public static interface CfnRuleGroup.IPSetReferenceStatementProperty
To use this, create an IPSet
that specifies the addresses you want to detect, then use the ARN of that set in this statement.
Each IP set rule statement references an IP set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it.
Example:
// The code below shows an example of how to instantiate this type. // The values are placeholders you should change. import software.amazon.awscdk.services.wafv2.*; IPSetReferenceStatementProperty iPSetReferenceStatementProperty = Map.of( "arn", "arn", // the properties below are optional "ipSetForwardedIpConfig", Map.of( "fallbackBehavior", "fallbackBehavior", "headerName", "headerName", "position", "position"));
Modifier and Type | Interface and Description |
---|---|
static class |
CfnRuleGroup.IPSetReferenceStatementProperty.Builder
A builder for
CfnRuleGroup.IPSetReferenceStatementProperty |
static class |
CfnRuleGroup.IPSetReferenceStatementProperty.Jsii$Proxy
An implementation for
CfnRuleGroup.IPSetReferenceStatementProperty |
Modifier and Type | Method and Description |
---|---|
static CfnRuleGroup.IPSetReferenceStatementProperty.Builder |
builder() |
java.lang.String |
getArn()
The Amazon Resource Name (ARN) of the `IPSet` that this statement references.
|
default java.lang.Object |
getIpSetForwardedIpConfig()
The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin.
|
java.lang.String getArn()
default java.lang.Object getIpSetForwardedIpConfig()
Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.
If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
static CfnRuleGroup.IPSetReferenceStatementProperty.Builder builder()