Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. AWS
  4. API Docs
  5. wafv2
  6. RuleGroup
Viewing docs for AWS v5.43.0 (Older version)
published on Tuesday, Mar 10, 2026 by Pulumi
Go to latest version
Schema (JSON)
pulumi/pulumi-aws

aws.wafv2.RuleGroup

aws logo
Viewing docs for AWS v5.43.0 (Older version)
published on Tuesday, Mar 10, 2026 by Pulumi
Go to latest version
Schema (JSON)
pulumi/pulumi-aws

    Creates a WAFv2 Rule Group resource.

    Example Usage

    Simple

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = new Aws.WafV2.RuleGroup("example", new()
    {
        Capacity = 2,
        Rules = new[]
        {
            new Aws.WafV2.Inputs.RuleGroupRuleArgs
            {
                Action = new Aws.WafV2.Inputs.RuleGroupRuleActionArgs
                {
                    Allow = null,
                },
                Name = "rule-1",
                Priority = 1,
                Statement = new Aws.WafV2.Inputs.RuleGroupRuleStatementArgs
                {
                    GeoMatchStatement = new Aws.WafV2.Inputs.RuleGroupRuleStatementGeoMatchStatementArgs
                    {
                        CountryCodes = new[]
                        {
                            "US",
                            "NL",
                        },
                    },
                },
                VisibilityConfig = new Aws.WafV2.Inputs.RuleGroupRuleVisibilityConfigArgs
                {
                    CloudwatchMetricsEnabled = false,
                    MetricName = "friendly-rule-metric-name",
                    SampledRequestsEnabled = false,
                },
            },
        },
        Scope = "REGIONAL",
        VisibilityConfig = new Aws.WafV2.Inputs.RuleGroupVisibilityConfigArgs
        {
            CloudwatchMetricsEnabled = false,
            MetricName = "friendly-metric-name",
            SampledRequestsEnabled = false,
        },
    });

});

    package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v5/go/aws/wafv2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := wafv2.NewRuleGroup(ctx, "example", &wafv2.RuleGroupArgs{
			Capacity: pulumi.Int(2),
			Rules: wafv2.RuleGroupRuleArray{
				&wafv2.RuleGroupRuleArgs{
					Action: &wafv2.RuleGroupRuleActionArgs{
						Allow: nil,
					},
					Name:     pulumi.String("rule-1"),
					Priority: pulumi.Int(1),
					Statement: &wafv2.RuleGroupRuleStatementArgs{
						GeoMatchStatement: &wafv2.RuleGroupRuleStatementGeoMatchStatementArgs{
							CountryCodes: pulumi.StringArray{
								pulumi.String("US"),
								pulumi.String("NL"),
							},
						},
					},
					VisibilityConfig: &wafv2.RuleGroupRuleVisibilityConfigArgs{
						CloudwatchMetricsEnabled: pulumi.Bool(false),
						MetricName:               pulumi.String("friendly-rule-metric-name"),
						SampledRequestsEnabled:   pulumi.Bool(false),
					},
				},
			},
			Scope: pulumi.String("REGIONAL"),
			VisibilityConfig: &wafv2.RuleGroupVisibilityConfigArgs{
				CloudwatchMetricsEnabled: pulumi.Bool(false),
				MetricName:               pulumi.String("friendly-metric-name"),
				SampledRequestsEnabled:   pulumi.Bool(false),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.wafv2.RuleGroup;
import com.pulumi.aws.wafv2.RuleGroupArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleActionArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleActionAllowArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleStatementArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleStatementGeoMatchStatementArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleVisibilityConfigArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupVisibilityConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new RuleGroup("example", RuleGroupArgs.builder()        
            .capacity(2)
            .rules(RuleGroupRuleArgs.builder()
                .action(RuleGroupRuleActionArgs.builder()
                    .allow()
                    .build())
                .name("rule-1")
                .priority(1)
                .statement(RuleGroupRuleStatementArgs.builder()
                    .geoMatchStatement(RuleGroupRuleStatementGeoMatchStatementArgs.builder()
                        .countryCodes(                        
                            "US",
                            "NL")
                        .build())
                    .build())
                .visibilityConfig(RuleGroupRuleVisibilityConfigArgs.builder()
                    .cloudwatchMetricsEnabled(false)
                    .metricName("friendly-rule-metric-name")
                    .sampledRequestsEnabled(false)
                    .build())
                .build())
            .scope("REGIONAL")
            .visibilityConfig(RuleGroupVisibilityConfigArgs.builder()
                .cloudwatchMetricsEnabled(false)
                .metricName("friendly-metric-name")
                .sampledRequestsEnabled(false)
                .build())
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.wafv2.RuleGroup("example", {
    capacity: 2,
    rules: [{
        action: {
            allow: {},
        },
        name: "rule-1",
        priority: 1,
        statement: {
            geoMatchStatement: {
                countryCodes: [
                    "US",
                    "NL",
                ],
            },
        },
        visibilityConfig: {
            cloudwatchMetricsEnabled: false,
            metricName: "friendly-rule-metric-name",
            sampledRequestsEnabled: false,
        },
    }],
    scope: "REGIONAL",
    visibilityConfig: {
        cloudwatchMetricsEnabled: false,
        metricName: "friendly-metric-name",
        sampledRequestsEnabled: false,
    },
});

    import pulumi
import pulumi_aws as aws

example = aws.wafv2.RuleGroup("example",
    capacity=2,
    rules=[aws.wafv2.RuleGroupRuleArgs(
        action=aws.wafv2.RuleGroupRuleActionArgs(
            allow=aws.wafv2.RuleGroupRuleActionAllowArgs(),
        ),
        name="rule-1",
        priority=1,
        statement=aws.wafv2.RuleGroupRuleStatementArgs(
            geo_match_statement=aws.wafv2.RuleGroupRuleStatementGeoMatchStatementArgs(
                country_codes=[
                    "US",
                    "NL",
                ],
            ),
        ),
        visibility_config=aws.wafv2.RuleGroupRuleVisibilityConfigArgs(
            cloudwatch_metrics_enabled=False,
            metric_name="friendly-rule-metric-name",
            sampled_requests_enabled=False,
        ),
    )],
    scope="REGIONAL",
    visibility_config=aws.wafv2.RuleGroupVisibilityConfigArgs(
        cloudwatch_metrics_enabled=False,
        metric_name="friendly-metric-name",
        sampled_requests_enabled=False,
    ))

    resources:
  example:
    type: aws:wafv2:RuleGroup
    properties:
      capacity: 2
      rules:
        - action:
            allow: {}
          name: rule-1
          priority: 1
          statement:
            geoMatchStatement:
              countryCodes:
                - US
                - NL
          visibilityConfig:
            cloudwatchMetricsEnabled: false
            metricName: friendly-rule-metric-name
            sampledRequestsEnabled: false
      scope: REGIONAL
      visibilityConfig:
        cloudwatchMetricsEnabled: false
        metricName: friendly-metric-name
        sampledRequestsEnabled: false

    Complex

    Example coming soon!

    Example coming soon!

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.wafv2.IpSet;
import com.pulumi.aws.wafv2.IpSetArgs;
import com.pulumi.aws.wafv2.RegexPatternSet;
import com.pulumi.aws.wafv2.RegexPatternSetArgs;
import com.pulumi.aws.wafv2.inputs.RegexPatternSetRegularExpressionArgs;
import com.pulumi.aws.wafv2.RuleGroup;
import com.pulumi.aws.wafv2.RuleGroupArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleActionArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleActionBlockArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleStatementArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleStatementNotStatementArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleVisibilityConfigArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleActionCountArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleStatementOrStatementArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleCaptchaConfigArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleCaptchaConfigImmunityTimePropertyArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleStatementSizeConstraintStatementArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleStatementSizeConstraintStatementFieldToMatchArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleStatementSizeConstraintStatementFieldToMatchSingleQueryArgumentArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupVisibilityConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var testIpSet = new IpSet("testIpSet", IpSetArgs.builder()        
            .scope("REGIONAL")
            .ipAddressVersion("IPV4")
            .addresses(            
                "1.1.1.1/32",
                "2.2.2.2/32")
            .build());

        var testRegexPatternSet = new RegexPatternSet("testRegexPatternSet", RegexPatternSetArgs.builder()        
            .scope("REGIONAL")
            .regularExpressions(RegexPatternSetRegularExpressionArgs.builder()
                .regexString("one")
                .build())
            .build());

        var example = new RuleGroup("example", RuleGroupArgs.builder()        
            .description("An rule group containing all statements")
            .scope("REGIONAL")
            .capacity(500)
            .rules(            
                RuleGroupRuleArgs.builder()
                    .name("rule-1")
                    .priority(1)
                    .action(RuleGroupRuleActionArgs.builder()
                        .block()
                        .build())
                    .statement(RuleGroupRuleStatementArgs.builder()
                        .notStatement(RuleGroupRuleStatementNotStatementArgs.builder()
                            .statements(RuleGroupRuleStatementNotStatementStatementArgs.builder()
                                .andStatement(RuleGroupRuleStatementNotStatementStatementAndStatementArgs.builder()
                                    .statements(                                    
                                        RuleGroupRuleStatementNotStatementStatementAndStatementStatementArgs.builder()
                                            .geoMatchStatement(RuleGroupRuleStatementNotStatementStatementAndStatementStatementGeoMatchStatementArgs.builder()
                                                .countryCodes("US")
                                                .build())
                                            .build(),
                                        RuleGroupRuleStatementNotStatementStatementAndStatementStatementArgs.builder()
                                            .byteMatchStatement(RuleGroupRuleStatementNotStatementStatementAndStatementStatementByteMatchStatementArgs.builder()
                                                .positionalConstraint("CONTAINS")
                                                .searchString("word")
                                                .fieldToMatch(RuleGroupRuleStatementNotStatementStatementAndStatementStatementByteMatchStatementFieldToMatchArgs.builder()
                                                    .allQueryArguments()
                                                    .build())
                                                .textTransformations(                                                
                                                    RuleGroupRuleStatementNotStatementStatementAndStatementStatementByteMatchStatementTextTransformationArgs.builder()
                                                        .priority(5)
                                                        .type("CMD_LINE")
                                                        .build(),
                                                    RuleGroupRuleStatementNotStatementStatementAndStatementStatementByteMatchStatementTextTransformationArgs.builder()
                                                        .priority(2)
                                                        .type("LOWERCASE")
                                                        .build())
                                                .build())
                                            .build())
                                    .build())
                                .build())
                            .build())
                        .build())
                    .visibilityConfig(RuleGroupRuleVisibilityConfigArgs.builder()
                        .cloudwatchMetricsEnabled(false)
                        .metricName("rule-1")
                        .sampledRequestsEnabled(false)
                        .build())
                    .build(),
                RuleGroupRuleArgs.builder()
                    .name("rule-2")
                    .priority(2)
                    .action(RuleGroupRuleActionArgs.builder()
                        .count()
                        .build())
                    .statement(RuleGroupRuleStatementArgs.builder()
                        .orStatement(RuleGroupRuleStatementOrStatementArgs.builder()
                            .statements(                            
                                RuleGroupRuleStatementOrStatementStatementArgs.builder()
                                    .regexMatchStatement(RuleGroupRuleStatementOrStatementStatementRegexMatchStatementArgs.builder()
                                        .regexString("a-z?")
                                        .fieldToMatch(RuleGroupRuleStatementOrStatementStatementRegexMatchStatementFieldToMatchArgs.builder()
                                            .singleHeader(RuleGroupRuleStatementOrStatementStatementRegexMatchStatementFieldToMatchSingleHeaderArgs.builder()
                                                .name("user-agent")
                                                .build())
                                            .build())
                                        .textTransformations(RuleGroupRuleStatementOrStatementStatementRegexMatchStatementTextTransformationArgs.builder()
                                            .priority(6)
                                            .type("NONE")
                                            .build())
                                        .build())
                                    .build(),
                                RuleGroupRuleStatementOrStatementStatementArgs.builder()
                                    .sqliMatchStatement(RuleGroupRuleStatementOrStatementStatementSqliMatchStatementArgs.builder()
                                        .fieldToMatch(RuleGroupRuleStatementOrStatementStatementSqliMatchStatementFieldToMatchArgs.builder()
                                            .body()
                                            .build())
                                        .textTransformations(                                        
                                            RuleGroupRuleStatementOrStatementStatementSqliMatchStatementTextTransformationArgs.builder()
                                                .priority(5)
                                                .type("URL_DECODE")
                                                .build(),
                                            RuleGroupRuleStatementOrStatementStatementSqliMatchStatementTextTransformationArgs.builder()
                                                .priority(4)
                                                .type("HTML_ENTITY_DECODE")
                                                .build(),
                                            RuleGroupRuleStatementOrStatementStatementSqliMatchStatementTextTransformationArgs.builder()
                                                .priority(3)
                                                .type("COMPRESS_WHITE_SPACE")
                                                .build())
                                        .build())
                                    .build(),
                                RuleGroupRuleStatementOrStatementStatementArgs.builder()
                                    .xssMatchStatement(RuleGroupRuleStatementOrStatementStatementXssMatchStatementArgs.builder()
                                        .fieldToMatch(RuleGroupRuleStatementOrStatementStatementXssMatchStatementFieldToMatchArgs.builder()
                                            .method()
                                            .build())
                                        .textTransformations(RuleGroupRuleStatementOrStatementStatementXssMatchStatementTextTransformationArgs.builder()
                                            .priority(2)
                                            .type("NONE")
                                            .build())
                                        .build())
                                    .build())
                            .build())
                        .build())
                    .visibilityConfig(RuleGroupRuleVisibilityConfigArgs.builder()
                        .cloudwatchMetricsEnabled(false)
                        .metricName("rule-2")
                        .sampledRequestsEnabled(false)
                        .build())
                    .captchaConfig(RuleGroupRuleCaptchaConfigArgs.builder()
                        .immunityTimeProperty(RuleGroupRuleCaptchaConfigImmunityTimePropertyArgs.builder()
                            .immunityTime(240)
                            .build())
                        .build())
                    .build(),
                RuleGroupRuleArgs.builder()
                    .name("rule-3")
                    .priority(3)
                    .action(RuleGroupRuleActionArgs.builder()
                        .block()
                        .build())
                    .statement(RuleGroupRuleStatementArgs.builder()
                        .sizeConstraintStatement(RuleGroupRuleStatementSizeConstraintStatementArgs.builder()
                            .comparisonOperator("GT")
                            .size(100)
                            .fieldToMatch(RuleGroupRuleStatementSizeConstraintStatementFieldToMatchArgs.builder()
                                .singleQueryArgument(RuleGroupRuleStatementSizeConstraintStatementFieldToMatchSingleQueryArgumentArgs.builder()
                                    .name("username")
                                    .build())
                                .build())
                            .textTransformations(RuleGroupRuleStatementSizeConstraintStatementTextTransformationArgs.builder()
                                .priority(5)
                                .type("NONE")
                                .build())
                            .build())
                        .build())
                    .visibilityConfig(RuleGroupRuleVisibilityConfigArgs.builder()
                        .cloudwatchMetricsEnabled(false)
                        .metricName("rule-3")
                        .sampledRequestsEnabled(false)
                        .build())
                    .build(),
                RuleGroupRuleArgs.builder()
                    .name("rule-4")
                    .priority(4)
                    .action(RuleGroupRuleActionArgs.builder()
                        .block()
                        .build())
                    .statement(RuleGroupRuleStatementArgs.builder()
                        .orStatement(RuleGroupRuleStatementOrStatementArgs.builder()
                            .statements(                            
                                RuleGroupRuleStatementOrStatementStatementArgs.builder()
                                    .ipSetReferenceStatement(RuleGroupRuleStatementOrStatementStatementIpSetReferenceStatementArgs.builder()
                                        .arn(testIpSet.arn())
                                        .build())
                                    .build(),
                                RuleGroupRuleStatementOrStatementStatementArgs.builder()
                                    .regexPatternSetReferenceStatement(RuleGroupRuleStatementOrStatementStatementRegexPatternSetReferenceStatementArgs.builder()
                                        .arn(testRegexPatternSet.arn())
                                        .fieldToMatch(RuleGroupRuleStatementOrStatementStatementRegexPatternSetReferenceStatementFieldToMatchArgs.builder()
                                            .singleHeader(RuleGroupRuleStatementOrStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeaderArgs.builder()
                                                .name("referer")
                                                .build())
                                            .build())
                                        .textTransformations(RuleGroupRuleStatementOrStatementStatementRegexPatternSetReferenceStatementTextTransformationArgs.builder()
                                            .priority(2)
                                            .type("NONE")
                                            .build())
                                        .build())
                                    .build())
                            .build())
                        .build())
                    .visibilityConfig(RuleGroupRuleVisibilityConfigArgs.builder()
                        .cloudwatchMetricsEnabled(false)
                        .metricName("rule-4")
                        .sampledRequestsEnabled(false)
                        .build())
                    .build())
            .visibilityConfig(RuleGroupVisibilityConfigArgs.builder()
                .cloudwatchMetricsEnabled(false)
                .metricName("friendly-metric-name")
                .sampledRequestsEnabled(false)
                .build())
            .captchaConfig(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
            .tags(Map.ofEntries(
                Map.entry("Name", "example-and-statement"),
                Map.entry("Code", "123456")
            ))
            .build());

    }
}

    Example coming soon!

    Example coming soon!

    resources:
  testIpSet:
    type: aws:wafv2:IpSet
    properties:
      scope: REGIONAL
      ipAddressVersion: IPV4
      addresses:
        - 1.1.1.1/32
        - 2.2.2.2/32
  testRegexPatternSet:
    type: aws:wafv2:RegexPatternSet
    properties:
      scope: REGIONAL
      regularExpressions:
        - regexString: one
  example:
    type: aws:wafv2:RuleGroup
    properties:
      description: An rule group containing all statements
      scope: REGIONAL
      capacity: 500
      rules:
        - name: rule-1
          priority: 1
          action:
            block: {}
          statement:
            notStatement:
              statements:
                - andStatement:
                    statements:
                      - geoMatchStatement:
                          countryCodes:
                            - US
                      - byteMatchStatement:
                          positionalConstraint: CONTAINS
                          searchString: word
                          fieldToMatch:
                            allQueryArguments: {}
                          textTransformations:
                            - priority: 5
                              type: CMD_LINE
                            - priority: 2
                              type: LOWERCASE
          visibilityConfig:
            cloudwatchMetricsEnabled: false
            metricName: rule-1
            sampledRequestsEnabled: false
        - name: rule-2
          priority: 2
          action:
            count: {}
          statement:
            orStatement:
              statements:
                - regexMatchStatement:
                    regexString: a-z?
                    fieldToMatch:
                      singleHeader:
                        name: user-agent
                    textTransformations:
                      - priority: 6
                        type: NONE
                - sqliMatchStatement:
                    fieldToMatch:
                      body: {}
                    textTransformations:
                      - priority: 5
                        type: URL_DECODE
                      - priority: 4
                        type: HTML_ENTITY_DECODE
                      - priority: 3
                        type: COMPRESS_WHITE_SPACE
                - xssMatchStatement:
                    fieldToMatch:
                      method: {}
                    textTransformations:
                      - priority: 2
                        type: NONE
          visibilityConfig:
            cloudwatchMetricsEnabled: false
            metricName: rule-2
            sampledRequestsEnabled: false
          captchaConfig:
            immunityTimeProperty:
              immunityTime: 240
        - name: rule-3
          priority: 3
          action:
            block: {}
          statement:
            sizeConstraintStatement:
              comparisonOperator: GT
              size: 100
              fieldToMatch:
                singleQueryArgument:
                  name: username
              textTransformations:
                - priority: 5
                  type: NONE
          visibilityConfig:
            cloudwatchMetricsEnabled: false
            metricName: rule-3
            sampledRequestsEnabled: false
        - name: rule-4
          priority: 4
          action:
            block: {}
          statement:
            orStatement:
              statements:
                - ipSetReferenceStatement:
                    arn: ${testIpSet.arn}
                - regexPatternSetReferenceStatement:
                    arn: ${testRegexPatternSet.arn}
                    fieldToMatch:
                      singleHeader:
                        name: referer
                    textTransformations:
                      - priority: 2
                        type: NONE
          visibilityConfig:
            cloudwatchMetricsEnabled: false
            metricName: rule-4
            sampledRequestsEnabled: false
      visibilityConfig:
        cloudwatchMetricsEnabled: false
        metricName: friendly-metric-name
        sampledRequestsEnabled: false
      captchaConfig:
        - immunityTimeProperty:
            - immunityTime: 120
      tags:
        Name: example-and-statement
        Code: '123456'

    Create RuleGroup Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new RuleGroup(name: string, args: RuleGroupArgs, opts?: CustomResourceOptions);
    @overload
def RuleGroup(resource_name: str,
              args: RuleGroupArgs,
              opts: Optional[ResourceOptions] = None)

@overload
def RuleGroup(resource_name: str,
              opts: Optional[ResourceOptions] = None,
              capacity: Optional[int] = None,
              custom_response_bodies: Optional[Sequence[RuleGroupCustomResponseBodyArgs]] = None,
              description: Optional[str] = None,
              name: Optional[str] = None,
              rules: Optional[Sequence[RuleGroupRuleArgs]] = None,
              scope: Optional[str] = None,
              tags: Optional[Mapping[str, str]] = None,
              visibility_config: Optional[RuleGroupVisibilityConfigArgs] = None)
    func NewRuleGroup(ctx *Context, name string, args RuleGroupArgs, opts ...ResourceOption) (*RuleGroup, error)
    public RuleGroup(string name, RuleGroupArgs args, CustomResourceOptions? opts = null)
    public RuleGroup(String name, RuleGroupArgs args)
public RuleGroup(String name, RuleGroupArgs args, CustomResourceOptions options)

    type: aws:wafv2:RuleGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args RuleGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args RuleGroupArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args RuleGroupArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args RuleGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args RuleGroupArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    RuleGroup Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The RuleGroup resource accepts the following input properties:

    Capacity int
    The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
    Scope string
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    VisibilityConfig RuleGroupVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
    CustomResponseBodies List<RuleGroupCustomResponseBody>
    Defines custom response bodies that can be referenced by custom_response actions. See Custom Response Body below for details.
    Description string
    A friendly description of the rule group.
    Name string
    A friendly name of the rule group.
    Rules List<RuleGroupRule>
    The rule blocks used to identify the web requests that you want to allow, block, or count. See Rules below for details.
    Tags Dictionary<string, string>
    An array of key:value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    Capacity int
    The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
    Scope string
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    VisibilityConfig RuleGroupVisibilityConfigArgs
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
    CustomResponseBodies []RuleGroupCustomResponseBodyArgs
    Defines custom response bodies that can be referenced by custom_response actions. See Custom Response Body below for details.
    Description string
    A friendly description of the rule group.
    Name string
    A friendly name of the rule group.
    Rules []RuleGroupRuleArgs
    The rule blocks used to identify the web requests that you want to allow, block, or count. See Rules below for details.
    Tags map[string]string
    An array of key:value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    capacity Integer
    The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
    scope String
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    visibilityConfig RuleGroupVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
    customResponseBodies List<RuleGroupCustomResponseBody>
    Defines custom response bodies that can be referenced by custom_response actions. See Custom Response Body below for details.
    description String
    A friendly description of the rule group.
    name String
    A friendly name of the rule group.
    rules List<RuleGroupRule>
    The rule blocks used to identify the web requests that you want to allow, block, or count. See Rules below for details.
    tags Map<String,String>
    An array of key:value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    capacity number
    The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
    scope string
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    visibilityConfig RuleGroupVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
    customResponseBodies RuleGroupCustomResponseBody[]
    Defines custom response bodies that can be referenced by custom_response actions. See Custom Response Body below for details.
    description string
    A friendly description of the rule group.
    name string
    A friendly name of the rule group.
    rules RuleGroupRule[]
    The rule blocks used to identify the web requests that you want to allow, block, or count. See Rules below for details.
    tags {[key: string]: string}
    An array of key:value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    capacity int
    The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
    scope str
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    visibility_config RuleGroupVisibilityConfigArgs
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
    custom_response_bodies Sequence[RuleGroupCustomResponseBodyArgs]
    Defines custom response bodies that can be referenced by custom_response actions. See Custom Response Body below for details.
    description str
    A friendly description of the rule group.
    name str
    A friendly name of the rule group.
    rules Sequence[RuleGroupRuleArgs]
    The rule blocks used to identify the web requests that you want to allow, block, or count. See Rules below for details.
    tags Mapping[str, str]
    An array of key:value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    capacity Number
    The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
    scope String
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    visibilityConfig Property Map
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
    customResponseBodies List<Property Map>
    Defines custom response bodies that can be referenced by custom_response actions. See Custom Response Body below for details.
    description String
    A friendly description of the rule group.
    name String
    A friendly name of the rule group.
    rules List<Property Map>
    The rule blocks used to identify the web requests that you want to allow, block, or count. See Rules below for details.
    tags Map<String>
    An array of key:value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the RuleGroup resource produces the following output properties:

    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    Id string
    The provider-assigned unique ID for this managed resource.
    LockToken string
    TagsAll Dictionary<string, string>
    A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    Id string
    The provider-assigned unique ID for this managed resource.
    LockToken string
    TagsAll map[string]string
    A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    id String
    The provider-assigned unique ID for this managed resource.
    lockToken String
    tagsAll Map<String,String>
    A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    id string
    The provider-assigned unique ID for this managed resource.
    lockToken string
    tagsAll {[key: string]: string}
    A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    arn str
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    id str
    The provider-assigned unique ID for this managed resource.
    lock_token str
    tags_all Mapping[str, str]
    A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    id String
    The provider-assigned unique ID for this managed resource.
    lockToken String
    tagsAll Map<String>
    A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

    Look up Existing RuleGroup Resource

    Get an existing RuleGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: RuleGroupState, opts?: CustomResourceOptions): RuleGroup
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        arn: Optional[str] = None,
        capacity: Optional[int] = None,
        custom_response_bodies: Optional[Sequence[RuleGroupCustomResponseBodyArgs]] = None,
        description: Optional[str] = None,
        lock_token: Optional[str] = None,
        name: Optional[str] = None,
        rules: Optional[Sequence[RuleGroupRuleArgs]] = None,
        scope: Optional[str] = None,
        tags: Optional[Mapping[str, str]] = None,
        tags_all: Optional[Mapping[str, str]] = None,
        visibility_config: Optional[RuleGroupVisibilityConfigArgs] = None) -> RuleGroup
    func GetRuleGroup(ctx *Context, name string, id IDInput, state *RuleGroupState, opts ...ResourceOption) (*RuleGroup, error)
    public static RuleGroup Get(string name, Input<string> id, RuleGroupState? state, CustomResourceOptions? opts = null)
    public static RuleGroup get(String name, Output<String> id, RuleGroupState state, CustomResourceOptions options)
    resources:  _:    type: aws:wafv2:RuleGroup    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    Capacity int
    The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
    CustomResponseBodies List<RuleGroupCustomResponseBody>
    Defines custom response bodies that can be referenced by custom_response actions. See Custom Response Body below for details.
    Description string
    A friendly description of the rule group.
    LockToken string
    Name string
    A friendly name of the rule group.
    Rules List<RuleGroupRule>
    The rule blocks used to identify the web requests that you want to allow, block, or count. See Rules below for details.
    Scope string
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    Tags Dictionary<string, string>
    An array of key:value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    TagsAll Dictionary<string, string>
    A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    VisibilityConfig RuleGroupVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    Capacity int
    The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
    CustomResponseBodies []RuleGroupCustomResponseBodyArgs
    Defines custom response bodies that can be referenced by custom_response actions. See Custom Response Body below for details.
    Description string
    A friendly description of the rule group.
    LockToken string
    Name string
    A friendly name of the rule group.
    Rules []RuleGroupRuleArgs
    The rule blocks used to identify the web requests that you want to allow, block, or count. See Rules below for details.
    Scope string
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    Tags map[string]string
    An array of key:value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    TagsAll map[string]string
    A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    VisibilityConfig RuleGroupVisibilityConfigArgs
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    capacity Integer
    The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
    customResponseBodies List<RuleGroupCustomResponseBody>
    Defines custom response bodies that can be referenced by custom_response actions. See Custom Response Body below for details.
    description String
    A friendly description of the rule group.
    lockToken String
    name String
    A friendly name of the rule group.
    rules List<RuleGroupRule>
    The rule blocks used to identify the web requests that you want to allow, block, or count. See Rules below for details.
    scope String
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    tags Map<String,String>
    An array of key:value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tagsAll Map<String,String>
    A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    visibilityConfig RuleGroupVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
    arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    capacity number
    The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
    customResponseBodies RuleGroupCustomResponseBody[]
    Defines custom response bodies that can be referenced by custom_response actions. See Custom Response Body below for details.
    description string
    A friendly description of the rule group.
    lockToken string
    name string
    A friendly name of the rule group.
    rules RuleGroupRule[]
    The rule blocks used to identify the web requests that you want to allow, block, or count. See Rules below for details.
    scope string
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    tags {[key: string]: string}
    An array of key:value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tagsAll {[key: string]: string}
    A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    visibilityConfig RuleGroupVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
    arn str
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    capacity int
    The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
    custom_response_bodies Sequence[RuleGroupCustomResponseBodyArgs]
    Defines custom response bodies that can be referenced by custom_response actions. See Custom Response Body below for details.
    description str
    A friendly description of the rule group.
    lock_token str
    name str
    A friendly name of the rule group.
    rules Sequence[RuleGroupRuleArgs]
    The rule blocks used to identify the web requests that you want to allow, block, or count. See Rules below for details.
    scope str
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    tags Mapping[str, str]
    An array of key:value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tags_all Mapping[str, str]
    A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    visibility_config RuleGroupVisibilityConfigArgs
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    capacity Number
    The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
    customResponseBodies List<Property Map>
    Defines custom response bodies that can be referenced by custom_response actions. See Custom Response Body below for details.
    description String
    A friendly description of the rule group.
    lockToken String
    name String
    A friendly name of the rule group.
    rules List<Property Map>
    The rule blocks used to identify the web requests that you want to allow, block, or count. See Rules below for details.
    scope String
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    tags Map<String>
    An array of key:value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tagsAll Map<String>
    A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    visibilityConfig Property Map
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.

    Supporting Types

    Note: There are over 200 nested types for this resource. Only the first 200 types are included in this documentation.

    RuleGroupCustomResponseBody, RuleGroupCustomResponseBodyArgs

    Content string
    The payload of the custom response.
    ContentType string
    The type of content in the payload that you are defining in the content argument. Valid values are TEXT_PLAIN, TEXT_HTML, or APPLICATION_JSON.
    Key string
    A unique key identifying the custom response body. This is referenced by the custom_response_body_key argument in the Custom Response block.
    Content string
    The payload of the custom response.
    ContentType string
    The type of content in the payload that you are defining in the content argument. Valid values are TEXT_PLAIN, TEXT_HTML, or APPLICATION_JSON.
    Key string
    A unique key identifying the custom response body. This is referenced by the custom_response_body_key argument in the Custom Response block.
    content String
    The payload of the custom response.
    contentType String
    The type of content in the payload that you are defining in the content argument. Valid values are TEXT_PLAIN, TEXT_HTML, or APPLICATION_JSON.
    key String
    A unique key identifying the custom response body. This is referenced by the custom_response_body_key argument in the Custom Response block.
    content string
    The payload of the custom response.
    contentType string
    The type of content in the payload that you are defining in the content argument. Valid values are TEXT_PLAIN, TEXT_HTML, or APPLICATION_JSON.
    key string
    A unique key identifying the custom response body. This is referenced by the custom_response_body_key argument in the Custom Response block.
    content str
    The payload of the custom response.
    content_type str
    The type of content in the payload that you are defining in the content argument. Valid values are TEXT_PLAIN, TEXT_HTML, or APPLICATION_JSON.
    key str
    A unique key identifying the custom response body. This is referenced by the custom_response_body_key argument in the Custom Response block.
    content String
    The payload of the custom response.
    contentType String
    The type of content in the payload that you are defining in the content argument. Valid values are TEXT_PLAIN, TEXT_HTML, or APPLICATION_JSON.
    key String
    A unique key identifying the custom response body. This is referenced by the custom_response_body_key argument in the Custom Response block.

    RuleGroupRule, RuleGroupRuleArgs

    Action RuleGroupRuleAction
    The action that AWS WAF should take on a web request when it matches the rule's statement. Settings at the aws.wafv2.WebAcl level can override the rule action setting. See Action below for details.
    Name string
    A friendly name of the rule.
    Priority int
    If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rules in order based on the value of priority. AWS WAF processes rules with lower priority first.
    Statement RuleGroupRuleStatement
    The AWS WAF processing statement for the rule, for example byte_match_statement or geo_match_statement. See Statement below for details.
    VisibilityConfig RuleGroupRuleVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
    CaptchaConfig RuleGroupRuleCaptchaConfig
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    RuleLabels List<RuleGroupRuleRuleLabel>
    Labels to apply to web requests that match the rule match statement. See Rule Label below for details.
    Action RuleGroupRuleAction
    The action that AWS WAF should take on a web request when it matches the rule's statement. Settings at the aws.wafv2.WebAcl level can override the rule action setting. See Action below for details.
    Name string
    A friendly name of the rule.
    Priority int
    If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rules in order based on the value of priority. AWS WAF processes rules with lower priority first.
    Statement RuleGroupRuleStatement
    The AWS WAF processing statement for the rule, for example byte_match_statement or geo_match_statement. See Statement below for details.
    VisibilityConfig RuleGroupRuleVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
    CaptchaConfig RuleGroupRuleCaptchaConfig
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    RuleLabels []RuleGroupRuleRuleLabel
    Labels to apply to web requests that match the rule match statement. See Rule Label below for details.
    action RuleGroupRuleAction
    The action that AWS WAF should take on a web request when it matches the rule's statement. Settings at the aws.wafv2.WebAcl level can override the rule action setting. See Action below for details.
    name String
    A friendly name of the rule.
    priority Integer
    If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rules in order based on the value of priority. AWS WAF processes rules with lower priority first.
    statement RuleGroupRuleStatement
    The AWS WAF processing statement for the rule, for example byte_match_statement or geo_match_statement. See Statement below for details.
    visibilityConfig RuleGroupRuleVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
    captchaConfig RuleGroupRuleCaptchaConfig
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    ruleLabels List<RuleGroupRuleRuleLabel>
    Labels to apply to web requests that match the rule match statement. See Rule Label below for details.
    action RuleGroupRuleAction
    The action that AWS WAF should take on a web request when it matches the rule's statement. Settings at the aws.wafv2.WebAcl level can override the rule action setting. See Action below for details.
    name string
    A friendly name of the rule.
    priority number
    If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rules in order based on the value of priority. AWS WAF processes rules with lower priority first.
    statement RuleGroupRuleStatement
    The AWS WAF processing statement for the rule, for example byte_match_statement or geo_match_statement. See Statement below for details.
    visibilityConfig RuleGroupRuleVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
    captchaConfig RuleGroupRuleCaptchaConfig
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    ruleLabels RuleGroupRuleRuleLabel[]
    Labels to apply to web requests that match the rule match statement. See Rule Label below for details.
    action RuleGroupRuleAction
    The action that AWS WAF should take on a web request when it matches the rule's statement. Settings at the aws.wafv2.WebAcl level can override the rule action setting. See Action below for details.
    name str
    A friendly name of the rule.
    priority int
    If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rules in order based on the value of priority. AWS WAF processes rules with lower priority first.
    statement RuleGroupRuleStatement
    The AWS WAF processing statement for the rule, for example byte_match_statement or geo_match_statement. See Statement below for details.
    visibility_config RuleGroupRuleVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
    captcha_config RuleGroupRuleCaptchaConfig
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    rule_labels Sequence[RuleGroupRuleRuleLabel]
    Labels to apply to web requests that match the rule match statement. See Rule Label below for details.
    action Property Map
    The action that AWS WAF should take on a web request when it matches the rule's statement. Settings at the aws.wafv2.WebAcl level can override the rule action setting. See Action below for details.
    name String
    A friendly name of the rule.
    priority Number
    If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rules in order based on the value of priority. AWS WAF processes rules with lower priority first.
    statement Property Map
    The AWS WAF processing statement for the rule, for example byte_match_statement or geo_match_statement. See Statement below for details.
    visibilityConfig Property Map
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
    captchaConfig Property Map
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    ruleLabels List<Property Map>
    Labels to apply to web requests that match the rule match statement. See Rule Label below for details.

    RuleGroupRuleAction, RuleGroupRuleActionArgs

    Allow RuleGroupRuleActionAllow
    Instructs AWS WAF to allow the web request. See Allow below for details.
    Block RuleGroupRuleActionBlock
    Instructs AWS WAF to block the web request. See Block below for details.
    Captcha RuleGroupRuleActionCaptcha
    Instructs AWS WAF to run a CAPTCHA check against the web request. See Captcha below for details.
    Challenge RuleGroupRuleActionChallenge
    Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See Challenge below for details.
    Count RuleGroupRuleActionCount
    Instructs AWS WAF to count the web request and allow it. See Count below for details.
    Allow RuleGroupRuleActionAllow
    Instructs AWS WAF to allow the web request. See Allow below for details.
    Block RuleGroupRuleActionBlock
    Instructs AWS WAF to block the web request. See Block below for details.
    Captcha RuleGroupRuleActionCaptcha
    Instructs AWS WAF to run a CAPTCHA check against the web request. See Captcha below for details.
    Challenge RuleGroupRuleActionChallenge
    Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See Challenge below for details.
    Count RuleGroupRuleActionCount
    Instructs AWS WAF to count the web request and allow it. See Count below for details.
    allow RuleGroupRuleActionAllow
    Instructs AWS WAF to allow the web request. See Allow below for details.
    block RuleGroupRuleActionBlock
    Instructs AWS WAF to block the web request. See Block below for details.
    captcha RuleGroupRuleActionCaptcha
    Instructs AWS WAF to run a CAPTCHA check against the web request. See Captcha below for details.
    challenge RuleGroupRuleActionChallenge
    Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See Challenge below for details.
    count RuleGroupRuleActionCount
    Instructs AWS WAF to count the web request and allow it. See Count below for details.
    allow RuleGroupRuleActionAllow
    Instructs AWS WAF to allow the web request. See Allow below for details.
    block RuleGroupRuleActionBlock
    Instructs AWS WAF to block the web request. See Block below for details.
    captcha RuleGroupRuleActionCaptcha
    Instructs AWS WAF to run a CAPTCHA check against the web request. See Captcha below for details.
    challenge RuleGroupRuleActionChallenge
    Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See Challenge below for details.
    count RuleGroupRuleActionCount
    Instructs AWS WAF to count the web request and allow it. See Count below for details.
    allow RuleGroupRuleActionAllow
    Instructs AWS WAF to allow the web request. See Allow below for details.
    block RuleGroupRuleActionBlock
    Instructs AWS WAF to block the web request. See Block below for details.
    captcha RuleGroupRuleActionCaptcha
    Instructs AWS WAF to run a CAPTCHA check against the web request. See Captcha below for details.
    challenge RuleGroupRuleActionChallenge
    Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See Challenge below for details.
    count RuleGroupRuleActionCount
    Instructs AWS WAF to count the web request and allow it. See Count below for details.
    allow Property Map
    Instructs AWS WAF to allow the web request. See Allow below for details.
    block Property Map
    Instructs AWS WAF to block the web request. See Block below for details.
    captcha Property Map
    Instructs AWS WAF to run a CAPTCHA check against the web request. See Captcha below for details.
    challenge Property Map
    Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See Challenge below for details.
    count Property Map
    Instructs AWS WAF to count the web request and allow it. See Count below for details.

    RuleGroupRuleActionAllow, RuleGroupRuleActionAllowArgs

    CustomRequestHandling RuleGroupRuleActionAllowCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    CustomRequestHandling RuleGroupRuleActionAllowCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    customRequestHandling RuleGroupRuleActionAllowCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    customRequestHandling RuleGroupRuleActionAllowCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    custom_request_handling RuleGroupRuleActionAllowCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    customRequestHandling Property Map
    Defines custom handling for the web request. See Custom Request Handling below for details.

    RuleGroupRuleActionAllowCustomRequestHandling, RuleGroupRuleActionAllowCustomRequestHandlingArgs

    InsertHeaders List<RuleGroupRuleActionAllowCustomRequestHandlingInsertHeader>
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    InsertHeaders []RuleGroupRuleActionAllowCustomRequestHandlingInsertHeader
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    insertHeaders List<RuleGroupRuleActionAllowCustomRequestHandlingInsertHeader>
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    insertHeaders RuleGroupRuleActionAllowCustomRequestHandlingInsertHeader[]
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    insert_headers Sequence[RuleGroupRuleActionAllowCustomRequestHandlingInsertHeader]
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    insertHeaders List<Property Map>
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.

    RuleGroupRuleActionAllowCustomRequestHandlingInsertHeader, RuleGroupRuleActionAllowCustomRequestHandlingInsertHeaderArgs

    Name string
    A friendly name of the rule group.
    Value string
    The value of the custom header.
    Name string
    A friendly name of the rule group.
    Value string
    The value of the custom header.
    name String
    A friendly name of the rule group.
    value String
    The value of the custom header.
    name string
    A friendly name of the rule group.
    value string
    The value of the custom header.
    name str
    A friendly name of the rule group.
    value str
    The value of the custom header.
    name String
    A friendly name of the rule group.
    value String
    The value of the custom header.

    RuleGroupRuleActionBlock, RuleGroupRuleActionBlockArgs

    CustomResponse RuleGroupRuleActionBlockCustomResponse
    Defines a custom response for the web request. See Custom Response below for details.
    CustomResponse RuleGroupRuleActionBlockCustomResponse
    Defines a custom response for the web request. See Custom Response below for details.
    customResponse RuleGroupRuleActionBlockCustomResponse
    Defines a custom response for the web request. See Custom Response below for details.
    customResponse RuleGroupRuleActionBlockCustomResponse
    Defines a custom response for the web request. See Custom Response below for details.
    custom_response RuleGroupRuleActionBlockCustomResponse
    Defines a custom response for the web request. See Custom Response below for details.
    customResponse Property Map
    Defines a custom response for the web request. See Custom Response below for details.

    RuleGroupRuleActionBlockCustomResponse, RuleGroupRuleActionBlockCustomResponseArgs

    ResponseCode int
    The HTTP status code to return to the client.
    CustomResponseBodyKey string
    References the response body that you want AWS WAF to return to the web request client. This must reference a key defined in a custom_response_body block of this resource.
    ResponseHeaders List<RuleGroupRuleActionBlockCustomResponseResponseHeader>
    The response_header blocks used to define the HTTP response headers added to the response. See Custom HTTP Header below for details.
    ResponseCode int
    The HTTP status code to return to the client.
    CustomResponseBodyKey string
    References the response body that you want AWS WAF to return to the web request client. This must reference a key defined in a custom_response_body block of this resource.
    ResponseHeaders []RuleGroupRuleActionBlockCustomResponseResponseHeader
    The response_header blocks used to define the HTTP response headers added to the response. See Custom HTTP Header below for details.
    responseCode Integer
    The HTTP status code to return to the client.
    customResponseBodyKey String
    References the response body that you want AWS WAF to return to the web request client. This must reference a key defined in a custom_response_body block of this resource.
    responseHeaders List<RuleGroupRuleActionBlockCustomResponseResponseHeader>
    The response_header blocks used to define the HTTP response headers added to the response. See Custom HTTP Header below for details.
    responseCode number
    The HTTP status code to return to the client.
    customResponseBodyKey string
    References the response body that you want AWS WAF to return to the web request client. This must reference a key defined in a custom_response_body block of this resource.
    responseHeaders RuleGroupRuleActionBlockCustomResponseResponseHeader[]
    The response_header blocks used to define the HTTP response headers added to the response. See Custom HTTP Header below for details.
    response_code int
    The HTTP status code to return to the client.
    custom_response_body_key str
    References the response body that you want AWS WAF to return to the web request client. This must reference a key defined in a custom_response_body block of this resource.
    response_headers Sequence[RuleGroupRuleActionBlockCustomResponseResponseHeader]
    The response_header blocks used to define the HTTP response headers added to the response. See Custom HTTP Header below for details.
    responseCode Number
    The HTTP status code to return to the client.
    customResponseBodyKey String
    References the response body that you want AWS WAF to return to the web request client. This must reference a key defined in a custom_response_body block of this resource.
    responseHeaders List<Property Map>
    The response_header blocks used to define the HTTP response headers added to the response. See Custom HTTP Header below for details.

    RuleGroupRuleActionBlockCustomResponseResponseHeader, RuleGroupRuleActionBlockCustomResponseResponseHeaderArgs

    Name string
    A friendly name of the rule group.
    Value string
    The value of the custom header.
    Name string
    A friendly name of the rule group.
    Value string
    The value of the custom header.
    name String
    A friendly name of the rule group.
    value String
    The value of the custom header.
    name string
    A friendly name of the rule group.
    value string
    The value of the custom header.
    name str
    A friendly name of the rule group.
    value str
    The value of the custom header.
    name String
    A friendly name of the rule group.
    value String
    The value of the custom header.

    RuleGroupRuleActionCaptcha, RuleGroupRuleActionCaptchaArgs

    CustomRequestHandling RuleGroupRuleActionCaptchaCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    CustomRequestHandling RuleGroupRuleActionCaptchaCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    customRequestHandling RuleGroupRuleActionCaptchaCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    customRequestHandling RuleGroupRuleActionCaptchaCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    custom_request_handling RuleGroupRuleActionCaptchaCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    customRequestHandling Property Map
    Defines custom handling for the web request. See Custom Request Handling below for details.

    RuleGroupRuleActionCaptchaCustomRequestHandling, RuleGroupRuleActionCaptchaCustomRequestHandlingArgs

    InsertHeaders List<RuleGroupRuleActionCaptchaCustomRequestHandlingInsertHeader>
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    InsertHeaders []RuleGroupRuleActionCaptchaCustomRequestHandlingInsertHeader
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    insertHeaders List<RuleGroupRuleActionCaptchaCustomRequestHandlingInsertHeader>
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    insertHeaders RuleGroupRuleActionCaptchaCustomRequestHandlingInsertHeader[]
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    insert_headers Sequence[RuleGroupRuleActionCaptchaCustomRequestHandlingInsertHeader]
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    insertHeaders List<Property Map>
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.

    RuleGroupRuleActionCaptchaCustomRequestHandlingInsertHeader, RuleGroupRuleActionCaptchaCustomRequestHandlingInsertHeaderArgs

    Name string
    A friendly name of the rule group.
    Value string
    The value of the custom header.
    Name string
    A friendly name of the rule group.
    Value string
    The value of the custom header.
    name String
    A friendly name of the rule group.
    value String
    The value of the custom header.
    name string
    A friendly name of the rule group.
    value string
    The value of the custom header.
    name str
    A friendly name of the rule group.
    value str
    The value of the custom header.
    name String
    A friendly name of the rule group.
    value String
    The value of the custom header.

    RuleGroupRuleActionChallenge, RuleGroupRuleActionChallengeArgs

    CustomRequestHandling RuleGroupRuleActionChallengeCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    CustomRequestHandling RuleGroupRuleActionChallengeCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    customRequestHandling RuleGroupRuleActionChallengeCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    customRequestHandling RuleGroupRuleActionChallengeCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    custom_request_handling RuleGroupRuleActionChallengeCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    customRequestHandling Property Map
    Defines custom handling for the web request. See Custom Request Handling below for details.

    RuleGroupRuleActionChallengeCustomRequestHandling, RuleGroupRuleActionChallengeCustomRequestHandlingArgs

    InsertHeaders List<RuleGroupRuleActionChallengeCustomRequestHandlingInsertHeader>
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    InsertHeaders []RuleGroupRuleActionChallengeCustomRequestHandlingInsertHeader
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    insertHeaders List<RuleGroupRuleActionChallengeCustomRequestHandlingInsertHeader>
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    insertHeaders RuleGroupRuleActionChallengeCustomRequestHandlingInsertHeader[]
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    insert_headers Sequence[RuleGroupRuleActionChallengeCustomRequestHandlingInsertHeader]
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    insertHeaders List<Property Map>
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.

    RuleGroupRuleActionChallengeCustomRequestHandlingInsertHeader, RuleGroupRuleActionChallengeCustomRequestHandlingInsertHeaderArgs

    Name string
    A friendly name of the rule group.
    Value string
    The value of the custom header.
    Name string
    A friendly name of the rule group.
    Value string
    The value of the custom header.
    name String
    A friendly name of the rule group.
    value String
    The value of the custom header.
    name string
    A friendly name of the rule group.
    value string
    The value of the custom header.
    name str
    A friendly name of the rule group.
    value str
    The value of the custom header.
    name String
    A friendly name of the rule group.
    value String
    The value of the custom header.

    RuleGroupRuleActionCount, RuleGroupRuleActionCountArgs

    CustomRequestHandling RuleGroupRuleActionCountCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    CustomRequestHandling RuleGroupRuleActionCountCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    customRequestHandling RuleGroupRuleActionCountCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    customRequestHandling RuleGroupRuleActionCountCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    custom_request_handling RuleGroupRuleActionCountCustomRequestHandling
    Defines custom handling for the web request. See Custom Request Handling below for details.
    customRequestHandling Property Map
    Defines custom handling for the web request. See Custom Request Handling below for details.

    RuleGroupRuleActionCountCustomRequestHandling, RuleGroupRuleActionCountCustomRequestHandlingArgs

    InsertHeaders List<RuleGroupRuleActionCountCustomRequestHandlingInsertHeader>
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    InsertHeaders []RuleGroupRuleActionCountCustomRequestHandlingInsertHeader
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    insertHeaders List<RuleGroupRuleActionCountCustomRequestHandlingInsertHeader>
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    insertHeaders RuleGroupRuleActionCountCustomRequestHandlingInsertHeader[]
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    insert_headers Sequence[RuleGroupRuleActionCountCustomRequestHandlingInsertHeader]
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
    insertHeaders List<Property Map>
    The insert_header blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.

    RuleGroupRuleActionCountCustomRequestHandlingInsertHeader, RuleGroupRuleActionCountCustomRequestHandlingInsertHeaderArgs

    Name string
    A friendly name of the rule group.
    Value string
    The value of the custom header.
    Name string
    A friendly name of the rule group.
    Value string
    The value of the custom header.
    name String
    A friendly name of the rule group.
    value String
    The value of the custom header.
    name string
    A friendly name of the rule group.
    value string
    The value of the custom header.
    name str
    A friendly name of the rule group.
    value str
    The value of the custom header.
    name String
    A friendly name of the rule group.
    value String
    The value of the custom header.

    RuleGroupRuleCaptchaConfig, RuleGroupRuleCaptchaConfigArgs

    ImmunityTimeProperty RuleGroupRuleCaptchaConfigImmunityTimeProperty
    Defines custom immunity time. See Immunity Time Property below for details.
    ImmunityTimeProperty RuleGroupRuleCaptchaConfigImmunityTimeProperty
    Defines custom immunity time. See Immunity Time Property below for details.
    immunityTimeProperty RuleGroupRuleCaptchaConfigImmunityTimeProperty
    Defines custom immunity time. See Immunity Time Property below for details.
    immunityTimeProperty RuleGroupRuleCaptchaConfigImmunityTimeProperty
    Defines custom immunity time. See Immunity Time Property below for details.
    immunity_time_property RuleGroupRuleCaptchaConfigImmunityTimeProperty
    Defines custom immunity time. See Immunity Time Property below for details.
    immunityTimeProperty Property Map
    Defines custom immunity time. See Immunity Time Property below for details.

    RuleGroupRuleCaptchaConfigImmunityTimeProperty, RuleGroupRuleCaptchaConfigImmunityTimePropertyArgs

    ImmunityTime int
    The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
    ImmunityTime int
    The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
    immunityTime Integer
    The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
    immunityTime number
    The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
    immunity_time int
    The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
    immunityTime Number
    The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.

    RuleGroupRuleRuleLabel, RuleGroupRuleRuleLabelArgs

    Name string
    The label string.
    Name string
    The label string.
    name String
    The label string.
    name string
    The label string.
    name str
    The label string.
    name String
    The label string.

    RuleGroupRuleStatement, RuleGroupRuleStatementArgs

    AndStatement RuleGroupRuleStatementAndStatement
    A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
    ByteMatchStatement RuleGroupRuleStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    GeoMatchStatement RuleGroupRuleStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    IpSetReferenceStatement RuleGroupRuleStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    LabelMatchStatement RuleGroupRuleStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    NotStatement RuleGroupRuleStatementNotStatement
    A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
    OrStatement RuleGroupRuleStatementOrStatement
    A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
    RateBasedStatement RuleGroupRuleStatementRateBasedStatement
    A rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any 5-minute time span. This statement can not be nested. See Rate Based Statement below for details.
    RegexMatchStatement RuleGroupRuleStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    RegexPatternSetReferenceStatement RuleGroupRuleStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    SizeConstraintStatement RuleGroupRuleStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    SqliMatchStatement RuleGroupRuleStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    XssMatchStatement RuleGroupRuleStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    AndStatement RuleGroupRuleStatementAndStatement
    A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
    ByteMatchStatement RuleGroupRuleStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    GeoMatchStatement RuleGroupRuleStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    IpSetReferenceStatement RuleGroupRuleStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    LabelMatchStatement RuleGroupRuleStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    NotStatement RuleGroupRuleStatementNotStatement
    A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
    OrStatement RuleGroupRuleStatementOrStatement
    A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
    RateBasedStatement RuleGroupRuleStatementRateBasedStatement
    A rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any 5-minute time span. This statement can not be nested. See Rate Based Statement below for details.
    RegexMatchStatement RuleGroupRuleStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    RegexPatternSetReferenceStatement RuleGroupRuleStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    SizeConstraintStatement RuleGroupRuleStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    SqliMatchStatement RuleGroupRuleStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    XssMatchStatement RuleGroupRuleStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    andStatement RuleGroupRuleStatementAndStatement
    A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
    byteMatchStatement RuleGroupRuleStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    geoMatchStatement RuleGroupRuleStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    ipSetReferenceStatement RuleGroupRuleStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement RuleGroupRuleStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    notStatement RuleGroupRuleStatementNotStatement
    A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
    orStatement RuleGroupRuleStatementOrStatement
    A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
    rateBasedStatement RuleGroupRuleStatementRateBasedStatement
    A rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any 5-minute time span. This statement can not be nested. See Rate Based Statement below for details.
    regexMatchStatement RuleGroupRuleStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    regexPatternSetReferenceStatement RuleGroupRuleStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement RuleGroupRuleStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    sqliMatchStatement RuleGroupRuleStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    xssMatchStatement RuleGroupRuleStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    andStatement RuleGroupRuleStatementAndStatement
    A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
    byteMatchStatement RuleGroupRuleStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    geoMatchStatement RuleGroupRuleStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    ipSetReferenceStatement RuleGroupRuleStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement RuleGroupRuleStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    notStatement RuleGroupRuleStatementNotStatement
    A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
    orStatement RuleGroupRuleStatementOrStatement
    A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
    rateBasedStatement RuleGroupRuleStatementRateBasedStatement
    A rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any 5-minute time span. This statement can not be nested. See Rate Based Statement below for details.
    regexMatchStatement RuleGroupRuleStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    regexPatternSetReferenceStatement RuleGroupRuleStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement RuleGroupRuleStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    sqliMatchStatement RuleGroupRuleStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    xssMatchStatement RuleGroupRuleStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    and_statement RuleGroupRuleStatementAndStatement
    A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
    byte_match_statement RuleGroupRuleStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    geo_match_statement RuleGroupRuleStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    ip_set_reference_statement RuleGroupRuleStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    label_match_statement RuleGroupRuleStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    not_statement RuleGroupRuleStatementNotStatement
    A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
    or_statement RuleGroupRuleStatementOrStatement
    A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
    rate_based_statement RuleGroupRuleStatementRateBasedStatement
    A rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any 5-minute time span. This statement can not be nested. See Rate Based Statement below for details.
    regex_match_statement RuleGroupRuleStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    regex_pattern_set_reference_statement RuleGroupRuleStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    size_constraint_statement RuleGroupRuleStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    sqli_match_statement RuleGroupRuleStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    xss_match_statement RuleGroupRuleStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    andStatement Property Map
    A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
    byteMatchStatement Property Map
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    geoMatchStatement Property Map
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    ipSetReferenceStatement Property Map
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement Property Map
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    notStatement Property Map
    A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
    orStatement Property Map
    A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
    rateBasedStatement Property Map
    A rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any 5-minute time span. This statement can not be nested. See Rate Based Statement below for details.
    regexMatchStatement Property Map
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    regexPatternSetReferenceStatement Property Map
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement Property Map
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    sqliMatchStatement Property Map
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    xssMatchStatement Property Map
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.

    RuleGroupRuleStatementAndStatement, RuleGroupRuleStatementAndStatementArgs

    Statements List<RuleGroupRuleStatementAndStatementStatement>
    The statements to combine with AND logic. You can use any statements that can be nested. See Statement above for details.
    Statements []RuleGroupRuleStatementAndStatementStatement
    The statements to combine with AND logic. You can use any statements that can be nested. See Statement above for details.
    statements List<RuleGroupRuleStatementAndStatementStatement>
    The statements to combine with AND logic. You can use any statements that can be nested. See Statement above for details.
    statements RuleGroupRuleStatementAndStatementStatement[]
    The statements to combine with AND logic. You can use any statements that can be nested. See Statement above for details.
    statements Sequence[RuleGroupRuleStatementAndStatementStatement]
    The statements to combine with AND logic. You can use any statements that can be nested. See Statement above for details.
    statements List<Property Map>
    The statements to combine with AND logic. You can use any statements that can be nested. See Statement above for details.

    RuleGroupRuleStatementAndStatementStatement, RuleGroupRuleStatementAndStatementStatementArgs

    AndStatement RuleGroupRuleStatementAndStatementStatementAndStatement
    A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
    ByteMatchStatement RuleGroupRuleStatementAndStatementStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    GeoMatchStatement RuleGroupRuleStatementAndStatementStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    IpSetReferenceStatement RuleGroupRuleStatementAndStatementStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    LabelMatchStatement RuleGroupRuleStatementAndStatementStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    NotStatement RuleGroupRuleStatementAndStatementStatementNotStatement
    A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
    OrStatement RuleGroupRuleStatementAndStatementStatementOrStatement
    A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
    RegexMatchStatement RuleGroupRuleStatementAndStatementStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    RegexPatternSetReferenceStatement RuleGroupRuleStatementAndStatementStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    SizeConstraintStatement RuleGroupRuleStatementAndStatementStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    SqliMatchStatement RuleGroupRuleStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    XssMatchStatement RuleGroupRuleStatementAndStatementStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    AndStatement RuleGroupRuleStatementAndStatementStatementAndStatement
    A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
    ByteMatchStatement RuleGroupRuleStatementAndStatementStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    GeoMatchStatement RuleGroupRuleStatementAndStatementStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    IpSetReferenceStatement RuleGroupRuleStatementAndStatementStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    LabelMatchStatement RuleGroupRuleStatementAndStatementStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    NotStatement RuleGroupRuleStatementAndStatementStatementNotStatement
    A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
    OrStatement RuleGroupRuleStatementAndStatementStatementOrStatement
    A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
    RegexMatchStatement RuleGroupRuleStatementAndStatementStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    RegexPatternSetReferenceStatement RuleGroupRuleStatementAndStatementStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    SizeConstraintStatement RuleGroupRuleStatementAndStatementStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    SqliMatchStatement RuleGroupRuleStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    XssMatchStatement RuleGroupRuleStatementAndStatementStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    andStatement RuleGroupRuleStatementAndStatementStatementAndStatement
    A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
    byteMatchStatement RuleGroupRuleStatementAndStatementStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    geoMatchStatement RuleGroupRuleStatementAndStatementStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    ipSetReferenceStatement RuleGroupRuleStatementAndStatementStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement RuleGroupRuleStatementAndStatementStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    notStatement RuleGroupRuleStatementAndStatementStatementNotStatement
    A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
    orStatement RuleGroupRuleStatementAndStatementStatementOrStatement
    A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
    regexMatchStatement RuleGroupRuleStatementAndStatementStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    regexPatternSetReferenceStatement RuleGroupRuleStatementAndStatementStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement RuleGroupRuleStatementAndStatementStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    sqliMatchStatement RuleGroupRuleStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    xssMatchStatement RuleGroupRuleStatementAndStatementStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    andStatement RuleGroupRuleStatementAndStatementStatementAndStatement
    A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
    byteMatchStatement RuleGroupRuleStatementAndStatementStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    geoMatchStatement RuleGroupRuleStatementAndStatementStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    ipSetReferenceStatement RuleGroupRuleStatementAndStatementStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement RuleGroupRuleStatementAndStatementStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    notStatement RuleGroupRuleStatementAndStatementStatementNotStatement
    A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
    orStatement RuleGroupRuleStatementAndStatementStatementOrStatement
    A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
    regexMatchStatement RuleGroupRuleStatementAndStatementStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    regexPatternSetReferenceStatement RuleGroupRuleStatementAndStatementStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement RuleGroupRuleStatementAndStatementStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    sqliMatchStatement RuleGroupRuleStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    xssMatchStatement RuleGroupRuleStatementAndStatementStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    and_statement RuleGroupRuleStatementAndStatementStatementAndStatement
    A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
    byte_match_statement RuleGroupRuleStatementAndStatementStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    geo_match_statement RuleGroupRuleStatementAndStatementStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    ip_set_reference_statement RuleGroupRuleStatementAndStatementStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    label_match_statement RuleGroupRuleStatementAndStatementStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    not_statement RuleGroupRuleStatementAndStatementStatementNotStatement
    A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
    or_statement RuleGroupRuleStatementAndStatementStatementOrStatement
    A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
    regex_match_statement RuleGroupRuleStatementAndStatementStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    regex_pattern_set_reference_statement RuleGroupRuleStatementAndStatementStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    size_constraint_statement RuleGroupRuleStatementAndStatementStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    sqli_match_statement RuleGroupRuleStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    xss_match_statement RuleGroupRuleStatementAndStatementStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    andStatement Property Map
    A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
    byteMatchStatement Property Map
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    geoMatchStatement Property Map
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    ipSetReferenceStatement Property Map
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement Property Map
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    notStatement Property Map
    A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
    orStatement Property Map
    A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
    regexMatchStatement Property Map
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    regexPatternSetReferenceStatement Property Map
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement Property Map
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    sqliMatchStatement Property Map
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    xssMatchStatement Property Map
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.

    RuleGroupRuleStatementAndStatementStatementAndStatement, RuleGroupRuleStatementAndStatementStatementAndStatementArgs

    Statements List<RuleGroupRuleStatementAndStatementStatementAndStatementStatement>
    The statements to combine with AND logic. You can use any statements that can be nested. See Statement above for details.
    Statements []RuleGroupRuleStatementAndStatementStatementAndStatementStatement
    The statements to combine with AND logic. You can use any statements that can be nested. See Statement above for details.
    statements List<RuleGroupRuleStatementAndStatementStatementAndStatementStatement>
    The statements to combine with AND logic. You can use any statements that can be nested. See Statement above for details.
    statements RuleGroupRuleStatementAndStatementStatementAndStatementStatement[]
    The statements to combine with AND logic. You can use any statements that can be nested. See Statement above for details.
    statements Sequence[RuleGroupRuleStatementAndStatementStatementAndStatementStatement]
    The statements to combine with AND logic. You can use any statements that can be nested. See Statement above for details.
    statements List<Property Map>
    The statements to combine with AND logic. You can use any statements that can be nested. See Statement above for details.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatement, RuleGroupRuleStatementAndStatementStatementAndStatementStatementArgs

    ByteMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    GeoMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    IpSetReferenceStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    LabelMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    RegexMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    RegexPatternSetReferenceStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    SizeConstraintStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    SqliMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    XssMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    ByteMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    GeoMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    IpSetReferenceStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    LabelMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    RegexMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    RegexPatternSetReferenceStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    SizeConstraintStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    SqliMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    XssMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    byteMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    geoMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    ipSetReferenceStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    regexMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    regexPatternSetReferenceStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    sqliMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    xssMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    byteMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    geoMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    ipSetReferenceStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    regexMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    regexPatternSetReferenceStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    sqliMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    xssMatchStatement RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    byte_match_statement RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    geo_match_statement RuleGroupRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    ip_set_reference_statement RuleGroupRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    label_match_statement RuleGroupRuleStatementAndStatementStatementAndStatementStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    regex_match_statement RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    regex_pattern_set_reference_statement RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    size_constraint_statement RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    sqli_match_statement RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    xss_match_statement RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    byteMatchStatement Property Map
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    geoMatchStatement Property Map
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    ipSetReferenceStatement Property Map
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement Property Map
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    regexMatchStatement Property Map
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    regexPatternSetReferenceStatement Property Map
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement Property Map
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    sqliMatchStatement Property Map
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    xssMatchStatement Property Map
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatement, RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementArgs

    PositionalConstraint string
    The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    SearchString string
    A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    TextTransformations List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    PositionalConstraint string
    The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    SearchString string
    A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    TextTransformations []RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    positionalConstraint String
    The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    searchString String
    A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    textTransformations List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    positionalConstraint string
    The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    searchString string
    A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    textTransformations RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    positional_constraint str
    The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    search_string str
    A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    text_transformations Sequence[RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    field_to_match RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    positionalConstraint String
    The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    searchString String
    A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch Property Map
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatch, RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchArgs

    AllQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers []RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeader
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeader[]
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers Sequence[RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeader]
    Inspect the request headers. See Headers below for details.
    json_body RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    single_query_argument RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uri_path RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers.
    cookies Property Map
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See Headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See JSON Body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See Single Header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBody, RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBodyArgs

    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookies, RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesArgs

    MatchPatterns List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    MatchPatterns []RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    match_patterns Sequence[RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeader, RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternArgs

    All RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody, RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader, RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeaderArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformation, RuleGroupRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformationArgs

    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatement, RuleGroupRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatementArgs

    CountryCodes List<string>
    An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    ForwardedIpConfig RuleGroupRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
    CountryCodes []string
    An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    ForwardedIpConfig RuleGroupRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
    countryCodes List<String>
    An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwardedIpConfig RuleGroupRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
    countryCodes string[]
    An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwardedIpConfig RuleGroupRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
    country_codes Sequence[str]
    An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwarded_ip_config RuleGroupRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
    countryCodes List<String>
    An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwardedIpConfig Property Map
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfig, RuleGroupRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfigArgs

    FallbackBehavior string
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    The name of the HTTP header to use for the IP address.
    FallbackBehavior string
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    The name of the HTTP header to use for the IP address.
    fallbackBehavior String
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    The name of the HTTP header to use for the IP address.
    fallbackBehavior string
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName string
    The name of the HTTP header to use for the IP address.
    fallback_behavior str
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    header_name str
    The name of the HTTP header to use for the IP address.
    fallbackBehavior String
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    The name of the HTTP header to use for the IP address.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatement, RuleGroupRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementArgs

    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    IpSetForwardedIpConfig RuleGroupRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    IpSetForwardedIpConfig RuleGroupRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ipSetForwardedIpConfig RuleGroupRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
    arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ipSetForwardedIpConfig RuleGroupRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
    arn str
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ip_set_forwarded_ip_config RuleGroupRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ipSetForwardedIpConfig Property Map
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig, RuleGroupRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfigArgs

    FallbackBehavior string
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    The name of the HTTP header to use for the IP address.
    Position string
    The position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    FallbackBehavior string
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    The name of the HTTP header to use for the IP address.
    Position string
    The position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallbackBehavior String
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    The name of the HTTP header to use for the IP address.
    position String
    The position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallbackBehavior string
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName string
    The name of the HTTP header to use for the IP address.
    position string
    The position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallback_behavior str
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    header_name str
    The name of the HTTP header to use for the IP address.
    position str
    The position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallbackBehavior String
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    The name of the HTTP header to use for the IP address.
    position String
    The position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementLabelMatchStatement, RuleGroupRuleStatementAndStatementStatementAndStatementStatementLabelMatchStatementArgs

    Key string
    The string to match against.
    Scope string
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    Key string
    The string to match against.
    Scope string
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key String
    The string to match against.
    scope String
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key string
    The string to match against.
    scope string
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key str
    The string to match against.
    scope str
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key String
    The string to match against.
    scope String
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatement, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementArgs

    RegexString string
    The string representing the regular expression. Minimum of 1 and maximum of 512 characters.
    TextTransformations List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    RegexString string
    The string representing the regular expression. Minimum of 1 and maximum of 512 characters.
    TextTransformations []RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    regexString String
    The string representing the regular expression. Minimum of 1 and maximum of 512 characters.
    textTransformations List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    regexString string
    The string representing the regular expression. Minimum of 1 and maximum of 512 characters.
    textTransformations RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    regex_string str
    The string representing the regular expression. Minimum of 1 and maximum of 512 characters.
    text_transformations Sequence[RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    field_to_match RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    regexString String
    The string representing the regular expression. Minimum of 1 and maximum of 512 characters.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch Property Map
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatch, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchArgs

    AllQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers []RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeader
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeader[]
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers Sequence[RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeader]
    Inspect the request headers. See Headers below for details.
    json_body RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    single_query_argument RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uri_path RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers.
    cookies Property Map
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See Headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See JSON Body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See Single Header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchBody, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchBodyArgs

    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookies, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookiesArgs

    MatchPatterns List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    MatchPatterns []RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    match_patterns Sequence[RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeader, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternArgs

    All RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBody, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBodyArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleHeader, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleHeaderArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementTextTransformation, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatementTextTransformationArgs

    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatement, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementArgs

    Arn string
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    TextTransformations List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    Arn string
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    TextTransformations []RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    arn String
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    textTransformations List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    arn string
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    textTransformations RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    arn str
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    text_transformations Sequence[RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    field_to_match RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    arn String
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch Property Map
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatch, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchArgs

    AllQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers []RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader[]
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers Sequence[RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader]
    Inspect the request headers. See Headers below for details.
    json_body RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    single_query_argument RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uri_path RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers.
    cookies Property Map
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See Headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See JSON Body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See Single Header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchBodyArgs

    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesArgs

    MatchPatterns List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    MatchPatterns []RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    match_patterns Sequence[RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternArgs

    All RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeaderArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementTextTransformation, RuleGroupRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementTextTransformationArgs

    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatement, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementArgs

    ComparisonOperator string
    The operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    Size int
    The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    TextTransformations List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    ComparisonOperator string
    The operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    Size int
    The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    TextTransformations []RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    comparisonOperator String
    The operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    size Integer
    The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    textTransformations List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    comparisonOperator string
    The operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    size number
    The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    textTransformations RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    comparison_operator str
    The operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    size int
    The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    text_transformations Sequence[RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    field_to_match RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    comparisonOperator String
    The operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    size Number
    The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch Property Map
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatch, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchArgs

    AllQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers []RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeader
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeader[]
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers Sequence[RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeader]
    Inspect the request headers. See Headers below for details.
    json_body RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    single_query_argument RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uri_path RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers.
    cookies Property Map
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See Headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See JSON Body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See Single Header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchBody, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchBodyArgs

    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookies, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookiesArgs

    MatchPatterns List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    MatchPatterns []RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    match_patterns Sequence[RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeader, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternArgs

    All RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBody, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBodyArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleHeader, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleHeaderArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementTextTransformation, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatementTextTransformationArgs

    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatement, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementArgs

    TextTransformations List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    TextTransformations []RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    textTransformations List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    textTransformations RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    text_transformations Sequence[RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    field_to_match RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch Property Map
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatch, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchArgs

    AllQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers []RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeader
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeader[]
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers Sequence[RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeader]
    Inspect the request headers. See Headers below for details.
    json_body RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    single_query_argument RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uri_path RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers.
    cookies Property Map
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See Headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See JSON Body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See Single Header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchBody, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchBodyArgs

    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookies, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookiesArgs

    MatchPatterns List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    MatchPatterns []RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    match_patterns Sequence[RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeader, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternArgs

    All RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBody, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBodyArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleHeader, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleHeaderArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementTextTransformation, RuleGroupRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatementTextTransformationArgs

    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatement, RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementArgs

    TextTransformations List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    TextTransformations []RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    textTransformations List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    textTransformations RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    text_transformations Sequence[RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    field_to_match RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch Property Map
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatch, RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchArgs

    AllQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers []RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeader
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeader[]
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers Sequence[RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeader]
    Inspect the request headers. See Headers below for details.
    json_body RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    single_query_argument RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uri_path RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers.
    cookies Property Map
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See Headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See JSON Body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See Single Header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchBody, RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchBodyArgs

    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookies, RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookiesArgs

    MatchPatterns List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    MatchPatterns []RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    match_patterns Sequence[RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeader, RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPatternArgs

    All RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBody, RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBodyArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleHeader, RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleHeaderArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementTextTransformation, RuleGroupRuleStatementAndStatementStatementAndStatementStatementXssMatchStatementTextTransformationArgs

    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.

    RuleGroupRuleStatementAndStatementStatementByteMatchStatement, RuleGroupRuleStatementAndStatementStatementByteMatchStatementArgs

    PositionalConstraint string
    The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    SearchString string
    A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    TextTransformations List<RuleGroupRuleStatementAndStatementStatementByteMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    PositionalConstraint string
    The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    SearchString string
    A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    TextTransformations []RuleGroupRuleStatementAndStatementStatementByteMatchStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    positionalConstraint String
    The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    searchString String
    A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    textTransformations List<RuleGroupRuleStatementAndStatementStatementByteMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    positionalConstraint string
    The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    searchString string
    A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    textTransformations RuleGroupRuleStatementAndStatementStatementByteMatchStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    positional_constraint str
    The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    search_string str
    A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    text_transformations Sequence[RuleGroupRuleStatementAndStatementStatementByteMatchStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    field_to_match RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    positionalConstraint String
    The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    searchString String
    A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch Property Map
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.

    RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatch, RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchArgs

    AllQueryArguments RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers List<RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers []RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchHeader
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchHeader[]
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers Sequence[RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchHeader]
    Inspect the request headers. See Headers below for details.
    json_body RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    single_query_argument RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uri_path RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers.
    cookies Property Map
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See Headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See JSON Body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See Single Header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchBody, RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchBodyArgs

    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchCookies, RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesArgs

    MatchPatterns List<RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    MatchPatterns []RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    match_patterns Sequence[RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH

    RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPatternArgs

    All RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedCookies List<string>
    IncludedCookies List<string>
    All RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedCookies []string
    IncludedCookies []string
    all RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>
    all RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedCookies string[]
    includedCookies string[]
    all RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_cookies Sequence[str]
    included_cookies Sequence[str]
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchHeader, RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternArgs

    All RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody, RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPatternArgs

    All RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    IncludedPaths List<string>
    All RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    IncludedPaths []string
    all RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>
    all RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    includedPaths string[]
    all RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    included_paths Sequence[str]
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader, RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeaderArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementByteMatchStatementTextTransformation, RuleGroupRuleStatementAndStatementStatementByteMatchStatementTextTransformationArgs

    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.

    RuleGroupRuleStatementAndStatementStatementGeoMatchStatement, RuleGroupRuleStatementAndStatementStatementGeoMatchStatementArgs

    CountryCodes List<string>
    An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    ForwardedIpConfig RuleGroupRuleStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
    CountryCodes []string
    An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    ForwardedIpConfig RuleGroupRuleStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
    countryCodes List<String>
    An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwardedIpConfig RuleGroupRuleStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
    countryCodes string[]
    An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwardedIpConfig RuleGroupRuleStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
    country_codes Sequence[str]
    An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwarded_ip_config RuleGroupRuleStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
    countryCodes List<String>
    An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwardedIpConfig Property Map
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.

    RuleGroupRuleStatementAndStatementStatementGeoMatchStatementForwardedIpConfig, RuleGroupRuleStatementAndStatementStatementGeoMatchStatementForwardedIpConfigArgs

    FallbackBehavior string
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    The name of the HTTP header to use for the IP address.
    FallbackBehavior string
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    The name of the HTTP header to use for the IP address.
    fallbackBehavior String
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    The name of the HTTP header to use for the IP address.
    fallbackBehavior string
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName string
    The name of the HTTP header to use for the IP address.
    fallback_behavior str
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    header_name str
    The name of the HTTP header to use for the IP address.
    fallbackBehavior String
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    The name of the HTTP header to use for the IP address.

    RuleGroupRuleStatementAndStatementStatementIpSetReferenceStatement, RuleGroupRuleStatementAndStatementStatementIpSetReferenceStatementArgs

    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    IpSetForwardedIpConfig RuleGroupRuleStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    IpSetForwardedIpConfig RuleGroupRuleStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ipSetForwardedIpConfig RuleGroupRuleStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
    arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ipSetForwardedIpConfig RuleGroupRuleStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
    arn str
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ip_set_forwarded_ip_config RuleGroupRuleStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ipSetForwardedIpConfig Property Map
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.

    RuleGroupRuleStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig, RuleGroupRuleStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfigArgs

    FallbackBehavior string
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    The name of the HTTP header to use for the IP address.
    Position string
    The position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    FallbackBehavior string
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    The name of the HTTP header to use for the IP address.
    Position string
    The position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallbackBehavior String
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    The name of the HTTP header to use for the IP address.
    position String
    The position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallbackBehavior string
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName string
    The name of the HTTP header to use for the IP address.
    position string
    The position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallback_behavior str
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    header_name str
    The name of the HTTP header to use for the IP address.
    position str
    The position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallbackBehavior String
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    The name of the HTTP header to use for the IP address.
    position String
    The position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.

    RuleGroupRuleStatementAndStatementStatementLabelMatchStatement, RuleGroupRuleStatementAndStatementStatementLabelMatchStatementArgs

    Key string
    The string to match against.
    Scope string
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    Key string
    The string to match against.
    Scope string
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key String
    The string to match against.
    scope String
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key string
    The string to match against.
    scope string
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key str
    The string to match against.
    scope str
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key String
    The string to match against.
    scope String
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.

    RuleGroupRuleStatementAndStatementStatementNotStatement, RuleGroupRuleStatementAndStatementStatementNotStatementArgs

    Statements List<RuleGroupRuleStatementAndStatementStatementNotStatementStatement>
    The statement to negate. You can use any statement that can be nested. See Statement above for details.
    Statements []RuleGroupRuleStatementAndStatementStatementNotStatementStatement
    The statement to negate. You can use any statement that can be nested. See Statement above for details.
    statements List<RuleGroupRuleStatementAndStatementStatementNotStatementStatement>
    The statement to negate. You can use any statement that can be nested. See Statement above for details.
    statements RuleGroupRuleStatementAndStatementStatementNotStatementStatement[]
    The statement to negate. You can use any statement that can be nested. See Statement above for details.
    statements Sequence[RuleGroupRuleStatementAndStatementStatementNotStatementStatement]
    The statement to negate. You can use any statement that can be nested. See Statement above for details.
    statements List<Property Map>
    The statement to negate. You can use any statement that can be nested. See Statement above for details.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatement, RuleGroupRuleStatementAndStatementStatementNotStatementStatementArgs

    ByteMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    GeoMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    IpSetReferenceStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    LabelMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    RegexMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    RegexPatternSetReferenceStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    SizeConstraintStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    SqliMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    XssMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    ByteMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    GeoMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    IpSetReferenceStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    LabelMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    RegexMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    RegexPatternSetReferenceStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    SizeConstraintStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    SqliMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    XssMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    byteMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    geoMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    ipSetReferenceStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    regexMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    regexPatternSetReferenceStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    sqliMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    xssMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    byteMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    geoMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    ipSetReferenceStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    regexMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    regexPatternSetReferenceStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    sqliMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    xssMatchStatement RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    byte_match_statement RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatement
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    geo_match_statement RuleGroupRuleStatementAndStatementStatementNotStatementStatementGeoMatchStatement
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    ip_set_reference_statement RuleGroupRuleStatementAndStatementStatementNotStatementStatementIpSetReferenceStatement
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    label_match_statement RuleGroupRuleStatementAndStatementStatementNotStatementStatementLabelMatchStatement
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    regex_match_statement RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatement
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    regex_pattern_set_reference_statement RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatement
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    size_constraint_statement RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatement
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    sqli_match_statement RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    xss_match_statement RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatement
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
    byteMatchStatement Property Map
    A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
    geoMatchStatement Property Map
    A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
    ipSetReferenceStatement Property Map
    A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement Property Map
    A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
    regexMatchStatement Property Map
    A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
    regexPatternSetReferenceStatement Property Map
    A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement Property Map
    A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
    sqliMatchStatement Property Map
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
    xssMatchStatement Property Map
    A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatement, RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementArgs

    PositionalConstraint string
    The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    SearchString string
    A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    TextTransformations List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    PositionalConstraint string
    The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    SearchString string
    A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    TextTransformations []RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    positionalConstraint String
    The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    searchString String
    A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    textTransformations List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    positionalConstraint string
    The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    searchString string
    A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    textTransformations RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    positional_constraint str
    The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    search_string str
    A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    text_transformations Sequence[RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    field_to_match RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    positionalConstraint String
    The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    searchString String
    A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch Property Map
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatch, RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchArgs

    AllQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers []RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeader
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeader[]
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers Sequence[RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeader]
    Inspect the request headers. See Headers below for details.
    json_body RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    single_query_argument RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uri_path RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers.
    cookies Property Map
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See Headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See JSON Body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See Single Header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchBody, RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchBodyArgs

    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookies, RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookiesArgs

    MatchPatterns List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    MatchPatterns []RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    match_patterns Sequence[RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeader, RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternArgs

    All RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBody, RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBodyArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleHeader, RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleHeaderArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementTextTransformation, RuleGroupRuleStatementAndStatementStatementNotStatementStatementByteMatchStatementTextTransformationArgs

    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementGeoMatchStatement, RuleGroupRuleStatementAndStatementStatementNotStatementStatementGeoMatchStatementArgs

    CountryCodes List<string>
    An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    ForwardedIpConfig RuleGroupRuleStatementAndStatementStatementNotStatementStatementGeoMatchStatementForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
    CountryCodes []string
    An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    ForwardedIpConfig RuleGroupRuleStatementAndStatementStatementNotStatementStatementGeoMatchStatementForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
    countryCodes List<String>
    An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwardedIpConfig RuleGroupRuleStatementAndStatementStatementNotStatementStatementGeoMatchStatementForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
    countryCodes string[]
    An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwardedIpConfig RuleGroupRuleStatementAndStatementStatementNotStatementStatementGeoMatchStatementForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
    country_codes Sequence[str]
    An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwarded_ip_config RuleGroupRuleStatementAndStatementStatementNotStatementStatementGeoMatchStatementForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
    countryCodes List<String>
    An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwardedIpConfig Property Map
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementGeoMatchStatementForwardedIpConfig, RuleGroupRuleStatementAndStatementStatementNotStatementStatementGeoMatchStatementForwardedIpConfigArgs

    FallbackBehavior string
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    The name of the HTTP header to use for the IP address.
    FallbackBehavior string
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    The name of the HTTP header to use for the IP address.
    fallbackBehavior String
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    The name of the HTTP header to use for the IP address.
    fallbackBehavior string
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName string
    The name of the HTTP header to use for the IP address.
    fallback_behavior str
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    header_name str
    The name of the HTTP header to use for the IP address.
    fallbackBehavior String
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    The name of the HTTP header to use for the IP address.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementIpSetReferenceStatement, RuleGroupRuleStatementAndStatementStatementNotStatementStatementIpSetReferenceStatementArgs

    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    IpSetForwardedIpConfig RuleGroupRuleStatementAndStatementStatementNotStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    IpSetForwardedIpConfig RuleGroupRuleStatementAndStatementStatementNotStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ipSetForwardedIpConfig RuleGroupRuleStatementAndStatementStatementNotStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
    arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ipSetForwardedIpConfig RuleGroupRuleStatementAndStatementStatementNotStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
    arn str
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ip_set_forwarded_ip_config RuleGroupRuleStatementAndStatementStatementNotStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ipSetForwardedIpConfig Property Map
    The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig, RuleGroupRuleStatementAndStatementStatementNotStatementStatementIpSetReferenceStatementIpSetForwardedIpConfigArgs

    FallbackBehavior string
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    The name of the HTTP header to use for the IP address.
    Position string
    The position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    FallbackBehavior string
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    The name of the HTTP header to use for the IP address.
    Position string
    The position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallbackBehavior String
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    The name of the HTTP header to use for the IP address.
    position String
    The position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallbackBehavior string
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName string
    The name of the HTTP header to use for the IP address.
    position string
    The position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallback_behavior str
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    header_name str
    The name of the HTTP header to use for the IP address.
    position str
    The position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallbackBehavior String
    The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    The name of the HTTP header to use for the IP address.
    position String
    The position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementLabelMatchStatement, RuleGroupRuleStatementAndStatementStatementNotStatementStatementLabelMatchStatementArgs

    Key string
    The string to match against.
    Scope string
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    Key string
    The string to match against.
    Scope string
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key String
    The string to match against.
    scope String
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key string
    The string to match against.
    scope string
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key str
    The string to match against.
    scope str
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key String
    The string to match against.
    scope String
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatement, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementArgs

    RegexString string
    The string representing the regular expression. Minimum of 1 and maximum of 512 characters.
    TextTransformations List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    RegexString string
    The string representing the regular expression. Minimum of 1 and maximum of 512 characters.
    TextTransformations []RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    regexString String
    The string representing the regular expression. Minimum of 1 and maximum of 512 characters.
    textTransformations List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    regexString string
    The string representing the regular expression. Minimum of 1 and maximum of 512 characters.
    textTransformations RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    regex_string str
    The string representing the regular expression. Minimum of 1 and maximum of 512 characters.
    text_transformations Sequence[RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    field_to_match RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    regexString String
    The string representing the regular expression. Minimum of 1 and maximum of 512 characters.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch Property Map
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatch, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchArgs

    AllQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers []RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeader
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeader[]
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers Sequence[RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeader]
    Inspect the request headers. See Headers below for details.
    json_body RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    single_query_argument RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uri_path RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers.
    cookies Property Map
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See Headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See JSON Body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See Single Header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchBody, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchBodyArgs

    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookies, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookiesArgs

    MatchPatterns List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    MatchPatterns []RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    match_patterns Sequence[RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeader, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternArgs

    All RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBody, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBodyArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleHeader, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleHeaderArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementTextTransformation, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexMatchStatementTextTransformationArgs

    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatement, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementArgs

    Arn string
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    TextTransformations List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    Arn string
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    TextTransformations []RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    arn String
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    textTransformations List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    arn string
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    textTransformations RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    arn str
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    text_transformations Sequence[RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    field_to_match RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    arn String
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch Property Map
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatch, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchArgs

    AllQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers []RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader[]
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers Sequence[RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader]
    Inspect the request headers. See Headers below for details.
    json_body RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    single_query_argument RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uri_path RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers.
    cookies Property Map
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See Headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See JSON Body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See Single Header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchBodyArgs

    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesArgs

    MatchPatterns List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    MatchPatterns []RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    match_patterns Sequence[RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternArgs

    All RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeaderArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementTextTransformation, RuleGroupRuleStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementTextTransformationArgs

    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatement, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementArgs

    ComparisonOperator string
    The operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    Size int
    The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    TextTransformations List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    ComparisonOperator string
    The operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    Size int
    The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    TextTransformations []RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    comparisonOperator String
    The operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    size Integer
    The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    textTransformations List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    comparisonOperator string
    The operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    size number
    The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    textTransformations RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    comparison_operator str
    The operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    size int
    The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    text_transformations Sequence[RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    field_to_match RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    comparisonOperator String
    The operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    size Number
    The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch Property Map
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatch, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchArgs

    AllQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers []RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeader
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeader[]
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers Sequence[RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeader]
    Inspect the request headers. See Headers below for details.
    json_body RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    single_query_argument RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uri_path RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers.
    cookies Property Map
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See Headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See JSON Body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See Single Header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchBody, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchBodyArgs

    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookies, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookiesArgs

    MatchPatterns List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    MatchPatterns []RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    match_patterns Sequence[RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeader, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternArgs

    All RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBody, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBodyArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleHeader, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleHeaderArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementTextTransformation, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSizeConstraintStatementTextTransformationArgs

    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatement, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementArgs

    TextTransformations List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    TextTransformations []RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    textTransformations List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    textTransformations RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    text_transformations Sequence[RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    field_to_match RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch Property Map
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatch, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchArgs

    AllQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers []RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeader
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeader[]
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers Sequence[RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeader]
    Inspect the request headers. See Headers below for details.
    json_body RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    single_query_argument RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uri_path RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers.
    cookies Property Map
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See Headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See JSON Body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See Single Header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchBody, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchBodyArgs

    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookies, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookiesArgs

    MatchPatterns List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    MatchPatterns []RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    match_patterns Sequence[RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeader, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternArgs

    All RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBody, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBodyArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleHeader, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleHeaderArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementTextTransformation, RuleGroupRuleStatementAndStatementStatementNotStatementStatementSqliMatchStatementTextTransformationArgs

    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatement, RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementArgs

    TextTransformations List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    TextTransformations []RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    FieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    textTransformations List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    textTransformations RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    text_transformations Sequence[RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    field_to_match RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
    fieldToMatch Property Map
    The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatch, RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchArgs

    AllQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    Cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    Headers []RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchHeader
    Inspect the request headers. See Headers below for details.
    JsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    Method RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    SingleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    UriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchHeader>
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchHeader[]
    Inspect the request headers. See Headers below for details.
    jsonBody RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    singleQueryArgument RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers.
    cookies RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See Cookies below for details.
    headers Sequence[RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchHeader]
    Inspect the request headers. See Headers below for details.
    json_body RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See JSON Body for details.
    method RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See Single Header below for details.
    single_query_argument RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See Single Query Argument below for details.
    uri_path RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers.
    cookies Property Map
    Inspect the cookies in the web request. See Cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See Headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See JSON Body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See Single Header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See Single Query Argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchBody, RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchBodyArgs

    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchCookies, RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchCookiesArgs

    MatchPatterns List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    MatchPatterns []RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    match_patterns Sequence[RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchHeader, RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchHeaderArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchHeaderMatchPatternArgs

    All RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchJsonBody, RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchJsonBodyArgs

    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchSingleHeader, RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchSingleHeaderArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    The name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    The name of the query header to inspect. This setting must be provided as lower case characters.

    RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementTextTransformation, RuleGroupRuleStatementAndStatementStatementNotStatementStatementXssMatchStatementTextTransformationArgs

    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    The transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    The transformation to apply, please refer to the Text Transformation documentation for more details.

    RuleGroupRuleStatementAndStatementStatementOrStatement, RuleGroupRuleStatementAndStatementStatementOrStatementArgs

    Statements List<RuleGroupRuleStatementAndStatementStatementOrStatementStatement>
    The statements to combine with OR logic. You can use any statements that can be nested. See Statement above for details.
    Statements []RuleGroupRuleStatementAndStatementStatementOrStatementStatement
    The statements to combine with OR logic. You can use any statements that can be nested. See Statement above for details.
    statements List<RuleGroupRuleStatementAndStatementStatementOrStatementStatement>
    The statements to combine with OR logic. You can use any statements that can be nested. See Statement above for details.
    statements RuleGroupRuleStatementAndStatementStatementOrStatementStatement[]
    The statements to combine with OR logic. You can use any statements that can be nested. See Statement above for details.
    statements Sequence[RuleGroupRuleStatementAndStatementStatementOrStatementStatement]
    The statements to combine with OR logic. You can use any statements that can be nested. See Statement above for details.
    statements List<Property Map>
    The statements to combine with OR logic. You can use any statements that can be nested. See Statement above for details.

    Import

    WAFv2 Rule Group can be imported using ID/name/scope e.g.,

     $ pulumi import aws:wafv2/ruleGroup:RuleGroup example a1b2c3d4-d5f6-7777-8888-9999aaaabbbbcccc/example/REGIONAL

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    AWS Classic pulumi/pulumi-aws
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the aws Terraform Provider.
    aws logo
    Viewing docs for AWS v5.43.0 (Older version)
    published on Tuesday, Mar 10, 2026 by Pulumi
    Go to latest version
    Schema (JSON)
    pulumi/pulumi-aws

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial