aws-cdk-lib.aws_waf

AWS Web Application Firewall Construct Library

This module is part of the AWS Cloud Development Kit project.

import * as waf from 'aws-cdk-lib/aws-waf';

import aws_cdk.aws_waf as waf

import software.amazon.awscdk.services.waf.*;

using Amazon.CDK.AWS.WAF;

import waf "github.com/aws/aws-cdk-go/awscdk"

There are no official hand-written (L2) constructs for this service yet. Here are some suggestions on how to proceed:

• Search Construct Hub for WAF construct libraries
• Use the automatically generated L1 constructs, in the same way you would use the CloudFormation AWS::WAF resources directly.

There are no hand-written (L2) constructs for this service yet. However, you can still use the automatically generated L1 constructs, and use this service exactly as you would using CloudFormation directly.

For more information on the resources and properties available for this service, see the CloudFormation documentation for AWS::WAF.

(Read the CDK Contributing Guide and submit an RFC if you are interested in contributing to this construct library.)

Types

Name	Kind	Summary
CfnByteMatchSet	Construct (L1)	> This is AWS WAF Classic documentation.
CfnIPSet	Construct (L1)	> AWS WAF Classic support will end on September 30, 2025.
CfnRule	Construct (L1)	> This is AWS WAF Classic documentation.
CfnSizeConstraintSet	Construct (L1)	> AWS WAF Classic support will end on September 30, 2025.
CfnSqlInjectionMatchSet	Construct (L1)	> AWS WAF Classic support will end on September 30, 2025.
CfnWebACL	Construct (L1)	> This is AWS WAF Classic documentation.
CfnXssMatchSet	Construct (L1)	> AWS WAF Classic support will end on September 30, 2025.
CfnByteMatchSet.ByteMatchTupleProperty	Struct	> AWS WAF Classic support will end on September 30, 2025.
CfnByteMatchSet.FieldToMatchProperty	Struct	> AWS WAF Classic support will end on September 30, 2025.
CfnByteMatchSetProps	Struct	Properties for defining a CfnByteMatchSet.
CfnIPSet.IPSetDescriptorProperty	Struct	> AWS WAF Classic support will end on September 30, 2025.
CfnIPSetProps	Struct	Properties for defining a CfnIPSet.
CfnRule.PredicateProperty	Struct	Specifies the ByteMatchSet , IPSet , SqlInjectionMatchSet , XssMatchSet , RegexMatchSet , GeoMatchSet , and SizeConstraintSet objects that you want to add to a Rule and, for each object, indicates whether you want to negate the settings, for example, requests that do NOT originate from the IP address 192.0.2.44.
CfnRuleProps	Struct	Properties for defining a CfnRule.
CfnSizeConstraintSet.FieldToMatchProperty	Struct	The part of a web request that you want to inspect, such as a specified header or a query string.
CfnSizeConstraintSet.SizeConstraintProperty	Struct	> AWS WAF Classic support will end on September 30, 2025.
CfnSizeConstraintSetProps	Struct	Properties for defining a CfnSizeConstraintSet.
CfnSqlInjectionMatchSet.FieldToMatchProperty	Struct	The part of a web request that you want to inspect, such as a specified header or a query string.
CfnSqlInjectionMatchSet.SqlInjectionMatchTupleProperty	Struct	> AWS WAF Classic support will end on September 30, 2025.
CfnSqlInjectionMatchSetProps	Struct	Properties for defining a CfnSqlInjectionMatchSet.
CfnWebACL.ActivatedRuleProperty	Struct	The ActivatedRule object in an UpdateWebACL request specifies a Rule that you want to insert or delete, the priority of the Rule in the WebACL , and the action that you want AWS WAF to take when a web request matches the Rule ( ALLOW , BLOCK , or COUNT ).
CfnWebACL.WafActionProperty	Struct	> AWS WAF Classic support will end on September 30, 2025.
CfnWebACLProps	Struct	Properties for defining a CfnWebACL.
CfnXssMatchSet.FieldToMatchProperty	Struct	The part of a web request that you want to inspect, such as a specified header or a query string.
CfnXssMatchSet.XssMatchTupleProperty	Struct	> AWS WAF Classic support will end on September 30, 2025.
CfnXssMatchSetProps	Struct	Properties for defining a CfnXssMatchSet.