aws.wafv2.WebAcl
Explore with Pulumi AI
Create WebAcl Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new WebAcl(name: string, args: WebAclArgs, opts?: CustomResourceOptions);@overload
def WebAcl(resource_name: str,
           args: WebAclArgs,
           opts: Optional[ResourceOptions] = None)
@overload
def WebAcl(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           association_config: Optional[WebAclAssociationConfigArgs] = None,
           captcha_config: Optional[WebAclCaptchaConfigArgs] = None,
           challenge_config: Optional[WebAclChallengeConfigArgs] = None,
           custom_response_bodies: Optional[Sequence[WebAclCustomResponseBodyArgs]] = None,
           default_action: Optional[WebAclDefaultActionArgs] = None,
           description: Optional[str] = None,
           name: Optional[str] = None,
           name_prefix: Optional[str] = None,
           rule_json: Optional[str] = None,
           rules: Optional[Sequence[WebAclRuleArgs]] = None,
           scope: Optional[str] = None,
           tags: Optional[Mapping[str, str]] = None,
           token_domains: Optional[Sequence[str]] = None,
           visibility_config: Optional[WebAclVisibilityConfigArgs] = None)func NewWebAcl(ctx *Context, name string, args WebAclArgs, opts ...ResourceOption) (*WebAcl, error)public WebAcl(string name, WebAclArgs args, CustomResourceOptions? opts = null)
public WebAcl(String name, WebAclArgs args)
public WebAcl(String name, WebAclArgs args, CustomResourceOptions options)
type: aws:wafv2:WebAcl
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args WebAclArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args WebAclArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args WebAclArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args WebAclArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args WebAclArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
WebAcl Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The WebAcl resource accepts the following input properties:
- DefaultAction WebAcl Default Action 
- Action to perform if none of the rulescontained in the WebACL match. Seedefault_actionbelow for details.
- Scope string
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- VisibilityConfig WebAcl Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_configbelow for details.
- AssociationConfig WebAcl Association Config 
- Specifies custom configurations for the associations between the web ACL and protected resources. See association_configbelow for details.
- CaptchaConfig WebAcl Captcha Config 
- Specifies how AWS WAF should handle CAPTCHA evaluations on the ACL level (used by AWS Bot Control). See captcha_configbelow for details.
- ChallengeConfig WebAcl Challenge Config 
- Specifies how AWS WAF should handle Challenge evaluations on the ACL level (used by AWS Bot Control). See challenge_configbelow for details.
- CustomResponse List<WebBodies Acl Custom Response Body> 
- Defines custom response bodies that can be referenced by custom_responseactions. Seecustom_response_bodybelow for details.
- Description string
- Friendly description of the WebACL.
- Name string
- Friendly name of the WebACL. If omitted, the provider will assign a random, unique name. Conflicts with name_prefix.
- NamePrefix string
- Creates a unique name beginning with the specified prefix. Conflicts with name.
- RuleJson string
- Raw JSON string to allow more than three nested statements. Conflicts with ruleattribute. This is for advanced use cases where more than 3 levels of nested statements are required. There is no drift detection at this time. If you use this attribute instead ofrule, you will be foregoing drift detection. Additionally, importing an existing web ACL into a configuration withrule_jsonset will result in a one time in-place update as the remote rule configuration is initially written to theruleattribute. See the AWS documentation for the JSON structure.
- Rules
List<WebAcl Rule> 
- Rule blocks used to identify the web requests that you want to allow,block, orcount. Seerulebelow for details.
- Dictionary<string, string>
- Map of key-value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- TokenDomains List<string>
- Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
- DefaultAction WebAcl Default Action Args 
- Action to perform if none of the rulescontained in the WebACL match. Seedefault_actionbelow for details.
- Scope string
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- VisibilityConfig WebAcl Visibility Config Args 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_configbelow for details.
- AssociationConfig WebAcl Association Config Args 
- Specifies custom configurations for the associations between the web ACL and protected resources. See association_configbelow for details.
- CaptchaConfig WebAcl Captcha Config Args 
- Specifies how AWS WAF should handle CAPTCHA evaluations on the ACL level (used by AWS Bot Control). See captcha_configbelow for details.
- ChallengeConfig WebAcl Challenge Config Args 
- Specifies how AWS WAF should handle Challenge evaluations on the ACL level (used by AWS Bot Control). See challenge_configbelow for details.
- CustomResponse []WebBodies Acl Custom Response Body Args 
- Defines custom response bodies that can be referenced by custom_responseactions. Seecustom_response_bodybelow for details.
- Description string
- Friendly description of the WebACL.
- Name string
- Friendly name of the WebACL. If omitted, the provider will assign a random, unique name. Conflicts with name_prefix.
- NamePrefix string
- Creates a unique name beginning with the specified prefix. Conflicts with name.
- RuleJson string
- Raw JSON string to allow more than three nested statements. Conflicts with ruleattribute. This is for advanced use cases where more than 3 levels of nested statements are required. There is no drift detection at this time. If you use this attribute instead ofrule, you will be foregoing drift detection. Additionally, importing an existing web ACL into a configuration withrule_jsonset will result in a one time in-place update as the remote rule configuration is initially written to theruleattribute. See the AWS documentation for the JSON structure.
- Rules
[]WebAcl Rule Args 
- Rule blocks used to identify the web requests that you want to allow,block, orcount. Seerulebelow for details.
- map[string]string
- Map of key-value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- TokenDomains []string
- Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
- defaultAction WebAcl Default Action 
- Action to perform if none of the rulescontained in the WebACL match. Seedefault_actionbelow for details.
- scope String
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- visibilityConfig WebAcl Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_configbelow for details.
- associationConfig WebAcl Association Config 
- Specifies custom configurations for the associations between the web ACL and protected resources. See association_configbelow for details.
- captchaConfig WebAcl Captcha Config 
- Specifies how AWS WAF should handle CAPTCHA evaluations on the ACL level (used by AWS Bot Control). See captcha_configbelow for details.
- challengeConfig WebAcl Challenge Config 
- Specifies how AWS WAF should handle Challenge evaluations on the ACL level (used by AWS Bot Control). See challenge_configbelow for details.
- customResponse List<WebBodies Acl Custom Response Body> 
- Defines custom response bodies that can be referenced by custom_responseactions. Seecustom_response_bodybelow for details.
- description String
- Friendly description of the WebACL.
- name String
- Friendly name of the WebACL. If omitted, the provider will assign a random, unique name. Conflicts with name_prefix.
- namePrefix String
- Creates a unique name beginning with the specified prefix. Conflicts with name.
- ruleJson String
- Raw JSON string to allow more than three nested statements. Conflicts with ruleattribute. This is for advanced use cases where more than 3 levels of nested statements are required. There is no drift detection at this time. If you use this attribute instead ofrule, you will be foregoing drift detection. Additionally, importing an existing web ACL into a configuration withrule_jsonset will result in a one time in-place update as the remote rule configuration is initially written to theruleattribute. See the AWS documentation for the JSON structure.
- rules
List<WebAcl Rule> 
- Rule blocks used to identify the web requests that you want to allow,block, orcount. Seerulebelow for details.
- Map<String,String>
- Map of key-value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- tokenDomains List<String>
- Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
- defaultAction WebAcl Default Action 
- Action to perform if none of the rulescontained in the WebACL match. Seedefault_actionbelow for details.
- scope string
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- visibilityConfig WebAcl Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_configbelow for details.
- associationConfig WebAcl Association Config 
- Specifies custom configurations for the associations between the web ACL and protected resources. See association_configbelow for details.
- captchaConfig WebAcl Captcha Config 
- Specifies how AWS WAF should handle CAPTCHA evaluations on the ACL level (used by AWS Bot Control). See captcha_configbelow for details.
- challengeConfig WebAcl Challenge Config 
- Specifies how AWS WAF should handle Challenge evaluations on the ACL level (used by AWS Bot Control). See challenge_configbelow for details.
- customResponse WebBodies Acl Custom Response Body[] 
- Defines custom response bodies that can be referenced by custom_responseactions. Seecustom_response_bodybelow for details.
- description string
- Friendly description of the WebACL.
- name string
- Friendly name of the WebACL. If omitted, the provider will assign a random, unique name. Conflicts with name_prefix.
- namePrefix string
- Creates a unique name beginning with the specified prefix. Conflicts with name.
- ruleJson string
- Raw JSON string to allow more than three nested statements. Conflicts with ruleattribute. This is for advanced use cases where more than 3 levels of nested statements are required. There is no drift detection at this time. If you use this attribute instead ofrule, you will be foregoing drift detection. Additionally, importing an existing web ACL into a configuration withrule_jsonset will result in a one time in-place update as the remote rule configuration is initially written to theruleattribute. See the AWS documentation for the JSON structure.
- rules
WebAcl Rule[] 
- Rule blocks used to identify the web requests that you want to allow,block, orcount. Seerulebelow for details.
- {[key: string]: string}
- Map of key-value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- tokenDomains string[]
- Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
- default_action WebAcl Default Action Args 
- Action to perform if none of the rulescontained in the WebACL match. Seedefault_actionbelow for details.
- scope str
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- visibility_config WebAcl Visibility Config Args 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_configbelow for details.
- association_config WebAcl Association Config Args 
- Specifies custom configurations for the associations between the web ACL and protected resources. See association_configbelow for details.
- captcha_config WebAcl Captcha Config Args 
- Specifies how AWS WAF should handle CAPTCHA evaluations on the ACL level (used by AWS Bot Control). See captcha_configbelow for details.
- challenge_config WebAcl Challenge Config Args 
- Specifies how AWS WAF should handle Challenge evaluations on the ACL level (used by AWS Bot Control). See challenge_configbelow for details.
- custom_response_ Sequence[Webbodies Acl Custom Response Body Args] 
- Defines custom response bodies that can be referenced by custom_responseactions. Seecustom_response_bodybelow for details.
- description str
- Friendly description of the WebACL.
- name str
- Friendly name of the WebACL. If omitted, the provider will assign a random, unique name. Conflicts with name_prefix.
- name_prefix str
- Creates a unique name beginning with the specified prefix. Conflicts with name.
- rule_json str
- Raw JSON string to allow more than three nested statements. Conflicts with ruleattribute. This is for advanced use cases where more than 3 levels of nested statements are required. There is no drift detection at this time. If you use this attribute instead ofrule, you will be foregoing drift detection. Additionally, importing an existing web ACL into a configuration withrule_jsonset will result in a one time in-place update as the remote rule configuration is initially written to theruleattribute. See the AWS documentation for the JSON structure.
- rules
Sequence[WebAcl Rule Args] 
- Rule blocks used to identify the web requests that you want to allow,block, orcount. Seerulebelow for details.
- Mapping[str, str]
- Map of key-value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- token_domains Sequence[str]
- Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
- defaultAction Property Map
- Action to perform if none of the rulescontained in the WebACL match. Seedefault_actionbelow for details.
- scope String
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- visibilityConfig Property Map
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_configbelow for details.
- associationConfig Property Map
- Specifies custom configurations for the associations between the web ACL and protected resources. See association_configbelow for details.
- captchaConfig Property Map
- Specifies how AWS WAF should handle CAPTCHA evaluations on the ACL level (used by AWS Bot Control). See captcha_configbelow for details.
- challengeConfig Property Map
- Specifies how AWS WAF should handle Challenge evaluations on the ACL level (used by AWS Bot Control). See challenge_configbelow for details.
- customResponse List<Property Map>Bodies 
- Defines custom response bodies that can be referenced by custom_responseactions. Seecustom_response_bodybelow for details.
- description String
- Friendly description of the WebACL.
- name String
- Friendly name of the WebACL. If omitted, the provider will assign a random, unique name. Conflicts with name_prefix.
- namePrefix String
- Creates a unique name beginning with the specified prefix. Conflicts with name.
- ruleJson String
- Raw JSON string to allow more than three nested statements. Conflicts with ruleattribute. This is for advanced use cases where more than 3 levels of nested statements are required. There is no drift detection at this time. If you use this attribute instead ofrule, you will be foregoing drift detection. Additionally, importing an existing web ACL into a configuration withrule_jsonset will result in a one time in-place update as the remote rule configuration is initially written to theruleattribute. See the AWS documentation for the JSON structure.
- rules List<Property Map>
- Rule blocks used to identify the web requests that you want to allow,block, orcount. Seerulebelow for details.
- Map<String>
- Map of key-value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- tokenDomains List<String>
- Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
Outputs
All input properties are implicitly available as output properties. Additionally, the WebAcl resource produces the following output properties:
- ApplicationIntegration stringUrl 
- The URL to use in SDK integrations with managed rule groups.
- Arn string
- The ARN of the WAF WebACL.
- Capacity int
- Web ACL capacity units (WCUs) currently being used by this web ACL.
- Id string
- The provider-assigned unique ID for this managed resource.
- LockToken string
- Dictionary<string, string>
- Map of tags assigned to the resource, including those inherited from the provider default_tagsconfiguration block.
- ApplicationIntegration stringUrl 
- The URL to use in SDK integrations with managed rule groups.
- Arn string
- The ARN of the WAF WebACL.
- Capacity int
- Web ACL capacity units (WCUs) currently being used by this web ACL.
- Id string
- The provider-assigned unique ID for this managed resource.
- LockToken string
- map[string]string
- Map of tags assigned to the resource, including those inherited from the provider default_tagsconfiguration block.
- applicationIntegration StringUrl 
- The URL to use in SDK integrations with managed rule groups.
- arn String
- The ARN of the WAF WebACL.
- capacity Integer
- Web ACL capacity units (WCUs) currently being used by this web ACL.
- id String
- The provider-assigned unique ID for this managed resource.
- lockToken String
- Map<String,String>
- Map of tags assigned to the resource, including those inherited from the provider default_tagsconfiguration block.
- applicationIntegration stringUrl 
- The URL to use in SDK integrations with managed rule groups.
- arn string
- The ARN of the WAF WebACL.
- capacity number
- Web ACL capacity units (WCUs) currently being used by this web ACL.
- id string
- The provider-assigned unique ID for this managed resource.
- lockToken string
- {[key: string]: string}
- Map of tags assigned to the resource, including those inherited from the provider default_tagsconfiguration block.
- application_integration_ strurl 
- The URL to use in SDK integrations with managed rule groups.
- arn str
- The ARN of the WAF WebACL.
- capacity int
- Web ACL capacity units (WCUs) currently being used by this web ACL.
- id str
- The provider-assigned unique ID for this managed resource.
- lock_token str
- Mapping[str, str]
- Map of tags assigned to the resource, including those inherited from the provider default_tagsconfiguration block.
- applicationIntegration StringUrl 
- The URL to use in SDK integrations with managed rule groups.
- arn String
- The ARN of the WAF WebACL.
- capacity Number
- Web ACL capacity units (WCUs) currently being used by this web ACL.
- id String
- The provider-assigned unique ID for this managed resource.
- lockToken String
- Map<String>
- Map of tags assigned to the resource, including those inherited from the provider default_tagsconfiguration block.
Look up Existing WebAcl Resource
Get an existing WebAcl resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: WebAclState, opts?: CustomResourceOptions): WebAcl@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        application_integration_url: Optional[str] = None,
        arn: Optional[str] = None,
        association_config: Optional[WebAclAssociationConfigArgs] = None,
        capacity: Optional[int] = None,
        captcha_config: Optional[WebAclCaptchaConfigArgs] = None,
        challenge_config: Optional[WebAclChallengeConfigArgs] = None,
        custom_response_bodies: Optional[Sequence[WebAclCustomResponseBodyArgs]] = None,
        default_action: Optional[WebAclDefaultActionArgs] = None,
        description: Optional[str] = None,
        lock_token: Optional[str] = None,
        name: Optional[str] = None,
        name_prefix: Optional[str] = None,
        rule_json: Optional[str] = None,
        rules: Optional[Sequence[WebAclRuleArgs]] = None,
        scope: Optional[str] = None,
        tags: Optional[Mapping[str, str]] = None,
        tags_all: Optional[Mapping[str, str]] = None,
        token_domains: Optional[Sequence[str]] = None,
        visibility_config: Optional[WebAclVisibilityConfigArgs] = None) -> WebAclfunc GetWebAcl(ctx *Context, name string, id IDInput, state *WebAclState, opts ...ResourceOption) (*WebAcl, error)public static WebAcl Get(string name, Input<string> id, WebAclState? state, CustomResourceOptions? opts = null)public static WebAcl get(String name, Output<String> id, WebAclState state, CustomResourceOptions options)resources:  _:    type: aws:wafv2:WebAcl    get:      id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- ApplicationIntegration stringUrl 
- The URL to use in SDK integrations with managed rule groups.
- Arn string
- The ARN of the WAF WebACL.
- AssociationConfig WebAcl Association Config 
- Specifies custom configurations for the associations between the web ACL and protected resources. See association_configbelow for details.
- Capacity int
- Web ACL capacity units (WCUs) currently being used by this web ACL.
- CaptchaConfig WebAcl Captcha Config 
- Specifies how AWS WAF should handle CAPTCHA evaluations on the ACL level (used by AWS Bot Control). See captcha_configbelow for details.
- ChallengeConfig WebAcl Challenge Config 
- Specifies how AWS WAF should handle Challenge evaluations on the ACL level (used by AWS Bot Control). See challenge_configbelow for details.
- CustomResponse List<WebBodies Acl Custom Response Body> 
- Defines custom response bodies that can be referenced by custom_responseactions. Seecustom_response_bodybelow for details.
- DefaultAction WebAcl Default Action 
- Action to perform if none of the rulescontained in the WebACL match. Seedefault_actionbelow for details.
- Description string
- Friendly description of the WebACL.
- LockToken string
- Name string
- Friendly name of the WebACL. If omitted, the provider will assign a random, unique name. Conflicts with name_prefix.
- NamePrefix string
- Creates a unique name beginning with the specified prefix. Conflicts with name.
- RuleJson string
- Raw JSON string to allow more than three nested statements. Conflicts with ruleattribute. This is for advanced use cases where more than 3 levels of nested statements are required. There is no drift detection at this time. If you use this attribute instead ofrule, you will be foregoing drift detection. Additionally, importing an existing web ACL into a configuration withrule_jsonset will result in a one time in-place update as the remote rule configuration is initially written to theruleattribute. See the AWS documentation for the JSON structure.
- Rules
List<WebAcl Rule> 
- Rule blocks used to identify the web requests that you want to allow,block, orcount. Seerulebelow for details.
- Scope string
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- Dictionary<string, string>
- Map of key-value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- Dictionary<string, string>
- Map of tags assigned to the resource, including those inherited from the provider default_tagsconfiguration block.
- TokenDomains List<string>
- Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
- VisibilityConfig WebAcl Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_configbelow for details.
- ApplicationIntegration stringUrl 
- The URL to use in SDK integrations with managed rule groups.
- Arn string
- The ARN of the WAF WebACL.
- AssociationConfig WebAcl Association Config Args 
- Specifies custom configurations for the associations between the web ACL and protected resources. See association_configbelow for details.
- Capacity int
- Web ACL capacity units (WCUs) currently being used by this web ACL.
- CaptchaConfig WebAcl Captcha Config Args 
- Specifies how AWS WAF should handle CAPTCHA evaluations on the ACL level (used by AWS Bot Control). See captcha_configbelow for details.
- ChallengeConfig WebAcl Challenge Config Args 
- Specifies how AWS WAF should handle Challenge evaluations on the ACL level (used by AWS Bot Control). See challenge_configbelow for details.
- CustomResponse []WebBodies Acl Custom Response Body Args 
- Defines custom response bodies that can be referenced by custom_responseactions. Seecustom_response_bodybelow for details.
- DefaultAction WebAcl Default Action Args 
- Action to perform if none of the rulescontained in the WebACL match. Seedefault_actionbelow for details.
- Description string
- Friendly description of the WebACL.
- LockToken string
- Name string
- Friendly name of the WebACL. If omitted, the provider will assign a random, unique name. Conflicts with name_prefix.
- NamePrefix string
- Creates a unique name beginning with the specified prefix. Conflicts with name.
- RuleJson string
- Raw JSON string to allow more than three nested statements. Conflicts with ruleattribute. This is for advanced use cases where more than 3 levels of nested statements are required. There is no drift detection at this time. If you use this attribute instead ofrule, you will be foregoing drift detection. Additionally, importing an existing web ACL into a configuration withrule_jsonset will result in a one time in-place update as the remote rule configuration is initially written to theruleattribute. See the AWS documentation for the JSON structure.
- Rules
[]WebAcl Rule Args 
- Rule blocks used to identify the web requests that you want to allow,block, orcount. Seerulebelow for details.
- Scope string
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- map[string]string
- Map of key-value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- map[string]string
- Map of tags assigned to the resource, including those inherited from the provider default_tagsconfiguration block.
- TokenDomains []string
- Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
- VisibilityConfig WebAcl Visibility Config Args 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_configbelow for details.
- applicationIntegration StringUrl 
- The URL to use in SDK integrations with managed rule groups.
- arn String
- The ARN of the WAF WebACL.
- associationConfig WebAcl Association Config 
- Specifies custom configurations for the associations between the web ACL and protected resources. See association_configbelow for details.
- capacity Integer
- Web ACL capacity units (WCUs) currently being used by this web ACL.
- captchaConfig WebAcl Captcha Config 
- Specifies how AWS WAF should handle CAPTCHA evaluations on the ACL level (used by AWS Bot Control). See captcha_configbelow for details.
- challengeConfig WebAcl Challenge Config 
- Specifies how AWS WAF should handle Challenge evaluations on the ACL level (used by AWS Bot Control). See challenge_configbelow for details.
- customResponse List<WebBodies Acl Custom Response Body> 
- Defines custom response bodies that can be referenced by custom_responseactions. Seecustom_response_bodybelow for details.
- defaultAction WebAcl Default Action 
- Action to perform if none of the rulescontained in the WebACL match. Seedefault_actionbelow for details.
- description String
- Friendly description of the WebACL.
- lockToken String
- name String
- Friendly name of the WebACL. If omitted, the provider will assign a random, unique name. Conflicts with name_prefix.
- namePrefix String
- Creates a unique name beginning with the specified prefix. Conflicts with name.
- ruleJson String
- Raw JSON string to allow more than three nested statements. Conflicts with ruleattribute. This is for advanced use cases where more than 3 levels of nested statements are required. There is no drift detection at this time. If you use this attribute instead ofrule, you will be foregoing drift detection. Additionally, importing an existing web ACL into a configuration withrule_jsonset will result in a one time in-place update as the remote rule configuration is initially written to theruleattribute. See the AWS documentation for the JSON structure.
- rules
List<WebAcl Rule> 
- Rule blocks used to identify the web requests that you want to allow,block, orcount. Seerulebelow for details.
- scope String
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- Map<String,String>
- Map of key-value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- Map<String,String>
- Map of tags assigned to the resource, including those inherited from the provider default_tagsconfiguration block.
- tokenDomains List<String>
- Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
- visibilityConfig WebAcl Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_configbelow for details.
- applicationIntegration stringUrl 
- The URL to use in SDK integrations with managed rule groups.
- arn string
- The ARN of the WAF WebACL.
- associationConfig WebAcl Association Config 
- Specifies custom configurations for the associations between the web ACL and protected resources. See association_configbelow for details.
- capacity number
- Web ACL capacity units (WCUs) currently being used by this web ACL.
- captchaConfig WebAcl Captcha Config 
- Specifies how AWS WAF should handle CAPTCHA evaluations on the ACL level (used by AWS Bot Control). See captcha_configbelow for details.
- challengeConfig WebAcl Challenge Config 
- Specifies how AWS WAF should handle Challenge evaluations on the ACL level (used by AWS Bot Control). See challenge_configbelow for details.
- customResponse WebBodies Acl Custom Response Body[] 
- Defines custom response bodies that can be referenced by custom_responseactions. Seecustom_response_bodybelow for details.
- defaultAction WebAcl Default Action 
- Action to perform if none of the rulescontained in the WebACL match. Seedefault_actionbelow for details.
- description string
- Friendly description of the WebACL.
- lockToken string
- name string
- Friendly name of the WebACL. If omitted, the provider will assign a random, unique name. Conflicts with name_prefix.
- namePrefix string
- Creates a unique name beginning with the specified prefix. Conflicts with name.
- ruleJson string
- Raw JSON string to allow more than three nested statements. Conflicts with ruleattribute. This is for advanced use cases where more than 3 levels of nested statements are required. There is no drift detection at this time. If you use this attribute instead ofrule, you will be foregoing drift detection. Additionally, importing an existing web ACL into a configuration withrule_jsonset will result in a one time in-place update as the remote rule configuration is initially written to theruleattribute. See the AWS documentation for the JSON structure.
- rules
WebAcl Rule[] 
- Rule blocks used to identify the web requests that you want to allow,block, orcount. Seerulebelow for details.
- scope string
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- {[key: string]: string}
- Map of key-value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- {[key: string]: string}
- Map of tags assigned to the resource, including those inherited from the provider default_tagsconfiguration block.
- tokenDomains string[]
- Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
- visibilityConfig WebAcl Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_configbelow for details.
- application_integration_ strurl 
- The URL to use in SDK integrations with managed rule groups.
- arn str
- The ARN of the WAF WebACL.
- association_config WebAcl Association Config Args 
- Specifies custom configurations for the associations between the web ACL and protected resources. See association_configbelow for details.
- capacity int
- Web ACL capacity units (WCUs) currently being used by this web ACL.
- captcha_config WebAcl Captcha Config Args 
- Specifies how AWS WAF should handle CAPTCHA evaluations on the ACL level (used by AWS Bot Control). See captcha_configbelow for details.
- challenge_config WebAcl Challenge Config Args 
- Specifies how AWS WAF should handle Challenge evaluations on the ACL level (used by AWS Bot Control). See challenge_configbelow for details.
- custom_response_ Sequence[Webbodies Acl Custom Response Body Args] 
- Defines custom response bodies that can be referenced by custom_responseactions. Seecustom_response_bodybelow for details.
- default_action WebAcl Default Action Args 
- Action to perform if none of the rulescontained in the WebACL match. Seedefault_actionbelow for details.
- description str
- Friendly description of the WebACL.
- lock_token str
- name str
- Friendly name of the WebACL. If omitted, the provider will assign a random, unique name. Conflicts with name_prefix.
- name_prefix str
- Creates a unique name beginning with the specified prefix. Conflicts with name.
- rule_json str
- Raw JSON string to allow more than three nested statements. Conflicts with ruleattribute. This is for advanced use cases where more than 3 levels of nested statements are required. There is no drift detection at this time. If you use this attribute instead ofrule, you will be foregoing drift detection. Additionally, importing an existing web ACL into a configuration withrule_jsonset will result in a one time in-place update as the remote rule configuration is initially written to theruleattribute. See the AWS documentation for the JSON structure.
- rules
Sequence[WebAcl Rule Args] 
- Rule blocks used to identify the web requests that you want to allow,block, orcount. Seerulebelow for details.
- scope str
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- Mapping[str, str]
- Map of key-value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- Mapping[str, str]
- Map of tags assigned to the resource, including those inherited from the provider default_tagsconfiguration block.
- token_domains Sequence[str]
- Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
- visibility_config WebAcl Visibility Config Args 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_configbelow for details.
- applicationIntegration StringUrl 
- The URL to use in SDK integrations with managed rule groups.
- arn String
- The ARN of the WAF WebACL.
- associationConfig Property Map
- Specifies custom configurations for the associations between the web ACL and protected resources. See association_configbelow for details.
- capacity Number
- Web ACL capacity units (WCUs) currently being used by this web ACL.
- captchaConfig Property Map
- Specifies how AWS WAF should handle CAPTCHA evaluations on the ACL level (used by AWS Bot Control). See captcha_configbelow for details.
- challengeConfig Property Map
- Specifies how AWS WAF should handle Challenge evaluations on the ACL level (used by AWS Bot Control). See challenge_configbelow for details.
- customResponse List<Property Map>Bodies 
- Defines custom response bodies that can be referenced by custom_responseactions. Seecustom_response_bodybelow for details.
- defaultAction Property Map
- Action to perform if none of the rulescontained in the WebACL match. Seedefault_actionbelow for details.
- description String
- Friendly description of the WebACL.
- lockToken String
- name String
- Friendly name of the WebACL. If omitted, the provider will assign a random, unique name. Conflicts with name_prefix.
- namePrefix String
- Creates a unique name beginning with the specified prefix. Conflicts with name.
- ruleJson String
- Raw JSON string to allow more than three nested statements. Conflicts with ruleattribute. This is for advanced use cases where more than 3 levels of nested statements are required. There is no drift detection at this time. If you use this attribute instead ofrule, you will be foregoing drift detection. Additionally, importing an existing web ACL into a configuration withrule_jsonset will result in a one time in-place update as the remote rule configuration is initially written to theruleattribute. See the AWS documentation for the JSON structure.
- rules List<Property Map>
- Rule blocks used to identify the web requests that you want to allow,block, orcount. Seerulebelow for details.
- scope String
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- Map<String>
- Map of key-value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- Map<String>
- Map of tags assigned to the resource, including those inherited from the provider default_tagsconfiguration block.
- tokenDomains List<String>
- Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
- visibilityConfig Property Map
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_configbelow for details.
Supporting Types
Note: There are over 200 nested types for this resource. Only the first 200 types are included in this documentation.
WebAclAssociationConfig, WebAclAssociationConfigArgs        
- RequestBodies List<WebAcl Association Config Request Body> 
- Customizes the request body that your protected resource forward to AWS WAF for inspection. See request_bodybelow for details.
- RequestBodies []WebAcl Association Config Request Body 
- Customizes the request body that your protected resource forward to AWS WAF for inspection. See request_bodybelow for details.
- requestBodies List<WebAcl Association Config Request Body> 
- Customizes the request body that your protected resource forward to AWS WAF for inspection. See request_bodybelow for details.
- requestBodies WebAcl Association Config Request Body[] 
- Customizes the request body that your protected resource forward to AWS WAF for inspection. See request_bodybelow for details.
- request_bodies Sequence[WebAcl Association Config Request Body] 
- Customizes the request body that your protected resource forward to AWS WAF for inspection. See request_bodybelow for details.
- requestBodies List<Property Map>
- Customizes the request body that your protected resource forward to AWS WAF for inspection. See request_bodybelow for details.
WebAclAssociationConfigRequestBody, WebAclAssociationConfigRequestBodyArgs            
- ApiGateways List<WebAcl Association Config Request Body Api Gateway> 
- Customizes the request body that your protected Amazon API Gateway REST APIs forward to AWS WAF for inspection. Applicable only when scopeis set toCLOUDFRONT. Seeapi_gatewaybelow for details.
- AppRunner List<WebServices Acl Association Config Request Body App Runner Service> 
- Customizes the request body that your protected Amazon App Runner services forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seeapp_runner_servicebelow for details.
- Cloudfronts
List<WebAcl Association Config Request Body Cloudfront> 
- Customizes the request body that your protected Amazon CloudFront distributions forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seecloudfrontbelow for details.
- CognitoUser List<WebPools Acl Association Config Request Body Cognito User Pool> 
- Customizes the request body that your protected Amazon Cognito user pools forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seecognito_user_poolbelow for details.
- VerifiedAccess List<WebInstances Acl Association Config Request Body Verified Access Instance> 
- Customizes the request body that your protected AWS Verfied Access instances forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seeverified_access_instancebelow for details.
- ApiGateways []WebAcl Association Config Request Body Api Gateway 
- Customizes the request body that your protected Amazon API Gateway REST APIs forward to AWS WAF for inspection. Applicable only when scopeis set toCLOUDFRONT. Seeapi_gatewaybelow for details.
- AppRunner []WebServices Acl Association Config Request Body App Runner Service 
- Customizes the request body that your protected Amazon App Runner services forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seeapp_runner_servicebelow for details.
- Cloudfronts
[]WebAcl Association Config Request Body Cloudfront 
- Customizes the request body that your protected Amazon CloudFront distributions forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seecloudfrontbelow for details.
- CognitoUser []WebPools Acl Association Config Request Body Cognito User Pool 
- Customizes the request body that your protected Amazon Cognito user pools forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seecognito_user_poolbelow for details.
- VerifiedAccess []WebInstances Acl Association Config Request Body Verified Access Instance 
- Customizes the request body that your protected AWS Verfied Access instances forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seeverified_access_instancebelow for details.
- apiGateways List<WebAcl Association Config Request Body Api Gateway> 
- Customizes the request body that your protected Amazon API Gateway REST APIs forward to AWS WAF for inspection. Applicable only when scopeis set toCLOUDFRONT. Seeapi_gatewaybelow for details.
- appRunner List<WebServices Acl Association Config Request Body App Runner Service> 
- Customizes the request body that your protected Amazon App Runner services forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seeapp_runner_servicebelow for details.
- cloudfronts
List<WebAcl Association Config Request Body Cloudfront> 
- Customizes the request body that your protected Amazon CloudFront distributions forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seecloudfrontbelow for details.
- cognitoUser List<WebPools Acl Association Config Request Body Cognito User Pool> 
- Customizes the request body that your protected Amazon Cognito user pools forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seecognito_user_poolbelow for details.
- verifiedAccess List<WebInstances Acl Association Config Request Body Verified Access Instance> 
- Customizes the request body that your protected AWS Verfied Access instances forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seeverified_access_instancebelow for details.
- apiGateways WebAcl Association Config Request Body Api Gateway[] 
- Customizes the request body that your protected Amazon API Gateway REST APIs forward to AWS WAF for inspection. Applicable only when scopeis set toCLOUDFRONT. Seeapi_gatewaybelow for details.
- appRunner WebServices Acl Association Config Request Body App Runner Service[] 
- Customizes the request body that your protected Amazon App Runner services forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seeapp_runner_servicebelow for details.
- cloudfronts
WebAcl Association Config Request Body Cloudfront[] 
- Customizes the request body that your protected Amazon CloudFront distributions forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seecloudfrontbelow for details.
- cognitoUser WebPools Acl Association Config Request Body Cognito User Pool[] 
- Customizes the request body that your protected Amazon Cognito user pools forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seecognito_user_poolbelow for details.
- verifiedAccess WebInstances Acl Association Config Request Body Verified Access Instance[] 
- Customizes the request body that your protected AWS Verfied Access instances forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seeverified_access_instancebelow for details.
- api_gateways Sequence[WebAcl Association Config Request Body Api Gateway] 
- Customizes the request body that your protected Amazon API Gateway REST APIs forward to AWS WAF for inspection. Applicable only when scopeis set toCLOUDFRONT. Seeapi_gatewaybelow for details.
- app_runner_ Sequence[Webservices Acl Association Config Request Body App Runner Service] 
- Customizes the request body that your protected Amazon App Runner services forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seeapp_runner_servicebelow for details.
- cloudfronts
Sequence[WebAcl Association Config Request Body Cloudfront] 
- Customizes the request body that your protected Amazon CloudFront distributions forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seecloudfrontbelow for details.
- cognito_user_ Sequence[Webpools Acl Association Config Request Body Cognito User Pool] 
- Customizes the request body that your protected Amazon Cognito user pools forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seecognito_user_poolbelow for details.
- verified_access_ Sequence[Webinstances Acl Association Config Request Body Verified Access Instance] 
- Customizes the request body that your protected AWS Verfied Access instances forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seeverified_access_instancebelow for details.
- apiGateways List<Property Map>
- Customizes the request body that your protected Amazon API Gateway REST APIs forward to AWS WAF for inspection. Applicable only when scopeis set toCLOUDFRONT. Seeapi_gatewaybelow for details.
- appRunner List<Property Map>Services 
- Customizes the request body that your protected Amazon App Runner services forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seeapp_runner_servicebelow for details.
- cloudfronts List<Property Map>
- Customizes the request body that your protected Amazon CloudFront distributions forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seecloudfrontbelow for details.
- cognitoUser List<Property Map>Pools 
- Customizes the request body that your protected Amazon Cognito user pools forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seecognito_user_poolbelow for details.
- verifiedAccess List<Property Map>Instances 
- Customizes the request body that your protected AWS Verfied Access instances forward to AWS WAF for inspection. Applicable only when scopeis set toREGIONAL. Seeverified_access_instancebelow for details.
WebAclAssociationConfigRequestBodyApiGateway, WebAclAssociationConfigRequestBodyApiGatewayArgs                
- DefaultSize stringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon API Gateway REST APIs should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- DefaultSize stringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon API Gateway REST APIs should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- defaultSize StringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon API Gateway REST APIs should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- defaultSize stringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon API Gateway REST APIs should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- default_size_ strinspection_ limit 
- Specifies the maximum size of the web request body component that an associated Amazon API Gateway REST APIs should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- defaultSize StringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon API Gateway REST APIs should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
WebAclAssociationConfigRequestBodyAppRunnerService, WebAclAssociationConfigRequestBodyAppRunnerServiceArgs                  
- DefaultSize stringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon App Runner services should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- DefaultSize stringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon App Runner services should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- defaultSize StringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon App Runner services should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- defaultSize stringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon App Runner services should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- default_size_ strinspection_ limit 
- Specifies the maximum size of the web request body component that an associated Amazon App Runner services should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- defaultSize StringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon App Runner services should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
WebAclAssociationConfigRequestBodyCloudfront, WebAclAssociationConfigRequestBodyCloudfrontArgs              
- DefaultSize stringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon CloudFront distribution should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- DefaultSize stringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon CloudFront distribution should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- defaultSize StringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon CloudFront distribution should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- defaultSize stringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon CloudFront distribution should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- default_size_ strinspection_ limit 
- Specifies the maximum size of the web request body component that an associated Amazon CloudFront distribution should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- defaultSize StringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon CloudFront distribution should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
WebAclAssociationConfigRequestBodyCognitoUserPool, WebAclAssociationConfigRequestBodyCognitoUserPoolArgs                  
- DefaultSize stringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon Cognito user pools should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- DefaultSize stringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon Cognito user pools should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- defaultSize StringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon Cognito user pools should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- defaultSize stringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon Cognito user pools should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- default_size_ strinspection_ limit 
- Specifies the maximum size of the web request body component that an associated Amazon Cognito user pools should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- defaultSize StringInspection Limit 
- Specifies the maximum size of the web request body component that an associated Amazon Cognito user pools should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
WebAclAssociationConfigRequestBodyVerifiedAccessInstance, WebAclAssociationConfigRequestBodyVerifiedAccessInstanceArgs                  
- DefaultSize stringInspection Limit 
- Specifies the maximum size of the web request body component that an associated AWS Verified Access instances should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- DefaultSize stringInspection Limit 
- Specifies the maximum size of the web request body component that an associated AWS Verified Access instances should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- defaultSize StringInspection Limit 
- Specifies the maximum size of the web request body component that an associated AWS Verified Access instances should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- defaultSize stringInspection Limit 
- Specifies the maximum size of the web request body component that an associated AWS Verified Access instances should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- default_size_ strinspection_ limit 
- Specifies the maximum size of the web request body component that an associated AWS Verified Access instances should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
- defaultSize StringInspection Limit 
- Specifies the maximum size of the web request body component that an associated AWS Verified Access instances should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body. Valid values are KB_16,KB_32,KB_48andKB_64.
WebAclCaptchaConfig, WebAclCaptchaConfigArgs        
- ImmunityTime WebProperty Acl Captcha Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- ImmunityTime WebProperty Acl Captcha Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- immunityTime WebProperty Acl Captcha Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- immunityTime WebProperty Acl Captcha Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- immunity_time_ Webproperty Acl Captcha Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- immunityTime Property MapProperty 
- Defines custom immunity time. See immunity_time_propertybelow for details.
WebAclCaptchaConfigImmunityTimeProperty, WebAclCaptchaConfigImmunityTimePropertyArgs              
- ImmunityTime int
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- ImmunityTime int
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunityTime Integer
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunityTime number
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunity_time int
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunityTime Number
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
WebAclChallengeConfig, WebAclChallengeConfigArgs        
- ImmunityTime WebProperty Acl Challenge Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- ImmunityTime WebProperty Acl Challenge Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- immunityTime WebProperty Acl Challenge Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- immunityTime WebProperty Acl Challenge Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- immunity_time_ Webproperty Acl Challenge Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- immunityTime Property MapProperty 
- Defines custom immunity time. See immunity_time_propertybelow for details.
WebAclChallengeConfigImmunityTimeProperty, WebAclChallengeConfigImmunityTimePropertyArgs              
- ImmunityTime int
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- ImmunityTime int
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunityTime Integer
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunityTime number
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunity_time int
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunityTime Number
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
WebAclCustomResponseBody, WebAclCustomResponseBodyArgs          
- Content string
- Payload of the custom response.
- ContentType string
- Type of content in the payload that you are defining in the contentargument. Valid values areTEXT_PLAIN,TEXT_HTML, orAPPLICATION_JSON.
- Key string
- Unique key identifying the custom response body. This is referenced by the custom_response_body_keyargument in thecustom_responseblock.
- Content string
- Payload of the custom response.
- ContentType string
- Type of content in the payload that you are defining in the contentargument. Valid values areTEXT_PLAIN,TEXT_HTML, orAPPLICATION_JSON.
- Key string
- Unique key identifying the custom response body. This is referenced by the custom_response_body_keyargument in thecustom_responseblock.
- content String
- Payload of the custom response.
- contentType String
- Type of content in the payload that you are defining in the contentargument. Valid values areTEXT_PLAIN,TEXT_HTML, orAPPLICATION_JSON.
- key String
- Unique key identifying the custom response body. This is referenced by the custom_response_body_keyargument in thecustom_responseblock.
- content string
- Payload of the custom response.
- contentType string
- Type of content in the payload that you are defining in the contentargument. Valid values areTEXT_PLAIN,TEXT_HTML, orAPPLICATION_JSON.
- key string
- Unique key identifying the custom response body. This is referenced by the custom_response_body_keyargument in thecustom_responseblock.
- content str
- Payload of the custom response.
- content_type str
- Type of content in the payload that you are defining in the contentargument. Valid values areTEXT_PLAIN,TEXT_HTML, orAPPLICATION_JSON.
- key str
- Unique key identifying the custom response body. This is referenced by the custom_response_body_keyargument in thecustom_responseblock.
- content String
- Payload of the custom response.
- contentType String
- Type of content in the payload that you are defining in the contentargument. Valid values areTEXT_PLAIN,TEXT_HTML, orAPPLICATION_JSON.
- key String
- Unique key identifying the custom response body. This is referenced by the custom_response_body_keyargument in thecustom_responseblock.
WebAclDefaultAction, WebAclDefaultActionArgs        
- Allow
WebAcl Default Action Allow 
- Specifies that AWS WAF should allow requests by default. See allowbelow for details.
- Block
WebAcl Default Action Block 
- Specifies that AWS WAF should block requests by default. See blockbelow for details.
- Allow
WebAcl Default Action Allow 
- Specifies that AWS WAF should allow requests by default. See allowbelow for details.
- Block
WebAcl Default Action Block 
- Specifies that AWS WAF should block requests by default. See blockbelow for details.
- allow
WebAcl Default Action Allow 
- Specifies that AWS WAF should allow requests by default. See allowbelow for details.
- block
WebAcl Default Action Block 
- Specifies that AWS WAF should block requests by default. See blockbelow for details.
- allow
WebAcl Default Action Allow 
- Specifies that AWS WAF should allow requests by default. See allowbelow for details.
- block
WebAcl Default Action Block 
- Specifies that AWS WAF should block requests by default. See blockbelow for details.
- allow
WebAcl Default Action Allow 
- Specifies that AWS WAF should allow requests by default. See allowbelow for details.
- block
WebAcl Default Action Block 
- Specifies that AWS WAF should block requests by default. See blockbelow for details.
- allow Property Map
- Specifies that AWS WAF should allow requests by default. See allowbelow for details.
- block Property Map
- Specifies that AWS WAF should block requests by default. See blockbelow for details.
WebAclDefaultActionAllow, WebAclDefaultActionAllowArgs          
- CustomRequest WebHandling Acl Default Action Allow Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- CustomRequest WebHandling Acl Default Action Allow Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest WebHandling Acl Default Action Allow Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest WebHandling Acl Default Action Allow Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- custom_request_ Webhandling Acl Default Action Allow Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest Property MapHandling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
WebAclDefaultActionAllowCustomRequestHandling, WebAclDefaultActionAllowCustomRequestHandlingArgs                
- InsertHeaders List<WebAcl Default Action Allow Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- InsertHeaders []WebAcl Default Action Allow Custom Request Handling Insert Header 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders List<WebAcl Default Action Allow Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders WebAcl Default Action Allow Custom Request Handling Insert Header[] 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insert_headers Sequence[WebAcl Default Action Allow Custom Request Handling Insert Header] 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders List<Property Map>
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
WebAclDefaultActionAllowCustomRequestHandlingInsertHeader, WebAclDefaultActionAllowCustomRequestHandlingInsertHeaderArgs                    
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
- name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value string
- Value of the custom header.
- name str
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value str
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
WebAclDefaultActionBlock, WebAclDefaultActionBlockArgs          
- CustomResponse WebAcl Default Action Block Custom Response 
- Defines a custom response for the web request. See custom_responsebelow for details.
- CustomResponse WebAcl Default Action Block Custom Response 
- Defines a custom response for the web request. See custom_responsebelow for details.
- customResponse WebAcl Default Action Block Custom Response 
- Defines a custom response for the web request. See custom_responsebelow for details.
- customResponse WebAcl Default Action Block Custom Response 
- Defines a custom response for the web request. See custom_responsebelow for details.
- custom_response WebAcl Default Action Block Custom Response 
- Defines a custom response for the web request. See custom_responsebelow for details.
- customResponse Property Map
- Defines a custom response for the web request. See custom_responsebelow for details.
WebAclDefaultActionBlockCustomResponse, WebAclDefaultActionBlockCustomResponseArgs              
- ResponseCode int
- The HTTP status code to return to the client.
- CustomResponse stringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- ResponseHeaders List<WebAcl Default Action Block Custom Response Response Header> 
- The response_headerblocks used to define the HTTP response headers added to the response. Seeresponse_headerbelow for details.
- ResponseCode int
- The HTTP status code to return to the client.
- CustomResponse stringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- ResponseHeaders []WebAcl Default Action Block Custom Response Response Header 
- The response_headerblocks used to define the HTTP response headers added to the response. Seeresponse_headerbelow for details.
- responseCode Integer
- The HTTP status code to return to the client.
- customResponse StringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- responseHeaders List<WebAcl Default Action Block Custom Response Response Header> 
- The response_headerblocks used to define the HTTP response headers added to the response. Seeresponse_headerbelow for details.
- responseCode number
- The HTTP status code to return to the client.
- customResponse stringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- responseHeaders WebAcl Default Action Block Custom Response Response Header[] 
- The response_headerblocks used to define the HTTP response headers added to the response. Seeresponse_headerbelow for details.
- response_code int
- The HTTP status code to return to the client.
- custom_response_ strbody_ key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- response_headers Sequence[WebAcl Default Action Block Custom Response Response Header] 
- The response_headerblocks used to define the HTTP response headers added to the response. Seeresponse_headerbelow for details.
- responseCode Number
- The HTTP status code to return to the client.
- customResponse StringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- responseHeaders List<Property Map>
- The response_headerblocks used to define the HTTP response headers added to the response. Seeresponse_headerbelow for details.
WebAclDefaultActionBlockCustomResponseResponseHeader, WebAclDefaultActionBlockCustomResponseResponseHeaderArgs                  
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
- name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value string
- Value of the custom header.
- name str
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value str
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
WebAclRule, WebAclRuleArgs      
- Name string
- Friendly name of the rule. Note that the provider assumes that rules with names matching this pattern, ^ShieldMitigationRuleGroup_<account-id>_<web-acl-guid>_.*, are AWS-added for automatic application layer DDoS mitigation activities. Such rules will be ignored by the provider unless you explicitly include them in your configuration (for example, by using the AWS CLI to discover their properties and creating matching configuration). However, since these rules are owned and managed by AWS, you may get permission errors.
- Priority int
- If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rulesin order based on the value ofpriority. AWS WAF processes rules with lower priority first.
- Statement
WebAcl Rule Statement 
- The AWS WAF processing statement for the rule, for example byte_match_statementorgeo_match_statement. Seestatementbelow for details.
- VisibilityConfig WebAcl Rule Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_configbelow for details.
- Action
WebAcl Rule Action 
- Action that AWS WAF should take on a web request when it matches the rule's statement. This is used only for rules whose statements do not reference a rule group. See actionfor details.
- CaptchaConfig WebAcl Rule Captcha Config 
- Specifies how AWS WAF should handle CAPTCHA evaluations. See captcha_configbelow for details.
- ChallengeConfig WebAcl Rule Challenge Config 
- Specifies how AWS WAF should handle Challenge evaluations on the rule level. See challenge_configbelow for details.
- OverrideAction WebAcl Rule Override Action 
- Override action to apply to the rules in a rule group. Used only for rule statements that reference a rule group, like rule_group_reference_statementandmanaged_rule_group_statement. Seeoverride_actionbelow for details.
- RuleLabels List<WebAcl Rule Rule Label> 
- Labels to apply to web requests that match the rule match statement. See rule_labelbelow for details.
- Name string
- Friendly name of the rule. Note that the provider assumes that rules with names matching this pattern, ^ShieldMitigationRuleGroup_<account-id>_<web-acl-guid>_.*, are AWS-added for automatic application layer DDoS mitigation activities. Such rules will be ignored by the provider unless you explicitly include them in your configuration (for example, by using the AWS CLI to discover their properties and creating matching configuration). However, since these rules are owned and managed by AWS, you may get permission errors.
- Priority int
- If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rulesin order based on the value ofpriority. AWS WAF processes rules with lower priority first.
- Statement
WebAcl Rule Statement 
- The AWS WAF processing statement for the rule, for example byte_match_statementorgeo_match_statement. Seestatementbelow for details.
- VisibilityConfig WebAcl Rule Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_configbelow for details.
- Action
WebAcl Rule Action 
- Action that AWS WAF should take on a web request when it matches the rule's statement. This is used only for rules whose statements do not reference a rule group. See actionfor details.
- CaptchaConfig WebAcl Rule Captcha Config 
- Specifies how AWS WAF should handle CAPTCHA evaluations. See captcha_configbelow for details.
- ChallengeConfig WebAcl Rule Challenge Config 
- Specifies how AWS WAF should handle Challenge evaluations on the rule level. See challenge_configbelow for details.
- OverrideAction WebAcl Rule Override Action 
- Override action to apply to the rules in a rule group. Used only for rule statements that reference a rule group, like rule_group_reference_statementandmanaged_rule_group_statement. Seeoverride_actionbelow for details.
- RuleLabels []WebAcl Rule Rule Label 
- Labels to apply to web requests that match the rule match statement. See rule_labelbelow for details.
- name String
- Friendly name of the rule. Note that the provider assumes that rules with names matching this pattern, ^ShieldMitigationRuleGroup_<account-id>_<web-acl-guid>_.*, are AWS-added for automatic application layer DDoS mitigation activities. Such rules will be ignored by the provider unless you explicitly include them in your configuration (for example, by using the AWS CLI to discover their properties and creating matching configuration). However, since these rules are owned and managed by AWS, you may get permission errors.
- priority Integer
- If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rulesin order based on the value ofpriority. AWS WAF processes rules with lower priority first.
- statement
WebAcl Rule Statement 
- The AWS WAF processing statement for the rule, for example byte_match_statementorgeo_match_statement. Seestatementbelow for details.
- visibilityConfig WebAcl Rule Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_configbelow for details.
- action
WebAcl Rule Action 
- Action that AWS WAF should take on a web request when it matches the rule's statement. This is used only for rules whose statements do not reference a rule group. See actionfor details.
- captchaConfig WebAcl Rule Captcha Config 
- Specifies how AWS WAF should handle CAPTCHA evaluations. See captcha_configbelow for details.
- challengeConfig WebAcl Rule Challenge Config 
- Specifies how AWS WAF should handle Challenge evaluations on the rule level. See challenge_configbelow for details.
- overrideAction WebAcl Rule Override Action 
- Override action to apply to the rules in a rule group. Used only for rule statements that reference a rule group, like rule_group_reference_statementandmanaged_rule_group_statement. Seeoverride_actionbelow for details.
- ruleLabels List<WebAcl Rule Rule Label> 
- Labels to apply to web requests that match the rule match statement. See rule_labelbelow for details.
- name string
- Friendly name of the rule. Note that the provider assumes that rules with names matching this pattern, ^ShieldMitigationRuleGroup_<account-id>_<web-acl-guid>_.*, are AWS-added for automatic application layer DDoS mitigation activities. Such rules will be ignored by the provider unless you explicitly include them in your configuration (for example, by using the AWS CLI to discover their properties and creating matching configuration). However, since these rules are owned and managed by AWS, you may get permission errors.
- priority number
- If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rulesin order based on the value ofpriority. AWS WAF processes rules with lower priority first.
- statement
WebAcl Rule Statement 
- The AWS WAF processing statement for the rule, for example byte_match_statementorgeo_match_statement. Seestatementbelow for details.
- visibilityConfig WebAcl Rule Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_configbelow for details.
- action
WebAcl Rule Action 
- Action that AWS WAF should take on a web request when it matches the rule's statement. This is used only for rules whose statements do not reference a rule group. See actionfor details.
- captchaConfig WebAcl Rule Captcha Config 
- Specifies how AWS WAF should handle CAPTCHA evaluations. See captcha_configbelow for details.
- challengeConfig WebAcl Rule Challenge Config 
- Specifies how AWS WAF should handle Challenge evaluations on the rule level. See challenge_configbelow for details.
- overrideAction WebAcl Rule Override Action 
- Override action to apply to the rules in a rule group. Used only for rule statements that reference a rule group, like rule_group_reference_statementandmanaged_rule_group_statement. Seeoverride_actionbelow for details.
- ruleLabels WebAcl Rule Rule Label[] 
- Labels to apply to web requests that match the rule match statement. See rule_labelbelow for details.
- name str
- Friendly name of the rule. Note that the provider assumes that rules with names matching this pattern, ^ShieldMitigationRuleGroup_<account-id>_<web-acl-guid>_.*, are AWS-added for automatic application layer DDoS mitigation activities. Such rules will be ignored by the provider unless you explicitly include them in your configuration (for example, by using the AWS CLI to discover their properties and creating matching configuration). However, since these rules are owned and managed by AWS, you may get permission errors.
- priority int
- If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rulesin order based on the value ofpriority. AWS WAF processes rules with lower priority first.
- statement
WebAcl Rule Statement 
- The AWS WAF processing statement for the rule, for example byte_match_statementorgeo_match_statement. Seestatementbelow for details.
- visibility_config WebAcl Rule Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_configbelow for details.
- action
WebAcl Rule Action 
- Action that AWS WAF should take on a web request when it matches the rule's statement. This is used only for rules whose statements do not reference a rule group. See actionfor details.
- captcha_config WebAcl Rule Captcha Config 
- Specifies how AWS WAF should handle CAPTCHA evaluations. See captcha_configbelow for details.
- challenge_config WebAcl Rule Challenge Config 
- Specifies how AWS WAF should handle Challenge evaluations on the rule level. See challenge_configbelow for details.
- override_action WebAcl Rule Override Action 
- Override action to apply to the rules in a rule group. Used only for rule statements that reference a rule group, like rule_group_reference_statementandmanaged_rule_group_statement. Seeoverride_actionbelow for details.
- rule_labels Sequence[WebAcl Rule Rule Label] 
- Labels to apply to web requests that match the rule match statement. See rule_labelbelow for details.
- name String
- Friendly name of the rule. Note that the provider assumes that rules with names matching this pattern, ^ShieldMitigationRuleGroup_<account-id>_<web-acl-guid>_.*, are AWS-added for automatic application layer DDoS mitigation activities. Such rules will be ignored by the provider unless you explicitly include them in your configuration (for example, by using the AWS CLI to discover their properties and creating matching configuration). However, since these rules are owned and managed by AWS, you may get permission errors.
- priority Number
- If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rulesin order based on the value ofpriority. AWS WAF processes rules with lower priority first.
- statement Property Map
- The AWS WAF processing statement for the rule, for example byte_match_statementorgeo_match_statement. Seestatementbelow for details.
- visibilityConfig Property Map
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_configbelow for details.
- action Property Map
- Action that AWS WAF should take on a web request when it matches the rule's statement. This is used only for rules whose statements do not reference a rule group. See actionfor details.
- captchaConfig Property Map
- Specifies how AWS WAF should handle CAPTCHA evaluations. See captcha_configbelow for details.
- challengeConfig Property Map
- Specifies how AWS WAF should handle Challenge evaluations on the rule level. See challenge_configbelow for details.
- overrideAction Property Map
- Override action to apply to the rules in a rule group. Used only for rule statements that reference a rule group, like rule_group_reference_statementandmanaged_rule_group_statement. Seeoverride_actionbelow for details.
- ruleLabels List<Property Map>
- Labels to apply to web requests that match the rule match statement. See rule_labelbelow for details.
WebAclRuleAction, WebAclRuleActionArgs        
- Allow
WebAcl Rule Action Allow 
- Instructs AWS WAF to allow the web request. See allowbelow for details.
- Block
WebAcl Rule Action Block 
- Instructs AWS WAF to block the web request. See blockbelow for details.
- Captcha
WebAcl Rule Action Captcha 
- Instructs AWS WAF to run a Captcha check against the web request. See captchabelow for details.
- Challenge
WebAcl Rule Action Challenge 
- Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See challengebelow for details.
- Count
WebAcl Rule Action Count 
- Instructs AWS WAF to count the web request and allow it. See countbelow for details.
- Allow
WebAcl Rule Action Allow 
- Instructs AWS WAF to allow the web request. See allowbelow for details.
- Block
WebAcl Rule Action Block 
- Instructs AWS WAF to block the web request. See blockbelow for details.
- Captcha
WebAcl Rule Action Captcha 
- Instructs AWS WAF to run a Captcha check against the web request. See captchabelow for details.
- Challenge
WebAcl Rule Action Challenge 
- Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See challengebelow for details.
- Count
WebAcl Rule Action Count 
- Instructs AWS WAF to count the web request and allow it. See countbelow for details.
- allow
WebAcl Rule Action Allow 
- Instructs AWS WAF to allow the web request. See allowbelow for details.
- block
WebAcl Rule Action Block 
- Instructs AWS WAF to block the web request. See blockbelow for details.
- captcha
WebAcl Rule Action Captcha 
- Instructs AWS WAF to run a Captcha check against the web request. See captchabelow for details.
- challenge
WebAcl Rule Action Challenge 
- Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See challengebelow for details.
- count
WebAcl Rule Action Count 
- Instructs AWS WAF to count the web request and allow it. See countbelow for details.
- allow
WebAcl Rule Action Allow 
- Instructs AWS WAF to allow the web request. See allowbelow for details.
- block
WebAcl Rule Action Block 
- Instructs AWS WAF to block the web request. See blockbelow for details.
- captcha
WebAcl Rule Action Captcha 
- Instructs AWS WAF to run a Captcha check against the web request. See captchabelow for details.
- challenge
WebAcl Rule Action Challenge 
- Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See challengebelow for details.
- count
WebAcl Rule Action Count 
- Instructs AWS WAF to count the web request and allow it. See countbelow for details.
- allow
WebAcl Rule Action Allow 
- Instructs AWS WAF to allow the web request. See allowbelow for details.
- block
WebAcl Rule Action Block 
- Instructs AWS WAF to block the web request. See blockbelow for details.
- captcha
WebAcl Rule Action Captcha 
- Instructs AWS WAF to run a Captcha check against the web request. See captchabelow for details.
- challenge
WebAcl Rule Action Challenge 
- Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See challengebelow for details.
- count
WebAcl Rule Action Count 
- Instructs AWS WAF to count the web request and allow it. See countbelow for details.
- allow Property Map
- Instructs AWS WAF to allow the web request. See allowbelow for details.
- block Property Map
- Instructs AWS WAF to block the web request. See blockbelow for details.
- captcha Property Map
- Instructs AWS WAF to run a Captcha check against the web request. See captchabelow for details.
- challenge Property Map
- Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See challengebelow for details.
- count Property Map
- Instructs AWS WAF to count the web request and allow it. See countbelow for details.
WebAclRuleActionAllow, WebAclRuleActionAllowArgs          
- CustomRequest WebHandling Acl Rule Action Allow Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- CustomRequest WebHandling Acl Rule Action Allow Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest WebHandling Acl Rule Action Allow Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest WebHandling Acl Rule Action Allow Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- custom_request_ Webhandling Acl Rule Action Allow Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest Property MapHandling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
WebAclRuleActionAllowCustomRequestHandling, WebAclRuleActionAllowCustomRequestHandlingArgs                
- InsertHeaders List<WebAcl Rule Action Allow Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- InsertHeaders []WebAcl Rule Action Allow Custom Request Handling Insert Header 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders List<WebAcl Rule Action Allow Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders WebAcl Rule Action Allow Custom Request Handling Insert Header[] 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insert_headers Sequence[WebAcl Rule Action Allow Custom Request Handling Insert Header] 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders List<Property Map>
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
WebAclRuleActionAllowCustomRequestHandlingInsertHeader, WebAclRuleActionAllowCustomRequestHandlingInsertHeaderArgs                    
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
- name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value string
- Value of the custom header.
- name str
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value str
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
WebAclRuleActionBlock, WebAclRuleActionBlockArgs          
- CustomResponse WebAcl Rule Action Block Custom Response 
- Defines a custom response for the web request. See custom_responsebelow for details.
- CustomResponse WebAcl Rule Action Block Custom Response 
- Defines a custom response for the web request. See custom_responsebelow for details.
- customResponse WebAcl Rule Action Block Custom Response 
- Defines a custom response for the web request. See custom_responsebelow for details.
- customResponse WebAcl Rule Action Block Custom Response 
- Defines a custom response for the web request. See custom_responsebelow for details.
- custom_response WebAcl Rule Action Block Custom Response 
- Defines a custom response for the web request. See custom_responsebelow for details.
- customResponse Property Map
- Defines a custom response for the web request. See custom_responsebelow for details.
WebAclRuleActionBlockCustomResponse, WebAclRuleActionBlockCustomResponseArgs              
- ResponseCode int
- The HTTP status code to return to the client.
- CustomResponse stringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- ResponseHeaders List<WebAcl Rule Action Block Custom Response Response Header> 
- The response_headerblocks used to define the HTTP response headers added to the response. Seeresponse_headerbelow for details.
- ResponseCode int
- The HTTP status code to return to the client.
- CustomResponse stringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- ResponseHeaders []WebAcl Rule Action Block Custom Response Response Header 
- The response_headerblocks used to define the HTTP response headers added to the response. Seeresponse_headerbelow for details.
- responseCode Integer
- The HTTP status code to return to the client.
- customResponse StringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- responseHeaders List<WebAcl Rule Action Block Custom Response Response Header> 
- The response_headerblocks used to define the HTTP response headers added to the response. Seeresponse_headerbelow for details.
- responseCode number
- The HTTP status code to return to the client.
- customResponse stringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- responseHeaders WebAcl Rule Action Block Custom Response Response Header[] 
- The response_headerblocks used to define the HTTP response headers added to the response. Seeresponse_headerbelow for details.
- response_code int
- The HTTP status code to return to the client.
- custom_response_ strbody_ key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- response_headers Sequence[WebAcl Rule Action Block Custom Response Response Header] 
- The response_headerblocks used to define the HTTP response headers added to the response. Seeresponse_headerbelow for details.
- responseCode Number
- The HTTP status code to return to the client.
- customResponse StringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- responseHeaders List<Property Map>
- The response_headerblocks used to define the HTTP response headers added to the response. Seeresponse_headerbelow for details.
WebAclRuleActionBlockCustomResponseResponseHeader, WebAclRuleActionBlockCustomResponseResponseHeaderArgs                  
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
- name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value string
- Value of the custom header.
- name str
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value str
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
WebAclRuleActionCaptcha, WebAclRuleActionCaptchaArgs          
- CustomRequest WebHandling Acl Rule Action Captcha Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- CustomRequest WebHandling Acl Rule Action Captcha Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest WebHandling Acl Rule Action Captcha Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest WebHandling Acl Rule Action Captcha Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- custom_request_ Webhandling Acl Rule Action Captcha Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest Property MapHandling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
WebAclRuleActionCaptchaCustomRequestHandling, WebAclRuleActionCaptchaCustomRequestHandlingArgs                
- InsertHeaders List<WebAcl Rule Action Captcha Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- InsertHeaders []WebAcl Rule Action Captcha Custom Request Handling Insert Header 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders List<WebAcl Rule Action Captcha Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders WebAcl Rule Action Captcha Custom Request Handling Insert Header[] 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insert_headers Sequence[WebAcl Rule Action Captcha Custom Request Handling Insert Header] 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders List<Property Map>
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
WebAclRuleActionCaptchaCustomRequestHandlingInsertHeader, WebAclRuleActionCaptchaCustomRequestHandlingInsertHeaderArgs                    
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
- name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value string
- Value of the custom header.
- name str
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value str
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
WebAclRuleActionChallenge, WebAclRuleActionChallengeArgs          
- CustomRequest WebHandling Acl Rule Action Challenge Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- CustomRequest WebHandling Acl Rule Action Challenge Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest WebHandling Acl Rule Action Challenge Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest WebHandling Acl Rule Action Challenge Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- custom_request_ Webhandling Acl Rule Action Challenge Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest Property MapHandling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
WebAclRuleActionChallengeCustomRequestHandling, WebAclRuleActionChallengeCustomRequestHandlingArgs                
- InsertHeaders List<WebAcl Rule Action Challenge Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- InsertHeaders []WebAcl Rule Action Challenge Custom Request Handling Insert Header 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders List<WebAcl Rule Action Challenge Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders WebAcl Rule Action Challenge Custom Request Handling Insert Header[] 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insert_headers Sequence[WebAcl Rule Action Challenge Custom Request Handling Insert Header] 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders List<Property Map>
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
WebAclRuleActionChallengeCustomRequestHandlingInsertHeader, WebAclRuleActionChallengeCustomRequestHandlingInsertHeaderArgs                    
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
- name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value string
- Value of the custom header.
- name str
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value str
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
WebAclRuleActionCount, WebAclRuleActionCountArgs          
- CustomRequest WebHandling Acl Rule Action Count Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- CustomRequest WebHandling Acl Rule Action Count Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest WebHandling Acl Rule Action Count Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest WebHandling Acl Rule Action Count Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- custom_request_ Webhandling Acl Rule Action Count Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest Property MapHandling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
WebAclRuleActionCountCustomRequestHandling, WebAclRuleActionCountCustomRequestHandlingArgs                
- InsertHeaders List<WebAcl Rule Action Count Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- InsertHeaders []WebAcl Rule Action Count Custom Request Handling Insert Header 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders List<WebAcl Rule Action Count Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders WebAcl Rule Action Count Custom Request Handling Insert Header[] 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insert_headers Sequence[WebAcl Rule Action Count Custom Request Handling Insert Header] 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders List<Property Map>
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
WebAclRuleActionCountCustomRequestHandlingInsertHeader, WebAclRuleActionCountCustomRequestHandlingInsertHeaderArgs                    
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
- name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value string
- Value of the custom header.
- name str
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value str
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
WebAclRuleCaptchaConfig, WebAclRuleCaptchaConfigArgs          
- ImmunityTime WebProperty Acl Rule Captcha Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- ImmunityTime WebProperty Acl Rule Captcha Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- immunityTime WebProperty Acl Rule Captcha Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- immunityTime WebProperty Acl Rule Captcha Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- immunity_time_ Webproperty Acl Rule Captcha Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- immunityTime Property MapProperty 
- Defines custom immunity time. See immunity_time_propertybelow for details.
WebAclRuleCaptchaConfigImmunityTimeProperty, WebAclRuleCaptchaConfigImmunityTimePropertyArgs                
- ImmunityTime int
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- ImmunityTime int
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunityTime Integer
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunityTime number
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunity_time int
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunityTime Number
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
WebAclRuleChallengeConfig, WebAclRuleChallengeConfigArgs          
- ImmunityTime WebProperty Acl Rule Challenge Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- ImmunityTime WebProperty Acl Rule Challenge Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- immunityTime WebProperty Acl Rule Challenge Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- immunityTime WebProperty Acl Rule Challenge Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- immunity_time_ Webproperty Acl Rule Challenge Config Immunity Time Property 
- Defines custom immunity time. See immunity_time_propertybelow for details.
- immunityTime Property MapProperty 
- Defines custom immunity time. See immunity_time_propertybelow for details.
WebAclRuleChallengeConfigImmunityTimeProperty, WebAclRuleChallengeConfigImmunityTimePropertyArgs                
- ImmunityTime int
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- ImmunityTime int
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunityTime Integer
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunityTime number
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunity_time int
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunityTime Number
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
WebAclRuleOverrideAction, WebAclRuleOverrideActionArgs          
- Count
WebAcl Rule Override Action Count 
- Override the rule action setting to count (i.e., only count matches). Configured as an empty block {}.
- None
WebAcl Rule Override Action None 
- Don't override the rule action setting. Configured as an empty block {}.
- Count
WebAcl Rule Override Action Count 
- Override the rule action setting to count (i.e., only count matches). Configured as an empty block {}.
- None
WebAcl Rule Override Action None 
- Don't override the rule action setting. Configured as an empty block {}.
- count
WebAcl Rule Override Action Count 
- Override the rule action setting to count (i.e., only count matches). Configured as an empty block {}.
- none
WebAcl Rule Override Action None 
- Don't override the rule action setting. Configured as an empty block {}.
- count
WebAcl Rule Override Action Count 
- Override the rule action setting to count (i.e., only count matches). Configured as an empty block {}.
- none
WebAcl Rule Override Action None 
- Don't override the rule action setting. Configured as an empty block {}.
- count
WebAcl Rule Override Action Count 
- Override the rule action setting to count (i.e., only count matches). Configured as an empty block {}.
- none
WebAcl Rule Override Action None 
- Don't override the rule action setting. Configured as an empty block {}.
- count Property Map
- Override the rule action setting to count (i.e., only count matches). Configured as an empty block {}.
- none Property Map
- Don't override the rule action setting. Configured as an empty block {}.
WebAclRuleRuleLabel, WebAclRuleRuleLabelArgs          
- Name string
- Label string.
- Name string
- Label string.
- name String
- Label string.
- name string
- Label string.
- name str
- Label string.
- name String
- Label string.
WebAclRuleStatement, WebAclRuleStatementArgs        
- AndStatement WebAcl Rule Statement And Statement 
- Logical rule statement used to combine other rule statements with AND logic. See and_statementbelow for details.
- ByteMatch WebStatement Acl Rule Statement Byte Match Statement 
- Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statementbelow for details.
- GeoMatch WebStatement Acl Rule Statement Geo Match Statement 
- Rule statement used to identify web requests based on country of origin. See geo_match_statementbelow for details.
- IpSet WebReference Statement Acl Rule Statement Ip Set Reference Statement 
- Rule statement used to detect web requests coming from particular IP addresses or address ranges. See ip_set_reference_statementbelow for details.
- LabelMatch WebStatement Acl Rule Statement Label Match Statement 
- Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statementbelow for details.
- ManagedRule WebGroup Statement Acl Rule Statement Managed Rule Group Statement 
- Rule statement used to run the rules that are defined in a managed rule group. This statement can not be nested. See managed_rule_group_statementbelow for details.
- NotStatement WebAcl Rule Statement Not Statement 
- Logical rule statement used to negate the results of another rule statement. See not_statementbelow for details.
- OrStatement WebAcl Rule Statement Or Statement 
- Logical rule statement used to combine other rule statements with OR logic. See or_statementbelow for details.
- RateBased WebStatement Acl Rule Statement Rate Based Statement 
- Rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any5-minutetime span. This statement can not be nested. Seerate_based_statementbelow for details.
- RegexMatch WebStatement Acl Rule Statement Regex Match Statement 
- Rule statement used to search web request components for a match against a single regular expression. See regex_match_statementbelow for details.
- RegexPattern WebSet Reference Statement Acl Rule Statement Regex Pattern Set Reference Statement 
- Rule statement used to search web request components for matches with regular expressions. See regex_pattern_set_reference_statementbelow for details.
- RuleGroup WebReference Statement Acl Rule Statement Rule Group Reference Statement 
- Rule statement used to run the rules that are defined in an WAFv2 Rule Group. See rule_group_reference_statementbelow for details.
- SizeConstraint WebStatement Acl Rule Statement Size Constraint Statement 
- Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statementbelow for more details.
- SqliMatch WebStatement Acl Rule Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statementbelow for details.
- XssMatch WebStatement Acl Rule Statement Xss Match Statement 
- Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statementbelow for details.
- AndStatement WebAcl Rule Statement And Statement 
- Logical rule statement used to combine other rule statements with AND logic. See and_statementbelow for details.
- ByteMatch WebStatement Acl Rule Statement Byte Match Statement 
- Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statementbelow for details.
- GeoMatch WebStatement Acl Rule Statement Geo Match Statement 
- Rule statement used to identify web requests based on country of origin. See geo_match_statementbelow for details.
- IpSet WebReference Statement Acl Rule Statement Ip Set Reference Statement 
- Rule statement used to detect web requests coming from particular IP addresses or address ranges. See ip_set_reference_statementbelow for details.
- LabelMatch WebStatement Acl Rule Statement Label Match Statement 
- Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statementbelow for details.
- ManagedRule WebGroup Statement Acl Rule Statement Managed Rule Group Statement 
- Rule statement used to run the rules that are defined in a managed rule group. This statement can not be nested. See managed_rule_group_statementbelow for details.
- NotStatement WebAcl Rule Statement Not Statement 
- Logical rule statement used to negate the results of another rule statement. See not_statementbelow for details.
- OrStatement WebAcl Rule Statement Or Statement 
- Logical rule statement used to combine other rule statements with OR logic. See or_statementbelow for details.
- RateBased WebStatement Acl Rule Statement Rate Based Statement 
- Rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any5-minutetime span. This statement can not be nested. Seerate_based_statementbelow for details.
- RegexMatch WebStatement Acl Rule Statement Regex Match Statement 
- Rule statement used to search web request components for a match against a single regular expression. See regex_match_statementbelow for details.
- RegexPattern WebSet Reference Statement Acl Rule Statement Regex Pattern Set Reference Statement 
- Rule statement used to search web request components for matches with regular expressions. See regex_pattern_set_reference_statementbelow for details.
- RuleGroup WebReference Statement Acl Rule Statement Rule Group Reference Statement 
- Rule statement used to run the rules that are defined in an WAFv2 Rule Group. See rule_group_reference_statementbelow for details.
- SizeConstraint WebStatement Acl Rule Statement Size Constraint Statement 
- Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statementbelow for more details.
- SqliMatch WebStatement Acl Rule Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statementbelow for details.
- XssMatch WebStatement Acl Rule Statement Xss Match Statement 
- Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statementbelow for details.
- andStatement WebAcl Rule Statement And Statement 
- Logical rule statement used to combine other rule statements with AND logic. See and_statementbelow for details.
- byteMatch WebStatement Acl Rule Statement Byte Match Statement 
- Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statementbelow for details.
- geoMatch WebStatement Acl Rule Statement Geo Match Statement 
- Rule statement used to identify web requests based on country of origin. See geo_match_statementbelow for details.
- ipSet WebReference Statement Acl Rule Statement Ip Set Reference Statement 
- Rule statement used to detect web requests coming from particular IP addresses or address ranges. See ip_set_reference_statementbelow for details.
- labelMatch WebStatement Acl Rule Statement Label Match Statement 
- Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statementbelow for details.
- managedRule WebGroup Statement Acl Rule Statement Managed Rule Group Statement 
- Rule statement used to run the rules that are defined in a managed rule group. This statement can not be nested. See managed_rule_group_statementbelow for details.
- notStatement WebAcl Rule Statement Not Statement 
- Logical rule statement used to negate the results of another rule statement. See not_statementbelow for details.
- orStatement WebAcl Rule Statement Or Statement 
- Logical rule statement used to combine other rule statements with OR logic. See or_statementbelow for details.
- rateBased WebStatement Acl Rule Statement Rate Based Statement 
- Rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any5-minutetime span. This statement can not be nested. Seerate_based_statementbelow for details.
- regexMatch WebStatement Acl Rule Statement Regex Match Statement 
- Rule statement used to search web request components for a match against a single regular expression. See regex_match_statementbelow for details.
- regexPattern WebSet Reference Statement Acl Rule Statement Regex Pattern Set Reference Statement 
- Rule statement used to search web request components for matches with regular expressions. See regex_pattern_set_reference_statementbelow for details.
- ruleGroup WebReference Statement Acl Rule Statement Rule Group Reference Statement 
- Rule statement used to run the rules that are defined in an WAFv2 Rule Group. See rule_group_reference_statementbelow for details.
- sizeConstraint WebStatement Acl Rule Statement Size Constraint Statement 
- Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statementbelow for more details.
- sqliMatch WebStatement Acl Rule Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statementbelow for details.
- xssMatch WebStatement Acl Rule Statement Xss Match Statement 
- Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statementbelow for details.
- andStatement WebAcl Rule Statement And Statement 
- Logical rule statement used to combine other rule statements with AND logic. See and_statementbelow for details.
- byteMatch WebStatement Acl Rule Statement Byte Match Statement 
- Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statementbelow for details.
- geoMatch WebStatement Acl Rule Statement Geo Match Statement 
- Rule statement used to identify web requests based on country of origin. See geo_match_statementbelow for details.
- ipSet WebReference Statement Acl Rule Statement Ip Set Reference Statement 
- Rule statement used to detect web requests coming from particular IP addresses or address ranges. See ip_set_reference_statementbelow for details.
- labelMatch WebStatement Acl Rule Statement Label Match Statement 
- Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statementbelow for details.
- managedRule WebGroup Statement Acl Rule Statement Managed Rule Group Statement 
- Rule statement used to run the rules that are defined in a managed rule group. This statement can not be nested. See managed_rule_group_statementbelow for details.
- notStatement WebAcl Rule Statement Not Statement 
- Logical rule statement used to negate the results of another rule statement. See not_statementbelow for details.
- orStatement WebAcl Rule Statement Or Statement 
- Logical rule statement used to combine other rule statements with OR logic. See or_statementbelow for details.
- rateBased WebStatement Acl Rule Statement Rate Based Statement 
- Rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any5-minutetime span. This statement can not be nested. Seerate_based_statementbelow for details.
- regexMatch WebStatement Acl Rule Statement Regex Match Statement 
- Rule statement used to search web request components for a match against a single regular expression. See regex_match_statementbelow for details.
- regexPattern WebSet Reference Statement Acl Rule Statement Regex Pattern Set Reference Statement 
- Rule statement used to search web request components for matches with regular expressions. See regex_pattern_set_reference_statementbelow for details.
- ruleGroup WebReference Statement Acl Rule Statement Rule Group Reference Statement 
- Rule statement used to run the rules that are defined in an WAFv2 Rule Group. See rule_group_reference_statementbelow for details.
- sizeConstraint WebStatement Acl Rule Statement Size Constraint Statement 
- Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statementbelow for more details.
- sqliMatch WebStatement Acl Rule Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statementbelow for details.
- xssMatch WebStatement Acl Rule Statement Xss Match Statement 
- Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statementbelow for details.
- and_statement WebAcl Rule Statement And Statement 
- Logical rule statement used to combine other rule statements with AND logic. See and_statementbelow for details.
- byte_match_ Webstatement Acl Rule Statement Byte Match Statement 
- Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statementbelow for details.
- geo_match_ Webstatement Acl Rule Statement Geo Match Statement 
- Rule statement used to identify web requests based on country of origin. See geo_match_statementbelow for details.
- ip_set_ Webreference_ statement Acl Rule Statement Ip Set Reference Statement 
- Rule statement used to detect web requests coming from particular IP addresses or address ranges. See ip_set_reference_statementbelow for details.
- label_match_ Webstatement Acl Rule Statement Label Match Statement 
- Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statementbelow for details.
- managed_rule_ Webgroup_ statement Acl Rule Statement Managed Rule Group Statement 
- Rule statement used to run the rules that are defined in a managed rule group. This statement can not be nested. See managed_rule_group_statementbelow for details.
- not_statement WebAcl Rule Statement Not Statement 
- Logical rule statement used to negate the results of another rule statement. See not_statementbelow for details.
- or_statement WebAcl Rule Statement Or Statement 
- Logical rule statement used to combine other rule statements with OR logic. See or_statementbelow for details.
- rate_based_ Webstatement Acl Rule Statement Rate Based Statement 
- Rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any5-minutetime span. This statement can not be nested. Seerate_based_statementbelow for details.
- regex_match_ Webstatement Acl Rule Statement Regex Match Statement 
- Rule statement used to search web request components for a match against a single regular expression. See regex_match_statementbelow for details.
- regex_pattern_ Webset_ reference_ statement Acl Rule Statement Regex Pattern Set Reference Statement 
- Rule statement used to search web request components for matches with regular expressions. See regex_pattern_set_reference_statementbelow for details.
- rule_group_ Webreference_ statement Acl Rule Statement Rule Group Reference Statement 
- Rule statement used to run the rules that are defined in an WAFv2 Rule Group. See rule_group_reference_statementbelow for details.
- size_constraint_ Webstatement Acl Rule Statement Size Constraint Statement 
- Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statementbelow for more details.
- sqli_match_ Webstatement Acl Rule Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statementbelow for details.
- xss_match_ Webstatement Acl Rule Statement Xss Match Statement 
- Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statementbelow for details.
- andStatement Property Map
- Logical rule statement used to combine other rule statements with AND logic. See and_statementbelow for details.
- byteMatch Property MapStatement 
- Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statementbelow for details.
- geoMatch Property MapStatement 
- Rule statement used to identify web requests based on country of origin. See geo_match_statementbelow for details.
- ipSet Property MapReference Statement 
- Rule statement used to detect web requests coming from particular IP addresses or address ranges. See ip_set_reference_statementbelow for details.
- labelMatch Property MapStatement 
- Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statementbelow for details.
- managedRule Property MapGroup Statement 
- Rule statement used to run the rules that are defined in a managed rule group. This statement can not be nested. See managed_rule_group_statementbelow for details.
- notStatement Property Map
- Logical rule statement used to negate the results of another rule statement. See not_statementbelow for details.
- orStatement Property Map
- Logical rule statement used to combine other rule statements with OR logic. See or_statementbelow for details.
- rateBased Property MapStatement 
- Rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any5-minutetime span. This statement can not be nested. Seerate_based_statementbelow for details.
- regexMatch Property MapStatement 
- Rule statement used to search web request components for a match against a single regular expression. See regex_match_statementbelow for details.
- regexPattern Property MapSet Reference Statement 
- Rule statement used to search web request components for matches with regular expressions. See regex_pattern_set_reference_statementbelow for details.
- ruleGroup Property MapReference Statement 
- Rule statement used to run the rules that are defined in an WAFv2 Rule Group. See rule_group_reference_statementbelow for details.
- sizeConstraint Property MapStatement 
- Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statementbelow for more details.
- sqliMatch Property MapStatement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statementbelow for details.
- xssMatch Property MapStatement 
- Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statementbelow for details.
WebAclRuleStatementAndStatement, WebAclRuleStatementAndStatementArgs            
- Statements
List<WebAcl Rule Statement> 
- The statements to combine.
- Statements
[]WebAcl Rule Statement 
- The statements to combine.
- statements
List<WebAcl Rule Statement> 
- The statements to combine.
- statements
WebAcl Rule Statement[] 
- The statements to combine.
- statements
Sequence[WebAcl Rule Statement] 
- The statements to combine.
- statements List<Property Map>
- The statements to combine.
WebAclRuleStatementByteMatchStatement, WebAclRuleStatementByteMatchStatementArgs              
- PositionalConstraint string
- Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- SearchString string
- String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- TextTransformations List<WebAcl Rule Statement Byte Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- FieldTo WebMatch Acl Rule Statement Byte Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- PositionalConstraint string
- Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- SearchString string
- String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- TextTransformations []WebAcl Rule Statement Byte Match Statement Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- FieldTo WebMatch Acl Rule Statement Byte Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- positionalConstraint String
- Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- searchString String
- String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- textTransformations List<WebAcl Rule Statement Byte Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo WebMatch Acl Rule Statement Byte Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- positionalConstraint string
- Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- searchString string
- String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- textTransformations WebAcl Rule Statement Byte Match Statement Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo WebMatch Acl Rule Statement Byte Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- positional_constraint str
- Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- search_string str
- String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- text_transformations Sequence[WebAcl Rule Statement Byte Match Statement Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- field_to_ Webmatch Acl Rule Statement Byte Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- positionalConstraint String
- Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- searchString String
- String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo Property MapMatch 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
WebAclRuleStatementByteMatchStatementFieldToMatch, WebAclRuleStatementByteMatchStatementFieldToMatchArgs                    
- AllQuery WebArguments Acl Rule Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
WebAcl Rule Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- HeaderOrders List<WebAcl Rule Statement Byte Match Statement Field To Match Header Order> 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- Headers
List<WebAcl Rule Statement Byte Match Statement Field To Match Header> 
- Inspect the request headers. See headersbelow for details.
- Ja3Fingerprint
WebAcl Rule Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
WebAcl Rule Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody WebAcl Rule Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- Method
WebAcl Rule Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString WebAcl Rule Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader WebAcl Rule Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- SingleQuery WebArgument Acl Rule Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- UriPath WebAcl Rule Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- AllQuery WebArguments Acl Rule Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
WebAcl Rule Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- HeaderOrders []WebAcl Rule Statement Byte Match Statement Field To Match Header Order 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- Headers
[]WebAcl Rule Statement Byte Match Statement Field To Match Header 
- Inspect the request headers. See headersbelow for details.
- Ja3Fingerprint
WebAcl Rule Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
WebAcl Rule Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody WebAcl Rule Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- Method
WebAcl Rule Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString WebAcl Rule Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader WebAcl Rule Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- SingleQuery WebArgument Acl Rule Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- UriPath WebAcl Rule Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery WebArguments Acl Rule Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders List<WebAcl Rule Statement Byte Match Statement Field To Match Header Order> 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
List<WebAcl Rule Statement Byte Match Statement Field To Match Header> 
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint
WebAcl Rule Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
WebAcl Rule Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody WebAcl Rule Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString WebAcl Rule Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader WebAcl Rule Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- singleQuery WebArgument Acl Rule Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath WebAcl Rule Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery WebArguments Acl Rule Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders WebAcl Rule Statement Byte Match Statement Field To Match Header Order[] 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
WebAcl Rule Statement Byte Match Statement Field To Match Header[] 
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint
WebAcl Rule Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
WebAcl Rule Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody WebAcl Rule Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString WebAcl Rule Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader WebAcl Rule Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- singleQuery WebArgument Acl Rule Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath WebAcl Rule Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- all_query_ Webarguments Acl Rule Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- header_orders Sequence[WebAcl Rule Statement Byte Match Statement Field To Match Header Order] 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
Sequence[WebAcl Rule Statement Byte Match Statement Field To Match Header] 
- Inspect the request headers. See headersbelow for details.
- ja3_fingerprint WebAcl Rule Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4_fingerprint WebAcl Rule Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- json_body WebAcl Rule Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- query_string WebAcl Rule Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- single_header WebAcl Rule Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- single_query_ Webargument Acl Rule Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uri_path WebAcl Rule Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery Property MapArguments 
- Inspect all query arguments.
- body Property Map
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- Property Map
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders List<Property Map>
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers List<Property Map>
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody Property Map
- Inspect the request body as JSON. See json_bodyfor details.
- method Property Map
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString Property Map
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader Property Map
- Inspect a single header. See single_headerbelow for details.
