Package software.amazon.awssdk.services.wafv2.model
package software.amazon.awssdk.services.wafv2.model
-
ClassDescriptionA single action condition for a Condition in a logging filter.The name of a field in the request payload that contains part or all of your customer's primary physical address.Inspect all of the elements that WAF has parsed and extracted from the web request component that you've identified in your FieldToMatch specifications.Specifies that WAF should allow the request and optionally defines additional custom handling for the request.Inspect all query arguments of the web request.A logical rule statement used to combine other rule statements with AND logic.Information for a single API key.Specifies custom configurations for the associations between the web ACL and protected resources.Details for your use of the account creation fraud prevention managed rule group,
AWSManagedRulesACFPRuleSet
.Details for your use of the account takeover prevention managed rule group,AWSManagedRulesATPRuleSet
.Details for your use of the Bot Control managed rule group,AWSManagedRulesBotControlRuleSet
.Specifies that WAF should block the request and optionally defines additional custom handling for the response to the web request.Inspect the body of the web request.A rule statement that defines a string match search for WAF to apply to web requests.Specifies that WAF should run aCAPTCHA
check against the request:Specifies how WAF should handleCAPTCHA
evaluations.The result from the inspection of the web request for a validCAPTCHA
token.Specifies that WAF should run aChallenge
check against the request to verify that the request is coming from a legitimate client session:Specifies how WAF should handleChallenge
evaluations.The result from the inspection of the web request for a valid challenge token.A single match condition for a Filter.The filter to use to identify the subset of cookies to inspect in a web request.Inspect the cookies in the web request.Specifies that WAF should count the request.A custom header for custom request and response handling.Custom request handling behavior that inserts custom headers into a web request.A custom response to send to the client.The response body to use in a custom response to a web request.In a WebACL, this is the action that you want WAF to perform when a web request doesn't match any of the rules in theWebACL
.The name of the field in the request payload that contains your customer's email.Specifies a single rule in a rule group whose action you want to override toCount
.Specifies a web request component to be used in a rule match statement or in a logging configuration.A single logging filter, used in LoggingFilter.A rule group that's defined for an Firewall Manager WAF policy.The processing guidance for an Firewall Manager rule.The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin.A rule statement that labels web requests by country and region and that matches against web requests based on country code.The filter to use to identify the subset of headers to inspect in a web request.Inspect a string containing the list of the request's header names, ordered as they appear in the web request that WAF receives for inspection.Inspect all headers in the web request.Part of the response from GetSampledRequests.Part of the response from GetSampledRequests.Used for CAPTCHA and challenge token settings.Contains zero or more IP addresses or blocks of IP addresses specified in Classless Inter-Domain Routing (CIDR) notation.The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin.A rule statement used to detect web requests coming from particular IP addresses or address ranges.High-level information about an IPSet, returned by operations like create and list.Match against the request's JA3 fingerprint.Inspect the body of the web request as JSON.The patterns to look for in the JSON body.A single label container.A rule statement to match against labels that have been added to the web request by rules that have already run in the web ACL.A single label name condition for a Condition in a logging filter.List of labels used by one or more of the rules of a RuleGroup.Defines an association between logging destinations and a web ACL resource, for logging from WAF.Filtering that specifies which web requests are kept in the logs and which are dropped, defined for a web ACL's LoggingConfiguration.The properties of a managed product, such as an Amazon Web Services Managed Rules rule group or an Amazon Web Services Marketplace managed rule group.Additional information that's used by a managed rule group.A rule statement used to run the rules that are defined in a managed rule group.High-level information about a managed rule group, returned by ListAvailableManagedRuleGroups.Describes a single version of a managed rule group.A set of rules that is managed by Amazon Web Services and Amazon Web Services Marketplace sellers to provide versioned managed rule groups for customers of WAF.High-level information for a managed rule set.Information for a single version of a managed rule set.Inspect the HTTP method of the web request.Information for a release of the mobile SDK, including release notes and tags.Specifies that WAF should do nothing.A logical rule statement used to negate the results of another rule statement.A logical rule statement used to combine other rule statements with OR logic.The action to use in the place of the action that results from the rule group evaluation.The name of the field in the request payload that contains your customer's password.The name of a field in the request payload that contains part or all of your customer's primary phone number.Inspect the query string of the web request.A rate-based rule counts incoming requests and rate limits requests when they are coming at too fast a rate.Specifies a single custom aggregate key for a rate-base rule.The set of IP addresses that are currently blocked for a RateBasedStatement.Specifies a cookie as an aggregate key for a rate-based rule.Specifies the first IP address in an HTTP header as an aggregate key for a rate-based rule.Specifies a header as an aggregate key for a rate-based rule.Specifies the request's HTTP method as an aggregate key for a rate-based rule.Specifies the IP address in the web request as an aggregate key for a rate-based rule.Specifies a label namespace to use as an aggregate key for a rate-based rule.Specifies a query argument in the request as an aggregate key for a rate-based rule.Specifies the request's query string as an aggregate key for a rate-based rule.Specifies the request's URI path as an aggregate key for a rate-based rule.A single regular expression.A rule statement used to search web request components for a match against a single regular expression.Contains one or more regular expressions.A rule statement used to search web request components for matches with regular expressions.High-level information about a RegexPatternSet, returned by operations like create and list.High level information for an SDK release.Customizes the maximum size of the request body that your protected CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access resources forward to WAF for inspection.The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage.The criteria for inspecting account creation requests, used by the ACFP rule group to validate and track account creation attempts.The criteria for inspecting responses to login requests and account creation requests, used by the ATP and ACFP rule groups to track login and account creation success and failure rates.Configures inspection of the response body.Configures inspection of the response header.Configures inspection of the response JSON.Configures inspection of the response status code.The action that WAF should take on a web request when it matches a rule's statement.Action setting to use in the place of a rule action that is configured inside the rule group.A rule group defines a collection of rules to inspect and control web requests that you can use in a WebACL.A rule statement used to run the rules that are defined in a RuleGroup.High-level information about a RuleGroup, returned by operations like create and list.High-level information about a Rule, returned by operations like DescribeManagedRuleGroup.Represents a single sampled web request.Inspect one of the headers in the web request, identified by name, for example,User-Agent
orReferer
.Inspect one query argument in the web request, identified by name, for example UserName or SalesRegion.A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<).A rule statement that inspects for malicious SQL code.The processing guidance for a Rule, used by WAF to determine whether a web request matches the rule.A tag associated with an Amazon Web Services resource.The collection of tagging definitions for an Amazon Web Services resource.Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection.In a GetSampledRequests request, theStartTime
andEndTime
objects specify the time range for which you want WAF to return a sample of web requests.Inspect the path component of the URI of the web request.The name of the field in the request payload that contains your customer's username.A version of the named managed rule group, that the rule group's vendor publishes for use by customers.Defines and enables Amazon CloudWatch metrics and web request sample collection.WAF couldn’t perform the operation because your resource is being used by another resource or it’s associated with another resource.The operation failed because you are inspecting the web request body, headers, or cookies without specifying how to handle oversize components.WAF couldn’t perform the operation because the resource that you tried to save is a duplicate of an existing one.The operation failed because the specified version for the managed rule group has expired.Your request is valid, but WAF couldn’t perform the operation because of a system problem.The operation isn't valid.The operation failed because WAF didn't recognize a parameter in the request.The operation failed because the specified policy isn't in the proper format.WAF couldn’t perform the operation because the resource that you requested isn’t valid.WAF couldn’t perform the operation because you exceeded your resource limit.The operation failed because you don't have the permissions that your logging configuration requires.WAF couldn’t perform the operation because your resource doesn't exist.WAF couldn’t save your changes because you tried to update or delete a resource that has changed since you last retrieved it.WAF is not able to access the service linked role.You tried to use a managed rule group that's available by subscription, but you aren't subscribed to it yet.An error occurred during the tagging operation.WAF couldn’t perform your tagging operation because of an internal error.WAF couldn’t retrieve a resource that you specified for this operation.The rule that you've named doesn't aggregate solely on the IP address or solely on the forwarded IP address.A web ACL defines a collection of rules to use to inspect and control web requests.High-level information about a WebACL, returned by operations like create and list.A rule statement that inspects for cross-site scripting (XSS) attacks.