.
            • match (Bool). Boolean value to match against.
    • static_quota [Block]. Static quota. Counting each request individually.
      • action (Required)(String). Action in case of exceeding this quota.
      • limit (Number). Desired maximum number of requests per period.
        Enter an integer within the range of 1 and 9999999999999.
      • period (Number). Period of time in seconds.
      • condition [Block]. The condition for matching the quota.
        • authority [Block]. Match authority (Host header).
          • authorities [Block]. List of authorities. OR semantics implied.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • authority_matcher [Block]. Authority matcher.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
        • bot_category [Block]. Match bot category.
          • bot_category_lists_match [Block]. Bot category lists to match with.
            • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • bot_category_lists_not_match [Block]. Bot category lists to not match with.
            • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
        • bot_name [Block]. Match bot name.
          • bot_name_lists_match [Block]. Bot name lists to match with.
            • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • bot_name_lists_not_match [Block]. Bot name lists to not match with.
            • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
        • bot_score [Block]. Match bot score.
          • value [Block]. List of integer matchers for bot score. OR semantics implied.
            • eq_match [Block]. Equal condition.
              • value (Number). Value to match against.
            • ge_match [Block]. Greater than or equal condition.
              • value (Number). Lower bound value (inclusive).
            • le_match [Block]. Less than or equal condition.
              • value (Number). Upper bound value (inclusive).
            • ne_match [Block]. Not equal condition.
              • value (Number). Value to not match against.
        • cookies [Block]. Match cookies.
          • name (Required)(String). Name of the cookie parametr.
          • value [Block]. Value of the cookie parametr.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
        • finger_print [Block]. Match fingerprint.
          • ja3_matcher [Block]. JA3 fingerprint matcher.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • ja3_ranges [Block]. List of JA3 fingerprint matchers. OR semantics implied.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • ja4_matcher [Block]. JA4 fingerprint matcher.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • ja4_ranges [Block]. List of JA4 fingerprint matchers. OR semantics implied.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
        • headers [Block]. Match HTTP headers.
          • name (Required)(String). Name of header (case insensitive).
          • value [Block]. Value of the header.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
        • http_method [Block]. Match HTTP method.
          • http_method_matcher [Block]. HTTP method matcher.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • http_methods [Block]. List of HTTP methods. OR semantics implied.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
        • request_uri [Block]. Match Request URI.
          • path [Block]. Path of the URI RFC3986.
            • defined (Bool). Matches if the field is defined.
            • exact_match (String). Exact match condition.
            • exact_not_match (String). Exact not match condition.
            • pire_regex_match (String). PIRE regex match condition.
            • pire_regex_not_match (String). PIRE regex not match condition.
            • prefix_match (String). Prefix match condition.
            • prefix_not_match (String). Prefix not match condition.
            • lists_matchers [Block]. Matches against string and regular expression lists.
              • reg_exp_lists_match [Block]. Regular expression lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_match [Block]. String lists to match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
              • str_lists_not_match [Block]. String lists to not match with.
                • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • queries [Block]. List of query matchers. AND semantics implied.
            • key (Required)(String). Key of the query parameter.
            • value [Block]. Value of the query parameter.
              • defined (Bool). Matches if the field is defined.
              • exact_match (String). Exact match condition.
              • exact_not_match (String). Exact not match condition.
              • pire_regex_match (String). PIRE regex match condition.
              • pire_regex_not_match (String). PIRE regex not match condition.
              • prefix_match (String). Prefix match condition.
              • prefix_not_match (String). Prefix not match condition.
              • lists_matchers [Block]. Matches against string and regular expression lists.
                • reg_exp_lists_match [Block]. Regular expression lists to match with.
                  • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
                • reg_exp_lists_not_match [Block]. Regular expression lists to not match with.
                  • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
                • str_lists_match [Block]. String lists to match with.
                  • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
                • str_lists_not_match [Block]. String lists to not match with.
                  • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
        • source_ip [Block]. Match IP.
          • asn_lists_match [Block]. ASN lists to match with.
            • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • asn_lists_not_match [Block]. ASN lists to not match with.
            • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • asn_ranges_match [Block]. ASN ranges to match with.
            • asn_ranges (List Of Number). List of ASN values to match against. OR semantics implied.
          • asn_ranges_not_match [Block]. ASN ranges to not match with.
            • asn_ranges (List Of Number). List of ASN values to match against. OR semantics implied.
          • geo_ip_match [Block]. Geo locations to match with.
            • locations (List Of String). ISO 3166-1 alpha 2. OR semantics implied.
          • geo_ip_not_match [Block]. Geo locations to not match with.
            • locations (List Of String). ISO 3166-1 alpha 2. OR semantics implied.
          • ip_lists_match [Block]. IP lists to match with.
            • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • ip_lists_not_match [Block]. IP lists to not match with.
            • list_ids (List Of String). List of list IDs to match against. OR semantics implied.
          • ip_ranges_match [Block]. IP ranges to match with.
            • ip_ranges (List Of String). List of IP ranges. OR semantics implied.
          • ip_ranges_not_match [Block]. IP ranges to not match with.
            • ip_ranges (List Of String). List of IP ranges. OR semantics implied.
        • verified_bot [Block]. Match verified bot.
          • verified [Block]. Matches if the bot is verified or not.
            • match (Bool). Boolean value to match against.
  • timeouts [Block].
    • create (String). A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    • delete (String). A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    • read (String). A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    • update (String). A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).

ImportImport

The resource can be imported by using their resource ID. For getting it you can use Yandex Cloud Web Console or Yandex Cloud CLI.

# terraform import yandex_sws_advanced_rate_limiter_profile.<resource Name> <resource Id>
terraform import yandex_sws_advanced_rate_limiter_profile.demo-profile ...

Was the article helpful?

Previous
sws_waf_rule_set_descriptor
Next
sws_security_profile
© 2026 Direct Cursus Technology L.L.C.