- singleQuery Property MapArgument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath Property Map
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
WebAclRuleStatementByteMatchStatementFieldToMatchBody, WebAclRuleStatementByteMatchStatementFieldToMatchBodyArgs                      
- OversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- OversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling String
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversize_handling str
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling String
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
WebAclRuleStatementByteMatchStatementFieldToMatchCookies, WebAclRuleStatementByteMatchStatementFieldToMatchCookiesArgs                      
- MatchPatterns List<WebAcl Rule Statement Byte Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- MatchPatterns []WebAcl Rule Statement Byte Match Statement Field To Match Cookies Match Pattern 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns List<WebAcl Rule Statement Byte Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns WebAcl Rule Statement Byte Match Statement Field To Match Cookies Match Pattern[] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- match_patterns Sequence[WebAcl Rule Statement Byte Match Statement Field To Match Cookies Match Pattern] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- match_scope str
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversize_handling str
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns List<Property Map>
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
WebAclRuleStatementByteMatchStatementFieldToMatchCookiesMatchPattern, WebAclRuleStatementByteMatchStatementFieldToMatchCookiesMatchPatternArgs                          
- All
WebAcl Rule Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<string>
- List<string>
- All
WebAcl Rule Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- []string
- []string
- all
WebAcl Rule Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
- all
WebAcl Rule Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- string[]
- string[]
- all
WebAcl Rule Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- Sequence[str]
- Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
WebAclRuleStatementByteMatchStatementFieldToMatchHeader, WebAclRuleStatementByteMatchStatementFieldToMatchHeaderArgs                      
- MatchPattern WebAcl Rule Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- MatchPattern WebAcl Rule Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern WebAcl Rule Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern WebAcl Rule Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- match_pattern WebAcl Rule Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- match_scope str
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern Property Map
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
WebAclRuleStatementByteMatchStatementFieldToMatchHeaderMatchPattern, WebAclRuleStatementByteMatchStatementFieldToMatchHeaderMatchPatternArgs                          
- All
WebAcl Rule Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders List<string>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders List<string>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- All
WebAcl Rule Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders []string
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders []string
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders string[]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders string[]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excluded_headers Sequence[str]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- included_headers Sequence[str]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
WebAclRuleStatementByteMatchStatementFieldToMatchHeaderOrder, WebAclRuleStatementByteMatchStatementFieldToMatchHeaderOrderArgs                        
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
WebAclRuleStatementByteMatchStatementFieldToMatchJa3Fingerprint, WebAclRuleStatementByteMatchStatementFieldToMatchJa3FingerprintArgs                      
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
WebAclRuleStatementByteMatchStatementFieldToMatchJa4Fingerprint, WebAclRuleStatementByteMatchStatementFieldToMatchJa4FingerprintArgs                      
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
WebAclRuleStatementByteMatchStatementFieldToMatchJsonBody, WebAclRuleStatementByteMatchStatementFieldToMatchJsonBodyArgs                        
- MatchPattern WebAcl Rule Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- MatchPattern WebAcl Rule Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern WebAcl Rule Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern WebAcl Rule Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- match_pattern WebAcl Rule Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- match_scope str
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalid_fallback_ strbehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversize_handling str
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern Property Map
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
WebAclRuleStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern, WebAclRuleStatementByteMatchStatementFieldToMatchJsonBodyMatchPatternArgs                            
- All
WebAcl Rule Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths List<string>
- All
WebAcl Rule Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths []string
- all
WebAcl Rule Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
- all
WebAcl Rule Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths string[]
- all
WebAcl Rule Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- included_paths Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
WebAclRuleStatementByteMatchStatementFieldToMatchSingleHeader, WebAclRuleStatementByteMatchStatementFieldToMatchSingleHeaderArgs                        
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
WebAclRuleStatementByteMatchStatementFieldToMatchSingleQueryArgument, WebAclRuleStatementByteMatchStatementFieldToMatchSingleQueryArgumentArgs                          
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
WebAclRuleStatementByteMatchStatementTextTransformation, WebAclRuleStatementByteMatchStatementTextTransformationArgs                  
- Priority int
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- Transformation to apply, please refer to the Text Transformation documentation for more details.
WebAclRuleStatementGeoMatchStatement, WebAclRuleStatementGeoMatchStatementArgs              
- CountryCodes List<string>
- Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- ForwardedIp WebConfig Acl Rule Statement Geo Match Statement Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_configbelow for details.
- CountryCodes []string
- Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- ForwardedIp WebConfig Acl Rule Statement Geo Match Statement Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_configbelow for details.
- countryCodes List<String>
- Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- forwardedIp WebConfig Acl Rule Statement Geo Match Statement Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_configbelow for details.
- countryCodes string[]
- Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- forwardedIp WebConfig Acl Rule Statement Geo Match Statement Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_configbelow for details.
- country_codes Sequence[str]
- Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- forwarded_ip_ Webconfig Acl Rule Statement Geo Match Statement Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_configbelow for details.
- countryCodes List<String>
- Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- forwardedIp Property MapConfig 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_configbelow for details.
WebAclRuleStatementGeoMatchStatementForwardedIpConfig, WebAclRuleStatementGeoMatchStatementForwardedIpConfigArgs                    
- FallbackBehavior string
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- HeaderName string
- Name of the HTTP header to use for the IP address.
- FallbackBehavior string
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- HeaderName string
- Name of the HTTP header to use for the IP address.
- fallbackBehavior String
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName String
- Name of the HTTP header to use for the IP address.
- fallbackBehavior string
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName string
- Name of the HTTP header to use for the IP address.
- fallback_behavior str
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- header_name str
- Name of the HTTP header to use for the IP address.
- fallbackBehavior String
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName String
- Name of the HTTP header to use for the IP address.
WebAclRuleStatementIpSetReferenceStatement, WebAclRuleStatementIpSetReferenceStatementArgs                
- Arn string
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- IpSet WebForwarded Ip Config Acl Rule Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_configbelow for more details.
- Arn string
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- IpSet WebForwarded Ip Config Acl Rule Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_configbelow for more details.
- arn String
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- ipSet WebForwarded Ip Config Acl Rule Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_configbelow for more details.
- arn string
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- ipSet WebForwarded Ip Config Acl Rule Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_configbelow for more details.
- arn str
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- ip_set_ Webforwarded_ ip_ config Acl Rule Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_configbelow for more details.
- arn String
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- ipSet Property MapForwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_configbelow for more details.
WebAclRuleStatementIpSetReferenceStatementIpSetForwardedIpConfig, WebAclRuleStatementIpSetReferenceStatementIpSetForwardedIpConfigArgs                          
- FallbackBehavior string
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- HeaderName string
- Name of the HTTP header to use for the IP address.
- Position string
- Position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- FallbackBehavior string
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- HeaderName string
- Name of the HTTP header to use for the IP address.
- Position string
- Position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- fallbackBehavior String
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName String
- Name of the HTTP header to use for the IP address.
- position String
- Position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- fallbackBehavior string
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName string
- Name of the HTTP header to use for the IP address.
- position string
- Position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- fallback_behavior str
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- header_name str
- Name of the HTTP header to use for the IP address.
- position str
- Position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- fallbackBehavior String
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName String
- Name of the HTTP header to use for the IP address.
- position String
- Position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
WebAclRuleStatementLabelMatchStatement, WebAclRuleStatementLabelMatchStatementArgs              
WebAclRuleStatementManagedRuleGroupStatement, WebAclRuleStatementManagedRuleGroupStatementArgs                
- Name string
- Name of the managed rule group.
- VendorName string
- Name of the managed rule group vendor.
- ManagedRule List<WebGroup Configs Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config> 
- Additional information that's used by a managed rule group. Only one rule attribute is allowed in each config. See managed_rule_group_configsfor more details
- RuleAction List<WebOverrides Acl Rule Statement Managed Rule Group Statement Rule Action Override> 
- Action settings to use in the place of the rule actions that are configured inside the rule group. You specify one override for each rule whose action you want to change. See rule_action_overridebelow for details.
- ScopeDown WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement 
- Narrows the scope of the statement to matching web requests. This can be any nestable statement, and you can nest statements at any level below this scope-down statement. See statementabove for details.
- Version string
- Version of the managed rule group. You can set Version_1.0orVersion_1.1etc. If you want to use the default version, do not set anything.
- Name string
- Name of the managed rule group.
- VendorName string
- Name of the managed rule group vendor.
- ManagedRule []WebGroup Configs Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config 
- Additional information that's used by a managed rule group. Only one rule attribute is allowed in each config. See managed_rule_group_configsfor more details
- RuleAction []WebOverrides Acl Rule Statement Managed Rule Group Statement Rule Action Override 
- Action settings to use in the place of the rule actions that are configured inside the rule group. You specify one override for each rule whose action you want to change. See rule_action_overridebelow for details.
- ScopeDown WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement 
- Narrows the scope of the statement to matching web requests. This can be any nestable statement, and you can nest statements at any level below this scope-down statement. See statementabove for details.
- Version string
- Version of the managed rule group. You can set Version_1.0orVersion_1.1etc. If you want to use the default version, do not set anything.
- name String
- Name of the managed rule group.
- vendorName String
- Name of the managed rule group vendor.
- managedRule List<WebGroup Configs Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config> 
- Additional information that's used by a managed rule group. Only one rule attribute is allowed in each config. See managed_rule_group_configsfor more details
- ruleAction List<WebOverrides Acl Rule Statement Managed Rule Group Statement Rule Action Override> 
- Action settings to use in the place of the rule actions that are configured inside the rule group. You specify one override for each rule whose action you want to change. See rule_action_overridebelow for details.
- scopeDown WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement 
- Narrows the scope of the statement to matching web requests. This can be any nestable statement, and you can nest statements at any level below this scope-down statement. See statementabove for details.
- version String
- Version of the managed rule group. You can set Version_1.0orVersion_1.1etc. If you want to use the default version, do not set anything.
- name string
- Name of the managed rule group.
- vendorName string
- Name of the managed rule group vendor.
- managedRule WebGroup Configs Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config[] 
- Additional information that's used by a managed rule group. Only one rule attribute is allowed in each config. See managed_rule_group_configsfor more details
- ruleAction WebOverrides Acl Rule Statement Managed Rule Group Statement Rule Action Override[] 
- Action settings to use in the place of the rule actions that are configured inside the rule group. You specify one override for each rule whose action you want to change. See rule_action_overridebelow for details.
- scopeDown WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement 
- Narrows the scope of the statement to matching web requests. This can be any nestable statement, and you can nest statements at any level below this scope-down statement. See statementabove for details.
- version string
- Version of the managed rule group. You can set Version_1.0orVersion_1.1etc. If you want to use the default version, do not set anything.
- name str
- Name of the managed rule group.
- vendor_name str
- Name of the managed rule group vendor.
- managed_rule_ Sequence[Webgroup_ configs Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config] 
- Additional information that's used by a managed rule group. Only one rule attribute is allowed in each config. See managed_rule_group_configsfor more details
- rule_action_ Sequence[Weboverrides Acl Rule Statement Managed Rule Group Statement Rule Action Override] 
- Action settings to use in the place of the rule actions that are configured inside the rule group. You specify one override for each rule whose action you want to change. See rule_action_overridebelow for details.
- scope_down_ Webstatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement 
- Narrows the scope of the statement to matching web requests. This can be any nestable statement, and you can nest statements at any level below this scope-down statement. See statementabove for details.
- version str
- Version of the managed rule group. You can set Version_1.0orVersion_1.1etc. If you want to use the default version, do not set anything.
- name String
- Name of the managed rule group.
- vendorName String
- Name of the managed rule group vendor.
- managedRule List<Property Map>Group Configs 
- Additional information that's used by a managed rule group. Only one rule attribute is allowed in each config. See managed_rule_group_configsfor more details
- ruleAction List<Property Map>Overrides 
- Action settings to use in the place of the rule actions that are configured inside the rule group. You specify one override for each rule whose action you want to change. See rule_action_overridebelow for details.
- scopeDown Property MapStatement 
- Narrows the scope of the statement to matching web requests. This can be any nestable statement, and you can nest statements at any level below this scope-down statement. See statementabove for details.
- version String
- Version of the managed rule group. You can set Version_1.0orVersion_1.1etc. If you want to use the default version, do not set anything.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfig, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigArgs                        
- AwsManaged WebRules Acfp Rule Set Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set 
- Additional configuration for using the Account Creation Fraud Prevention managed rule group. Use this to specify information such as the registration page of your application and the type of content to accept or reject from the client.
- AwsManaged WebRules Atp Rule Set Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set 
- Additional configuration for using the Account Takeover Protection managed rule group. Use this to specify information such as the sign-in page of your application and the type of content to accept or reject from the client.
- AwsManaged WebRules Bot Control Rule Set Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Bot Control Rule Set 
- Additional configuration for using the Bot Control managed rule group. Use this to specify the inspection level that you want to use. See aws_managed_rules_bot_control_rule_setfor more details
- LoginPath string
- The path of the login endpoint for your application.
- PasswordField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Password Field 
- Details about your login page password field. See password_fieldfor more details.
- PayloadType string
- The payload type for your login endpoint, either JSON or form encoded.
- UsernameField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Username Field 
- Details about your login page username field. See username_fieldfor more details.
- AwsManaged WebRules Acfp Rule Set Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set 
- Additional configuration for using the Account Creation Fraud Prevention managed rule group. Use this to specify information such as the registration page of your application and the type of content to accept or reject from the client.
- AwsManaged WebRules Atp Rule Set Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set 
- Additional configuration for using the Account Takeover Protection managed rule group. Use this to specify information such as the sign-in page of your application and the type of content to accept or reject from the client.
- AwsManaged WebRules Bot Control Rule Set Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Bot Control Rule Set 
- Additional configuration for using the Bot Control managed rule group. Use this to specify the inspection level that you want to use. See aws_managed_rules_bot_control_rule_setfor more details
- LoginPath string
- The path of the login endpoint for your application.
- PasswordField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Password Field 
- Details about your login page password field. See password_fieldfor more details.
- PayloadType string
- The payload type for your login endpoint, either JSON or form encoded.
- UsernameField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Username Field 
- Details about your login page username field. See username_fieldfor more details.
- awsManaged WebRules Acfp Rule Set Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set 
- Additional configuration for using the Account Creation Fraud Prevention managed rule group. Use this to specify information such as the registration page of your application and the type of content to accept or reject from the client.
- awsManaged WebRules Atp Rule Set Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set 
- Additional configuration for using the Account Takeover Protection managed rule group. Use this to specify information such as the sign-in page of your application and the type of content to accept or reject from the client.
- awsManaged WebRules Bot Control Rule Set Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Bot Control Rule Set 
- Additional configuration for using the Bot Control managed rule group. Use this to specify the inspection level that you want to use. See aws_managed_rules_bot_control_rule_setfor more details
- loginPath String
- The path of the login endpoint for your application.
- passwordField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Password Field 
- Details about your login page password field. See password_fieldfor more details.
- payloadType String
- The payload type for your login endpoint, either JSON or form encoded.
- usernameField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Username Field 
- Details about your login page username field. See username_fieldfor more details.
- awsManaged WebRules Acfp Rule Set Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set 
- Additional configuration for using the Account Creation Fraud Prevention managed rule group. Use this to specify information such as the registration page of your application and the type of content to accept or reject from the client.
- awsManaged WebRules Atp Rule Set Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set 
- Additional configuration for using the Account Takeover Protection managed rule group. Use this to specify information such as the sign-in page of your application and the type of content to accept or reject from the client.
- awsManaged WebRules Bot Control Rule Set Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Bot Control Rule Set 
- Additional configuration for using the Bot Control managed rule group. Use this to specify the inspection level that you want to use. See aws_managed_rules_bot_control_rule_setfor more details
- loginPath string
- The path of the login endpoint for your application.
- passwordField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Password Field 
- Details about your login page password field. See password_fieldfor more details.
- payloadType string
- The payload type for your login endpoint, either JSON or form encoded.
- usernameField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Username Field 
- Details about your login page username field. See username_fieldfor more details.
- aws_managed_ Webrules_ acfp_ rule_ set Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set 
- Additional configuration for using the Account Creation Fraud Prevention managed rule group. Use this to specify information such as the registration page of your application and the type of content to accept or reject from the client.
- aws_managed_ Webrules_ atp_ rule_ set Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set 
- Additional configuration for using the Account Takeover Protection managed rule group. Use this to specify information such as the sign-in page of your application and the type of content to accept or reject from the client.
- aws_managed_ Webrules_ bot_ control_ rule_ set Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Bot Control Rule Set 
- Additional configuration for using the Bot Control managed rule group. Use this to specify the inspection level that you want to use. See aws_managed_rules_bot_control_rule_setfor more details
- login_path str
- The path of the login endpoint for your application.
- password_field WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Password Field 
- Details about your login page password field. See password_fieldfor more details.
- payload_type str
- The payload type for your login endpoint, either JSON or form encoded.
- username_field WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Username Field 
- Details about your login page username field. See username_fieldfor more details.
- awsManaged Property MapRules Acfp Rule Set 
- Additional configuration for using the Account Creation Fraud Prevention managed rule group. Use this to specify information such as the registration page of your application and the type of content to accept or reject from the client.
- awsManaged Property MapRules Atp Rule Set 
- Additional configuration for using the Account Takeover Protection managed rule group. Use this to specify information such as the sign-in page of your application and the type of content to accept or reject from the client.
- awsManaged Property MapRules Bot Control Rule Set 
- Additional configuration for using the Bot Control managed rule group. Use this to specify the inspection level that you want to use. See aws_managed_rules_bot_control_rule_setfor more details
- loginPath String
- The path of the login endpoint for your application.
- passwordField Property Map
- Details about your login page password field. See password_fieldfor more details.
- payloadType String
- The payload type for your login endpoint, either JSON or form encoded.
- usernameField Property Map
- Details about your login page username field. See username_fieldfor more details.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSet, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetArgs                                    
- CreationPath string
- The path of the account creation endpoint for your application. This is the page on your website that accepts the completed registration form for a new user. This page must accept POST requests.
- RegistrationPage stringPath 
- The path of the account registration endpoint for your application. This is the page on your website that presents the registration form to new users. This page must accept GET text/html requests.
- RequestInspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection 
- The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage. See request_inspectionfor more details.
- EnableRegex boolIn Path 
- Whether or not to allow the use of regular expressions in the login page path.
- ResponseInspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection 
- The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates. Note that Response Inspection is available only on web ACLs that protect CloudFront distributions. See response_inspectionfor more details.
- CreationPath string
- The path of the account creation endpoint for your application. This is the page on your website that accepts the completed registration form for a new user. This page must accept POST requests.
- RegistrationPage stringPath 
- The path of the account registration endpoint for your application. This is the page on your website that presents the registration form to new users. This page must accept GET text/html requests.
- RequestInspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection 
- The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage. See request_inspectionfor more details.
- EnableRegex boolIn Path 
- Whether or not to allow the use of regular expressions in the login page path.
- ResponseInspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection 
- The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates. Note that Response Inspection is available only on web ACLs that protect CloudFront distributions. See response_inspectionfor more details.
- creationPath String
- The path of the account creation endpoint for your application. This is the page on your website that accepts the completed registration form for a new user. This page must accept POST requests.
- registrationPage StringPath 
- The path of the account registration endpoint for your application. This is the page on your website that presents the registration form to new users. This page must accept GET text/html requests.
- requestInspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection 
- The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage. See request_inspectionfor more details.
- enableRegex BooleanIn Path 
- Whether or not to allow the use of regular expressions in the login page path.
- responseInspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection 
- The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates. Note that Response Inspection is available only on web ACLs that protect CloudFront distributions. See response_inspectionfor more details.
- creationPath string
- The path of the account creation endpoint for your application. This is the page on your website that accepts the completed registration form for a new user. This page must accept POST requests.
- registrationPage stringPath 
- The path of the account registration endpoint for your application. This is the page on your website that presents the registration form to new users. This page must accept GET text/html requests.
- requestInspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection 
- The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage. See request_inspectionfor more details.
- enableRegex booleanIn Path 
- Whether or not to allow the use of regular expressions in the login page path.
- responseInspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection 
- The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates. Note that Response Inspection is available only on web ACLs that protect CloudFront distributions. See response_inspectionfor more details.
- creation_path str
- The path of the account creation endpoint for your application. This is the page on your website that accepts the completed registration form for a new user. This page must accept POST requests.
- registration_page_ strpath 
- The path of the account registration endpoint for your application. This is the page on your website that presents the registration form to new users. This page must accept GET text/html requests.
- request_inspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection 
- The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage. See request_inspectionfor more details.
- enable_regex_ boolin_ path 
- Whether or not to allow the use of regular expressions in the login page path.
- response_inspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection 
- The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates. Note that Response Inspection is available only on web ACLs that protect CloudFront distributions. See response_inspectionfor more details.
- creationPath String
- The path of the account creation endpoint for your application. This is the page on your website that accepts the completed registration form for a new user. This page must accept POST requests.
- registrationPage StringPath 
- The path of the account registration endpoint for your application. This is the page on your website that presents the registration form to new users. This page must accept GET text/html requests.
- requestInspection Property Map
- The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage. See request_inspectionfor more details.
- enableRegex BooleanIn Path 
- Whether or not to allow the use of regular expressions in the login page path.
- responseInspection Property Map
- The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates. Note that Response Inspection is available only on web ACLs that protect CloudFront distributions. See response_inspectionfor more details.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetRequestInspection, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetRequestInspectionArgs                                        
- PayloadType string
- The payload type for your login endpoint, either JSON or form encoded.
- AddressFields WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Address Fields 
- The names of the fields in the request payload that contain your customer's primary physical address. See address_fieldsfor more details.
- EmailField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Email Field 
- The name of the field in the request payload that contains your customer's email. See email_fieldfor more details.
- PasswordField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Password Field 
- Details about your login page password field. See password_fieldfor more details.
- PhoneNumber WebFields Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Phone Number Fields 
- The names of the fields in the request payload that contain your customer's primary phone number. See phone_number_fieldsfor more details.
- UsernameField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Username Field 
- Details about your login page username field. See username_fieldfor more details.
- PayloadType string
- The payload type for your login endpoint, either JSON or form encoded.
- AddressFields WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Address Fields 
- The names of the fields in the request payload that contain your customer's primary physical address. See address_fieldsfor more details.
- EmailField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Email Field 
- The name of the field in the request payload that contains your customer's email. See email_fieldfor more details.
- PasswordField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Password Field 
- Details about your login page password field. See password_fieldfor more details.
- PhoneNumber WebFields Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Phone Number Fields 
- The names of the fields in the request payload that contain your customer's primary phone number. See phone_number_fieldsfor more details.
- UsernameField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Username Field 
- Details about your login page username field. See username_fieldfor more details.
- payloadType String
- The payload type for your login endpoint, either JSON or form encoded.
- addressFields WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Address Fields 
- The names of the fields in the request payload that contain your customer's primary physical address. See address_fieldsfor more details.
- emailField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Email Field 
- The name of the field in the request payload that contains your customer's email. See email_fieldfor more details.
- passwordField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Password Field 
- Details about your login page password field. See password_fieldfor more details.
- phoneNumber WebFields Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Phone Number Fields 
- The names of the fields in the request payload that contain your customer's primary phone number. See phone_number_fieldsfor more details.
- usernameField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Username Field 
- Details about your login page username field. See username_fieldfor more details.
- payloadType string
- The payload type for your login endpoint, either JSON or form encoded.
- addressFields WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Address Fields 
- The names of the fields in the request payload that contain your customer's primary physical address. See address_fieldsfor more details.
- emailField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Email Field 
- The name of the field in the request payload that contains your customer's email. See email_fieldfor more details.
- passwordField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Password Field 
- Details about your login page password field. See password_fieldfor more details.
- phoneNumber WebFields Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Phone Number Fields 
- The names of the fields in the request payload that contain your customer's primary phone number. See phone_number_fieldsfor more details.
- usernameField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Username Field 
- Details about your login page username field. See username_fieldfor more details.
- payload_type str
- The payload type for your login endpoint, either JSON or form encoded.
- address_fields WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Address Fields 
- The names of the fields in the request payload that contain your customer's primary physical address. See address_fieldsfor more details.
- email_field WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Email Field 
- The name of the field in the request payload that contains your customer's email. See email_fieldfor more details.
- password_field WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Password Field 
- Details about your login page password field. See password_fieldfor more details.
- phone_number_ Webfields Acl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Phone Number Fields 
- The names of the fields in the request payload that contain your customer's primary phone number. See phone_number_fieldsfor more details.
- username_field WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Request Inspection Username Field 
- Details about your login page username field. See username_fieldfor more details.
- payloadType String
- The payload type for your login endpoint, either JSON or form encoded.
- addressFields Property Map
- The names of the fields in the request payload that contain your customer's primary physical address. See address_fieldsfor more details.
- emailField Property Map
- The name of the field in the request payload that contains your customer's email. See email_fieldfor more details.
- passwordField Property Map
- Details about your login page password field. See password_fieldfor more details.
- phoneNumber Property MapFields 
- The names of the fields in the request payload that contain your customer's primary phone number. See phone_number_fieldsfor more details.
- usernameField Property Map
- Details about your login page username field. See username_fieldfor more details.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetRequestInspectionAddressFields, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetRequestInspectionAddressFieldsArgs                                            
- Identifiers List<string>
- The names of the address fields.
- Identifiers []string
- The names of the address fields.
- identifiers List<String>
- The names of the address fields.
- identifiers string[]
- The names of the address fields.
- identifiers Sequence[str]
- The names of the address fields.
- identifiers List<String>
- The names of the address fields.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetRequestInspectionEmailField, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetRequestInspectionEmailFieldArgs                                            
- Identifier string
- The name of the field in the request payload that contains your customer's email.
- Identifier string
- The name of the field in the request payload that contains your customer's email.
- identifier String
- The name of the field in the request payload that contains your customer's email.
- identifier string
- The name of the field in the request payload that contains your customer's email.
- identifier str
- The name of the field in the request payload that contains your customer's email.
- identifier String
- The name of the field in the request payload that contains your customer's email.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetRequestInspectionPasswordField, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetRequestInspectionPasswordFieldArgs                                            
- Identifier string
- The name of the password field.
- Identifier string
- The name of the password field.
- identifier String
- The name of the password field.
- identifier string
- The name of the password field.
- identifier str
- The name of the password field.
- identifier String
- The name of the password field.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetRequestInspectionPhoneNumberFields, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetRequestInspectionPhoneNumberFieldsArgs                                              
- Identifiers List<string>
- The names of the phone number fields.
- Identifiers []string
- The names of the phone number fields.
- identifiers List<String>
- The names of the phone number fields.
- identifiers string[]
- The names of the phone number fields.
- identifiers Sequence[str]
- The names of the phone number fields.
- identifiers List<String>
- The names of the phone number fields.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetRequestInspectionUsernameField, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetRequestInspectionUsernameFieldArgs                                            
- Identifier string
- The name of the username field.
- Identifier string
- The name of the username field.
- identifier String
- The name of the username field.
- identifier string
- The name of the username field.
- identifier str
- The name of the username field.
- identifier String
- The name of the username field.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetResponseInspection, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetResponseInspectionArgs                                        
- BodyContains WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Body Contains 
- Configures inspection of the response body. See body_containsfor more details.
- Header
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Header 
- Configures inspection of the response header.See headerfor more details.
- Json
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Json 
- Configures inspection of the response JSON. See jsonfor more details.
- StatusCode WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Status Code 
- Configures inspection of the response status code.See status_codefor more details.
- BodyContains WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Body Contains 
- Configures inspection of the response body. See body_containsfor more details.
- Header
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Header 
- Configures inspection of the response header.See headerfor more details.
- Json
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Json 
- Configures inspection of the response JSON. See jsonfor more details.
- StatusCode WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Status Code 
- Configures inspection of the response status code.See status_codefor more details.
- bodyContains WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Body Contains 
- Configures inspection of the response body. See body_containsfor more details.
- header
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Header 
- Configures inspection of the response header.See headerfor more details.
- json
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Json 
- Configures inspection of the response JSON. See jsonfor more details.
- statusCode WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Status Code 
- Configures inspection of the response status code.See status_codefor more details.
- bodyContains WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Body Contains 
- Configures inspection of the response body. See body_containsfor more details.
- header
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Header 
- Configures inspection of the response header.See headerfor more details.
- json
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Json 
- Configures inspection of the response JSON. See jsonfor more details.
- statusCode WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Status Code 
- Configures inspection of the response status code.See status_codefor more details.
- body_contains WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Body Contains 
- Configures inspection of the response body. See body_containsfor more details.
- header
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Header 
- Configures inspection of the response header.See headerfor more details.
- json
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Json 
- Configures inspection of the response JSON. See jsonfor more details.
- status_code WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Acfp Rule Set Response Inspection Status Code 
- Configures inspection of the response status code.See status_codefor more details.
- bodyContains Property Map
- Configures inspection of the response body. See body_containsfor more details.
- header Property Map
- Configures inspection of the response header.See headerfor more details.
- json Property Map
- Configures inspection of the response JSON. See jsonfor more details.
- statusCode Property Map
- Configures inspection of the response status code.See status_codefor more details.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetResponseInspectionBodyContains, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetResponseInspectionBodyContainsArgs                                            
- FailureStrings List<string>
- Strings in the body of the response that indicate a failed login attempt.
- SuccessStrings List<string>
- Strings in the body of the response that indicate a successful login attempt.
- FailureStrings []string
- Strings in the body of the response that indicate a failed login attempt.
- SuccessStrings []string
- Strings in the body of the response that indicate a successful login attempt.
- failureStrings List<String>
- Strings in the body of the response that indicate a failed login attempt.
- successStrings List<String>
- Strings in the body of the response that indicate a successful login attempt.
- failureStrings string[]
- Strings in the body of the response that indicate a failed login attempt.
- successStrings string[]
- Strings in the body of the response that indicate a successful login attempt.
- failure_strings Sequence[str]
- Strings in the body of the response that indicate a failed login attempt.
- success_strings Sequence[str]
- Strings in the body of the response that indicate a successful login attempt.
- failureStrings List<String>
- Strings in the body of the response that indicate a failed login attempt.
- successStrings List<String>
- Strings in the body of the response that indicate a successful login attempt.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetResponseInspectionHeader, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetResponseInspectionHeaderArgs                                          
- FailureValues List<string>
- Values in the response header with the specified name that indicate a failed login attempt.
- Name string
- The name of the header to use.
- SuccessValues List<string>
- Values in the response header with the specified name that indicate a successful login attempt.
- FailureValues []string
- Values in the response header with the specified name that indicate a failed login attempt.
- Name string
- The name of the header to use.
- SuccessValues []string
- Values in the response header with the specified name that indicate a successful login attempt.
- failureValues List<String>
- Values in the response header with the specified name that indicate a failed login attempt.
- name String
- The name of the header to use.
- successValues List<String>
- Values in the response header with the specified name that indicate a successful login attempt.
- failureValues string[]
- Values in the response header with the specified name that indicate a failed login attempt.
- name string
- The name of the header to use.
- successValues string[]
- Values in the response header with the specified name that indicate a successful login attempt.
- failure_values Sequence[str]
- Values in the response header with the specified name that indicate a failed login attempt.
- name str
- The name of the header to use.
- success_values Sequence[str]
- Values in the response header with the specified name that indicate a successful login attempt.
- failureValues List<String>
- Values in the response header with the specified name that indicate a failed login attempt.
- name String
- The name of the header to use.
- successValues List<String>
- Values in the response header with the specified name that indicate a successful login attempt.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetResponseInspectionJson, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetResponseInspectionJsonArgs                                          
- FailureValues List<string>
- Values in the response header with the specified name that indicate a failed login attempt.
- Identifier string
- The identifier for the value to match against in the JSON.
- SuccessValues List<string>
- Values in the response header with the specified name that indicate a successful login attempt.
- FailureValues []string
- Values in the response header with the specified name that indicate a failed login attempt.
- Identifier string
- The identifier for the value to match against in the JSON.
- SuccessValues []string
- Values in the response header with the specified name that indicate a successful login attempt.
- failureValues List<String>
- Values in the response header with the specified name that indicate a failed login attempt.
- identifier String
- The identifier for the value to match against in the JSON.
- successValues List<String>
- Values in the response header with the specified name that indicate a successful login attempt.
- failureValues string[]
- Values in the response header with the specified name that indicate a failed login attempt.
- identifier string
- The identifier for the value to match against in the JSON.
- successValues string[]
- Values in the response header with the specified name that indicate a successful login attempt.
- failure_values Sequence[str]
- Values in the response header with the specified name that indicate a failed login attempt.
- identifier str
- The identifier for the value to match against in the JSON.
- success_values Sequence[str]
- Values in the response header with the specified name that indicate a successful login attempt.
- failureValues List<String>
- Values in the response header with the specified name that indicate a failed login attempt.
- identifier String
- The identifier for the value to match against in the JSON.
- successValues List<String>
- Values in the response header with the specified name that indicate a successful login attempt.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetResponseInspectionStatusCode, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSetResponseInspectionStatusCodeArgs                                            
- FailureCodes List<int>
- Status codes in the response that indicate a failed login attempt.
- SuccessCodes List<int>
- Status codes in the response that indicate a successful login attempt.
- FailureCodes []int
- Status codes in the response that indicate a failed login attempt.
- SuccessCodes []int
- Status codes in the response that indicate a successful login attempt.
- failureCodes List<Integer>
- Status codes in the response that indicate a failed login attempt.
- successCodes List<Integer>
- Status codes in the response that indicate a successful login attempt.
- failureCodes number[]
- Status codes in the response that indicate a failed login attempt.
- successCodes number[]
- Status codes in the response that indicate a successful login attempt.
- failure_codes Sequence[int]
- Status codes in the response that indicate a failed login attempt.
- success_codes Sequence[int]
- Status codes in the response that indicate a successful login attempt.
- failureCodes List<Number>
- Status codes in the response that indicate a failed login attempt.
- successCodes List<Number>
- Status codes in the response that indicate a successful login attempt.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSet, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetArgs                                    
- LoginPath string
- The path of the login endpoint for your application.
- EnableRegex boolIn Path 
- Whether or not to allow the use of regular expressions in the login page path.
- RequestInspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Request Inspection 
- The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage. See request_inspectionfor more details.
- ResponseInspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection 
- The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates. Note that Response Inspection is available only on web ACLs that protect CloudFront distributions. See response_inspectionfor more details.
- LoginPath string
- The path of the login endpoint for your application.
- EnableRegex boolIn Path 
- Whether or not to allow the use of regular expressions in the login page path.
- RequestInspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Request Inspection 
- The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage. See request_inspectionfor more details.
- ResponseInspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection 
- The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates. Note that Response Inspection is available only on web ACLs that protect CloudFront distributions. See response_inspectionfor more details.
- loginPath String
- The path of the login endpoint for your application.
- enableRegex BooleanIn Path 
- Whether or not to allow the use of regular expressions in the login page path.
- requestInspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Request Inspection 
- The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage. See request_inspectionfor more details.
- responseInspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection 
- The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates. Note that Response Inspection is available only on web ACLs that protect CloudFront distributions. See response_inspectionfor more details.
- loginPath string
- The path of the login endpoint for your application.
- enableRegex booleanIn Path 
- Whether or not to allow the use of regular expressions in the login page path.
- requestInspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Request Inspection 
- The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage. See request_inspectionfor more details.
- responseInspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection 
- The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates. Note that Response Inspection is available only on web ACLs that protect CloudFront distributions. See response_inspectionfor more details.
- login_path str
- The path of the login endpoint for your application.
- enable_regex_ boolin_ path 
- Whether or not to allow the use of regular expressions in the login page path.
- request_inspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Request Inspection 
- The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage. See request_inspectionfor more details.
- response_inspection WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection 
- The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates. Note that Response Inspection is available only on web ACLs that protect CloudFront distributions. See response_inspectionfor more details.
- loginPath String
- The path of the login endpoint for your application.
- enableRegex BooleanIn Path 
- Whether or not to allow the use of regular expressions in the login page path.
- requestInspection Property Map
- The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage. See request_inspectionfor more details.
- responseInspection Property Map
- The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates. Note that Response Inspection is available only on web ACLs that protect CloudFront distributions. See response_inspectionfor more details.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspection, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionArgs                                        
- PasswordField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Request Inspection Password Field 
- Details about your login page password field. See password_fieldfor more details.
- PayloadType string
- The payload type for your login endpoint, either JSON or form encoded.
- UsernameField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Request Inspection Username Field 
- Details about your login page username field. See username_fieldfor more details.
- PasswordField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Request Inspection Password Field 
- Details about your login page password field. See password_fieldfor more details.
- PayloadType string
- The payload type for your login endpoint, either JSON or form encoded.
- UsernameField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Request Inspection Username Field 
- Details about your login page username field. See username_fieldfor more details.
- passwordField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Request Inspection Password Field 
- Details about your login page password field. See password_fieldfor more details.
- payloadType String
- The payload type for your login endpoint, either JSON or form encoded.
- usernameField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Request Inspection Username Field 
- Details about your login page username field. See username_fieldfor more details.
- passwordField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Request Inspection Password Field 
- Details about your login page password field. See password_fieldfor more details.
- payloadType string
- The payload type for your login endpoint, either JSON or form encoded.
- usernameField WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Request Inspection Username Field 
- Details about your login page username field. See username_fieldfor more details.
- password_field WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Request Inspection Password Field 
- Details about your login page password field. See password_fieldfor more details.
- payload_type str
- The payload type for your login endpoint, either JSON or form encoded.
- username_field WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Request Inspection Username Field 
- Details about your login page username field. See username_fieldfor more details.
- passwordField Property Map
- Details about your login page password field. See password_fieldfor more details.
- payloadType String
- The payload type for your login endpoint, either JSON or form encoded.
- usernameField Property Map
- Details about your login page username field. See username_fieldfor more details.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionPasswordField, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionPasswordFieldArgs                                            
- Identifier string
- The name of the password field.
- Identifier string
- The name of the password field.
- identifier String
- The name of the password field.
- identifier string
- The name of the password field.
- identifier str
- The name of the password field.
- identifier String
- The name of the password field.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionUsernameField, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionUsernameFieldArgs                                            
- Identifier string
- The name of the username field.
- Identifier string
- The name of the username field.
- identifier String
- The name of the username field.
- identifier string
- The name of the username field.
- identifier str
- The name of the username field.
- identifier String
- The name of the username field.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspection, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionArgs                                        
- BodyContains WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Body Contains 
- Configures inspection of the response body. See body_containsfor more details.
- Header
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Header 
- Configures inspection of the response header.See headerfor more details.
- Json
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Json 
- Configures inspection of the response JSON. See jsonfor more details.
- StatusCode WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Status Code 
- Configures inspection of the response status code.See status_codefor more details.
- BodyContains WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Body Contains 
- Configures inspection of the response body. See body_containsfor more details.
- Header
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Header 
- Configures inspection of the response header.See headerfor more details.
- Json
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Json 
- Configures inspection of the response JSON. See jsonfor more details.
- StatusCode WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Status Code 
- Configures inspection of the response status code.See status_codefor more details.
- bodyContains WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Body Contains 
- Configures inspection of the response body. See body_containsfor more details.
- header
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Header 
- Configures inspection of the response header.See headerfor more details.
- json
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Json 
- Configures inspection of the response JSON. See jsonfor more details.
- statusCode WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Status Code 
- Configures inspection of the response status code.See status_codefor more details.
- bodyContains WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Body Contains 
- Configures inspection of the response body. See body_containsfor more details.
- header
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Header 
- Configures inspection of the response header.See headerfor more details.
- json
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Json 
- Configures inspection of the response JSON. See jsonfor more details.
- statusCode WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Status Code 
- Configures inspection of the response status code.See status_codefor more details.
- body_contains WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Body Contains 
- Configures inspection of the response body. See body_containsfor more details.
- header
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Header 
- Configures inspection of the response header.See headerfor more details.
- json
WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Json 
- Configures inspection of the response JSON. See jsonfor more details.
- status_code WebAcl Rule Statement Managed Rule Group Statement Managed Rule Group Config Aws Managed Rules Atp Rule Set Response Inspection Status Code 
- Configures inspection of the response status code.See status_codefor more details.
- bodyContains Property Map
- Configures inspection of the response body. See body_containsfor more details.
- header Property Map
- Configures inspection of the response header.See headerfor more details.
- json Property Map
- Configures inspection of the response JSON. See jsonfor more details.
- statusCode Property Map
- Configures inspection of the response status code.See status_codefor more details.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionBodyContains, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionBodyContainsArgs                                            
- FailureStrings List<string>
- Strings in the body of the response that indicate a failed login attempt.
- SuccessStrings List<string>
- Strings in the body of the response that indicate a successful login attempt.
- FailureStrings []string
- Strings in the body of the response that indicate a failed login attempt.
- SuccessStrings []string
- Strings in the body of the response that indicate a successful login attempt.
- failureStrings List<String>
- Strings in the body of the response that indicate a failed login attempt.
- successStrings List<String>
- Strings in the body of the response that indicate a successful login attempt.
- failureStrings string[]
- Strings in the body of the response that indicate a failed login attempt.
- successStrings string[]
- Strings in the body of the response that indicate a successful login attempt.
- failure_strings Sequence[str]
- Strings in the body of the response that indicate a failed login attempt.
- success_strings Sequence[str]
- Strings in the body of the response that indicate a successful login attempt.
- failureStrings List<String>
- Strings in the body of the response that indicate a failed login attempt.
- successStrings List<String>
- Strings in the body of the response that indicate a successful login attempt.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionHeader, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionHeaderArgs                                          
- FailureValues List<string>
- Values in the response header with the specified name that indicate a failed login attempt.
- Name string
- The name of the header to use.
- SuccessValues List<string>
- Values in the response header with the specified name that indicate a successful login attempt.
- FailureValues []string
- Values in the response header with the specified name that indicate a failed login attempt.
- Name string
- The name of the header to use.
- SuccessValues []string
- Values in the response header with the specified name that indicate a successful login attempt.
- failureValues List<String>
- Values in the response header with the specified name that indicate a failed login attempt.
- name String
- The name of the header to use.
- successValues List<String>
- Values in the response header with the specified name that indicate a successful login attempt.
- failureValues string[]
- Values in the response header with the specified name that indicate a failed login attempt.
- name string
- The name of the header to use.
- successValues string[]
- Values in the response header with the specified name that indicate a successful login attempt.
- failure_values Sequence[str]
- Values in the response header with the specified name that indicate a failed login attempt.
- name str
- The name of the header to use.
- success_values Sequence[str]
- Values in the response header with the specified name that indicate a successful login attempt.
- failureValues List<String>
- Values in the response header with the specified name that indicate a failed login attempt.
- name String
- The name of the header to use.
- successValues List<String>
- Values in the response header with the specified name that indicate a successful login attempt.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionJson, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionJsonArgs                                          
- FailureValues List<string>
- Values in the response header with the specified name that indicate a failed login attempt.
- Identifier string
- The identifier for the value to match against in the JSON.
- SuccessValues List<string>
- Values in the response header with the specified name that indicate a successful login attempt.
- FailureValues []string
- Values in the response header with the specified name that indicate a failed login attempt.
- Identifier string
- The identifier for the value to match against in the JSON.
- SuccessValues []string
- Values in the response header with the specified name that indicate a successful login attempt.
- failureValues List<String>
- Values in the response header with the specified name that indicate a failed login attempt.
- identifier String
- The identifier for the value to match against in the JSON.
- successValues List<String>
- Values in the response header with the specified name that indicate a successful login attempt.
- failureValues string[]
- Values in the response header with the specified name that indicate a failed login attempt.
- identifier string
- The identifier for the value to match against in the JSON.
- successValues string[]
- Values in the response header with the specified name that indicate a successful login attempt.
- failure_values Sequence[str]
- Values in the response header with the specified name that indicate a failed login attempt.
- identifier str
- The identifier for the value to match against in the JSON.
- success_values Sequence[str]
- Values in the response header with the specified name that indicate a successful login attempt.
- failureValues List<String>
- Values in the response header with the specified name that indicate a failed login attempt.
- identifier String
- The identifier for the value to match against in the JSON.
- successValues List<String>
- Values in the response header with the specified name that indicate a successful login attempt.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionStatusCode, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionStatusCodeArgs                                            
- FailureCodes List<int>
- Status codes in the response that indicate a failed login attempt.
- SuccessCodes List<int>
- Status codes in the response that indicate a successful login attempt.
- FailureCodes []int
- Status codes in the response that indicate a failed login attempt.
- SuccessCodes []int
- Status codes in the response that indicate a successful login attempt.
- failureCodes List<Integer>
- Status codes in the response that indicate a failed login attempt.
- successCodes List<Integer>
- Status codes in the response that indicate a successful login attempt.
- failureCodes number[]
- Status codes in the response that indicate a failed login attempt.
- successCodes number[]
- Status codes in the response that indicate a successful login attempt.
- failure_codes Sequence[int]
- Status codes in the response that indicate a failed login attempt.
- success_codes Sequence[int]
- Status codes in the response that indicate a successful login attempt.
- failureCodes List<Number>
- Status codes in the response that indicate a failed login attempt.
- successCodes List<Number>
- Status codes in the response that indicate a successful login attempt.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesBotControlRuleSet, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesBotControlRuleSetArgs                                      
- InspectionLevel string
- The inspection level to use for the Bot Control rule group.
- EnableMachine boolLearning 
- Applies only to the targeted inspection level. Determines whether to use machine learning (ML) to analyze your web traffic for bot-related activity. Defaults to true.
- InspectionLevel string
- The inspection level to use for the Bot Control rule group.
- EnableMachine boolLearning 
- Applies only to the targeted inspection level. Determines whether to use machine learning (ML) to analyze your web traffic for bot-related activity. Defaults to true.
- inspectionLevel String
- The inspection level to use for the Bot Control rule group.
- enableMachine BooleanLearning 
- Applies only to the targeted inspection level. Determines whether to use machine learning (ML) to analyze your web traffic for bot-related activity. Defaults to true.
- inspectionLevel string
- The inspection level to use for the Bot Control rule group.
- enableMachine booleanLearning 
- Applies only to the targeted inspection level. Determines whether to use machine learning (ML) to analyze your web traffic for bot-related activity. Defaults to true.
- inspection_level str
- The inspection level to use for the Bot Control rule group.
- enable_machine_ boollearning 
- Applies only to the targeted inspection level. Determines whether to use machine learning (ML) to analyze your web traffic for bot-related activity. Defaults to true.
- inspectionLevel String
- The inspection level to use for the Bot Control rule group.
- enableMachine BooleanLearning 
- Applies only to the targeted inspection level. Determines whether to use machine learning (ML) to analyze your web traffic for bot-related activity. Defaults to true.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigPasswordField, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigPasswordFieldArgs                            
- Identifier string
- The name of the password field.
- Identifier string
- The name of the password field.
- identifier String
- The name of the password field.
- identifier string
- The name of the password field.
- identifier str
- The name of the password field.
- identifier String
- The name of the password field.
WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigUsernameField, WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigUsernameFieldArgs                            
- Identifier string
- The name of the username field.
- Identifier string
- The name of the username field.
- identifier String
- The name of the username field.
- identifier string
- The name of the username field.
- identifier str
- The name of the username field.
- identifier String
- The name of the username field.
WebAclRuleStatementManagedRuleGroupStatementRuleActionOverride, WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideArgs                      
- ActionTo WebUse Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use 
- Override action to use, in place of the configured action of the rule in the rule group. See actionfor details.
- Name string
- Name of the rule to override. See the documentation for a list of names in the appropriate rule group in use.
- ActionTo WebUse Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use 
- Override action to use, in place of the configured action of the rule in the rule group. See actionfor details.
- Name string
- Name of the rule to override. See the documentation for a list of names in the appropriate rule group in use.
- actionTo WebUse Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use 
- Override action to use, in place of the configured action of the rule in the rule group. See actionfor details.
- name String
- Name of the rule to override. See the documentation for a list of names in the appropriate rule group in use.
- actionTo WebUse Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use 
- Override action to use, in place of the configured action of the rule in the rule group. See actionfor details.
- name string
- Name of the rule to override. See the documentation for a list of names in the appropriate rule group in use.
- action_to_ Webuse Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use 
- Override action to use, in place of the configured action of the rule in the rule group. See actionfor details.
- name str
- Name of the rule to override. See the documentation for a list of names in the appropriate rule group in use.
- actionTo Property MapUse 
- Override action to use, in place of the configured action of the rule in the rule group. See actionfor details.
- name String
- Name of the rule to override. See the documentation for a list of names in the appropriate rule group in use.
WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUse, WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseArgs                            
- Allow
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Allow 
- Block
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Block 
- Captcha
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Captcha 
- Instructs AWS WAF to run a Captcha check against the web request. See captchabelow for details.
- Challenge
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Challenge 
- Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See challengebelow for details.
- Count
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Count 
- Allow
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Allow 
- Block
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Block 
- Captcha
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Captcha 
- Instructs AWS WAF to run a Captcha check against the web request. See captchabelow for details.
- Challenge
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Challenge 
- Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See challengebelow for details.
- Count
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Count 
- allow
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Allow 
- block
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Block 
- captcha
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Captcha 
- Instructs AWS WAF to run a Captcha check against the web request. See captchabelow for details.
- challenge
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Challenge 
- Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See challengebelow for details.
- count
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Count 
- allow
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Allow 
- block
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Block 
- captcha
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Captcha 
- Instructs AWS WAF to run a Captcha check against the web request. See captchabelow for details.
- challenge
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Challenge 
- Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See challengebelow for details.
- count
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Count 
- allow
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Allow 
- block
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Block 
- captcha
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Captcha 
- Instructs AWS WAF to run a Captcha check against the web request. See captchabelow for details.
- challenge
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Challenge 
- Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See challengebelow for details.
- count
WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Count 
- allow Property Map
- block Property Map
- captcha Property Map
- Instructs AWS WAF to run a Captcha check against the web request. See captchabelow for details.
- challenge Property Map
- Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See challengebelow for details.
- count Property Map
WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseAllow, WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseAllowArgs                              
- CustomRequest WebHandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Allow Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- CustomRequest WebHandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Allow Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest WebHandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Allow Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest WebHandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Allow Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- custom_request_ Webhandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Allow Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest Property MapHandling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseAllowCustomRequestHandling, WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseAllowCustomRequestHandlingArgs                                    
- InsertHeaders List<WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Allow Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- InsertHeaders []WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Allow Custom Request Handling Insert Header 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders List<WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Allow Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Allow Custom Request Handling Insert Header[] 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insert_headers Sequence[WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Allow Custom Request Handling Insert Header] 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders List<Property Map>
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseAllowCustomRequestHandlingInsertHeader, WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseAllowCustomRequestHandlingInsertHeaderArgs                                        
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
- name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value string
- Value of the custom header.
- name str
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value str
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseBlock, WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseBlockArgs                              
- CustomResponse WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Block Custom Response 
- Defines a custom response for the web request. See custom_responsebelow for details.
- CustomResponse WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Block Custom Response 
- Defines a custom response for the web request. See custom_responsebelow for details.
- customResponse WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Block Custom Response 
- Defines a custom response for the web request. See custom_responsebelow for details.
- customResponse WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Block Custom Response 
- Defines a custom response for the web request. See custom_responsebelow for details.
- custom_response WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Block Custom Response 
- Defines a custom response for the web request. See custom_responsebelow for details.
- customResponse Property Map
- Defines a custom response for the web request. See custom_responsebelow for details.
WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseBlockCustomResponse, WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseBlockCustomResponseArgs                                  
- ResponseCode int
- The HTTP status code to return to the client.
- CustomResponse stringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- ResponseHeaders List<WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Block Custom Response Response Header> 
- The response_headerblocks used to define the HTTP response headers added to the response. Seeresponse_headerbelow for details.
- ResponseCode int
- The HTTP status code to return to the client.
- CustomResponse stringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- ResponseHeaders []WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Block Custom Response Response Header 
- The response_headerblocks used to define the HTTP response headers added to the response. Seeresponse_headerbelow for details.
- responseCode Integer
- The HTTP status code to return to the client.
- customResponse StringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- responseHeaders List<WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Block Custom Response Response Header> 
- The response_headerblocks used to define the HTTP response headers added to the response. Seeresponse_headerbelow for details.
- responseCode number
- The HTTP status code to return to the client.
- customResponse stringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- responseHeaders WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Block Custom Response Response Header[] 
- The response_headerblocks used to define the HTTP response headers added to the response. Seeresponse_headerbelow for details.
- response_code int
- The HTTP status code to return to the client.
- custom_response_ strbody_ key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- response_headers Sequence[WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Block Custom Response Response Header] 
- The response_headerblocks used to define the HTTP response headers added to the response. Seeresponse_headerbelow for details.
- responseCode Number
- The HTTP status code to return to the client.
- customResponse StringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- responseHeaders List<Property Map>
- The response_headerblocks used to define the HTTP response headers added to the response. Seeresponse_headerbelow for details.
WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseBlockCustomResponseResponseHeader, WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseBlockCustomResponseResponseHeaderArgs                                      
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
- name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value string
- Value of the custom header.
- name str
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value str
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseCaptcha, WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseCaptchaArgs                              
- CustomRequest WebHandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Captcha Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- CustomRequest WebHandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Captcha Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest WebHandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Captcha Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest WebHandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Captcha Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- custom_request_ Webhandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Captcha Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest Property MapHandling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseCaptchaCustomRequestHandling, WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseCaptchaCustomRequestHandlingArgs                                    
- InsertHeaders List<WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Captcha Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- InsertHeaders []WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Captcha Custom Request Handling Insert Header 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders List<WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Captcha Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Captcha Custom Request Handling Insert Header[] 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insert_headers Sequence[WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Captcha Custom Request Handling Insert Header] 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders List<Property Map>
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseCaptchaCustomRequestHandlingInsertHeader, WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseCaptchaCustomRequestHandlingInsertHeaderArgs                                        
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
- name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value string
- Value of the custom header.
- name str
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value str
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseChallenge, WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseChallengeArgs                              
- CustomRequest WebHandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Challenge Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- CustomRequest WebHandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Challenge Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest WebHandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Challenge Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest WebHandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Challenge Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- custom_request_ Webhandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Challenge Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest Property MapHandling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseChallengeCustomRequestHandling, WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseChallengeCustomRequestHandlingArgs                                    
- InsertHeaders List<WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Challenge Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- InsertHeaders []WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Challenge Custom Request Handling Insert Header 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders List<WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Challenge Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Challenge Custom Request Handling Insert Header[] 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insert_headers Sequence[WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Challenge Custom Request Handling Insert Header] 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders List<Property Map>
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseChallengeCustomRequestHandlingInsertHeader, WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseChallengeCustomRequestHandlingInsertHeaderArgs                                        
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
- name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value string
- Value of the custom header.
- name str
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value str
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseCount, WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseCountArgs                              
- CustomRequest WebHandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Count Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- CustomRequest WebHandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Count Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest WebHandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Count Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest WebHandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Count Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- custom_request_ Webhandling Acl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Count Custom Request Handling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
- customRequest Property MapHandling 
- Defines custom handling for the web request. See custom_request_handlingbelow for details.
WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseCountCustomRequestHandling, WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseCountCustomRequestHandlingArgs                                    
- InsertHeaders List<WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Count Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- InsertHeaders []WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Count Custom Request Handling Insert Header 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders List<WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Count Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Count Custom Request Handling Insert Header[] 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insert_headers Sequence[WebAcl Rule Statement Managed Rule Group Statement Rule Action Override Action To Use Count Custom Request Handling Insert Header] 
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
- insertHeaders List<Property Map>
- The insert_headerblocks used to define HTTP headers added to the request. Seeinsert_headerbelow for details.
WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseCountCustomRequestHandlingInsertHeader, WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseCountCustomRequestHandlingInsertHeaderArgs                                        
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- Name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- Value string
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
- name string
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value string
- Value of the custom header.
- name str
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value str
- Value of the custom header.
- name String
- Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header namesample, AWS WAF inserts the headerx-amzn-waf-sample.
- value String
- Value of the custom header.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatement, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementArgs                      
- AndStatement WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement And Statement 
- Logical rule statement used to combine other rule statements with AND logic. See and_statementbelow for details.
- ByteMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement 
- Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statementbelow for details.
- GeoMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Geo Match Statement 
- Rule statement used to identify web requests based on country of origin. See geo_match_statementbelow for details.
- IpSet WebReference Statement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Ip Set Reference Statement 
- Rule statement used to detect web requests coming from particular IP addresses or address ranges. See ip_set_reference_statementbelow for details.
- LabelMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Label Match Statement 
- Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statementbelow for details.
- NotStatement WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Not Statement 
- Logical rule statement used to negate the results of another rule statement. See not_statementbelow for details.
- OrStatement WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Or Statement 
- Logical rule statement used to combine other rule statements with OR logic. See or_statementbelow for details.
- RegexMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement 
- Rule statement used to search web request components for a match against a single regular expression. See regex_match_statementbelow for details.
- RegexPattern WebSet Reference Statement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement 
- Rule statement used to search web request components for matches with regular expressions. See regex_pattern_set_reference_statementbelow for details.
- SizeConstraint WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement 
- Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statementbelow for more details.
- SqliMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statementbelow for details.
- XssMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement 
- Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statementbelow for details.
- AndStatement WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement And Statement 
- Logical rule statement used to combine other rule statements with AND logic. See and_statementbelow for details.
- ByteMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement 
- Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statementbelow for details.
- GeoMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Geo Match Statement 
- Rule statement used to identify web requests based on country of origin. See geo_match_statementbelow for details.
- IpSet WebReference Statement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Ip Set Reference Statement 
- Rule statement used to detect web requests coming from particular IP addresses or address ranges. See ip_set_reference_statementbelow for details.
- LabelMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Label Match Statement 
- Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statementbelow for details.
- NotStatement WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Not Statement 
- Logical rule statement used to negate the results of another rule statement. See not_statementbelow for details.
- OrStatement WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Or Statement 
- Logical rule statement used to combine other rule statements with OR logic. See or_statementbelow for details.
- RegexMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement 
- Rule statement used to search web request components for a match against a single regular expression. See regex_match_statementbelow for details.
- RegexPattern WebSet Reference Statement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement 
- Rule statement used to search web request components for matches with regular expressions. See regex_pattern_set_reference_statementbelow for details.
- SizeConstraint WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement 
- Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statementbelow for more details.
- SqliMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statementbelow for details.
- XssMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement 
- Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statementbelow for details.
- andStatement WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement And Statement 
- Logical rule statement used to combine other rule statements with AND logic. See and_statementbelow for details.
- byteMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement 
- Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statementbelow for details.
- geoMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Geo Match Statement 
- Rule statement used to identify web requests based on country of origin. See geo_match_statementbelow for details.
- ipSet WebReference Statement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Ip Set Reference Statement 
- Rule statement used to detect web requests coming from particular IP addresses or address ranges. See ip_set_reference_statementbelow for details.
- labelMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Label Match Statement 
- Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statementbelow for details.
- notStatement WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Not Statement 
- Logical rule statement used to negate the results of another rule statement. See not_statementbelow for details.
- orStatement WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Or Statement 
- Logical rule statement used to combine other rule statements with OR logic. See or_statementbelow for details.
- regexMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement 
- Rule statement used to search web request components for a match against a single regular expression. See regex_match_statementbelow for details.
- regexPattern WebSet Reference Statement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement 
- Rule statement used to search web request components for matches with regular expressions. See regex_pattern_set_reference_statementbelow for details.
- sizeConstraint WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement 
- Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statementbelow for more details.
- sqliMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statementbelow for details.
- xssMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement 
- Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statementbelow for details.
- andStatement WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement And Statement 
- Logical rule statement used to combine other rule statements with AND logic. See and_statementbelow for details.
- byteMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement 
- Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statementbelow for details.
- geoMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Geo Match Statement 
- Rule statement used to identify web requests based on country of origin. See geo_match_statementbelow for details.
- ipSet WebReference Statement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Ip Set Reference Statement 
- Rule statement used to detect web requests coming from particular IP addresses or address ranges. See ip_set_reference_statementbelow for details.
- labelMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Label Match Statement 
- Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statementbelow for details.
- notStatement WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Not Statement 
- Logical rule statement used to negate the results of another rule statement. See not_statementbelow for details.
- orStatement WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Or Statement 
- Logical rule statement used to combine other rule statements with OR logic. See or_statementbelow for details.
- regexMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement 
- Rule statement used to search web request components for a match against a single regular expression. See regex_match_statementbelow for details.
- regexPattern WebSet Reference Statement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement 
- Rule statement used to search web request components for matches with regular expressions. See regex_pattern_set_reference_statementbelow for details.
- sizeConstraint WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement 
- Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statementbelow for more details.
- sqliMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statementbelow for details.
- xssMatch WebStatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement 
- Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statementbelow for details.
- and_statement WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement And Statement 
- Logical rule statement used to combine other rule statements with AND logic. See and_statementbelow for details.
- byte_match_ Webstatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement 
- Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statementbelow for details.
- geo_match_ Webstatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Geo Match Statement 
- Rule statement used to identify web requests based on country of origin. See geo_match_statementbelow for details.
- ip_set_ Webreference_ statement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Ip Set Reference Statement 
- Rule statement used to detect web requests coming from particular IP addresses or address ranges. See ip_set_reference_statementbelow for details.
- label_match_ Webstatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Label Match Statement 
- Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statementbelow for details.
- not_statement WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Not Statement 
- Logical rule statement used to negate the results of another rule statement. See not_statementbelow for details.
- or_statement WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Or Statement 
- Logical rule statement used to combine other rule statements with OR logic. See or_statementbelow for details.
- regex_match_ Webstatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement 
- Rule statement used to search web request components for a match against a single regular expression. See regex_match_statementbelow for details.
- regex_pattern_ Webset_ reference_ statement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement 
- Rule statement used to search web request components for matches with regular expressions. See regex_pattern_set_reference_statementbelow for details.
- size_constraint_ Webstatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement 
- Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statementbelow for more details.
- sqli_match_ Webstatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statementbelow for details.
- xss_match_ Webstatement Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement 
- Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statementbelow for details.
- andStatement Property Map
- Logical rule statement used to combine other rule statements with AND logic. See and_statementbelow for details.
- byteMatch Property MapStatement 
- Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statementbelow for details.
- geoMatch Property MapStatement 
- Rule statement used to identify web requests based on country of origin. See geo_match_statementbelow for details.
- ipSet Property MapReference Statement 
- Rule statement used to detect web requests coming from particular IP addresses or address ranges. See ip_set_reference_statementbelow for details.
- labelMatch Property MapStatement 
- Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statementbelow for details.
- notStatement Property Map
- Logical rule statement used to negate the results of another rule statement. See not_statementbelow for details.
- orStatement Property Map
- Logical rule statement used to combine other rule statements with OR logic. See or_statementbelow for details.
- regexMatch Property MapStatement 
- Rule statement used to search web request components for a match against a single regular expression. See regex_match_statementbelow for details.
- regexPattern Property MapSet Reference Statement 
- Rule statement used to search web request components for matches with regular expressions. See regex_pattern_set_reference_statementbelow for details.
- sizeConstraint Property MapStatement 
- Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statementbelow for more details.
- sqliMatch Property MapStatement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statementbelow for details.
- xssMatch Property MapStatement 
- Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statementbelow for details.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementAndStatement, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementAndStatementArgs                          
- Statements
List<WebAcl Rule Statement> 
- The statements to combine.
- Statements
[]WebAcl Rule Statement 
- The statements to combine.
- statements
List<WebAcl Rule Statement> 
- The statements to combine.
- statements
WebAcl Rule Statement[] 
- The statements to combine.
- statements
Sequence[WebAcl Rule Statement] 
- The statements to combine.
- statements List<Property Map>
- The statements to combine.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatement, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementArgs                            
- PositionalConstraint string
- Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- SearchString string
- String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- TextTransformations List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- FieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- PositionalConstraint string
- Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- SearchString string
- String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- TextTransformations []WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- FieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- positionalConstraint String
- Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- searchString String
- String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- textTransformations List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- positionalConstraint string
- Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- searchString string
- String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- textTransformations WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- positional_constraint str
- Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- search_string str
- String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- text_transformations Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- field_to_ Webmatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- positionalConstraint String
- Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- searchString String
- String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo Property MapMatch 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatch, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchArgs                                  
- AllQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- HeaderOrders List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header Order> 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- Headers
List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header> 
- Inspect the request headers. See headersbelow for details.
- Ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- Method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- SingleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- UriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- AllQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- HeaderOrders []WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header Order 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- Headers
[]WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header 
- Inspect the request headers. See headersbelow for details.
- Ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- Method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- SingleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- UriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header Order> 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header> 
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- singleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header Order[] 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header[] 
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- singleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- all_query_ Webarguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- header_orders Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header Order] 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header] 
- Inspect the request headers. See headersbelow for details.
- ja3_fingerprint WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4_fingerprint WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- json_body WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- query_string WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- single_header WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- single_query_ Webargument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uri_path WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery Property MapArguments 
- Inspect all query arguments.
- body Property Map
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- Property Map
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders List<Property Map>
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers List<Property Map>
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody Property Map
- Inspect the request body as JSON. See json_bodyfor details.
- method Property Map
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString Property Map
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader Property Map
- Inspect a single header. See single_headerbelow for details.
- singleQuery Property MapArgument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath Property Map
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchBody, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchBodyArgs                                    
- OversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- OversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling String
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversize_handling str
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling String
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchCookies, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchCookiesArgs                                    
- MatchPatterns List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- MatchPatterns []WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern[] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- match_patterns Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- match_scope str
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversize_handling str
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns List<Property Map>
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchCookiesMatchPattern, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchCookiesMatchPatternArgs                                        
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<string>
- List<string>
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- []string
- []string
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- string[]
- string[]
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- Sequence[str]
- Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchHeader, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchHeaderArgs                                    
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- match_pattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- match_scope str
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern Property Map
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchHeaderMatchPattern, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchHeaderMatchPatternArgs                                        
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders List<string>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders List<string>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders []string
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders []string
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders string[]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders string[]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excluded_headers Sequence[str]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- included_headers Sequence[str]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchHeaderOrder, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchHeaderOrderArgs                                      
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchJa3Fingerprint, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchJa3FingerprintArgs                                    
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchJa4Fingerprint, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchJa4FingerprintArgs                                    
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchJsonBody, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchJsonBodyArgs                                      
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- match_pattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- match_scope str
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalid_fallback_ strbehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversize_handling str
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern Property Map
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchJsonBodyMatchPatternArgs                                          
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths List<string>
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths []string
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths string[]
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- included_paths Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchSingleHeader, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchSingleHeaderArgs                                      
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchSingleQueryArgument, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementFieldToMatchSingleQueryArgumentArgs                                        
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementTextTransformation, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementByteMatchStatementTextTransformationArgs                                
- Priority int
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- Transformation to apply, please refer to the Text Transformation documentation for more details.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementGeoMatchStatement, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementGeoMatchStatementArgs                            
- CountryCodes List<string>
- Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- ForwardedIp WebConfig Acl Rule Statement Managed Rule Group Statement Scope Down Statement Geo Match Statement Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_configbelow for details.
- CountryCodes []string
- Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- ForwardedIp WebConfig Acl Rule Statement Managed Rule Group Statement Scope Down Statement Geo Match Statement Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_configbelow for details.
- countryCodes List<String>
- Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- forwardedIp WebConfig Acl Rule Statement Managed Rule Group Statement Scope Down Statement Geo Match Statement Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_configbelow for details.
- countryCodes string[]
- Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- forwardedIp WebConfig Acl Rule Statement Managed Rule Group Statement Scope Down Statement Geo Match Statement Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_configbelow for details.
- country_codes Sequence[str]
- Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- forwarded_ip_ Webconfig Acl Rule Statement Managed Rule Group Statement Scope Down Statement Geo Match Statement Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_configbelow for details.
- countryCodes List<String>
- Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- forwardedIp Property MapConfig 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_configbelow for details.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementGeoMatchStatementForwardedIpConfig, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementGeoMatchStatementForwardedIpConfigArgs                                  
- FallbackBehavior string
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- HeaderName string
- Name of the HTTP header to use for the IP address.
- FallbackBehavior string
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- HeaderName string
- Name of the HTTP header to use for the IP address.
- fallbackBehavior String
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName String
- Name of the HTTP header to use for the IP address.
- fallbackBehavior string
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName string
- Name of the HTTP header to use for the IP address.
- fallback_behavior str
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- header_name str
- Name of the HTTP header to use for the IP address.
- fallbackBehavior String
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName String
- Name of the HTTP header to use for the IP address.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementIpSetReferenceStatement, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementIpSetReferenceStatementArgs                              
- Arn string
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- IpSet WebForwarded Ip Config Acl Rule Statement Managed Rule Group Statement Scope Down Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_configbelow for more details.
- Arn string
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- IpSet WebForwarded Ip Config Acl Rule Statement Managed Rule Group Statement Scope Down Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_configbelow for more details.
- arn String
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- ipSet WebForwarded Ip Config Acl Rule Statement Managed Rule Group Statement Scope Down Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_configbelow for more details.
- arn string
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- ipSet WebForwarded Ip Config Acl Rule Statement Managed Rule Group Statement Scope Down Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_configbelow for more details.
- arn str
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- ip_set_ Webforwarded_ ip_ config Acl Rule Statement Managed Rule Group Statement Scope Down Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_configbelow for more details.
- arn String
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- ipSet Property MapForwarded Ip Config 
- Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_configbelow for more details.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementIpSetReferenceStatementIpSetForwardedIpConfig, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementIpSetReferenceStatementIpSetForwardedIpConfigArgs                                        
- FallbackBehavior string
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- HeaderName string
- Name of the HTTP header to use for the IP address.
- Position string
- Position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- FallbackBehavior string
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- HeaderName string
- Name of the HTTP header to use for the IP address.
- Position string
- Position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- fallbackBehavior String
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName String
- Name of the HTTP header to use for the IP address.
- position String
- Position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- fallbackBehavior string
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName string
- Name of the HTTP header to use for the IP address.
- position string
- Position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- fallback_behavior str
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- header_name str
- Name of the HTTP header to use for the IP address.
- position str
- Position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- fallbackBehavior String
- Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName String
- Name of the HTTP header to use for the IP address.
- position String
- Position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementLabelMatchStatement, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementLabelMatchStatementArgs                            
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementNotStatement, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementNotStatementArgs                          
- Statements
List<WebAcl Rule Statement> 
- The statements to combine.
- Statements
[]WebAcl Rule Statement 
- The statements to combine.
- statements
List<WebAcl Rule Statement> 
- The statements to combine.
- statements
WebAcl Rule Statement[] 
- The statements to combine.
- statements
Sequence[WebAcl Rule Statement] 
- The statements to combine.
- statements List<Property Map>
- The statements to combine.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementOrStatement, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementOrStatementArgs                          
- Statements
List<WebAcl Rule Statement> 
- The statements to combine.
- Statements
[]WebAcl Rule Statement 
- The statements to combine.
- statements
List<WebAcl Rule Statement> 
- The statements to combine.
- statements
WebAcl Rule Statement[] 
- The statements to combine.
- statements
Sequence[WebAcl Rule Statement] 
- The statements to combine.
- statements List<Property Map>
- The statements to combine.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatement, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementArgs                            
- RegexString string
- String representing the regular expression. Minimum of 1and maximum of512characters.
- TextTransformations List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- FieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- RegexString string
- String representing the regular expression. Minimum of 1and maximum of512characters.
- TextTransformations []WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- FieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- regexString String
- String representing the regular expression. Minimum of 1and maximum of512characters.
- textTransformations List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- regexString string
- String representing the regular expression. Minimum of 1and maximum of512characters.
- textTransformations WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- regex_string str
- String representing the regular expression. Minimum of 1and maximum of512characters.
- text_transformations Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- field_to_ Webmatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- regexString String
- String representing the regular expression. Minimum of 1and maximum of512characters.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo Property MapMatch 
- The part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatch, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchArgs                                  
- AllQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- HeaderOrders List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header Order> 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- Headers
List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header> 
- Inspect the request headers. See headersbelow for details.
- Ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- Method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- SingleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- UriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- AllQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- HeaderOrders []WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header Order 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- Headers
[]WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header 
- Inspect the request headers. See headersbelow for details.
- Ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- Method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- SingleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- UriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header Order> 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header> 
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- singleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header Order[] 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header[] 
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- singleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- all_query_ Webarguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- header_orders Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header Order] 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header] 
- Inspect the request headers. See headersbelow for details.
- ja3_fingerprint WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4_fingerprint WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- json_body WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- query_string WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- single_header WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- single_query_ Webargument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uri_path WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery Property MapArguments 
- Inspect all query arguments.
- body Property Map
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- Property Map
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders List<Property Map>
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers List<Property Map>
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody Property Map
- Inspect the request body as JSON. See json_bodyfor details.
- method Property Map
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString Property Map
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader Property Map
- Inspect a single header. See single_headerbelow for details.
- singleQuery Property MapArgument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath Property Map
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchBody, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchBodyArgs                                    
- OversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- OversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling String
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversize_handling str
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling String
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchCookies, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchCookiesArgs                                    
- MatchPatterns List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- MatchPatterns []WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern[] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- match_patterns Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- match_scope str
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversize_handling str
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns List<Property Map>
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchCookiesMatchPattern, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchCookiesMatchPatternArgs                                        
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<string>
- List<string>
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- []string
- []string
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- string[]
- string[]
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- Sequence[str]
- Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchHeader, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchHeaderArgs                                    
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- match_pattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- match_scope str
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern Property Map
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchHeaderMatchPattern, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchHeaderMatchPatternArgs                                        
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders List<string>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders List<string>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders []string
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders []string
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders string[]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders string[]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excluded_headers Sequence[str]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- included_headers Sequence[str]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchHeaderOrder, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchHeaderOrderArgs                                      
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchJa3Fingerprint, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchJa3FingerprintArgs                                    
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchJa4Fingerprint, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchJa4FingerprintArgs                                    
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchJsonBody, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchJsonBodyArgs                                      
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- match_pattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- match_scope str
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalid_fallback_ strbehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversize_handling str
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern Property Map
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchJsonBodyMatchPatternArgs                                          
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths List<string>
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths []string
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths string[]
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- included_paths Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchSingleHeader, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchSingleHeaderArgs                                      
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchSingleQueryArgument, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementFieldToMatchSingleQueryArgumentArgs                                        
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementTextTransformation, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexMatchStatementTextTransformationArgs                                
- Priority int
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- Transformation to apply, please refer to the Text Transformation documentation for more details.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatement, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementArgs                                
- Arn string
- The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
- TextTransformations List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- FieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- Arn string
- The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
- TextTransformations []WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- FieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- arn String
- The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
- textTransformations List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- arn string
- The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
- textTransformations WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- arn str
- The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
- text_transformations Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- field_to_ Webmatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- arn String
- The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo Property MapMatch 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatch, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchArgs                                      
- AllQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- HeaderOrders List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Order> 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- Headers
List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header> 
- Inspect the request headers. See headersbelow for details.
- Ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- Method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- SingleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- UriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- AllQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- HeaderOrders []WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Order 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- Headers
[]WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header 
- Inspect the request headers. See headersbelow for details.
- Ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- Method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- SingleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- UriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Order> 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header> 
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- singleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Order[] 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header[] 
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- singleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- all_query_ Webarguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- header_orders Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Order] 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header] 
- Inspect the request headers. See headersbelow for details.
- ja3_fingerprint WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4_fingerprint WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- json_body WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- query_string WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- single_header WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- single_query_ Webargument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uri_path WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery Property MapArguments 
- Inspect all query arguments.
- body Property Map
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- Property Map
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders List<Property Map>
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers List<Property Map>
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody Property Map
- Inspect the request body as JSON. See json_bodyfor details.
- method Property Map
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString Property Map
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader Property Map
- Inspect a single header. See single_headerbelow for details.
- singleQuery Property MapArgument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath Property Map
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchBody, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchBodyArgs                                        
- OversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- OversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling String
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversize_handling str
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling String
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchCookies, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchCookiesArgs                                        
- MatchPatterns List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- MatchPatterns []WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern[] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- match_patterns Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- match_scope str
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversize_handling str
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns List<Property Map>
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPatternArgs                                            
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<string>
- List<string>
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- []string
- []string
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- string[]
- string[]
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- Sequence[str]
- Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchHeader, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchHeaderArgs                                        
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- match_pattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- match_scope str
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern Property Map
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternArgs                                            
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders List<string>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders List<string>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders []string
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders []string
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders string[]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders string[]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excluded_headers Sequence[str]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- included_headers Sequence[str]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchHeaderOrder, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchHeaderOrderArgs                                          
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchJa3Fingerprint, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchJa3FingerprintArgs                                        
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchJa4Fingerprint, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchJa4FingerprintArgs                                        
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyArgs                                          
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- match_pattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- match_scope str
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalid_fallback_ strbehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversize_handling str
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern Property Map
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPatternArgs                                              
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths List<string>
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths []string
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths string[]
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- included_paths Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeaderArgs                                          
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgumentArgs                                            
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementTextTransformation, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementRegexPatternSetReferenceStatementTextTransformationArgs                                    
- Priority int
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- Transformation to apply, please refer to the Text Transformation documentation for more details.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatement, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementArgs                            
- ComparisonOperator string
- Operator to use to compare the request part to the size setting. Valid values include: EQ,NE,LE,LT,GE, orGT.
- Size int
- Size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
- TextTransformations List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- FieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- ComparisonOperator string
- Operator to use to compare the request part to the size setting. Valid values include: EQ,NE,LE,LT,GE, orGT.
- Size int
- Size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
- TextTransformations []WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- FieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- comparisonOperator String
- Operator to use to compare the request part to the size setting. Valid values include: EQ,NE,LE,LT,GE, orGT.
- size Integer
- Size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
- textTransformations List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- comparisonOperator string
- Operator to use to compare the request part to the size setting. Valid values include: EQ,NE,LE,LT,GE, orGT.
- size number
- Size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
- textTransformations WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- comparison_operator str
- Operator to use to compare the request part to the size setting. Valid values include: EQ,NE,LE,LT,GE, orGT.
- size int
- Size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
- text_transformations Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- field_to_ Webmatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- comparisonOperator String
- Operator to use to compare the request part to the size setting. Valid values include: EQ,NE,LE,LT,GE, orGT.
- size Number
- Size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo Property MapMatch 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatch, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchArgs                                  
- AllQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- HeaderOrders List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header Order> 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- Headers
List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header> 
- Inspect the request headers. See headersbelow for details.
- Ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- Method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- SingleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- UriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- AllQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- HeaderOrders []WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header Order 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- Headers
[]WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header 
- Inspect the request headers. See headersbelow for details.
- Ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- Method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- SingleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- UriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header Order> 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header> 
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- singleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header Order[] 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header[] 
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- singleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- all_query_ Webarguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- header_orders Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header Order] 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header] 
- Inspect the request headers. See headersbelow for details.
- ja3_fingerprint WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4_fingerprint WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- json_body WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- query_string WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- single_header WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- single_query_ Webargument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uri_path WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery Property MapArguments 
- Inspect all query arguments.
- body Property Map
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- Property Map
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders List<Property Map>
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers List<Property Map>
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody Property Map
- Inspect the request body as JSON. See json_bodyfor details.
- method Property Map
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString Property Map
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader Property Map
- Inspect a single header. See single_headerbelow for details.
- singleQuery Property MapArgument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath Property Map
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchBody, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchBodyArgs                                    
- OversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- OversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling String
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversize_handling str
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling String
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchCookies, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchCookiesArgs                                    
- MatchPatterns List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- MatchPatterns []WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern[] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- match_patterns Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- match_scope str
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversize_handling str
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns List<Property Map>
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchCookiesMatchPatternArgs                                        
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<string>
- List<string>
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- []string
- []string
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- string[]
- string[]
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- Sequence[str]
- Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchHeader, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchHeaderArgs                                    
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- match_pattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- match_scope str
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern Property Map
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternArgs                                        
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders List<string>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders List<string>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders []string
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders []string
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders string[]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders string[]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excluded_headers Sequence[str]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- included_headers Sequence[str]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchHeaderOrder, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchHeaderOrderArgs                                      
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchJa3Fingerprint, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchJa3FingerprintArgs                                    
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchJa4Fingerprint, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchJa4FingerprintArgs                                    
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchJsonBody, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchJsonBodyArgs                                      
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- match_pattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- match_scope str
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalid_fallback_ strbehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversize_handling str
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern Property Map
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPatternArgs                                          
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths List<string>
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths []string
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths string[]
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- included_paths Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchSingleHeader, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchSingleHeaderArgs                                      
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchSingleQueryArgument, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementFieldToMatchSingleQueryArgumentArgs                                        
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementTextTransformation, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSizeConstraintStatementTextTransformationArgs                                
- Priority int
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- Transformation to apply, please refer to the Text Transformation documentation for more details.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatement, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementArgs                            
- TextTransformations List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- FieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- SensitivityLevel string
- Sensitivity that you want AWS WAF to use to inspect for SQL injection attacks. Valid values include: LOW,HIGH.
- TextTransformations []WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- FieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- SensitivityLevel string
- Sensitivity that you want AWS WAF to use to inspect for SQL injection attacks. Valid values include: LOW,HIGH.
- textTransformations List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- sensitivityLevel String
- Sensitivity that you want AWS WAF to use to inspect for SQL injection attacks. Valid values include: LOW,HIGH.
- textTransformations WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- sensitivityLevel string
- Sensitivity that you want AWS WAF to use to inspect for SQL injection attacks. Valid values include: LOW,HIGH.
- text_transformations Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- field_to_ Webmatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- sensitivity_level str
- Sensitivity that you want AWS WAF to use to inspect for SQL injection attacks. Valid values include: LOW,HIGH.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo Property MapMatch 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- sensitivityLevel String
- Sensitivity that you want AWS WAF to use to inspect for SQL injection attacks. Valid values include: LOW,HIGH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatch, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchArgs                                  
- AllQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- HeaderOrders List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header Order> 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- Headers
List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header> 
- Inspect the request headers. See headersbelow for details.
- Ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- Method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- SingleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- UriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- AllQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- HeaderOrders []WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header Order 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- Headers
[]WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header 
- Inspect the request headers. See headersbelow for details.
- Ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- Method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- SingleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- UriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header Order> 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header> 
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- singleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header Order[] 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header[] 
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- singleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- all_query_ Webarguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- header_orders Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header Order] 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header] 
- Inspect the request headers. See headersbelow for details.
- ja3_fingerprint WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4_fingerprint WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- json_body WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- query_string WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- single_header WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- single_query_ Webargument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uri_path WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery Property MapArguments 
- Inspect all query arguments.
- body Property Map
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- Property Map
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders List<Property Map>
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers List<Property Map>
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody Property Map
- Inspect the request body as JSON. See json_bodyfor details.
- method Property Map
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString Property Map
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader Property Map
- Inspect a single header. See single_headerbelow for details.
- singleQuery Property MapArgument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath Property Map
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchBody, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchBodyArgs                                    
- OversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- OversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling String
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversize_handling str
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling String
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchCookies, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchCookiesArgs                                    
- MatchPatterns List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- MatchPatterns []WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern[] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- match_patterns Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- match_scope str
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversize_handling str
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns List<Property Map>
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchCookiesMatchPattern, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchCookiesMatchPatternArgs                                        
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<string>
- List<string>
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- []string
- []string
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- string[]
- string[]
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- Sequence[str]
- Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchHeader, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchHeaderArgs                                    
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- match_pattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- match_scope str
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern Property Map
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchHeaderMatchPattern, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchHeaderMatchPatternArgs                                        
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders List<string>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders List<string>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders []string
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders []string
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders string[]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders string[]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excluded_headers Sequence[str]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- included_headers Sequence[str]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchHeaderOrder, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchHeaderOrderArgs                                      
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchJa3Fingerprint, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchJa3FingerprintArgs                                    
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchJa4Fingerprint, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchJa4FingerprintArgs                                    
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchJsonBody, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchJsonBodyArgs                                      
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- match_pattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- match_scope str
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalid_fallback_ strbehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversize_handling str
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern Property Map
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchJsonBodyMatchPatternArgs                                          
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths List<string>
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths []string
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths string[]
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- included_paths Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchSingleHeader, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchSingleHeaderArgs                                      
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchSingleQueryArgument, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementFieldToMatchSingleQueryArgumentArgs                                        
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- Name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- Name of the query header to inspect. This setting must be provided as lower case characters.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementTextTransformation, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementSqliMatchStatementTextTransformationArgs                                
- Priority int
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- Transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- Transformation to apply, please refer to the Text Transformation documentation for more details.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementXssMatchStatement, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementXssMatchStatementArgs                            
- TextTransformations List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- FieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- TextTransformations []WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- FieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- textTransformations List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- textTransformations WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo WebMatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- text_transformations Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- field_to_ Webmatch Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one transformation is required. See text_transformationbelow for details.
- fieldTo Property MapMatch 
- Part of a web request that you want AWS WAF to inspect. See field_to_matchbelow for details.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementXssMatchStatementFieldToMatch, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementXssMatchStatementFieldToMatchArgs                                  
- AllQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- HeaderOrders List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header Order> 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- Headers
List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header> 
- Inspect the request headers. See headersbelow for details.
- Ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- Method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- SingleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- UriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- AllQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- HeaderOrders []WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header Order 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- Headers
[]WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header 
- Inspect the request headers. See headersbelow for details.
- Ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- Method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- SingleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- UriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header Order> 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header> 
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- singleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery WebArguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header Order[] 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header[] 
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- singleQuery WebArgument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- all_query_ Webarguments Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- 
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See cookiesbelow for details.
- header_orders Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header Order] 
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers
Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header] 
- Inspect the request headers. See headersbelow for details.
- ja3_fingerprint WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4_fingerprint WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- json_body WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See json_bodyfor details.
- method
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- query_string WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- single_header WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Single Header 
- Inspect a single header. See single_headerbelow for details.
- single_query_ Webargument Acl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uri_path WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery Property MapArguments 
- Inspect all query arguments.
- body Property Map
- Inspect the request body, which immediately follows the request headers. See bodybelow for details.
- Property Map
- Inspect the cookies in the web request. See cookiesbelow for details.
- headerOrders List<Property Map>
- Inspect a string containing the list of the request's header names, ordered as they appear in the web request that AWS WAF receives for inspection. See header_orderbelow for details.
- headers List<Property Map>
- Inspect the request headers. See headersbelow for details.
- ja3Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody Property Map
- Inspect the request body as JSON. See json_bodyfor details.
- method Property Map
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString Property Map
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader Property Map
- Inspect a single header. See single_headerbelow for details.
- singleQuery Property MapArgument 
- Inspect a single query argument. See single_query_argumentbelow for details.
- uriPath Property Map
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementXssMatchStatementFieldToMatchBody, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementXssMatchStatementFieldToMatchBodyArgs                                    
- OversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- OversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling String
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling string
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversize_handling str
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
- oversizeHandling String
- What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE,MATCH,NO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementXssMatchStatementFieldToMatchCookies, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementXssMatchStatementFieldToMatchCookiesArgs                                    
- MatchPatterns List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- MatchPatterns []WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns List<WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern[] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- match_patterns Sequence[WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- match_scope str
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversize_handling str
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
- matchPatterns List<Property Map>
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementXssMatchStatementFieldToMatchCookiesMatchPattern, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementXssMatchStatementFieldToMatchCookiesMatchPatternArgs                                        
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<string>
- List<string>
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- []string
- []string
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- string[]
- string[]
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- Sequence[str]
- Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementXssMatchStatementFieldToMatchHeader, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementXssMatchStatementFieldToMatchHeaderArgs                                    
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- MatchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- match_pattern WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- match_scope str
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern Property Map
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementXssMatchStatementFieldToMatchHeaderMatchPattern, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementXssMatchStatementFieldToMatchHeaderMatchPatternArgs                                        
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders List<string>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders List<string>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- All
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders []string
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders []string
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders string[]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders string[]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
WebAcl Rule Statement Managed Rule Group Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excluded_headers Sequence[str]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- included_headers Sequence[str]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementXssMatchStatementFieldToMatchHeaderOrder, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementXssMatchStatementFieldToMatchHeaderOrderArgs                                      
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementXssMatchStatementFieldToMatchJa3Fingerprint, WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementXssMatchStatementFieldToMatchJa3FingerprintArgs                                    
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- Match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
Package Details
- Repository
- AWS Classic pulumi/pulumi-aws
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the awsTerraform Provider.