AWS::WAFv2::WebACL RateBasedStatementOne - AWS CloudFormation

AWS::WAFv2::WebACL RateBasedStatementOne

A rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any 5-minute time span. You can use this to put a temporary block on requests from an IP address that's sending excessive requests.

When the rule action triggers, AWS WAF blocks additional requests from the IP address until the request rate falls below the limit.

You can optionally nest another statement inside the rate-based statement, to narrow the scope of the rule so that it only counts requests that match the nested statement. You can't nest a RateBasedStatement, for example for use inside a NotStatement or OrStatement. It can only be referenced as a top-level statement within a rule.


To declare this entity in your AWS CloudFormation template, use the following syntax:



Setting that indicates how to aggregate the request counts. The options are the following:

  • IP - Aggregate the request counts on the IP address from the web request origin.

  • FORWARDED_IP - Aggregate the request counts on the first IP address in an HTTP header. If you use this, configure the ForwardedIPConfig, to specify the header to use.

Required: Yes

Type: String

Allowed values: FORWARDED_IP | IP

Update requires: No interruption


Not currently supported by AWS CloudFormation.

Required: No

Type: ForwardedIPConfiguration

Update requires: No interruption


Limit on the web request that match any nested statement criteria in any 5 minute period.

Required: Yes

Type: Integer

Update requires: No interruption


Statement nested inside a rate-based statement to narrow the scope of the requests that AWS WAF counts.

Required: No

Type: StatementTwo

Update requires: No interruption