AWS CloudFormation
User Guide (API Version 2010-05-15)

AWS WAF SqlInjectionMatchSet SqlInjectionMatchTuples

SqlInjectionMatchTuples is a property of the AWS::WAF::SqlInjectionMatchSet resource that specifies the parts of web requests that AWS WAF inspects for SQL code.



{ "FieldToMatch" : Field to match, "TextTransformation" : String }


FieldToMatch: Field to match TextTransformation: String



The part of a web request that you want AWS WAF to search, such as a specific header or a query string.

Required: Yes

Type: AWS WAF ByteMatchSet ByteMatchTuples FieldToMatch


Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass AWS WAF. If you specify a transformation, AWS WAF transforms the target string value before inspecting a web request for a match. For valid values, see the TextTransformation content for the SqlInjectionMatchTuple data type in the AWS WAF API Reference.

Required: Yes

Type: String

On this page: