ResponseInspectionBodyContains
Configures inspection of the response body. AWS WAF can inspect the first 65,536 bytes (64 KB) of the response body.
This is part of the ResponseInspection
configuration for AWSManagedRulesATPRuleSet
and AWSManagedRulesACFPRuleSet
.
Note
Response inspection is available only in web ACLs that protect Amazon CloudFront distributions.
Contents
- FailureStrings
-
Strings in the body of the response that indicate a failed login or account creation attempt. To be counted as a failure, the string can be anywhere in the body and must be an exact match, including case. Each string must be unique among the success and failure strings.
JSON example:
"FailureStrings": [ "Request failed" ]
Type: Array of strings
Array Members: Minimum number of 1 item. Maximum number of 5 items.
Length Constraints: Minimum length of 1. Maximum length of 100.
Pattern:
.*\S.*
Required: Yes
- SuccessStrings
-
Strings in the body of the response that indicate a successful login or account creation attempt. To be counted as a success, the string can be anywhere in the body and must be an exact match, including case. Each string must be unique among the success and failure strings.
JSON examples:
"SuccessStrings": [ "Login successful" ]
and"SuccessStrings": [ "Account creation successful", "Welcome to our site!" ]
Type: Array of strings
Array Members: Minimum number of 1 item. Maximum number of 5 items.
Length Constraints: Minimum length of 1. Maximum length of 100.
Pattern:
.*\S.*
Required: Yes
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following: