Menu
AWS CloudFormation
User Guide (API Version 2010-05-15)

AWS WAF Regional SqlInjectionMatchSet SqlInjectionMatchTuples

SqlInjectionMatchTuples is a property of the AWS::WAFRegional::SqlInjectionMatchSet resource that specifies the parts of web requests that AWS WAF inspects for SQL code.

Syntax

JSON

Copy
{ "FieldToMatch" : Field to match, "TextTransformation" : String }

YAML

Copy
FieldToMatch: Field to match TextTransformation: String

Properties

FieldToMatch

The part of a web request that you want AWS WAF to search, such as a specific header or a query string.

Required: Yes

Type: AWS WAF Regional ByteMatchSet ByteMatchTuples FieldToMatch

TextTransformation

Specifies how AWS WAF processes the FieldToMatch property before inspecting a request for a match.

Note

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass AWS WAF. If you specify a transformation, AWS WAF transforms the target string value before inspecting a web request for a match. For valid values, see the TextTransformation content for the SqlInjectionMatchTuple data type in the AWS WAF Regional API Reference.

Required: Yes

Type: String

On this page: