Akamai: Application Security API — WAF rules: Attack groups

naftiko: 1.0.0-alpha2
info:
  label: 'Akamai: Application Security API — WAF rules: Attack groups'
  description: 'Akamai: Application Security API — WAF rules: Attack groups. 5 operations. Lead operation: Akamai List attack groups. Self-contained Naftiko capability covering one Akamai
    business surface.'
  tags:
  - Akamai
  - Application Security
  - 'WAF rules: Attack groups'
  created: '2026-05-22'
  modified: '2026-05-22'
binds:
- namespace: env
  keys:
    AKAMAI_API_KEY: AKAMAI_API_KEY
capability:
  consumes:
  - type: http
    namespace: appsec-waf-rules-attack-groups
    baseUri: https://{hostname}/appsec/v1
    description: 'Akamai: Application Security API — WAF rules: Attack groups business capability. Self-contained, no shared references.'
    resources:
    - name: configs-configId-versions-versionNumber-security-policies-po
      path: /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/attack-groups
      operations:
      - name: getget-policy-attack-groups
        method: GET
        description: List attack groups
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: accountSwitchKey
          in: query
          type: string
          description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-with-one-api-client).
            The Identity and
    - name: configs-configId-versions-versionNumber-security-policies-po
      path: /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/attack-groups/{attackGroupId}
      operations:
      - name: getget-policy-attack-group
        method: GET
        description: Get the action for an attack group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: accountSwitchKey
          in: query
          type: string
          description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-with-one-api-client).
            The Identity and
      - name: putput-attack-group
        method: PUT
        description: Modify the action for an attack group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: accountSwitchKey
          in: query
          type: string
          description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-with-one-api-client).
            The Identity and
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: configs-configId-versions-versionNumber-security-policies-po
      path: /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/attack-groups/{attackGroupId}/condition-exception
      operations:
      - name: getget-attack-group-condition-exception
        method: GET
        description: Get the exceptions of an attack group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: accountSwitchKey
          in: query
          type: string
          description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-with-one-api-client).
            The Identity and
      - name: putput-attack-group-condition-exception
        method: PUT
        description: Modify the exceptions of an attack group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: accountSwitchKey
          in: query
          type: string
          description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-with-one-api-client).
            The Identity and
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true